@metamask/snaps-execution-environments 0.34.1-flask.1 → 0.35.0-flask.1

package/dist/esm/common/endowments/network.js

@@ -0,0 +1,196 @@
+function _check_private_redeclaration(obj, privateCollection) {
+    if (privateCollection.has(obj)) {
+        throw new TypeError("Cannot initialize the same private elements twice on an object");
+    }
+}
+function _class_apply_descriptor_get(receiver, descriptor) {
+    if (descriptor.get) {
+        return descriptor.get.call(receiver);
+    }
+    return descriptor.value;
+}
+function _class_apply_descriptor_set(receiver, descriptor, value) {
+    if (descriptor.set) {
+        descriptor.set.call(receiver, value);
+    } else {
+        if (!descriptor.writable) {
+            throw new TypeError("attempted to set read only private field");
+        }
+        descriptor.value = value;
+    }
+}
+function _class_extract_field_descriptor(receiver, privateMap, action) {
+    if (!privateMap.has(receiver)) {
+        throw new TypeError("attempted to " + action + " private field on non-instance");
+    }
+    return privateMap.get(receiver);
+}
+function _class_private_field_get(receiver, privateMap) {
+    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "get");
+    return _class_apply_descriptor_get(receiver, descriptor);
+}
+function _class_private_field_init(obj, privateMap, value) {
+    _check_private_redeclaration(obj, privateMap);
+    privateMap.set(obj, value);
+}
+function _class_private_field_set(receiver, privateMap, value) {
+    var descriptor = _class_extract_field_descriptor(receiver, privateMap, "set");
+    _class_apply_descriptor_set(receiver, descriptor, value);
+    return value;
+}
+import { withTeardown } from '../utils';
+var _teardownRef = /*#__PURE__*/ new WeakMap(), _ogResponse = /*#__PURE__*/ new WeakMap();
+/**
+ * This class wraps a Response object.
+ * That way, a teardown process can stop any processes left.
+ */ class ResponseWrapper {
+    get body() {
+        return _class_private_field_get(this, _ogResponse).body;
+    }
+    get bodyUsed() {
+        return _class_private_field_get(this, _ogResponse).bodyUsed;
+    }
+    get headers() {
+        return _class_private_field_get(this, _ogResponse).headers;
+    }
+    get ok() {
+        return _class_private_field_get(this, _ogResponse).ok;
+    }
+    get redirected() {
+        return _class_private_field_get(this, _ogResponse).redirected;
+    }
+    get status() {
+        return _class_private_field_get(this, _ogResponse).status;
+    }
+    get statusText() {
+        return _class_private_field_get(this, _ogResponse).statusText;
+    }
+    get type() {
+        return _class_private_field_get(this, _ogResponse).type;
+    }
+    get url() {
+        return _class_private_field_get(this, _ogResponse).url;
+    }
+    async text() {
+        return withTeardown(_class_private_field_get(this, _ogResponse).text(), this);
+    }
+    async arrayBuffer() {
+        return withTeardown(_class_private_field_get(this, _ogResponse).arrayBuffer(), this);
+    }
+    async blob() {
+        return withTeardown(_class_private_field_get(this, _ogResponse).blob(), this);
+    }
+    clone() {
+        const newResponse = _class_private_field_get(this, _ogResponse).clone();
+        return new ResponseWrapper(newResponse, _class_private_field_get(this, _teardownRef));
+    }
+    async formData() {
+        return withTeardown(_class_private_field_get(this, _ogResponse).formData(), this);
+    }
+    async json() {
+        return withTeardown(_class_private_field_get(this, _ogResponse).json(), this);
+    }
+    constructor(ogResponse, teardownRef){
+        _class_private_field_init(this, _teardownRef, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_init(this, _ogResponse, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_set(this, _ogResponse, ogResponse);
+        _class_private_field_set(this, _teardownRef, teardownRef);
+    }
+}
+/**
+ * Create a network endowment, consisting of a `fetch` function.
+ * This allows us to provide a teardown function, so that we can cancel
+ * any pending requests, connections, streams, etc. that may be open when a snap
+ * is terminated.
+ *
+ * This wraps the original implementation of `fetch`,
+ * to ensure that a bad actor cannot get access to the original function, thus
+ * potentially preventing the network requests from being torn down.
+ *
+ * @returns An object containing a wrapped `fetch`
+ * function, as well as a teardown function.
+ */ const createNetwork = ()=>{
+    // Open fetch calls or open body streams
+    const openConnections = new Set();
+    // Track last teardown count
+    const teardownRef = {
+        lastTeardown: 0
+    };
+    // Remove items from openConnections after they were garbage collected
+    const cleanup = new FinalizationRegistry(/* istanbul ignore next: can't test garbage collection without modifying node parameters */ (callback)=>callback());
+    const _fetch = async (input, init)=>{
+        const abortController = new AbortController();
+        if (init?.signal !== null && init?.signal !== undefined) {
+            const originalSignal = init.signal;
+            // Merge abort controllers
+            originalSignal.addEventListener('abort', ()=>{
+                abortController.abort(originalSignal.reason);
+            }, {
+                once: true
+            });
+        }
+        let res;
+        let openFetchConnection;
+        try {
+            const fetchPromise = fetch(input, {
+                ...init,
+                signal: abortController.signal
+            });
+            openFetchConnection = {
+                cancel: async ()=>{
+                    abortController.abort();
+                    try {
+                        await fetchPromise;
+                    } catch  {
+                    /* do nothing */ }
+                }
+            };
+            openConnections.add(openFetchConnection);
+            res = new ResponseWrapper(await withTeardown(fetchPromise, teardownRef), teardownRef);
+        } finally{
+            if (openFetchConnection !== undefined) {
+                openConnections.delete(openFetchConnection);
+            }
+        }
+        if (res.body !== null) {
+            const body = new WeakRef(res.body);
+            const openBodyConnection = {
+                cancel: /* istanbul ignore next: see it.todo('can be torn down during body read') test */ async ()=>{
+                    try {
+                        await body.deref()?.cancel();
+                    } catch  {
+                    /* do nothing */ }
+                }
+            };
+            openConnections.add(openBodyConnection);
+            cleanup.register(res.body, /* istanbul ignore next: can't test garbage collection without modifying node parameters */ ()=>openConnections.delete(openBodyConnection));
+        }
+        return harden(res);
+    };
+    const teardownFunction = async ()=>{
+        teardownRef.lastTeardown += 1;
+        const promises = [];
+        openConnections.forEach(({ cancel })=>promises.push(cancel()));
+        openConnections.clear();
+        await Promise.all(promises);
+    };
+    return {
+        fetch: harden(_fetch),
+        teardownFunction
+    };
+};
+const endowmentModule = {
+    names: [
+        'fetch'
+    ],
+    factory: createNetwork
+};
+export default endowmentModule;
+
+//# sourceMappingURL=network.js.map

package/dist/esm/common/endowments/network.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/endowments/network.ts"],"sourcesContent":["import { withTeardown } from '../utils';\n\n/**\n * This class wraps a Response object.\n * That way, a teardown process can stop any processes left.\n */\nclass ResponseWrapper implements Response {\n  readonly #teardownRef: { lastTeardown: number };\n\n  #ogResponse: Response;\n\n  constructor(ogResponse: Response, teardownRef: { lastTeardown: number }) {\n    this.#ogResponse = ogResponse;\n    this.#teardownRef = teardownRef;\n  }\n\n  get body(): ReadableStream<Uint8Array> | null {\n    return this.#ogResponse.body;\n  }\n\n  get bodyUsed() {\n    return this.#ogResponse.bodyUsed;\n  }\n\n  get headers() {\n    return this.#ogResponse.headers;\n  }\n\n  get ok() {\n    return this.#ogResponse.ok;\n  }\n\n  get redirected() {\n    return this.#ogResponse.redirected;\n  }\n\n  get status() {\n    return this.#ogResponse.status;\n  }\n\n  get statusText() {\n    return this.#ogResponse.statusText;\n  }\n\n  get type() {\n    return this.#ogResponse.type;\n  }\n\n  get url() {\n    return this.#ogResponse.url;\n  }\n\n  async text() {\n    return withTeardown<string>(this.#ogResponse.text(), this as any);\n  }\n\n  async arrayBuffer(): Promise<ArrayBuffer> {\n    return withTeardown<ArrayBuffer>(\n      this.#ogResponse.arrayBuffer(),\n      this as any,\n    );\n  }\n\n  async blob(): Promise<Blob> {\n    return withTeardown<Blob>(this.#ogResponse.blob(), this as any);\n  }\n\n  clone(): Response {\n    const newResponse = this.#ogResponse.clone();\n    return new ResponseWrapper(newResponse, this.#teardownRef);\n  }\n\n  async formData(): Promise<FormData> {\n    return withTeardown<FormData>(this.#ogResponse.formData(), this as any);\n  }\n\n  async json(): Promise<any> {\n    return withTeardown(this.#ogResponse.json(), this as any);\n  }\n}\n\n/**\n * Create a network endowment, consisting of a `fetch` function.\n * This allows us to provide a teardown function, so that we can cancel\n * any pending requests, connections, streams, etc. that may be open when a snap\n * is terminated.\n *\n * This wraps the original implementation of `fetch`,\n * to ensure that a bad actor cannot get access to the original function, thus\n * potentially preventing the network requests from being torn down.\n *\n * @returns An object containing a wrapped `fetch`\n * function, as well as a teardown function.\n */\nconst createNetwork = () => {\n  // Open fetch calls or open body streams\n  const openConnections = new Set<{ cancel: () => Promise<void> }>();\n  // Track last teardown count\n  const teardownRef = { lastTeardown: 0 };\n\n  // Remove items from openConnections after they were garbage collected\n  const cleanup = new FinalizationRegistry<() => void>(\n    /* istanbul ignore next: can't test garbage collection without modifying node parameters */\n    (callback) => callback(),\n  );\n\n  const _fetch: typeof fetch = async (\n    input: RequestInfo | URL,\n    init?: RequestInit,\n  ): Promise<Response> => {\n    const abortController = new AbortController();\n    if (init?.signal !== null && init?.signal !== undefined) {\n      const originalSignal = init.signal;\n      // Merge abort controllers\n      originalSignal.addEventListener(\n        'abort',\n        () => {\n          abortController.abort((originalSignal as any).reason);\n        },\n        { once: true },\n      );\n    }\n\n    let res: Response;\n    let openFetchConnection: { cancel: () => Promise<void> } | undefined;\n    try {\n      const fetchPromise = fetch(input, {\n        ...init,\n        signal: abortController.signal,\n      });\n\n      openFetchConnection = {\n        cancel: async () => {\n          abortController.abort();\n          try {\n            await fetchPromise;\n          } catch {\n            /* do nothing */\n          }\n        },\n      };\n      openConnections.add(openFetchConnection);\n\n      res = new ResponseWrapper(\n        await withTeardown(fetchPromise, teardownRef),\n        teardownRef,\n      );\n    } finally {\n      if (openFetchConnection !== undefined) {\n        openConnections.delete(openFetchConnection);\n      }\n    }\n\n    if (res.body !== null) {\n      const body = new WeakRef<ReadableStream>(res.body);\n\n      const openBodyConnection = {\n        cancel:\n          /* istanbul ignore next: see it.todo('can be torn down during body read') test */\n          async () => {\n            try {\n              await body.deref()?.cancel();\n            } catch {\n              /* do nothing */\n            }\n          },\n      };\n      openConnections.add(openBodyConnection);\n      cleanup.register(\n        res.body,\n        /* istanbul ignore next: can't test garbage collection without modifying node parameters */\n        () => openConnections.delete(openBodyConnection),\n      );\n    }\n    return harden(res);\n  };\n\n  const teardownFunction = async () => {\n    teardownRef.lastTeardown += 1;\n    const promises: Promise<void>[] = [];\n    openConnections.forEach(({ cancel }) => promises.push(cancel()));\n    openConnections.clear();\n    await Promise.all(promises);\n  };\n\n  return {\n    fetch: harden(_fetch),\n    teardownFunction,\n  };\n};\n\nconst endowmentModule = {\n  names: ['fetch'] as const,\n  factory: createNetwork,\n};\nexport default endowmentModule;\n"],"names":["withTeardown","ResponseWrapper","body","ogResponse","bodyUsed","headers","ok","redirected","status","statusText","type","url","text","arrayBuffer","blob","clone","newResponse","teardownRef","formData","json","constructor","createNetwork","openConnections","Set","lastTeardown","cleanup","FinalizationRegistry","callback","_fetch","input","init","abortController","AbortController","signal","undefined","originalSignal","addEventListener","abort","reason","once","res","openFetchConnection","fetchPromise","fetch","cancel","add","delete","WeakRef","openBodyConnection","deref","register","harden","teardownFunction","promises","forEach","push","clear","Promise","all","endowmentModule","names","factory"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAASA,YAAY,QAAQ,WAAW;IAO7B,4CAET;AAPF;;;CAGC,GACD,MAAMC;IAUJ,IAAIC,OAA0C;QAC5C,OAAO,yBAAA,IAAI,EAAEC,aAAWD,IAAI;IAC9B;IAEA,IAAIE,WAAW;QACb,OAAO,yBAAA,IAAI,EAAED,aAAWC,QAAQ;IAClC;IAEA,IAAIC,UAAU;QACZ,OAAO,yBAAA,IAAI,EAAEF,aAAWE,OAAO;IACjC;IAEA,IAAIC,KAAK;QACP,OAAO,yBAAA,IAAI,EAAEH,aAAWG,EAAE;IAC5B;IAEA,IAAIC,aAAa;QACf,OAAO,yBAAA,IAAI,EAAEJ,aAAWI,UAAU;IACpC;IAEA,IAAIC,SAAS;QACX,OAAO,yBAAA,IAAI,EAAEL,aAAWK,MAAM;IAChC;IAEA,IAAIC,aAAa;QACf,OAAO,yBAAA,IAAI,EAAEN,aAAWM,UAAU;IACpC;IAEA,IAAIC,OAAO;QACT,OAAO,yBAAA,IAAI,EAAEP,aAAWO,IAAI;IAC9B;IAEA,IAAIC,MAAM;QACR,OAAO,yBAAA,IAAI,EAAER,aAAWQ,GAAG;IAC7B;IAEA,MAAMC,OAAO;QACX,OAAOZ,aAAqB,yBAAA,IAAI,EAAEG,aAAWS,IAAI,IAAI,IAAI;IAC3D;IAEA,MAAMC,cAAoC;QACxC,OAAOb,aACL,yBAAA,IAAI,EAAEG,aAAWU,WAAW,IAC5B,IAAI;IAER;IAEA,MAAMC,OAAsB;QAC1B,OAAOd,aAAmB,yBAAA,IAAI,EAAEG,aAAWW,IAAI,IAAI,IAAI;IACzD;IAEAC,QAAkB;QAChB,MAAMC,cAAc,yBAAA,IAAI,EAAEb,aAAWY,KAAK;QAC1C,OAAO,IAAId,gBAAgBe,sCAAa,IAAI,EAAEC;IAChD;IAEA,MAAMC,WAA8B;QAClC,OAAOlB,aAAuB,yBAAA,IAAI,EAAEG,aAAWe,QAAQ,IAAI,IAAI;IACjE;IAEA,MAAMC,OAAqB;QACzB,OAAOnB,aAAa,yBAAA,IAAI,EAAEG,aAAWgB,IAAI,IAAI,IAAI;IACnD;IAnEAC,YAAYjB,UAAoB,EAAEc,WAAqC,CAAE;QAJzE,gCAAS;;mBAAT,KAAA;;QAEA,gCAAA;;mBAAA,KAAA;;uCAGQd,aAAaA;uCACbc,cAAcA;IACtB;AAiEF;AAEA;;;;;;;;;;;;CAYC,GACD,MAAMI,gBAAgB;IACpB,wCAAwC;IACxC,MAAMC,kBAAkB,IAAIC;IAC5B,4BAA4B;IAC5B,MAAMN,cAAc;QAAEO,cAAc;IAAE;IAEtC,sEAAsE;IACtE,MAAMC,UAAU,IAAIC,qBAClB,yFAAyF,GACzF,CAACC,WAAaA;IAGhB,MAAMC,SAAuB,OAC3BC,OACAC;QAEA,MAAMC,kBAAkB,IAAIC;QAC5B,IAAIF,MAAMG,WAAW,QAAQH,MAAMG,WAAWC,WAAW;YACvD,MAAMC,iBAAiBL,KAAKG,MAAM;YAClC,0BAA0B;YAC1BE,eAAeC,gBAAgB,CAC7B,SACA;gBACEL,gBAAgBM,KAAK,CAAC,AAACF,eAAuBG,MAAM;YACtD,GACA;gBAAEC,MAAM;YAAK;QAEjB;QAEA,IAAIC;QACJ,IAAIC;QACJ,IAAI;YACF,MAAMC,eAAeC,MAAMd,OAAO;gBAChC,GAAGC,IAAI;gBACPG,QAAQF,gBAAgBE,MAAM;YAChC;YAEAQ,sBAAsB;gBACpBG,QAAQ;oBACNb,gBAAgBM,KAAK;oBACrB,IAAI;wBACF,MAAMK;oBACR,EAAE,OAAM;oBACN,cAAc,GAChB;gBACF;YACF;YACApB,gBAAgBuB,GAAG,CAACJ;YAEpBD,MAAM,IAAIvC,gBACR,MAAMD,aAAa0C,cAAczB,cACjCA;QAEJ,SAAU;YACR,IAAIwB,wBAAwBP,WAAW;gBACrCZ,gBAAgBwB,MAAM,CAACL;YACzB;QACF;QAEA,IAAID,IAAItC,IAAI,KAAK,MAAM;YACrB,MAAMA,OAAO,IAAI6C,QAAwBP,IAAItC,IAAI;YAEjD,MAAM8C,qBAAqB;gBACzBJ,QACE,+EAA+E,GAC/E;oBACE,IAAI;wBACF,MAAM1C,KAAK+C,KAAK,IAAIL;oBACtB,EAAE,OAAM;oBACN,cAAc,GAChB;gBACF;YACJ;YACAtB,gBAAgBuB,GAAG,CAACG;YACpBvB,QAAQyB,QAAQ,CACdV,IAAItC,IAAI,EACR,yFAAyF,GACzF,IAAMoB,gBAAgBwB,MAAM,CAACE;QAEjC;QACA,OAAOG,OAAOX;IAChB;IAEA,MAAMY,mBAAmB;QACvBnC,YAAYO,YAAY,IAAI;QAC5B,MAAM6B,WAA4B,EAAE;QACpC/B,gBAAgBgC,OAAO,CAAC,CAAC,EAAEV,MAAM,EAAE,GAAKS,SAASE,IAAI,CAACX;QACtDtB,gBAAgBkC,KAAK;QACrB,MAAMC,QAAQC,GAAG,CAACL;IACpB;IAEA,OAAO;QACLV,OAAOQ,OAAOvB;QACdwB;IACF;AACF;AAEA,MAAMO,kBAAkB;IACtBC,OAAO;QAAC;KAAQ;IAChBC,SAASxC;AACX;AACA,eAAesC,gBAAgB"}

package/dist/esm/common/endowments/textDecoder.js

@@ -0,0 +1,18 @@
+/**
+ * Creates TextDecoder function hardened by SES.
+ *
+ * @returns An object with the attenuated `TextDecoder` function.
+ */ const createTextDecoder = ()=>{
+    return {
+        TextDecoder: harden(TextDecoder)
+    };
+};
+const endowmentModule = {
+    names: [
+        'TextDecoder'
+    ],
+    factory: createTextDecoder
+};
+export default endowmentModule;
+
+//# sourceMappingURL=textDecoder.js.map

package/dist/esm/common/endowments/textDecoder.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/endowments/textDecoder.ts"],"sourcesContent":["/**\n * Creates TextDecoder function hardened by SES.\n *\n * @returns An object with the attenuated `TextDecoder` function.\n */\nconst createTextDecoder = () => {\n  return {\n    TextDecoder: harden(TextDecoder),\n  } as const;\n};\n\nconst endowmentModule = {\n  names: ['TextDecoder'] as const,\n  factory: createTextDecoder,\n};\nexport default endowmentModule;\n"],"names":["createTextDecoder","TextDecoder","harden","endowmentModule","names","factory"],"mappings":"AAAA;;;;CAIC,GACD,MAAMA,oBAAoB;IACxB,OAAO;QACLC,aAAaC,OAAOD;IACtB;AACF;AAEA,MAAME,kBAAkB;IACtBC,OAAO;QAAC;KAAc;IACtBC,SAASL;AACX;AACA,eAAeG,gBAAgB"}

package/dist/esm/common/endowments/textEncoder.js

@@ -0,0 +1,18 @@
+/**
+ * Creates TextEncoder function hardened by SES.
+ *
+ * @returns An object with the attenuated `TextEncoder` function.
+ */ const createTextEncoder = ()=>{
+    return {
+        TextEncoder: harden(TextEncoder)
+    };
+};
+const endowmentModule = {
+    names: [
+        'TextEncoder'
+    ],
+    factory: createTextEncoder
+};
+export default endowmentModule;
+
+//# sourceMappingURL=textEncoder.js.map

package/dist/esm/common/endowments/textEncoder.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/endowments/textEncoder.ts"],"sourcesContent":["/**\n * Creates TextEncoder function hardened by SES.\n *\n * @returns An object with the attenuated `TextEncoder` function.\n */\nconst createTextEncoder = () => {\n  return {\n    TextEncoder: harden(TextEncoder),\n  } as const;\n};\n\nconst endowmentModule = {\n  names: ['TextEncoder'] as const,\n  factory: createTextEncoder,\n};\nexport default endowmentModule;\n"],"names":["createTextEncoder","TextEncoder","harden","endowmentModule","names","factory"],"mappings":"AAAA;;;;CAIC,GACD,MAAMA,oBAAoB;IACxB,OAAO;QACLC,aAAaC,OAAOD;IACtB;AACF;AAEA,MAAME,kBAAkB;IACtBC,OAAO;QAAC;KAAc;IACtBC,SAASL;AACX;AACA,eAAeG,gBAAgB"}

package/dist/{common → esm/common}/endowments/timeout.js

@@ -1,5 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
 const MINIMUM_TIMEOUT = 10;
 /**
  * Creates a pair of `setTimeout` and `clearTimeout` functions attenuated such
@@ -10,43 +8,46 @@ const MINIMUM_TIMEOUT = 10;
  *
  * @returns An object with the attenuated `setTimeout` and `clearTimeout`
  * functions.
- */
-const createTimeout = () => {
+ */ const createTimeout = ()=>{
     const registeredHandles = new Map();
-    const _setTimeout = (handler, timeout) => {
+    const _setTimeout = (handler, timeout)=>{
         if (typeof handler !== 'function') {
             throw new Error(`The timeout handler must be a function. Received: ${typeof handler}`);
         }
         harden(handler);
         const handle = Object.freeze(Object.create(null));
-        const platformHandle = setTimeout(() => {
+        const platformHandle = setTimeout(()=>{
             registeredHandles.delete(handle);
             handler();
         }, Math.max(MINIMUM_TIMEOUT, timeout ?? 0));
         registeredHandles.set(handle, platformHandle);
         return handle;
     };
-    const _clearTimeout = (handle) => {
+    const _clearTimeout = (handle)=>{
         const platformHandle = registeredHandles.get(handle);
         if (platformHandle !== undefined) {
             clearTimeout(platformHandle);
             registeredHandles.delete(handle);
         }
     };
-    const teardownFunction = () => {
-        for (const handle of registeredHandles.keys()) {
+    const teardownFunction = ()=>{
+        for (const handle of registeredHandles.keys()){
             _clearTimeout(handle);
         }
     };
     return {
         setTimeout: harden(_setTimeout),
         clearTimeout: harden(_clearTimeout),
-        teardownFunction,
+        teardownFunction
     };
 };
 const endowmentModule = {
-    names: ['setTimeout', 'clearTimeout'],
-    factory: createTimeout,
+    names: [
+        'setTimeout',
+        'clearTimeout'
+    ],
+    factory: createTimeout
 };
-exports.default = endowmentModule;
+export default endowmentModule;
+
 //# sourceMappingURL=timeout.js.map

package/dist/esm/common/endowments/timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/endowments/timeout.ts"],"sourcesContent":["const MINIMUM_TIMEOUT = 10;\n\n/**\n * Creates a pair of `setTimeout` and `clearTimeout` functions attenuated such\n * that:\n * - `setTimeout` throws if its \"handler\" parameter is not a function.\n * - `clearTimeout` only clears timeouts created by its sibling `setTimeout`,\n * or else no-ops.\n *\n * @returns An object with the attenuated `setTimeout` and `clearTimeout`\n * functions.\n */\nconst createTimeout = () => {\n  const registeredHandles = new Map<unknown, unknown>();\n  const _setTimeout = (handler: TimerHandler, timeout?: number): unknown => {\n    if (typeof handler !== 'function') {\n      throw new Error(\n        `The timeout handler must be a function. Received: ${typeof handler}`,\n      );\n    }\n    harden(handler);\n    const handle = Object.freeze(Object.create(null));\n    const platformHandle = setTimeout(() => {\n      registeredHandles.delete(handle);\n      handler();\n    }, Math.max(MINIMUM_TIMEOUT, timeout ?? 0));\n\n    registeredHandles.set(handle, platformHandle);\n    return handle;\n  };\n\n  const _clearTimeout = (handle: unknown): void => {\n    const platformHandle = registeredHandles.get(handle);\n    if (platformHandle !== undefined) {\n      clearTimeout(platformHandle as any);\n      registeredHandles.delete(handle);\n    }\n  };\n\n  const teardownFunction = (): void => {\n    for (const handle of registeredHandles.keys()) {\n      _clearTimeout(handle);\n    }\n  };\n\n  return {\n    setTimeout: harden(_setTimeout),\n    clearTimeout: harden(_clearTimeout),\n    teardownFunction,\n  } as const;\n};\n\nconst endowmentModule = {\n  names: ['setTimeout', 'clearTimeout'] as const,\n  factory: createTimeout,\n};\nexport default endowmentModule;\n"],"names":["MINIMUM_TIMEOUT","createTimeout","registeredHandles","Map","_setTimeout","handler","timeout","Error","harden","handle","Object","freeze","create","platformHandle","setTimeout","delete","Math","max","set","_clearTimeout","get","undefined","clearTimeout","teardownFunction","keys","endowmentModule","names","factory"],"mappings":"AAAA,MAAMA,kBAAkB;AAExB;;;;;;;;;CASC,GACD,MAAMC,gBAAgB;IACpB,MAAMC,oBAAoB,IAAIC;IAC9B,MAAMC,cAAc,CAACC,SAAuBC;QAC1C,IAAI,OAAOD,YAAY,YAAY;YACjC,MAAM,IAAIE,MACR,CAAC,kDAAkD,EAAE,OAAOF,QAAQ,CAAC;QAEzE;QACAG,OAAOH;QACP,MAAMI,SAASC,OAAOC,MAAM,CAACD,OAAOE,MAAM,CAAC;QAC3C,MAAMC,iBAAiBC,WAAW;YAChCZ,kBAAkBa,MAAM,CAACN;YACzBJ;QACF,GAAGW,KAAKC,GAAG,CAACjB,iBAAiBM,WAAW;QAExCJ,kBAAkBgB,GAAG,CAACT,QAAQI;QAC9B,OAAOJ;IACT;IAEA,MAAMU,gBAAgB,CAACV;QACrB,MAAMI,iBAAiBX,kBAAkBkB,GAAG,CAACX;QAC7C,IAAII,mBAAmBQ,WAAW;YAChCC,aAAaT;YACbX,kBAAkBa,MAAM,CAACN;QAC3B;IACF;IAEA,MAAMc,mBAAmB;QACvB,KAAK,MAAMd,UAAUP,kBAAkBsB,IAAI,GAAI;YAC7CL,cAAcV;QAChB;IACF;IAEA,OAAO;QACLK,YAAYN,OAAOJ;QACnBkB,cAAcd,OAAOW;QACrBI;IACF;AACF;AAEA,MAAME,kBAAkB;IACtBC,OAAO;QAAC;QAAc;KAAe;IACrCC,SAAS1B;AACX;AACA,eAAewB,gBAAgB"}

package/dist/esm/common/globalEvents.js

@@ -0,0 +1,35 @@
+import { rootRealmGlobal } from './globalObject';
+/**
+ * Adds an event listener platform agnostically, trying both `globalThis.addEventListener` and `globalThis.process.on`
+ *
+ * @param event - The event to listen for.
+ * @param listener - The listener to be triggered when the event occurs.
+ * @returns The result of the platform agnostic operation if any.
+ * @throws If none of the platform options are present.
+ */ export function addEventListener(event, listener) {
+    if ('addEventListener' in rootRealmGlobal && typeof rootRealmGlobal.addEventListener === 'function') {
+        return rootRealmGlobal.addEventListener(event.toLowerCase(), listener);
+    }
+    if (rootRealmGlobal.process && 'on' in rootRealmGlobal.process && typeof rootRealmGlobal.process.on === 'function') {
+        return rootRealmGlobal.process.on(event, listener);
+    }
+    throw new Error('Platform agnostic addEventListener failed');
+}
+/**
+ * Removes an event listener platform agnostically, trying both `globalThis.removeEventListener` and `globalThis.process.removeListener`
+ *
+ * @param event - The event to remove the listener for.
+ * @param listener - The currently attached listener.
+ * @returns The result of the platform agnostic operation if any.
+ * @throws If none of the platform options are present.
+ */ export function removeEventListener(event, listener) {
+    if ('removeEventListener' in rootRealmGlobal && typeof rootRealmGlobal.removeEventListener === 'function') {
+        return rootRealmGlobal.removeEventListener(event.toLowerCase(), listener);
+    }
+    if (rootRealmGlobal.process && 'removeListener' in rootRealmGlobal.process && typeof rootRealmGlobal.process.removeListener === 'function') {
+        return rootRealmGlobal.process.removeListener(event, listener);
+    }
+    throw new Error('Platform agnostic removeEventListener failed');
+}
+
+//# sourceMappingURL=globalEvents.js.map

package/dist/esm/common/globalEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/common/globalEvents.ts"],"sourcesContent":["import { rootRealmGlobal } from './globalObject';\n\n/**\n * Adds an event listener platform agnostically, trying both `globalThis.addEventListener` and `globalThis.process.on`\n *\n * @param event - The event to listen for.\n * @param listener - The listener to be triggered when the event occurs.\n * @returns The result of the platform agnostic operation if any.\n * @throws If none of the platform options are present.\n */\nexport function addEventListener(\n  event: string,\n  listener: (...args: any[]) => void,\n) {\n  if (\n    'addEventListener' in rootRealmGlobal &&\n    typeof rootRealmGlobal.addEventListener === 'function'\n  ) {\n    return rootRealmGlobal.addEventListener(event.toLowerCase(), listener);\n  }\n\n  if (\n    rootRealmGlobal.process &&\n    'on' in rootRealmGlobal.process &&\n    typeof rootRealmGlobal.process.on === 'function'\n  ) {\n    return rootRealmGlobal.process.on(event, listener);\n  }\n\n  throw new Error('Platform agnostic addEventListener failed');\n}\n\n/**\n * Removes an event listener platform agnostically, trying both `globalThis.removeEventListener` and `globalThis.process.removeListener`\n *\n * @param event - The event to remove the listener for.\n * @param listener - The currently attached listener.\n * @returns The result of the platform agnostic operation if any.\n * @throws If none of the platform options are present.\n */\nexport function removeEventListener(\n  event: string,\n  listener: (...args: any[]) => void,\n) {\n  if (\n    'removeEventListener' in rootRealmGlobal &&\n    typeof rootRealmGlobal.removeEventListener === 'function'\n  ) {\n    return rootRealmGlobal.removeEventListener(event.toLowerCase(), listener);\n  }\n\n  if (\n    rootRealmGlobal.process &&\n    'removeListener' in rootRealmGlobal.process &&\n    typeof rootRealmGlobal.process.removeListener === 'function'\n  ) {\n    return rootRealmGlobal.process.removeListener(event, listener);\n  }\n\n  throw new Error('Platform agnostic removeEventListener failed');\n}\n"],"names":["rootRealmGlobal","addEventListener","event","listener","toLowerCase","process","on","Error","removeEventListener","removeListener"],"mappings":"AAAA,SAASA,eAAe,QAAQ,iBAAiB;AAEjD;;;;;;;CAOC,GACD,OAAO,SAASC,iBACdC,KAAa,EACbC,QAAkC;IAElC,IACE,sBAAsBH,mBACtB,OAAOA,gBAAgBC,gBAAgB,KAAK,YAC5C;QACA,OAAOD,gBAAgBC,gBAAgB,CAACC,MAAME,WAAW,IAAID;IAC/D;IAEA,IACEH,gBAAgBK,OAAO,IACvB,QAAQL,gBAAgBK,OAAO,IAC/B,OAAOL,gBAAgBK,OAAO,CAACC,EAAE,KAAK,YACtC;QACA,OAAON,gBAAgBK,OAAO,CAACC,EAAE,CAACJ,OAAOC;IAC3C;IAEA,MAAM,IAAII,MAAM;AAClB;AAEA;;;;;;;CAOC,GACD,OAAO,SAASC,oBACdN,KAAa,EACbC,QAAkC;IAElC,IACE,yBAAyBH,mBACzB,OAAOA,gBAAgBQ,mBAAmB,KAAK,YAC/C;QACA,OAAOR,gBAAgBQ,mBAAmB,CAACN,MAAME,WAAW,IAAID;IAClE;IAEA,IACEH,gBAAgBK,OAAO,IACvB,oBAAoBL,gBAAgBK,OAAO,IAC3C,OAAOL,gBAAgBK,OAAO,CAACI,cAAc,KAAK,YAClD;QACA,OAAOT,gBAAgBK,OAAO,CAACI,cAAc,CAACP,OAAOC;IACvD;IAEA,MAAM,IAAII,MAAM;AAClB"}

package/dist/esm/common/globalObject.js

@@ -0,0 +1,36 @@
+var GlobalObjectNames;
+(function(GlobalObjectNames) {
+    GlobalObjectNames[// The globalThis entry is incorrectly identified as shadowing the global
+    // globalThis.
+    /* eslint-disable @typescript-eslint/naming-convention */ // eslint-disable-next-line @typescript-eslint/no-shadow
+    "globalThis"] = "globalThis";
+    GlobalObjectNames["global"] = "global";
+    GlobalObjectNames["self"] = "self";
+    GlobalObjectNames["window"] = "window";
+})(GlobalObjectNames || (GlobalObjectNames = {}));
+let _rootRealmGlobal;
+let _rootRealmGlobalName;
+/* istanbul ignore next */ /* eslint-disable no-negated-condition */ if (typeof globalThis !== 'undefined') {
+    _rootRealmGlobal = globalThis;
+    _rootRealmGlobalName = GlobalObjectNames.globalThis;
+} else if (typeof self !== 'undefined') {
+    _rootRealmGlobal = self;
+    _rootRealmGlobalName = GlobalObjectNames.self;
+} else if (typeof window !== 'undefined') {
+    _rootRealmGlobal = window;
+    _rootRealmGlobalName = GlobalObjectNames.window;
+} else if (typeof global !== 'undefined') {
+    _rootRealmGlobal = global;
+    _rootRealmGlobalName = GlobalObjectNames.global;
+} else {
+    throw new Error('Unknown realm type; failed to identify global object.');
+}
+/* eslint-enable no-negated-condition */ /**
+ * A platform-agnostic alias for the root realm global object.
+ */ const rootRealmGlobal = _rootRealmGlobal;
+/**
+ * The string literal corresponding to the name of the root realm global object.
+ */ const rootRealmGlobalName = _rootRealmGlobalName;
+export { rootRealmGlobal, rootRealmGlobalName };
+
+//# sourceMappingURL=globalObject.js.map

package/dist/esm/common/globalObject.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/common/globalObject.ts"],"sourcesContent":["enum GlobalObjectNames {\n  // The globalThis entry is incorrectly identified as shadowing the global\n  // globalThis.\n  /* eslint-disable @typescript-eslint/naming-convention */\n  // eslint-disable-next-line @typescript-eslint/no-shadow\n  globalThis = 'globalThis',\n  global = 'global',\n  self = 'self',\n  window = 'window',\n  /* eslint-enavle @typescript-eslint/naming-convention */\n}\n\nlet _rootRealmGlobal: typeof globalThis;\nlet _rootRealmGlobalName: string;\n\n/* istanbul ignore next */\n/* eslint-disable no-negated-condition */\nif (typeof globalThis !== 'undefined') {\n  _rootRealmGlobal = globalThis;\n  _rootRealmGlobalName = GlobalObjectNames.globalThis;\n} else if (typeof self !== 'undefined') {\n  _rootRealmGlobal = self;\n  _rootRealmGlobalName = GlobalObjectNames.self;\n} else if (typeof window !== 'undefined') {\n  _rootRealmGlobal = window;\n  _rootRealmGlobalName = GlobalObjectNames.window;\n} else if (typeof global !== 'undefined') {\n  _rootRealmGlobal = global;\n  _rootRealmGlobalName = GlobalObjectNames.global;\n} else {\n  throw new Error('Unknown realm type; failed to identify global object.');\n}\n/* eslint-enable no-negated-condition */\n\n/**\n * A platform-agnostic alias for the root realm global object.\n */\nconst rootRealmGlobal = _rootRealmGlobal;\n\n/**\n * The string literal corresponding to the name of the root realm global object.\n */\nconst rootRealmGlobalName = _rootRealmGlobalName;\n\nexport { rootRealmGlobal, rootRealmGlobalName };\n"],"names":["GlobalObjectNames","globalThis","global","self","window","_rootRealmGlobal","_rootRealmGlobalName","Error","rootRealmGlobal","rootRealmGlobalName"],"mappings":"IAAA;UAAKA,iBAAiB;IAAjBA,kBACH,yEAAyE;IACzE,cAAc;IACd,uDAAuD,GACvD,wDAAwD;IACxDC,gBAAAA;IALGD,kBAMHE,YAAAA;IANGF,kBAOHG,UAAAA;IAPGH,kBAQHI,YAAAA;GARGJ,sBAAAA;AAYL,IAAIK;AACJ,IAAIC;AAEJ,wBAAwB,GACxB,uCAAuC,GACvC,IAAI,OAAOL,eAAe,aAAa;IACrCI,mBAAmBJ;IACnBK,uBAAuBN,kBAAkBC,UAAU;AACrD,OAAO,IAAI,OAAOE,SAAS,aAAa;IACtCE,mBAAmBF;IACnBG,uBAAuBN,kBAAkBG,IAAI;AAC/C,OAAO,IAAI,OAAOC,WAAW,aAAa;IACxCC,mBAAmBD;IACnBE,uBAAuBN,kBAAkBI,MAAM;AACjD,OAAO,IAAI,OAAOF,WAAW,aAAa;IACxCG,mBAAmBH;IACnBI,uBAAuBN,kBAAkBE,MAAM;AACjD,OAAO;IACL,MAAM,IAAIK,MAAM;AAClB;AACA,sCAAsC,GAEtC;;CAEC,GACD,MAAMC,kBAAkBH;AAExB;;CAEC,GACD,MAAMI,sBAAsBH;AAE5B,SAASE,eAAe,EAAEC,mBAAmB,GAAG"}

package/dist/esm/common/lockdown/lockdown-events.js

@@ -0,0 +1,66 @@
+// When creating a sandbox, limitation of the events from leaking
+// sensitive objects is required. This is done by overriding own properties
+// of prototypes of all existing events.
+import { hasProperty } from '@metamask/utils';
+/**
+ * Targeted Event objects and properties.
+ * Note: This is a map of the prototypes that inherit from Events with
+ * properties that are identified to leak sensitive objects.
+ * Not all browsers support all event types, so checking its existence is required.
+ */ const targetEvents = new Map();
+if (hasProperty(globalThis, 'UIEvent')) {
+    targetEvents.set(UIEvent.prototype, [
+        'view'
+    ]);
+}
+if (hasProperty(globalThis, 'MutationEvent')) {
+    targetEvents.set(MutationEvent.prototype, [
+        'relatedNode'
+    ]);
+}
+if (hasProperty(globalThis, 'MessageEvent')) {
+    targetEvents.set(MessageEvent.prototype, [
+        'source'
+    ]);
+}
+if (hasProperty(globalThis, 'FocusEvent')) {
+    targetEvents.set(FocusEvent.prototype, [
+        'relatedTarget'
+    ]);
+}
+if (hasProperty(globalThis, 'MouseEvent')) {
+    targetEvents.set(MouseEvent.prototype, [
+        'relatedTarget',
+        'fromElement',
+        'toElement'
+    ]);
+}
+if (hasProperty(globalThis, 'TouchEvent')) {
+    targetEvents.set(TouchEvent.prototype, [
+        'targetTouches',
+        'touches'
+    ]);
+}
+if (hasProperty(globalThis, 'Event')) {
+    targetEvents.set(Event.prototype, [
+        'target',
+        'currentTarget',
+        'srcElement',
+        'composedPath'
+    ]);
+}
+/**
+ * Attenuate Event objects by replacing its own properties.
+ */ export function executeLockdownEvents() {
+    targetEvents.forEach((properties, prototype)=>{
+        for (const property of properties){
+            Object.defineProperty(prototype, property, {
+                value: undefined,
+                configurable: false,
+                writable: false
+            });
+        }
+    });
+}
+
+//# sourceMappingURL=lockdown-events.js.map

package/dist/esm/common/lockdown/lockdown-events.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/lockdown/lockdown-events.ts"],"sourcesContent":["// When creating a sandbox, limitation of the events from leaking\n// sensitive objects is required. This is done by overriding own properties\n// of prototypes of all existing events.\nimport { hasProperty } from '@metamask/utils';\n\n/**\n * Targeted Event objects and properties.\n * Note: This is a map of the prototypes that inherit from Events with\n * properties that are identified to leak sensitive objects.\n * Not all browsers support all event types, so checking its existence is required.\n */\nconst targetEvents = new Map();\nif (hasProperty(globalThis, 'UIEvent')) {\n  targetEvents.set(UIEvent.prototype, ['view']);\n}\nif (hasProperty(globalThis, 'MutationEvent')) {\n  targetEvents.set(MutationEvent.prototype, ['relatedNode']);\n}\nif (hasProperty(globalThis, 'MessageEvent')) {\n  targetEvents.set(MessageEvent.prototype, ['source']);\n}\nif (hasProperty(globalThis, 'FocusEvent')) {\n  targetEvents.set(FocusEvent.prototype, ['relatedTarget']);\n}\nif (hasProperty(globalThis, 'MouseEvent')) {\n  targetEvents.set(MouseEvent.prototype, [\n    'relatedTarget',\n    'fromElement',\n    'toElement',\n  ]);\n}\nif (hasProperty(globalThis, 'TouchEvent')) {\n  targetEvents.set(TouchEvent.prototype, ['targetTouches', 'touches']);\n}\nif (hasProperty(globalThis, 'Event')) {\n  targetEvents.set(Event.prototype, [\n    'target',\n    'currentTarget',\n    'srcElement',\n    'composedPath',\n  ]);\n}\n\n/**\n * Attenuate Event objects by replacing its own properties.\n */\nexport function executeLockdownEvents() {\n  targetEvents.forEach((properties, prototype) => {\n    for (const property of properties) {\n      Object.defineProperty(prototype, property, {\n        value: undefined,\n        configurable: false,\n        writable: false,\n      });\n    }\n  });\n}\n"],"names":["hasProperty","targetEvents","Map","globalThis","set","UIEvent","prototype","MutationEvent","MessageEvent","FocusEvent","MouseEvent","TouchEvent","Event","executeLockdownEvents","forEach","properties","property","Object","defineProperty","value","undefined","configurable","writable"],"mappings":"AAAA,iEAAiE;AACjE,2EAA2E;AAC3E,wCAAwC;AACxC,SAASA,WAAW,QAAQ,kBAAkB;AAE9C;;;;;CAKC,GACD,MAAMC,eAAe,IAAIC;AACzB,IAAIF,YAAYG,YAAY,YAAY;IACtCF,aAAaG,GAAG,CAACC,QAAQC,SAAS,EAAE;QAAC;KAAO;AAC9C;AACA,IAAIN,YAAYG,YAAY,kBAAkB;IAC5CF,aAAaG,GAAG,CAACG,cAAcD,SAAS,EAAE;QAAC;KAAc;AAC3D;AACA,IAAIN,YAAYG,YAAY,iBAAiB;IAC3CF,aAAaG,GAAG,CAACI,aAAaF,SAAS,EAAE;QAAC;KAAS;AACrD;AACA,IAAIN,YAAYG,YAAY,eAAe;IACzCF,aAAaG,GAAG,CAACK,WAAWH,SAAS,EAAE;QAAC;KAAgB;AAC1D;AACA,IAAIN,YAAYG,YAAY,eAAe;IACzCF,aAAaG,GAAG,CAACM,WAAWJ,SAAS,EAAE;QACrC;QACA;QACA;KACD;AACH;AACA,IAAIN,YAAYG,YAAY,eAAe;IACzCF,aAAaG,GAAG,CAACO,WAAWL,SAAS,EAAE;QAAC;QAAiB;KAAU;AACrE;AACA,IAAIN,YAAYG,YAAY,UAAU;IACpCF,aAAaG,GAAG,CAACQ,MAAMN,SAAS,EAAE;QAChC;QACA;QACA;QACA;KACD;AACH;AAEA;;CAEC,GACD,OAAO,SAASO;IACdZ,aAAaa,OAAO,CAAC,CAACC,YAAYT;QAChC,KAAK,MAAMU,YAAYD,WAAY;YACjCE,OAAOC,cAAc,CAACZ,WAAWU,UAAU;gBACzCG,OAAOC;gBACPC,cAAc;gBACdC,UAAU;YACZ;QACF;IACF;AACF"}

package/dist/{common → esm/common}/lockdown/lockdown-more.js

@@ -1,9 +1,6 @@
-"use strict";
 // eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment
 /// <reference path="../../../../../node_modules/ses/index.d.ts" />
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.executeLockdownMore = void 0;
-const snaps_utils_1 = require("@metamask/snaps-utils");
+import { logError } from '@metamask/snaps-utils';
 /**
  * The SES `lockdown` function only hardens the properties enumerated by the
  * universalPropertyNames constant specified in 'ses/src/whitelist'. This
@@ -23,8 +20,7 @@ const snaps_utils_1 = require("@metamask/snaps-utils");
  * We write this function in IIFE format to avoid polluting global scope.
  *
  * @throws If the lockdown failed.
- */
-function executeLockdownMore() {
+ */ export function executeLockdownMore() {
     // Make all "object" and "function" own properties of globalThis
     // non-configurable and non-writable, when possible.
     // We call a property that is non-configurable and non-writable,
@@ -32,17 +28,17 @@ function executeLockdownMore() {
     try {
         const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);
         // These named intrinsics are not automatically hardened by `lockdown`
-        const shouldHardenManually = new Set(['eval', 'Function']);
+        const shouldHardenManually = new Set([
+            'eval',
+            'Function'
+        ]);
         const globalProperties = new Set([
             // universalPropertyNames is a constant added by lockdown to global scope
             // at the time of writing, it is initialized in 'ses/src/whitelist'.
             // These properties tend to be non-enumerable.
-            ...namedIntrinsics,
-            // TODO: Also include the named platform globals
-            // This grabs every enumerable property on globalThis.
-            // ...Object.keys(globalThis),
+            ...namedIntrinsics
         ]);
-        globalProperties.forEach((propertyName) => {
+        globalProperties.forEach((propertyName)=>{
             const descriptor = Reflect.getOwnPropertyDescriptor(globalThis, propertyName);
             if (descriptor) {
                 if (descriptor.configurable) {
@@ -51,13 +47,12 @@ function executeLockdownMore() {
                     // non-writable.
                     if (hasAccessor(descriptor)) {
                         Object.defineProperty(globalThis, propertyName, {
-                            configurable: false,
+                            configurable: false
                         });
-                    }
-                    else {
+                    } else {
                         Object.defineProperty(globalThis, propertyName, {
                             configurable: false,
-                            writable: false,
+                            writable: false
                         });
                     }
                 }
@@ -66,13 +61,11 @@ function executeLockdownMore() {
                 }
             }
         });
-    }
-    catch (error) {
-        (0, snaps_utils_1.logError)('Protecting intrinsics failed:', error);
+    } catch (error) {
+        logError('Protecting intrinsics failed:', error);
         throw error;
     }
 }
-exports.executeLockdownMore = executeLockdownMore;
 /**
  * Checks whether the given propertyName descriptor has any accessors, i.e. the
  * properties `get` or `set`.
@@ -82,8 +75,8 @@ exports.executeLockdownMore = executeLockdownMore;
  *
  * @param descriptor - The propertyName descriptor to check.
  * @returns Whether the propertyName descriptor has any accessors.
- */
-function hasAccessor(descriptor) {
+ */ function hasAccessor(descriptor) {
     return 'set' in descriptor || 'get' in descriptor;
 }
+
 //# sourceMappingURL=lockdown-more.js.map

package/dist/esm/common/lockdown/lockdown-more.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/lockdown/lockdown-more.ts"],"sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment\n/// <reference path=\"../../../../../node_modules/ses/index.d.ts\" />\n\nimport { logError } from '@metamask/snaps-utils';\n\n/**\n * The SES `lockdown` function only hardens the properties enumerated by the\n * universalPropertyNames constant specified in 'ses/src/whitelist'. This\n * function makes all function and object properties on the start compartment\n * global non-configurable and non-writable, unless they are already\n * non-configurable.\n *\n * It is critical that this function runs at the right time during\n * initialization, which should always be immediately after `lockdown` has been\n * called. At the time of writing, the modifications this function makes to the\n * runtime environment appear to be non-breaking, but that could change with\n * the addition of dependencies, or the order of our scripts in our HTML files.\n * Exercise caution.\n *\n * See inline comments for implementation details.\n *\n * We write this function in IIFE format to avoid polluting global scope.\n *\n * @throws If the lockdown failed.\n */\nexport function executeLockdownMore() {\n  // Make all \"object\" and \"function\" own properties of globalThis\n  // non-configurable and non-writable, when possible.\n  // We call a property that is non-configurable and non-writable,\n  // \"non-modifiable\".\n  try {\n    const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);\n\n    // These named intrinsics are not automatically hardened by `lockdown`\n    const shouldHardenManually = new Set<symbol | string>(['eval', 'Function']);\n\n    const globalProperties = new Set([\n      // universalPropertyNames is a constant added by lockdown to global scope\n      // at the time of writing, it is initialized in 'ses/src/whitelist'.\n      // These properties tend to be non-enumerable.\n      ...namedIntrinsics,\n\n      // TODO: Also include the named platform globals\n      // This grabs every enumerable property on globalThis.\n      // ...Object.keys(globalThis),\n    ]);\n\n    globalProperties.forEach((propertyName) => {\n      const descriptor = Reflect.getOwnPropertyDescriptor(\n        globalThis,\n        propertyName,\n      );\n\n      if (descriptor) {\n        if (descriptor.configurable) {\n          // If the property on globalThis is configurable, make it\n          // non-configurable. If it has no accessor properties, also make it\n          // non-writable.\n          if (hasAccessor(descriptor)) {\n            Object.defineProperty(globalThis, propertyName, {\n              configurable: false,\n            });\n          } else {\n            Object.defineProperty(globalThis, propertyName, {\n              configurable: false,\n              writable: false,\n            });\n          }\n        }\n\n        if (shouldHardenManually.has(propertyName)) {\n          harden((globalThis as any)[propertyName]);\n        }\n      }\n    });\n  } catch (error) {\n    logError('Protecting intrinsics failed:', error);\n    throw error;\n  }\n}\n\n/**\n * Checks whether the given propertyName descriptor has any accessors, i.e. the\n * properties `get` or `set`.\n *\n * We want to make globals non-writable, and we can't set the `writable`\n * property and accessor properties at the same time.\n *\n * @param descriptor - The propertyName descriptor to check.\n * @returns Whether the propertyName descriptor has any accessors.\n */\nfunction hasAccessor(descriptor: any): boolean {\n  return 'set' in descriptor || 'get' in descriptor;\n}\n"],"names":["logError","executeLockdownMore","namedIntrinsics","Reflect","ownKeys","Compartment","globalThis","shouldHardenManually","Set","globalProperties","forEach","propertyName","descriptor","getOwnPropertyDescriptor","configurable","hasAccessor","Object","defineProperty","writable","has","harden","error"],"mappings":"AAAA,qFAAqF;AACrF,mEAAmE;AAEnE,SAASA,QAAQ,QAAQ,wBAAwB;AAEjD;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,SAASC;IACd,gEAAgE;IAChE,oDAAoD;IACpD,gEAAgE;IAChE,oBAAoB;IACpB,IAAI;QACF,MAAMC,kBAAkBC,QAAQC,OAAO,CAAC,IAAIC,cAAcC,UAAU;QAEpE,sEAAsE;QACtE,MAAMC,uBAAuB,IAAIC,IAAqB;YAAC;YAAQ;SAAW;QAE1E,MAAMC,mBAAmB,IAAID,IAAI;YAC/B,yEAAyE;YACzE,oEAAoE;YACpE,8CAA8C;eAC3CN;SAKJ;QAEDO,iBAAiBC,OAAO,CAAC,CAACC;YACxB,MAAMC,aAAaT,QAAQU,wBAAwB,CACjDP,YACAK;YAGF,IAAIC,YAAY;gBACd,IAAIA,WAAWE,YAAY,EAAE;oBAC3B,yDAAyD;oBACzD,mEAAmE;oBACnE,gBAAgB;oBAChB,IAAIC,YAAYH,aAAa;wBAC3BI,OAAOC,cAAc,CAACX,YAAYK,cAAc;4BAC9CG,cAAc;wBAChB;oBACF,OAAO;wBACLE,OAAOC,cAAc,CAACX,YAAYK,cAAc;4BAC9CG,cAAc;4BACdI,UAAU;wBACZ;oBACF;gBACF;gBAEA,IAAIX,qBAAqBY,GAAG,CAACR,eAAe;oBAC1CS,OAAO,AAACd,UAAkB,CAACK,aAAa;gBAC1C;YACF;QACF;IACF,EAAE,OAAOU,OAAO;QACdrB,SAAS,iCAAiCqB;QAC1C,MAAMA;IACR;AACF;AAEA;;;;;;;;;CASC,GACD,SAASN,YAAYH,UAAe;IAClC,OAAO,SAASA,cAAc,SAASA;AACzC"}

package/dist/{common → esm/common}/lockdown/lockdown.js

@@ -1,29 +1,24 @@
-"use strict";
 // eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment
 /// <reference path="../../../../../node_modules/ses/index.d.ts" />
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.executeLockdown = void 0;
-const snaps_utils_1 = require("@metamask/snaps-utils");
+import { logError } from '@metamask/snaps-utils';
 /**
  * Execute SES lockdown in the current context, i.e., the current iframe.
  *
  * @throws If the SES lockdown failed.
- */
-function executeLockdown() {
+ */ export function executeLockdown() {
     try {
         lockdown({
             consoleTaming: 'unsafe',
             errorTaming: 'unsafe',
             mathTaming: 'unsafe',
             dateTaming: 'unsafe',
-            overrideTaming: 'severe',
+            overrideTaming: 'severe'
         });
-    }
-    catch (error) {
+    } catch (error) {
         // If the `lockdown` call throws an exception, it should not be able to continue
-        (0, snaps_utils_1.logError)('Lockdown failed:', error);
+        logError('Lockdown failed:', error);
         throw error;
     }
 }
-exports.executeLockdown = executeLockdown;
+
 //# sourceMappingURL=lockdown.js.map

package/dist/esm/common/lockdown/lockdown.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/lockdown/lockdown.ts"],"sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment\n/// <reference path=\"../../../../../node_modules/ses/index.d.ts\" />\n\nimport { logError } from '@metamask/snaps-utils';\n\n/**\n * Execute SES lockdown in the current context, i.e., the current iframe.\n *\n * @throws If the SES lockdown failed.\n */\nexport function executeLockdown() {\n  try {\n    lockdown({\n      consoleTaming: 'unsafe',\n      errorTaming: 'unsafe',\n      mathTaming: 'unsafe',\n      dateTaming: 'unsafe',\n      overrideTaming: 'severe',\n    });\n  } catch (error) {\n    // If the `lockdown` call throws an exception, it should not be able to continue\n    logError('Lockdown failed:', error);\n    throw error;\n  }\n}\n"],"names":["logError","executeLockdown","lockdown","consoleTaming","errorTaming","mathTaming","dateTaming","overrideTaming","error"],"mappings":"AAAA,qFAAqF;AACrF,mEAAmE;AAEnE,SAASA,QAAQ,QAAQ,wBAAwB;AAEjD;;;;CAIC,GACD,OAAO,SAASC;IACd,IAAI;QACFC,SAAS;YACPC,eAAe;YACfC,aAAa;YACbC,YAAY;YACZC,YAAY;YACZC,gBAAgB;QAClB;IACF,EAAE,OAAOC,OAAO;QACd,gFAAgF;QAChFR,SAAS,oBAAoBQ;QAC7B,MAAMA;IACR;AACF"}