@metamask/snaps-execution-environments 6.6.1 → 6.7.0

package/dist/common/endowments/index.mjs

@@ -1,21 +1,86 @@
-import {
-  createEndowments
-} from "../../chunk-BVRVUIJB.mjs";
-import "../../chunk-ODICKSGZ.mjs";
-import "../../chunk-S5NWI5Z7.mjs";
-import "../../chunk-BCBKEUCG.mjs";
-import "../../chunk-XPCW7TKM.mjs";
-import "../../chunk-53ZULHPK.mjs";
-import "../../chunk-HWS4QSOC.mjs";
-import "../../chunk-Y7AK2VVC.mjs";
-import "../../chunk-W7EDURT5.mjs";
-import "../../chunk-Q42NNJFY.mjs";
-import "../../chunk-UOPIRTJX.mjs";
-import "../../chunk-HL2TTKF3.mjs";
-import "../../chunk-5DEV3QQU.mjs";
-import "../../chunk-IX5S3V47.mjs";
-import "../../chunk-YRZVIDCF.mjs";
-export {
-  createEndowments
-};
+import { rpcErrors } from "@metamask/rpc-errors";
+import { logWarning } from "@metamask/snaps-utils";
+import { hasProperty } from "@metamask/utils";
+import { rootRealmGlobal } from "../globalObject.mjs";
+import buildCommonEndowments from "./commonEndowmentFactory.mjs";
+/**
+ * Retrieve consolidated endowment factories for common endowments.
+ */
+const registeredEndowments = buildCommonEndowments();
+/**
+ * A map of endowment names to their factory functions. Some endowments share
+ * the same factory function, but we only call each factory once for each snap.
+ * See {@link createEndowments} for details.
+ */
+const endowmentFactories = registeredEndowments.reduce((factories, builder) => {
+    builder.names.forEach((name) => {
+        factories.set(name, builder.factory);
+    });
+    return factories;
+}, new Map());
+/**
+ * Gets the endowments for a particular Snap. Some endowments, like `setTimeout`
+ * and `clearTimeout`, must be attenuated so that they can only affect behavior
+ * within the Snap's own realm. Therefore, we use factory functions to create
+ * such attenuated / modified endowments. Otherwise, the value that's on the
+ * root realm global will be used.
+ *
+ * @param options - An options bag.
+ * @param options.snap - The Snaps global API object.
+ * @param options.ethereum - The Snap's EIP-1193 provider object.
+ * @param options.snapId - The id of the snap that will use the created endowments.
+ * @param options.endowments - The list of endowments to provide to the snap.
+ * @param options.notify - A reference to the notify function of the snap executor.
+ * @returns An object containing the Snap's endowments.
+ */
+export function createEndowments({ snap, ethereum, snapId, endowments, notify, }) {
+    const attenuatedEndowments = {};
+    // TODO: All endowments should be hardened to prevent covert communication
+    // channels. Hardening the returned objects breaks tests elsewhere in the
+    // monorepo, so further research is needed.
+    const result = endowments.reduce(({ allEndowments, teardowns }, endowmentName) => {
+        // First, check if the endowment has a factory, and default to that.
+        if (endowmentFactories.has(endowmentName)) {
+            if (!hasProperty(attenuatedEndowments, endowmentName)) {
+                // Call the endowment factory for the current endowment. If the factory
+                // creates multiple endowments, they will all be assigned to the
+                // `attenuatedEndowments` object, but will only be passed on to the snap
+                // if explicitly listed among its endowment.
+                // This may not have an actual use case, but, safety first.
+                // We just confirmed that endowmentFactories has the specified key.
+                // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+                const { teardownFunction, ...endowment } = endowmentFactories.get(endowmentName)({ snapId, notify });
+                Object.assign(attenuatedEndowments, endowment);
+                if (teardownFunction) {
+                    teardowns.push(teardownFunction);
+                }
+            }
+            allEndowments[endowmentName] = attenuatedEndowments[endowmentName];
+        }
+        else if (endowmentName === 'ethereum') {
+            // Special case for adding the EIP-1193 provider.
+            allEndowments[endowmentName] = ethereum;
+        }
+        else if (endowmentName in rootRealmGlobal) {
+            logWarning(`Access to unhardened global ${endowmentName}.`);
+            // If the endowment doesn't have a factory, just use whatever is on the
+            // global object.
+            const globalValue = rootRealmGlobal[endowmentName];
+            allEndowments[endowmentName] = globalValue;
+        }
+        else {
+            // If we get to this point, we've been passed an endowment that doesn't
+            // exist in our current environment.
+            throw rpcErrors.internal(`Unknown endowment: "${endowmentName}".`);
+        }
+        return { allEndowments, teardowns };
+    }, {
+        allEndowments: { snap },
+        teardowns: [],
+    });
+    const teardown = async () => {
+        await Promise.all(result.teardowns.map((teardownFunction) => teardownFunction()));
+    };
+    return { endowments: result.allEndowments, teardown };
+}
 //# sourceMappingURL=index.mjs.map

package/dist/common/endowments/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/common/endowments/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,6BAA6B;AAEjD,OAAO,EAAE,UAAU,EAAE,8BAA8B;AACnD,OAAO,EAAE,WAAW,EAAE,wBAAwB;AAG9C,OAAO,EAAE,eAAe,EAAE,4BAAwB;AAElD,OAAO,qBAAqB,qCAAiC;AAe7D;;GAEG;AACH,MAAM,oBAAoB,GAAG,qBAAqB,EAAE,CAAC;AAErD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IAC5E,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC,EAAE,IAAI,GAAG,EAAyE,CAAC,CAAC;AAErF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,UAAU,EACV,MAAM,GAOP;IACC,MAAM,oBAAoB,GAA4B,EAAE,CAAC;IAEzD,0EAA0E;IAC1E,yEAAyE;IACzE,2CAA2C;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAI9B,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,EAAE;QAC9C,oEAAoE;QACpE,IAAI,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,aAAa,CAAC,EAAE,CAAC;gBACtD,uEAAuE;gBACvE,gEAAgE;gBAChE,wEAAwE;gBACxE,4CAA4C;gBAC5C,2DAA2D;gBAE3D,mEAAmE;gBACnE,oEAAoE;gBACpE,MAAM,EAAE,gBAAgB,EAAE,GAAG,SAAS,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAC/D,aAAa,CACb,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACvB,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;gBAC/C,IAAI,gBAAgB,EAAE,CAAC;oBACrB,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YACD,aAAa,CAAC,aAAa,CAAC,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YACxC,iDAAiD;YACjD,aAAa,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAC;QAC1C,CAAC;aAAM,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;YAC5C,UAAU,CAAC,+BAA+B,aAAa,GAAG,CAAC,CAAC;YAC5D,uEAAuE;YACvE,iBAAiB;YACjB,MAAM,WAAW,GAAI,eAA2C,CAC9D,aAAa,CACd,CAAC;YACF,aAAa,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,oCAAoC;YACpC,MAAM,SAAS,CAAC,QAAQ,CAAC,uBAAuB,aAAa,IAAI,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC,EACD;QACE,aAAa,EAAE,EAAE,IAAI,EAAE;QACvB,SAAS,EAAE,EAAE;KACd,CACF,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAC/D,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC;AACxD,CAAC","sourcesContent":["import type { StreamProvider } from '@metamask/providers';\nimport { rpcErrors } from '@metamask/rpc-errors';\nimport type { SnapsProvider } from '@metamask/snaps-sdk';\nimport { logWarning } from '@metamask/snaps-utils';\nimport { hasProperty } from '@metamask/utils';\n\nimport type { NotifyFunction } from '../BaseSnapExecutor';\nimport { rootRealmGlobal } from '../globalObject';\nimport type { EndowmentFactoryOptions } from './commonEndowmentFactory';\nimport buildCommonEndowments from './commonEndowmentFactory';\n\ntype EndowmentFactoryResult = {\n  /**\n   * A function that performs any necessary teardown when the snap becomes idle.\n   *\n   * NOTE:** The endowments are not reconstructed if the snap is re-invoked\n   * before being terminated, so the teardown operation must not render the\n   * endowments unusable; it should simply restore the endowments to their\n   * original state.\n   */\n  teardownFunction?: () => Promise<void> | void;\n  [key: string]: unknown;\n};\n\n/**\n * Retrieve consolidated endowment factories for common endowments.\n */\nconst registeredEndowments = buildCommonEndowments();\n\n/**\n * A map of endowment names to their factory functions. Some endowments share\n * the same factory function, but we only call each factory once for each snap.\n * See {@link createEndowments} for details.\n */\nconst endowmentFactories = registeredEndowments.reduce((factories, builder) => {\n  builder.names.forEach((name) => {\n    factories.set(name, builder.factory);\n  });\n  return factories;\n}, new Map<string, (options?: EndowmentFactoryOptions) => EndowmentFactoryResult>());\n\n/**\n * Gets the endowments for a particular Snap. Some endowments, like `setTimeout`\n * and `clearTimeout`, must be attenuated so that they can only affect behavior\n * within the Snap's own realm. Therefore, we use factory functions to create\n * such attenuated / modified endowments. Otherwise, the value that's on the\n * root realm global will be used.\n *\n * @param options - An options bag.\n * @param options.snap - The Snaps global API object.\n * @param options.ethereum - The Snap's EIP-1193 provider object.\n * @param options.snapId - The id of the snap that will use the created endowments.\n * @param options.endowments - The list of endowments to provide to the snap.\n * @param options.notify - A reference to the notify function of the snap executor.\n * @returns An object containing the Snap's endowments.\n */\nexport function createEndowments({\n  snap,\n  ethereum,\n  snapId,\n  endowments,\n  notify,\n}: {\n  snap: SnapsProvider;\n  ethereum: StreamProvider;\n  snapId: string;\n  endowments: string[];\n  notify: NotifyFunction;\n}): { endowments: Record<string, unknown>; teardown: () => Promise<void> } {\n  const attenuatedEndowments: Record<string, unknown> = {};\n\n  // TODO: All endowments should be hardened to prevent covert communication\n  // channels. Hardening the returned objects breaks tests elsewhere in the\n  // monorepo, so further research is needed.\n  const result = endowments.reduce<{\n    allEndowments: Record<string, unknown>;\n    teardowns: (() => Promise<void> | void)[];\n  }>(\n    ({ allEndowments, teardowns }, endowmentName) => {\n      // First, check if the endowment has a factory, and default to that.\n      if (endowmentFactories.has(endowmentName)) {\n        if (!hasProperty(attenuatedEndowments, endowmentName)) {\n          // Call the endowment factory for the current endowment. If the factory\n          // creates multiple endowments, they will all be assigned to the\n          // `attenuatedEndowments` object, but will only be passed on to the snap\n          // if explicitly listed among its endowment.\n          // This may not have an actual use case, but, safety first.\n\n          // We just confirmed that endowmentFactories has the specified key.\n          // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n          const { teardownFunction, ...endowment } = endowmentFactories.get(\n            endowmentName,\n          )!({ snapId, notify });\n          Object.assign(attenuatedEndowments, endowment);\n          if (teardownFunction) {\n            teardowns.push(teardownFunction);\n          }\n        }\n        allEndowments[endowmentName] = attenuatedEndowments[endowmentName];\n      } else if (endowmentName === 'ethereum') {\n        // Special case for adding the EIP-1193 provider.\n        allEndowments[endowmentName] = ethereum;\n      } else if (endowmentName in rootRealmGlobal) {\n        logWarning(`Access to unhardened global ${endowmentName}.`);\n        // If the endowment doesn't have a factory, just use whatever is on the\n        // global object.\n        const globalValue = (rootRealmGlobal as Record<string, unknown>)[\n          endowmentName\n        ];\n        allEndowments[endowmentName] = globalValue;\n      } else {\n        // If we get to this point, we've been passed an endowment that doesn't\n        // exist in our current environment.\n        throw rpcErrors.internal(`Unknown endowment: \"${endowmentName}\".`);\n      }\n      return { allEndowments, teardowns };\n    },\n    {\n      allEndowments: { snap },\n      teardowns: [],\n    },\n  );\n\n  const teardown = async () => {\n    await Promise.all(\n      result.teardowns.map((teardownFunction) => teardownFunction()),\n    );\n  };\n  return { endowments: result.allEndowments, teardown };\n}\n"]}

package/dist/common/endowments/interval.cjs

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const rpc_errors_1 = require("@metamask/rpc-errors");
+const MINIMUM_INTERVAL = 10;
+/**
+ * Creates a pair of `setInterval` and `clearInterval` functions attenuated such
+ * that:
+ * - `setInterval` throws if its "handler" parameter is not a function.
+ * - `clearInterval` only clears timeouts created by its sibling `setInterval`,
+ * or else no-ops.
+ *
+ * @returns An object with the attenuated `setInterval` and `clearInterval`
+ * functions.
+ */
+const createInterval = () => {
+    const registeredHandles = new Map();
+    const _setInterval = (handler, timeout, ...args) => {
+        if (typeof handler !== 'function') {
+            throw rpc_errors_1.rpcErrors.invalidInput(`The interval handler must be a function. Received: ${typeof handler}.`);
+        }
+        harden(handler);
+        const handle = Object.freeze(Object.create(null));
+        const platformHandle = setInterval(handler, Math.max(MINIMUM_INTERVAL, timeout ?? 0), ...args);
+        registeredHandles.set(handle, platformHandle);
+        return handle;
+    };
+    const _clearInterval = (handle) => {
+        harden(handle);
+        const platformHandle = registeredHandles.get(handle);
+        if (platformHandle !== undefined) {
+            clearInterval(platformHandle);
+            registeredHandles.delete(handle);
+        }
+    };
+    const teardownFunction = () => {
+        for (const handle of registeredHandles.keys()) {
+            _clearInterval(handle);
+        }
+    };
+    return {
+        setInterval: harden(_setInterval),
+        clearInterval: harden(_clearInterval),
+        teardownFunction,
+    };
+};
+const endowmentModule = {
+    names: ['setInterval', 'clearInterval'],
+    factory: createInterval,
+};
+exports.default = endowmentModule;
+//# sourceMappingURL=interval.cjs.map

package/dist/common/endowments/interval.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"interval.cjs","sourceRoot":"","sources":["../../../src/common/endowments/interval.ts"],"names":[],"mappings":";;AAAA,qDAAiD;AAEjD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG,GAAG,EAAE;IAC1B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEtD,MAAM,YAAY,GAAG,CACnB,OAAqB,EACrB,OAAgB,EAChB,GAAG,IAAW,EACL,EAAE;QACX,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,sBAAS,CAAC,YAAY,CAC1B,sDAAsD,OAAO,OAAO,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,WAAW,CAChC,OAAO,EACP,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,IAAI,CAAC,CAAC,EACxC,GAAG,IAAI,CACR,CAAC;QACF,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,MAAe,EAAQ,EAAE;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,aAAa,CAAC,cAAqB,CAAC,CAAC;YACrC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,GAAS,EAAE;QAClC,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;QACjC,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC;QACrC,gBAAgB;KACR,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,CAAU;IAChD,OAAO,EAAE,cAAc;CACxB,CAAC;AACF,kBAAe,eAAe,CAAC","sourcesContent":["import { rpcErrors } from '@metamask/rpc-errors';\n\nconst MINIMUM_INTERVAL = 10;\n\n/**\n * Creates a pair of `setInterval` and `clearInterval` functions attenuated such\n * that:\n * - `setInterval` throws if its \"handler\" parameter is not a function.\n * - `clearInterval` only clears timeouts created by its sibling `setInterval`,\n * or else no-ops.\n *\n * @returns An object with the attenuated `setInterval` and `clearInterval`\n * functions.\n */\nconst createInterval = () => {\n  const registeredHandles = new Map<unknown, unknown>();\n\n  const _setInterval = (\n    handler: TimerHandler,\n    timeout?: number,\n    ...args: any[]\n  ): unknown => {\n    if (typeof handler !== 'function') {\n      throw rpcErrors.invalidInput(\n        `The interval handler must be a function. Received: ${typeof handler}.`,\n      );\n    }\n    harden(handler);\n    const handle = Object.freeze(Object.create(null));\n    const platformHandle = setInterval(\n      handler,\n      Math.max(MINIMUM_INTERVAL, timeout ?? 0),\n      ...args,\n    );\n    registeredHandles.set(handle, platformHandle);\n    return handle;\n  };\n\n  const _clearInterval = (handle: unknown): void => {\n    harden(handle);\n    const platformHandle = registeredHandles.get(handle);\n    if (platformHandle !== undefined) {\n      clearInterval(platformHandle as any);\n      registeredHandles.delete(handle);\n    }\n  };\n\n  const teardownFunction = (): void => {\n    for (const handle of registeredHandles.keys()) {\n      _clearInterval(handle);\n    }\n  };\n\n  return {\n    setInterval: harden(_setInterval),\n    clearInterval: harden(_clearInterval),\n    teardownFunction,\n  } as const;\n};\n\nconst endowmentModule = {\n  names: ['setInterval', 'clearInterval'] as const,\n  factory: createInterval,\n};\nexport default endowmentModule;\n"]}

package/dist/{types/common/endowments/interval.d.ts → common/endowments/interval.d.cts}

@@ -7,3 +7,4 @@ declare const endowmentModule: {
     };
 };
 export default endowmentModule;
+//# sourceMappingURL=interval.d.cts.map

package/dist/common/endowments/interval.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interval.d.cts","sourceRoot":"","sources":["../../../src/common/endowments/interval.ts"],"names":[],"mappings":"AA4DA,QAAA,MAAM,eAAe;;;wCA1CR,YAAY,YACX,MAAM,WACP,GAAG,EAAE,KACb,OAAO;yCAiBsB,OAAO,KAAG,IAAI;yCASjB,IAAI;;CAgBlC,CAAC;AACF,eAAe,eAAe,CAAC"}

package/dist/common/endowments/interval.d.mts

@@ -0,0 +1,10 @@
+declare const endowmentModule: {
+    names: readonly ["setInterval", "clearInterval"];
+    factory: () => {
+        readonly setInterval: (handler: TimerHandler, timeout?: number, ...args: any[]) => unknown;
+        readonly clearInterval: (handle: unknown) => void;
+        readonly teardownFunction: () => void;
+    };
+};
+export default endowmentModule;
+//# sourceMappingURL=interval.d.mts.map

package/dist/common/endowments/interval.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interval.d.mts","sourceRoot":"","sources":["../../../src/common/endowments/interval.ts"],"names":[],"mappings":"AA4DA,QAAA,MAAM,eAAe;;;wCA1CR,YAAY,YACX,MAAM,WACP,GAAG,EAAE,KACb,OAAO;yCAiBsB,OAAO,KAAG,IAAI;yCASjB,IAAI;;CAgBlC,CAAC;AACF,eAAe,eAAe,CAAC"}

package/dist/common/endowments/interval.mjs

@@ -1,8 +1,49 @@
-import {
-  interval_default
-} from "../../chunk-S5NWI5Z7.mjs";
-import "../../chunk-YRZVIDCF.mjs";
-export {
-  interval_default as default
+import { rpcErrors } from "@metamask/rpc-errors";
+const MINIMUM_INTERVAL = 10;
+/**
+ * Creates a pair of `setInterval` and `clearInterval` functions attenuated such
+ * that:
+ * - `setInterval` throws if its "handler" parameter is not a function.
+ * - `clearInterval` only clears timeouts created by its sibling `setInterval`,
+ * or else no-ops.
+ *
+ * @returns An object with the attenuated `setInterval` and `clearInterval`
+ * functions.
+ */
+const createInterval = () => {
+    const registeredHandles = new Map();
+    const _setInterval = (handler, timeout, ...args) => {
+        if (typeof handler !== 'function') {
+            throw rpcErrors.invalidInput(`The interval handler must be a function. Received: ${typeof handler}.`);
+        }
+        harden(handler);
+        const handle = Object.freeze(Object.create(null));
+        const platformHandle = setInterval(handler, Math.max(MINIMUM_INTERVAL, timeout ?? 0), ...args);
+        registeredHandles.set(handle, platformHandle);
+        return handle;
+    };
+    const _clearInterval = (handle) => {
+        harden(handle);
+        const platformHandle = registeredHandles.get(handle);
+        if (platformHandle !== undefined) {
+            clearInterval(platformHandle);
+            registeredHandles.delete(handle);
+        }
+    };
+    const teardownFunction = () => {
+        for (const handle of registeredHandles.keys()) {
+            _clearInterval(handle);
+        }
+    };
+    return {
+        setInterval: harden(_setInterval),
+        clearInterval: harden(_clearInterval),
+        teardownFunction,
+    };
 };
+const endowmentModule = {
+    names: ['setInterval', 'clearInterval'],
+    factory: createInterval,
+};
+export default endowmentModule;
 //# sourceMappingURL=interval.mjs.map

package/dist/common/endowments/interval.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"interval.mjs","sourceRoot":"","sources":["../../../src/common/endowments/interval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,6BAA6B;AAEjD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG,GAAG,EAAE;IAC1B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEtD,MAAM,YAAY,GAAG,CACnB,OAAqB,EACrB,OAAgB,EAChB,GAAG,IAAW,EACL,EAAE;QACX,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,SAAS,CAAC,YAAY,CAC1B,sDAAsD,OAAO,OAAO,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,WAAW,CAChC,OAAO,EACP,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,IAAI,CAAC,CAAC,EACxC,GAAG,IAAI,CACR,CAAC;QACF,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,MAAe,EAAQ,EAAE;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,aAAa,CAAC,cAAqB,CAAC,CAAC;YACrC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,GAAS,EAAE;QAClC,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;QACjC,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC;QACrC,gBAAgB;KACR,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,CAAU;IAChD,OAAO,EAAE,cAAc;CACxB,CAAC;AACF,eAAe,eAAe,CAAC","sourcesContent":["import { rpcErrors } from '@metamask/rpc-errors';\n\nconst MINIMUM_INTERVAL = 10;\n\n/**\n * Creates a pair of `setInterval` and `clearInterval` functions attenuated such\n * that:\n * - `setInterval` throws if its \"handler\" parameter is not a function.\n * - `clearInterval` only clears timeouts created by its sibling `setInterval`,\n * or else no-ops.\n *\n * @returns An object with the attenuated `setInterval` and `clearInterval`\n * functions.\n */\nconst createInterval = () => {\n  const registeredHandles = new Map<unknown, unknown>();\n\n  const _setInterval = (\n    handler: TimerHandler,\n    timeout?: number,\n    ...args: any[]\n  ): unknown => {\n    if (typeof handler !== 'function') {\n      throw rpcErrors.invalidInput(\n        `The interval handler must be a function. Received: ${typeof handler}.`,\n      );\n    }\n    harden(handler);\n    const handle = Object.freeze(Object.create(null));\n    const platformHandle = setInterval(\n      handler,\n      Math.max(MINIMUM_INTERVAL, timeout ?? 0),\n      ...args,\n    );\n    registeredHandles.set(handle, platformHandle);\n    return handle;\n  };\n\n  const _clearInterval = (handle: unknown): void => {\n    harden(handle);\n    const platformHandle = registeredHandles.get(handle);\n    if (platformHandle !== undefined) {\n      clearInterval(platformHandle as any);\n      registeredHandles.delete(handle);\n    }\n  };\n\n  const teardownFunction = (): void => {\n    for (const handle of registeredHandles.keys()) {\n      _clearInterval(handle);\n    }\n  };\n\n  return {\n    setInterval: harden(_setInterval),\n    clearInterval: harden(_clearInterval),\n    teardownFunction,\n  } as const;\n};\n\nconst endowmentModule = {\n  names: ['setInterval', 'clearInterval'] as const,\n  factory: createInterval,\n};\nexport default endowmentModule;\n"]}

package/dist/common/endowments/math.cjs

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const globalObject_1 = require("../globalObject.cjs");
+const crypto_1 = require("./crypto.cjs");
+/**
+ * Create a {@link Math} object, with the same properties as the global
+ * {@link Math} object, but with the {@link Math.random} method replaced.
+ *
+ * @returns The {@link Math} object with the {@link Math.random} method
+ * replaced.
+ */
+function createMath() {
+    // `Math` does not work with `Object.keys`, `Object.entries`, etc., so we
+    // need to create a new object with the same properties.
+    const keys = Object.getOwnPropertyNames(globalObject_1.rootRealmGlobal.Math);
+    const math = keys.reduce((target, key) => {
+        if (key === 'random') {
+            return target;
+        }
+        return { ...target, [key]: globalObject_1.rootRealmGlobal.Math[key] };
+    }, {});
+    // Since the math endowment requires crypto, we can leverage the crypto endowment factory to get a hardened and platform agnostic instance of webcrypto
+    const { crypto: hardenedCrypto } = (0, crypto_1.createCrypto)();
+    return harden({
+        Math: {
+            ...math,
+            random: () => {
+                // NOTE: This is not intended to be a secure replacement for the weak
+                // random number generator used by `Math.random`. It is only intended to
+                // prevent side channel attacks of `Math.random` by replacing it with an
+                // alternative implementation that is not vulnerable to the same
+                // attacks.
+                //
+                // This does not mean that this implementation is secure. It is not
+                // intended to be used in a security context, and this implementation
+                // may change at any time.
+                //
+                // To securely generate random numbers, use a cryptographically secure
+                // random number generator, such as the one provided by the Web Crypto
+                // API:
+                //
+                // - https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey
+                // - https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues
+                return hardenedCrypto.getRandomValues(new Uint32Array(1))[0] / 2 ** 32;
+            },
+        },
+    });
+}
+const endowmentModule = {
+    names: ['Math'],
+    factory: createMath,
+};
+exports.default = endowmentModule;
+//# sourceMappingURL=math.cjs.map

package/dist/common/endowments/math.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"math.cjs","sourceRoot":"","sources":["../../../src/common/endowments/math.ts"],"names":[],"mappings":";;AAAA,sDAAkD;AAClD,yCAAwC;AAExC;;;;;;GAMG;AACH,SAAS,UAAU;IACjB,yEAAyE;IACzE,wDAAwD;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CACrC,8BAAe,CAAC,IAAI,CACI,CAAC;IAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACtD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,8BAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,uJAAuJ;IACvJ,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAA,qBAAY,GAAE,CAAC;IAElD,OAAO,MAAM,CAAC;QACZ,IAAI,EAAE;YACJ,GAAG,IAAI;YACP,MAAM,EAAE,GAAG,EAAE;gBACX,qEAAqE;gBACrE,wEAAwE;gBACxE,wEAAwE;gBACxE,gEAAgE;gBAChE,WAAW;gBACX,EAAE;gBACF,mEAAmE;gBACnE,qEAAqE;gBACrE,0BAA0B;gBAC1B,EAAE;gBACF,sEAAsE;gBACtE,sEAAsE;gBACtE,OAAO;gBACP,EAAE;gBACF,8EAA8E;gBAC9E,4EAA4E;gBAC5E,OAAO,cAAc,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,CAAC,MAAM,CAAU;IACxB,OAAO,EAAE,UAAU;CACpB,CAAC;AAEF,kBAAe,eAAe,CAAC","sourcesContent":["import { rootRealmGlobal } from '../globalObject';\nimport { createCrypto } from './crypto';\n\n/**\n * Create a {@link Math} object, with the same properties as the global\n * {@link Math} object, but with the {@link Math.random} method replaced.\n *\n * @returns The {@link Math} object with the {@link Math.random} method\n * replaced.\n */\nfunction createMath() {\n  // `Math` does not work with `Object.keys`, `Object.entries`, etc., so we\n  // need to create a new object with the same properties.\n  const keys = Object.getOwnPropertyNames(\n    rootRealmGlobal.Math,\n  ) as (keyof typeof Math)[];\n\n  const math = keys.reduce<Partial<Math>>((target, key) => {\n    if (key === 'random') {\n      return target;\n    }\n\n    return { ...target, [key]: rootRealmGlobal.Math[key] };\n  }, {});\n\n  // Since the math endowment requires crypto, we can leverage the crypto endowment factory to get a hardened and platform agnostic instance of webcrypto\n  const { crypto: hardenedCrypto } = createCrypto();\n\n  return harden({\n    Math: {\n      ...math,\n      random: () => {\n        // NOTE: This is not intended to be a secure replacement for the weak\n        // random number generator used by `Math.random`. It is only intended to\n        // prevent side channel attacks of `Math.random` by replacing it with an\n        // alternative implementation that is not vulnerable to the same\n        // attacks.\n        //\n        // This does not mean that this implementation is secure. It is not\n        // intended to be used in a security context, and this implementation\n        // may change at any time.\n        //\n        // To securely generate random numbers, use a cryptographically secure\n        // random number generator, such as the one provided by the Web Crypto\n        // API:\n        //\n        // - https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey\n        // - https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues\n        return hardenedCrypto.getRandomValues(new Uint32Array(1))[0] / 2 ** 32;\n      },\n    },\n  });\n}\n\nconst endowmentModule = {\n  names: ['Math'] as const,\n  factory: createMath,\n};\n\nexport default endowmentModule;\n"]}

package/dist/{types/common/endowments/math.d.ts → common/endowments/math.d.cts}

@@ -58,3 +58,4 @@ declare const endowmentModule: {
     factory: typeof createMath;
 };
 export default endowmentModule;
+//# sourceMappingURL=math.d.cts.map

package/dist/common/endowments/math.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"math.d.cts","sourceRoot":"","sources":["../../../src/common/endowments/math.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,iBAAS,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0ClB;AAED,QAAA,MAAM,eAAe;;;CAGpB,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/common/endowments/math.d.mts

@@ -0,0 +1,61 @@
+/**
+ * Create a {@link Math} object, with the same properties as the global
+ * {@link Math} object, but with the {@link Math.random} method replaced.
+ *
+ * @returns The {@link Math} object with the {@link Math.random} method
+ * replaced.
+ */
+declare function createMath(): {
+    Math: {
+        random: () => number;
+        E?: number | undefined;
+        LN10?: number | undefined;
+        LN2?: number | undefined;
+        LOG2E?: number | undefined;
+        LOG10E?: number | undefined;
+        PI?: number | undefined;
+        SQRT1_2?: number | undefined;
+        SQRT2?: number | undefined;
+        abs?: ((x: number) => number) | undefined;
+        acos?: ((x: number) => number) | undefined;
+        asin?: ((x: number) => number) | undefined;
+        atan?: ((x: number) => number) | undefined;
+        atan2?: ((y: number, x: number) => number) | undefined;
+        ceil?: ((x: number) => number) | undefined;
+        cos?: ((x: number) => number) | undefined;
+        exp?: ((x: number) => number) | undefined;
+        floor?: ((x: number) => number) | undefined;
+        log?: ((x: number) => number) | undefined;
+        max?: ((...values: number[]) => number) | undefined;
+        min?: ((...values: number[]) => number) | undefined;
+        pow?: ((x: number, y: number) => number) | undefined;
+        round?: ((x: number) => number) | undefined;
+        sin?: ((x: number) => number) | undefined;
+        sqrt?: ((x: number) => number) | undefined;
+        tan?: ((x: number) => number) | undefined;
+        clz32?: ((x: number) => number) | undefined;
+        imul?: ((x: number, y: number) => number) | undefined;
+        sign?: ((x: number) => number) | undefined;
+        log10?: ((x: number) => number) | undefined;
+        log2?: ((x: number) => number) | undefined;
+        log1p?: ((x: number) => number) | undefined;
+        expm1?: ((x: number) => number) | undefined;
+        cosh?: ((x: number) => number) | undefined;
+        sinh?: ((x: number) => number) | undefined;
+        tanh?: ((x: number) => number) | undefined;
+        acosh?: ((x: number) => number) | undefined;
+        asinh?: ((x: number) => number) | undefined;
+        atanh?: ((x: number) => number) | undefined;
+        hypot?: ((...values: number[]) => number) | undefined;
+        trunc?: ((x: number) => number) | undefined;
+        fround?: ((x: number) => number) | undefined;
+        cbrt?: ((x: number) => number) | undefined;
+        [Symbol.toStringTag]?: string | undefined;
+    };
+};
+declare const endowmentModule: {
+    names: readonly ["Math"];
+    factory: typeof createMath;
+};
+export default endowmentModule;
+//# sourceMappingURL=math.d.mts.map

package/dist/common/endowments/math.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"math.d.mts","sourceRoot":"","sources":["../../../src/common/endowments/math.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,iBAAS,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0ClB;AAED,QAAA,MAAM,eAAe;;;CAGpB,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/common/endowments/math.mjs

@@ -1,10 +1,52 @@
-import {
-  math_default
-} from "../../chunk-BCBKEUCG.mjs";
-import "../../chunk-Q42NNJFY.mjs";
-import "../../chunk-IX5S3V47.mjs";
-import "../../chunk-YRZVIDCF.mjs";
-export {
-  math_default as default
+import { rootRealmGlobal } from "../globalObject.mjs";
+import { createCrypto } from "./crypto.mjs";
+/**
+ * Create a {@link Math} object, with the same properties as the global
+ * {@link Math} object, but with the {@link Math.random} method replaced.
+ *
+ * @returns The {@link Math} object with the {@link Math.random} method
+ * replaced.
+ */
+function createMath() {
+    // `Math` does not work with `Object.keys`, `Object.entries`, etc., so we
+    // need to create a new object with the same properties.
+    const keys = Object.getOwnPropertyNames(rootRealmGlobal.Math);
+    const math = keys.reduce((target, key) => {
+        if (key === 'random') {
+            return target;
+        }
+        return { ...target, [key]: rootRealmGlobal.Math[key] };
+    }, {});
+    // Since the math endowment requires crypto, we can leverage the crypto endowment factory to get a hardened and platform agnostic instance of webcrypto
+    const { crypto: hardenedCrypto } = createCrypto();
+    return harden({
+        Math: {
+            ...math,
+            random: () => {
+                // NOTE: This is not intended to be a secure replacement for the weak
+                // random number generator used by `Math.random`. It is only intended to
+                // prevent side channel attacks of `Math.random` by replacing it with an
+                // alternative implementation that is not vulnerable to the same
+                // attacks.
+                //
+                // This does not mean that this implementation is secure. It is not
+                // intended to be used in a security context, and this implementation
+                // may change at any time.
+                //
+                // To securely generate random numbers, use a cryptographically secure
+                // random number generator, such as the one provided by the Web Crypto
+                // API:
+                //
+                // - https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey
+                // - https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues
+                return hardenedCrypto.getRandomValues(new Uint32Array(1))[0] / 2 ** 32;
+            },
+        },
+    });
+}
+const endowmentModule = {
+    names: ['Math'],
+    factory: createMath,
 };
+export default endowmentModule;
 //# sourceMappingURL=math.mjs.map

package/dist/common/endowments/math.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"math.mjs","sourceRoot":"","sources":["../../../src/common/endowments/math.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,4BAAwB;AAClD,OAAO,EAAE,YAAY,EAAE,qBAAiB;AAExC;;;;;;GAMG;AACH,SAAS,UAAU;IACjB,yEAAyE;IACzE,wDAAwD;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CACrC,eAAe,CAAC,IAAI,CACI,CAAC;IAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACtD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,uJAAuJ;IACvJ,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,CAAC;IAElD,OAAO,MAAM,CAAC;QACZ,IAAI,EAAE;YACJ,GAAG,IAAI;YACP,MAAM,EAAE,GAAG,EAAE;gBACX,qEAAqE;gBACrE,wEAAwE;gBACxE,wEAAwE;gBACxE,gEAAgE;gBAChE,WAAW;gBACX,EAAE;gBACF,mEAAmE;gBACnE,qEAAqE;gBACrE,0BAA0B;gBAC1B,EAAE;gBACF,sEAAsE;gBACtE,sEAAsE;gBACtE,OAAO;gBACP,EAAE;gBACF,8EAA8E;gBAC9E,4EAA4E;gBAC5E,OAAO,cAAc,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,CAAC,MAAM,CAAU;IACxB,OAAO,EAAE,UAAU;CACpB,CAAC;AAEF,eAAe,eAAe,CAAC","sourcesContent":["import { rootRealmGlobal } from '../globalObject';\nimport { createCrypto } from './crypto';\n\n/**\n * Create a {@link Math} object, with the same properties as the global\n * {@link Math} object, but with the {@link Math.random} method replaced.\n *\n * @returns The {@link Math} object with the {@link Math.random} method\n * replaced.\n */\nfunction createMath() {\n  // `Math` does not work with `Object.keys`, `Object.entries`, etc., so we\n  // need to create a new object with the same properties.\n  const keys = Object.getOwnPropertyNames(\n    rootRealmGlobal.Math,\n  ) as (keyof typeof Math)[];\n\n  const math = keys.reduce<Partial<Math>>((target, key) => {\n    if (key === 'random') {\n      return target;\n    }\n\n    return { ...target, [key]: rootRealmGlobal.Math[key] };\n  }, {});\n\n  // Since the math endowment requires crypto, we can leverage the crypto endowment factory to get a hardened and platform agnostic instance of webcrypto\n  const { crypto: hardenedCrypto } = createCrypto();\n\n  return harden({\n    Math: {\n      ...math,\n      random: () => {\n        // NOTE: This is not intended to be a secure replacement for the weak\n        // random number generator used by `Math.random`. It is only intended to\n        // prevent side channel attacks of `Math.random` by replacing it with an\n        // alternative implementation that is not vulnerable to the same\n        // attacks.\n        //\n        // This does not mean that this implementation is secure. It is not\n        // intended to be used in a security context, and this implementation\n        // may change at any time.\n        //\n        // To securely generate random numbers, use a cryptographically secure\n        // random number generator, such as the one provided by the Web Crypto\n        // API:\n        //\n        // - https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey\n        // - https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues\n        return hardenedCrypto.getRandomValues(new Uint32Array(1))[0] / 2 ** 32;\n      },\n    },\n  });\n}\n\nconst endowmentModule = {\n  names: ['Math'] as const,\n  factory: createMath,\n};\n\nexport default endowmentModule;\n"]}