@metamask/snaps-execution-environments 6.6.2 → 6.7.0

package/dist/common/globalObject.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"globalObject.mjs","sourceRoot":"","sources":["../../src/common/globalObject.ts"],"names":[],"mappings":"AAAA,IAAK,iBAUJ;AAVD,WAAK,iBAAiB;IACpB,yEAAyE;IACzE,cAAc;IACd,yDAAyD;IACzD,wDAAwD;IACxD,8CAAyB,CAAA;IACzB,sCAAiB,CAAA;IACjB,kCAAa,CAAA;IACb,sCAAiB,CAAA;IACjB,wDAAwD;AAC1D,CAAC,EAVI,iBAAiB,KAAjB,iBAAiB,QAUrB;AAED,IAAI,gBAAmC,CAAC;AACxC,IAAI,oBAA4B,CAAC;AAEjC,0BAA0B;AAC1B,yCAAyC;AACzC,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;IACtC,gBAAgB,GAAG,UAAU,CAAC;IAC9B,oBAAoB,GAAG,iBAAiB,CAAC,UAAU,CAAC;AACtD,CAAC;KAAM,IAAI,OAAO,IAAI,KAAK,WAAW,EAAE,CAAC;IACvC,gBAAgB,GAAG,IAAI,CAAC;IACxB,oBAAoB,GAAG,iBAAiB,CAAC,IAAI,CAAC;AAChD,CAAC;KAAM,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IACzC,gBAAgB,GAAG,MAAM,CAAC;IAC1B,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,CAAC;AAClD,CAAC;KAAM,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IACzC,gBAAgB,GAAG,MAAM,CAAC;IAC1B,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,CAAC;AAClD,CAAC;KAAM,CAAC;IACN,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAC3E,CAAC;AACD,wCAAwC;AAExC;;GAEG;AACH,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC;;GAEG;AACH,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC","sourcesContent":["enum GlobalObjectNames {\n  // The globalThis entry is incorrectly identified as shadowing the global\n  // globalThis.\n  /* eslint-disable @typescript-eslint/naming-convention */\n  // eslint-disable-next-line @typescript-eslint/no-shadow\n  globalThis = 'globalThis',\n  global = 'global',\n  self = 'self',\n  window = 'window',\n  /* eslint-enable @typescript-eslint/naming-convention */\n}\n\nlet _rootRealmGlobal: typeof globalThis;\nlet _rootRealmGlobalName: string;\n\n/* istanbul ignore next */\n/* eslint-disable no-negated-condition */\nif (typeof globalThis !== 'undefined') {\n  _rootRealmGlobal = globalThis;\n  _rootRealmGlobalName = GlobalObjectNames.globalThis;\n} else if (typeof self !== 'undefined') {\n  _rootRealmGlobal = self;\n  _rootRealmGlobalName = GlobalObjectNames.self;\n} else if (typeof window !== 'undefined') {\n  _rootRealmGlobal = window;\n  _rootRealmGlobalName = GlobalObjectNames.window;\n} else if (typeof global !== 'undefined') {\n  _rootRealmGlobal = global;\n  _rootRealmGlobalName = GlobalObjectNames.global;\n} else {\n  throw new Error('Unknown realm type; failed to identify global object.');\n}\n/* eslint-enable no-negated-condition */\n\n/**\n * A platform-agnostic alias for the root realm global object.\n */\nconst rootRealmGlobal = _rootRealmGlobal;\n\n/**\n * The string literal corresponding to the name of the root realm global object.\n */\nconst rootRealmGlobalName = _rootRealmGlobalName;\n\nexport { rootRealmGlobal, rootRealmGlobalName };\n"]}

package/dist/common/lockdown/lockdown-events.cjs

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeLockdownEvents = void 0;
+// When creating a sandbox, limitation of the events from leaking
+// sensitive objects is required. This is done by overriding own properties
+// of prototypes of all existing events.
+const utils_1 = require("@metamask/utils");
+/**
+ * Targeted Event objects and properties.
+ * Note: This is a map of the prototypes that inherit from Events with
+ * properties that are identified to leak sensitive objects.
+ * Not all browsers support all event types, so checking its existence is required.
+ */
+const targetEvents = new Map();
+if ((0, utils_1.hasProperty)(globalThis, 'UIEvent')) {
+    targetEvents.set(UIEvent.prototype, ['view']);
+}
+if ((0, utils_1.hasProperty)(globalThis, 'MutationEvent')) {
+    targetEvents.set(MutationEvent.prototype, ['relatedNode']);
+}
+if ((0, utils_1.hasProperty)(globalThis, 'MessageEvent')) {
+    targetEvents.set(MessageEvent.prototype, ['source']);
+}
+if ((0, utils_1.hasProperty)(globalThis, 'FocusEvent')) {
+    targetEvents.set(FocusEvent.prototype, ['relatedTarget']);
+}
+if ((0, utils_1.hasProperty)(globalThis, 'MouseEvent')) {
+    targetEvents.set(MouseEvent.prototype, [
+        'relatedTarget',
+        'fromElement',
+        'toElement',
+    ]);
+}
+if ((0, utils_1.hasProperty)(globalThis, 'TouchEvent')) {
+    targetEvents.set(TouchEvent.prototype, ['targetTouches', 'touches']);
+}
+if ((0, utils_1.hasProperty)(globalThis, 'Event')) {
+    targetEvents.set(Event.prototype, [
+        'target',
+        'currentTarget',
+        'srcElement',
+        'composedPath',
+    ]);
+}
+/**
+ * Attenuate Event objects by replacing its own properties.
+ */
+function executeLockdownEvents() {
+    targetEvents.forEach((properties, prototype) => {
+        for (const property of properties) {
+            Object.defineProperty(prototype, property, {
+                value: undefined,
+                configurable: false,
+                writable: false,
+            });
+        }
+    });
+}
+exports.executeLockdownEvents = executeLockdownEvents;
+//# sourceMappingURL=lockdown-events.cjs.map

package/dist/common/lockdown/lockdown-events.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown-events.cjs","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-events.ts"],"names":[],"mappings":";;;AAAA,iEAAiE;AACjE,2EAA2E;AAC3E,wCAAwC;AACxC,2CAA8C;AAE9C;;;;;GAKG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;AAC/B,IAAI,IAAA,mBAAW,EAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;IACvC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,IAAI,IAAA,mBAAW,EAAC,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC;IAC7C,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AAC7D,CAAC;AACD,IAAI,IAAA,mBAAW,EAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;IAC5C,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC;AACD,IAAI,IAAA,mBAAW,EAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;AAC5D,CAAC;AACD,IAAI,IAAA,mBAAW,EAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE;QACrC,eAAe;QACf,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AACD,IAAI,IAAA,mBAAW,EAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;AACvE,CAAC;AACD,IAAI,IAAA,mBAAW,EAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;IACrC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;QAChC,QAAQ;QACR,eAAe;QACf,YAAY;QACZ,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB;IACnC,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE;QAC7C,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE;gBACzC,KAAK,EAAE,SAAS;gBAChB,YAAY,EAAE,KAAK;gBACnB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAVD,sDAUC","sourcesContent":["// When creating a sandbox, limitation of the events from leaking\n// sensitive objects is required. This is done by overriding own properties\n// of prototypes of all existing events.\nimport { hasProperty } from '@metamask/utils';\n\n/**\n * Targeted Event objects and properties.\n * Note: This is a map of the prototypes that inherit from Events with\n * properties that are identified to leak sensitive objects.\n * Not all browsers support all event types, so checking its existence is required.\n */\nconst targetEvents = new Map();\nif (hasProperty(globalThis, 'UIEvent')) {\n  targetEvents.set(UIEvent.prototype, ['view']);\n}\nif (hasProperty(globalThis, 'MutationEvent')) {\n  targetEvents.set(MutationEvent.prototype, ['relatedNode']);\n}\nif (hasProperty(globalThis, 'MessageEvent')) {\n  targetEvents.set(MessageEvent.prototype, ['source']);\n}\nif (hasProperty(globalThis, 'FocusEvent')) {\n  targetEvents.set(FocusEvent.prototype, ['relatedTarget']);\n}\nif (hasProperty(globalThis, 'MouseEvent')) {\n  targetEvents.set(MouseEvent.prototype, [\n    'relatedTarget',\n    'fromElement',\n    'toElement',\n  ]);\n}\nif (hasProperty(globalThis, 'TouchEvent')) {\n  targetEvents.set(TouchEvent.prototype, ['targetTouches', 'touches']);\n}\nif (hasProperty(globalThis, 'Event')) {\n  targetEvents.set(Event.prototype, [\n    'target',\n    'currentTarget',\n    'srcElement',\n    'composedPath',\n  ]);\n}\n\n/**\n * Attenuate Event objects by replacing its own properties.\n */\nexport function executeLockdownEvents() {\n  targetEvents.forEach((properties, prototype) => {\n    for (const property of properties) {\n      Object.defineProperty(prototype, property, {\n        value: undefined,\n        configurable: false,\n        writable: false,\n      });\n    }\n  });\n}\n"]}

package/dist/{types/common/lockdown/lockdown-events.d.ts → common/lockdown/lockdown-events.d.cts}

@@ -2,3 +2,4 @@
  * Attenuate Event objects by replacing its own properties.
  */
 export declare function executeLockdownEvents(): void;
+//# sourceMappingURL=lockdown-events.d.cts.map

package/dist/common/lockdown/lockdown-events.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown-events.d.cts","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-events.ts"],"names":[],"mappings":"AA2CA;;GAEG;AACH,wBAAgB,qBAAqB,SAUpC"}

package/dist/common/lockdown/lockdown-events.d.mts

@@ -0,0 +1,5 @@
+/**
+ * Attenuate Event objects by replacing its own properties.
+ */
+export declare function executeLockdownEvents(): void;
+//# sourceMappingURL=lockdown-events.d.mts.map

package/dist/common/lockdown/lockdown-events.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown-events.d.mts","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-events.ts"],"names":[],"mappings":"AA2CA;;GAEG;AACH,wBAAgB,qBAAqB,SAUpC"}

package/dist/common/lockdown/lockdown-events.mjs

@@ -1,8 +1,56 @@
-import {
-  executeLockdownEvents
-} from "../../chunk-S7257EN3.mjs";
-import "../../chunk-YRZVIDCF.mjs";
-export {
-  executeLockdownEvents
-};
+// When creating a sandbox, limitation of the events from leaking
+// sensitive objects is required. This is done by overriding own properties
+// of prototypes of all existing events.
+import { hasProperty } from "@metamask/utils";
+/**
+ * Targeted Event objects and properties.
+ * Note: This is a map of the prototypes that inherit from Events with
+ * properties that are identified to leak sensitive objects.
+ * Not all browsers support all event types, so checking its existence is required.
+ */
+const targetEvents = new Map();
+if (hasProperty(globalThis, 'UIEvent')) {
+    targetEvents.set(UIEvent.prototype, ['view']);
+}
+if (hasProperty(globalThis, 'MutationEvent')) {
+    targetEvents.set(MutationEvent.prototype, ['relatedNode']);
+}
+if (hasProperty(globalThis, 'MessageEvent')) {
+    targetEvents.set(MessageEvent.prototype, ['source']);
+}
+if (hasProperty(globalThis, 'FocusEvent')) {
+    targetEvents.set(FocusEvent.prototype, ['relatedTarget']);
+}
+if (hasProperty(globalThis, 'MouseEvent')) {
+    targetEvents.set(MouseEvent.prototype, [
+        'relatedTarget',
+        'fromElement',
+        'toElement',
+    ]);
+}
+if (hasProperty(globalThis, 'TouchEvent')) {
+    targetEvents.set(TouchEvent.prototype, ['targetTouches', 'touches']);
+}
+if (hasProperty(globalThis, 'Event')) {
+    targetEvents.set(Event.prototype, [
+        'target',
+        'currentTarget',
+        'srcElement',
+        'composedPath',
+    ]);
+}
+/**
+ * Attenuate Event objects by replacing its own properties.
+ */
+export function executeLockdownEvents() {
+    targetEvents.forEach((properties, prototype) => {
+        for (const property of properties) {
+            Object.defineProperty(prototype, property, {
+                value: undefined,
+                configurable: false,
+                writable: false,
+            });
+        }
+    });
+}
 //# sourceMappingURL=lockdown-events.mjs.map

package/dist/common/lockdown/lockdown-events.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"lockdown-events.mjs","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-events.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,2EAA2E;AAC3E,wCAAwC;AACxC,OAAO,EAAE,WAAW,EAAE,wBAAwB;AAE9C;;;;;GAKG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;AAC/B,IAAI,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;IACvC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,IAAI,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC;IAC7C,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AAC7D,CAAC;AACD,IAAI,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;IAC5C,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC;AACD,IAAI,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;AAC5D,CAAC;AACD,IAAI,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE;QACrC,eAAe;QACf,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AACD,IAAI,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;AACvE,CAAC;AACD,IAAI,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;IACrC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;QAChC,QAAQ;QACR,eAAe;QACf,YAAY;QACZ,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE;QAC7C,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE;gBACzC,KAAK,EAAE,SAAS;gBAChB,YAAY,EAAE,KAAK;gBACnB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// When creating a sandbox, limitation of the events from leaking\n// sensitive objects is required. This is done by overriding own properties\n// of prototypes of all existing events.\nimport { hasProperty } from '@metamask/utils';\n\n/**\n * Targeted Event objects and properties.\n * Note: This is a map of the prototypes that inherit from Events with\n * properties that are identified to leak sensitive objects.\n * Not all browsers support all event types, so checking its existence is required.\n */\nconst targetEvents = new Map();\nif (hasProperty(globalThis, 'UIEvent')) {\n  targetEvents.set(UIEvent.prototype, ['view']);\n}\nif (hasProperty(globalThis, 'MutationEvent')) {\n  targetEvents.set(MutationEvent.prototype, ['relatedNode']);\n}\nif (hasProperty(globalThis, 'MessageEvent')) {\n  targetEvents.set(MessageEvent.prototype, ['source']);\n}\nif (hasProperty(globalThis, 'FocusEvent')) {\n  targetEvents.set(FocusEvent.prototype, ['relatedTarget']);\n}\nif (hasProperty(globalThis, 'MouseEvent')) {\n  targetEvents.set(MouseEvent.prototype, [\n    'relatedTarget',\n    'fromElement',\n    'toElement',\n  ]);\n}\nif (hasProperty(globalThis, 'TouchEvent')) {\n  targetEvents.set(TouchEvent.prototype, ['targetTouches', 'touches']);\n}\nif (hasProperty(globalThis, 'Event')) {\n  targetEvents.set(Event.prototype, [\n    'target',\n    'currentTarget',\n    'srcElement',\n    'composedPath',\n  ]);\n}\n\n/**\n * Attenuate Event objects by replacing its own properties.\n */\nexport function executeLockdownEvents() {\n  targetEvents.forEach((properties, prototype) => {\n    for (const property of properties) {\n      Object.defineProperty(prototype, property, {\n        value: undefined,\n        configurable: false,\n        writable: false,\n      });\n    }\n  });\n}\n"]}

package/dist/common/lockdown/lockdown-more.cjs

@@ -0,0 +1,89 @@
+"use strict";
+// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment
+/// <reference path="../../../../../node_modules/ses/types.d.ts" />
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeLockdownMore = void 0;
+const snaps_utils_1 = require("@metamask/snaps-utils");
+/**
+ * The SES `lockdown` function only hardens the properties enumerated by the
+ * universalPropertyNames constant specified in 'ses/src/whitelist'. This
+ * function makes all function and object properties on the start compartment
+ * global non-configurable and non-writable, unless they are already
+ * non-configurable.
+ *
+ * It is critical that this function runs at the right time during
+ * initialization, which should always be immediately after `lockdown` has been
+ * called. At the time of writing, the modifications this function makes to the
+ * runtime environment appear to be non-breaking, but that could change with
+ * the addition of dependencies, or the order of our scripts in our HTML files.
+ * Exercise caution.
+ *
+ * See inline comments for implementation details.
+ *
+ * We write this function in IIFE format to avoid polluting global scope.
+ *
+ * @throws If the lockdown failed.
+ */
+function executeLockdownMore() {
+    // Make all "object" and "function" own properties of globalThis
+    // non-configurable and non-writable, when possible.
+    // We call a property that is non-configurable and non-writable,
+    // "non-modifiable".
+    try {
+        const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);
+        // These named intrinsics are not automatically hardened by `lockdown`
+        const shouldHardenManually = new Set(['eval', 'Function']);
+        const globalProperties = new Set([
+            // universalPropertyNames is a constant added by lockdown to global scope
+            // at the time of writing, it is initialized in 'ses/src/whitelist'.
+            // These properties tend to be non-enumerable.
+            ...namedIntrinsics,
+            // TODO: Also include the named platform globals
+            // This grabs every enumerable property on globalThis.
+            // ...Object.keys(globalThis),
+        ]);
+        globalProperties.forEach((propertyName) => {
+            const descriptor = Reflect.getOwnPropertyDescriptor(globalThis, propertyName);
+            if (descriptor) {
+                if (descriptor.configurable) {
+                    // If the property on globalThis is configurable, make it
+                    // non-configurable. If it has no accessor properties, also make it
+                    // non-writable.
+                    if (hasAccessor(descriptor)) {
+                        Object.defineProperty(globalThis, propertyName, {
+                            configurable: false,
+                        });
+                    }
+                    else {
+                        Object.defineProperty(globalThis, propertyName, {
+                            configurable: false,
+                            writable: false,
+                        });
+                    }
+                }
+                if (shouldHardenManually.has(propertyName)) {
+                    harden(globalThis[propertyName]);
+                }
+            }
+        });
+    }
+    catch (error) {
+        (0, snaps_utils_1.logError)('Protecting intrinsics failed:', error);
+        throw error;
+    }
+}
+exports.executeLockdownMore = executeLockdownMore;
+/**
+ * Checks whether the given propertyName descriptor has any accessors, i.e. the
+ * properties `get` or `set`.
+ *
+ * We want to make globals non-writable, and we can't set the `writable`
+ * property and accessor properties at the same time.
+ *
+ * @param descriptor - The propertyName descriptor to check.
+ * @returns Whether the propertyName descriptor has any accessors.
+ */
+function hasAccessor(descriptor) {
+    return 'set' in descriptor || 'get' in descriptor;
+}
+//# sourceMappingURL=lockdown-more.cjs.map

package/dist/common/lockdown/lockdown-more.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown-more.cjs","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-more.ts"],"names":[],"mappings":";AAAA,qFAAqF;AACrF,mEAAmE;;;AAEnE,uDAAiD;AAEjD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,mBAAmB;IACjC,gEAAgE;IAChE,oDAAoD;IACpD,gEAAgE;IAChE,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;QAEtE,sEAAsE;QACtE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAE5E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;YAC/B,yEAAyE;YACzE,oEAAoE;YACpE,8CAA8C;YAC9C,GAAG,eAAe;YAElB,gDAAgD;YAChD,sDAAsD;YACtD,8BAA8B;SAC/B,CAAC,CAAC;QAEH,gBAAgB,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YACxC,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,CACjD,UAAU,EACV,YAAY,CACb,CAAC;YAEF,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;oBAC5B,yDAAyD;oBACzD,mEAAmE;oBACnE,gBAAgB;oBAChB,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5B,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE;4BAC9C,YAAY,EAAE,KAAK;yBACpB,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE;4BAC9C,YAAY,EAAE,KAAK;4BACnB,QAAQ,EAAE,KAAK;yBAChB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,IAAI,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC3C,MAAM,CAAE,UAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,sBAAQ,EAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAtDD,kDAsDC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,UAAe;IAClC,OAAO,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU,CAAC;AACpD,CAAC","sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment\n/// <reference path=\"../../../../../node_modules/ses/types.d.ts\" />\n\nimport { logError } from '@metamask/snaps-utils';\n\n/**\n * The SES `lockdown` function only hardens the properties enumerated by the\n * universalPropertyNames constant specified in 'ses/src/whitelist'. This\n * function makes all function and object properties on the start compartment\n * global non-configurable and non-writable, unless they are already\n * non-configurable.\n *\n * It is critical that this function runs at the right time during\n * initialization, which should always be immediately after `lockdown` has been\n * called. At the time of writing, the modifications this function makes to the\n * runtime environment appear to be non-breaking, but that could change with\n * the addition of dependencies, or the order of our scripts in our HTML files.\n * Exercise caution.\n *\n * See inline comments for implementation details.\n *\n * We write this function in IIFE format to avoid polluting global scope.\n *\n * @throws If the lockdown failed.\n */\nexport function executeLockdownMore() {\n  // Make all \"object\" and \"function\" own properties of globalThis\n  // non-configurable and non-writable, when possible.\n  // We call a property that is non-configurable and non-writable,\n  // \"non-modifiable\".\n  try {\n    const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);\n\n    // These named intrinsics are not automatically hardened by `lockdown`\n    const shouldHardenManually = new Set<symbol | string>(['eval', 'Function']);\n\n    const globalProperties = new Set([\n      // universalPropertyNames is a constant added by lockdown to global scope\n      // at the time of writing, it is initialized in 'ses/src/whitelist'.\n      // These properties tend to be non-enumerable.\n      ...namedIntrinsics,\n\n      // TODO: Also include the named platform globals\n      // This grabs every enumerable property on globalThis.\n      // ...Object.keys(globalThis),\n    ]);\n\n    globalProperties.forEach((propertyName) => {\n      const descriptor = Reflect.getOwnPropertyDescriptor(\n        globalThis,\n        propertyName,\n      );\n\n      if (descriptor) {\n        if (descriptor.configurable) {\n          // If the property on globalThis is configurable, make it\n          // non-configurable. If it has no accessor properties, also make it\n          // non-writable.\n          if (hasAccessor(descriptor)) {\n            Object.defineProperty(globalThis, propertyName, {\n              configurable: false,\n            });\n          } else {\n            Object.defineProperty(globalThis, propertyName, {\n              configurable: false,\n              writable: false,\n            });\n          }\n        }\n\n        if (shouldHardenManually.has(propertyName)) {\n          harden((globalThis as any)[propertyName]);\n        }\n      }\n    });\n  } catch (error) {\n    logError('Protecting intrinsics failed:', error);\n    throw error;\n  }\n}\n\n/**\n * Checks whether the given propertyName descriptor has any accessors, i.e. the\n * properties `get` or `set`.\n *\n * We want to make globals non-writable, and we can't set the `writable`\n * property and accessor properties at the same time.\n *\n * @param descriptor - The propertyName descriptor to check.\n * @returns Whether the propertyName descriptor has any accessors.\n */\nfunction hasAccessor(descriptor: any): boolean {\n  return 'set' in descriptor || 'get' in descriptor;\n}\n"]}

package/dist/{types/common/lockdown/lockdown-more.d.ts → common/lockdown/lockdown-more.d.cts}

@@ -20,3 +20,4 @@
  * @throws If the lockdown failed.
  */
 export declare function executeLockdownMore(): void;
+//# sourceMappingURL=lockdown-more.d.cts.map

package/dist/common/lockdown/lockdown-more.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown-more.d.cts","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-more.ts"],"names":[],"mappings":";AAKA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,SAsDlC"}

package/dist/common/lockdown/lockdown-more.d.mts

@@ -0,0 +1,23 @@
+/// <reference types="ses" />
+/**
+ * The SES `lockdown` function only hardens the properties enumerated by the
+ * universalPropertyNames constant specified in 'ses/src/whitelist'. This
+ * function makes all function and object properties on the start compartment
+ * global non-configurable and non-writable, unless they are already
+ * non-configurable.
+ *
+ * It is critical that this function runs at the right time during
+ * initialization, which should always be immediately after `lockdown` has been
+ * called. At the time of writing, the modifications this function makes to the
+ * runtime environment appear to be non-breaking, but that could change with
+ * the addition of dependencies, or the order of our scripts in our HTML files.
+ * Exercise caution.
+ *
+ * See inline comments for implementation details.
+ *
+ * We write this function in IIFE format to avoid polluting global scope.
+ *
+ * @throws If the lockdown failed.
+ */
+export declare function executeLockdownMore(): void;
+//# sourceMappingURL=lockdown-more.d.mts.map

package/dist/common/lockdown/lockdown-more.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown-more.d.mts","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-more.ts"],"names":[],"mappings":";AAKA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,SAsDlC"}

package/dist/common/lockdown/lockdown-more.mjs

@@ -1,8 +1,85 @@
-import {
-  executeLockdownMore
-} from "../../chunk-MXNMMTJW.mjs";
-import "../../chunk-YRZVIDCF.mjs";
-export {
-  executeLockdownMore
-};
+// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment
+/// <reference path="../../../../../node_modules/ses/types.d.ts" />
+import { logError } from "@metamask/snaps-utils";
+/**
+ * The SES `lockdown` function only hardens the properties enumerated by the
+ * universalPropertyNames constant specified in 'ses/src/whitelist'. This
+ * function makes all function and object properties on the start compartment
+ * global non-configurable and non-writable, unless they are already
+ * non-configurable.
+ *
+ * It is critical that this function runs at the right time during
+ * initialization, which should always be immediately after `lockdown` has been
+ * called. At the time of writing, the modifications this function makes to the
+ * runtime environment appear to be non-breaking, but that could change with
+ * the addition of dependencies, or the order of our scripts in our HTML files.
+ * Exercise caution.
+ *
+ * See inline comments for implementation details.
+ *
+ * We write this function in IIFE format to avoid polluting global scope.
+ *
+ * @throws If the lockdown failed.
+ */
+export function executeLockdownMore() {
+    // Make all "object" and "function" own properties of globalThis
+    // non-configurable and non-writable, when possible.
+    // We call a property that is non-configurable and non-writable,
+    // "non-modifiable".
+    try {
+        const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);
+        // These named intrinsics are not automatically hardened by `lockdown`
+        const shouldHardenManually = new Set(['eval', 'Function']);
+        const globalProperties = new Set([
+            // universalPropertyNames is a constant added by lockdown to global scope
+            // at the time of writing, it is initialized in 'ses/src/whitelist'.
+            // These properties tend to be non-enumerable.
+            ...namedIntrinsics,
+            // TODO: Also include the named platform globals
+            // This grabs every enumerable property on globalThis.
+            // ...Object.keys(globalThis),
+        ]);
+        globalProperties.forEach((propertyName) => {
+            const descriptor = Reflect.getOwnPropertyDescriptor(globalThis, propertyName);
+            if (descriptor) {
+                if (descriptor.configurable) {
+                    // If the property on globalThis is configurable, make it
+                    // non-configurable. If it has no accessor properties, also make it
+                    // non-writable.
+                    if (hasAccessor(descriptor)) {
+                        Object.defineProperty(globalThis, propertyName, {
+                            configurable: false,
+                        });
+                    }
+                    else {
+                        Object.defineProperty(globalThis, propertyName, {
+                            configurable: false,
+                            writable: false,
+                        });
+                    }
+                }
+                if (shouldHardenManually.has(propertyName)) {
+                    harden(globalThis[propertyName]);
+                }
+            }
+        });
+    }
+    catch (error) {
+        logError('Protecting intrinsics failed:', error);
+        throw error;
+    }
+}
+/**
+ * Checks whether the given propertyName descriptor has any accessors, i.e. the
+ * properties `get` or `set`.
+ *
+ * We want to make globals non-writable, and we can't set the `writable`
+ * property and accessor properties at the same time.
+ *
+ * @param descriptor - The propertyName descriptor to check.
+ * @returns Whether the propertyName descriptor has any accessors.
+ */
+function hasAccessor(descriptor) {
+    return 'set' in descriptor || 'get' in descriptor;
+}
 //# sourceMappingURL=lockdown-more.mjs.map

package/dist/common/lockdown/lockdown-more.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"lockdown-more.mjs","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown-more.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,mEAAmE;AAEnE,OAAO,EAAE,QAAQ,EAAE,8BAA8B;AAEjD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mBAAmB;IACjC,gEAAgE;IAChE,oDAAoD;IACpD,gEAAgE;IAChE,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;QAEtE,sEAAsE;QACtE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAE5E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;YAC/B,yEAAyE;YACzE,oEAAoE;YACpE,8CAA8C;YAC9C,GAAG,eAAe;YAElB,gDAAgD;YAChD,sDAAsD;YACtD,8BAA8B;SAC/B,CAAC,CAAC;QAEH,gBAAgB,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YACxC,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,CACjD,UAAU,EACV,YAAY,CACb,CAAC;YAEF,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;oBAC5B,yDAAyD;oBACzD,mEAAmE;oBACnE,gBAAgB;oBAChB,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5B,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE;4BAC9C,YAAY,EAAE,KAAK;yBACpB,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE;4BAC9C,YAAY,EAAE,KAAK;4BACnB,QAAQ,EAAE,KAAK;yBAChB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,IAAI,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC3C,MAAM,CAAE,UAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,UAAe;IAClC,OAAO,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU,CAAC;AACpD,CAAC","sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment\n/// <reference path=\"../../../../../node_modules/ses/types.d.ts\" />\n\nimport { logError } from '@metamask/snaps-utils';\n\n/**\n * The SES `lockdown` function only hardens the properties enumerated by the\n * universalPropertyNames constant specified in 'ses/src/whitelist'. This\n * function makes all function and object properties on the start compartment\n * global non-configurable and non-writable, unless they are already\n * non-configurable.\n *\n * It is critical that this function runs at the right time during\n * initialization, which should always be immediately after `lockdown` has been\n * called. At the time of writing, the modifications this function makes to the\n * runtime environment appear to be non-breaking, but that could change with\n * the addition of dependencies, or the order of our scripts in our HTML files.\n * Exercise caution.\n *\n * See inline comments for implementation details.\n *\n * We write this function in IIFE format to avoid polluting global scope.\n *\n * @throws If the lockdown failed.\n */\nexport function executeLockdownMore() {\n  // Make all \"object\" and \"function\" own properties of globalThis\n  // non-configurable and non-writable, when possible.\n  // We call a property that is non-configurable and non-writable,\n  // \"non-modifiable\".\n  try {\n    const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);\n\n    // These named intrinsics are not automatically hardened by `lockdown`\n    const shouldHardenManually = new Set<symbol | string>(['eval', 'Function']);\n\n    const globalProperties = new Set([\n      // universalPropertyNames is a constant added by lockdown to global scope\n      // at the time of writing, it is initialized in 'ses/src/whitelist'.\n      // These properties tend to be non-enumerable.\n      ...namedIntrinsics,\n\n      // TODO: Also include the named platform globals\n      // This grabs every enumerable property on globalThis.\n      // ...Object.keys(globalThis),\n    ]);\n\n    globalProperties.forEach((propertyName) => {\n      const descriptor = Reflect.getOwnPropertyDescriptor(\n        globalThis,\n        propertyName,\n      );\n\n      if (descriptor) {\n        if (descriptor.configurable) {\n          // If the property on globalThis is configurable, make it\n          // non-configurable. If it has no accessor properties, also make it\n          // non-writable.\n          if (hasAccessor(descriptor)) {\n            Object.defineProperty(globalThis, propertyName, {\n              configurable: false,\n            });\n          } else {\n            Object.defineProperty(globalThis, propertyName, {\n              configurable: false,\n              writable: false,\n            });\n          }\n        }\n\n        if (shouldHardenManually.has(propertyName)) {\n          harden((globalThis as any)[propertyName]);\n        }\n      }\n    });\n  } catch (error) {\n    logError('Protecting intrinsics failed:', error);\n    throw error;\n  }\n}\n\n/**\n * Checks whether the given propertyName descriptor has any accessors, i.e. the\n * properties `get` or `set`.\n *\n * We want to make globals non-writable, and we can't set the `writable`\n * property and accessor properties at the same time.\n *\n * @param descriptor - The propertyName descriptor to check.\n * @returns Whether the propertyName descriptor has any accessors.\n */\nfunction hasAccessor(descriptor: any): boolean {\n  return 'set' in descriptor || 'get' in descriptor;\n}\n"]}

package/dist/common/lockdown/lockdown.cjs

@@ -0,0 +1,29 @@
+"use strict";
+// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment
+/// <reference path="../../../../../node_modules/ses/types.d.ts" />
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeLockdown = void 0;
+const snaps_utils_1 = require("@metamask/snaps-utils");
+/**
+ * Execute SES lockdown in the current context, i.e., the current iframe.
+ *
+ * @throws If the SES lockdown failed.
+ */
+function executeLockdown() {
+    try {
+        lockdown({
+            consoleTaming: 'unsafe',
+            errorTaming: 'unsafe',
+            mathTaming: 'unsafe',
+            dateTaming: 'unsafe',
+            overrideTaming: 'severe',
+        });
+    }
+    catch (error) {
+        // If the `lockdown` call throws an exception, it should not be able to continue
+        (0, snaps_utils_1.logError)('Lockdown failed:', error);
+        throw error;
+    }
+}
+exports.executeLockdown = executeLockdown;
+//# sourceMappingURL=lockdown.cjs.map

package/dist/common/lockdown/lockdown.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown.cjs","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown.ts"],"names":[],"mappings":";AAAA,qFAAqF;AACrF,mEAAmE;;;AAEnE,uDAAiD;AAEjD;;;;GAIG;AACH,SAAgB,eAAe;IAC7B,IAAI,CAAC;QACH,QAAQ,CAAC;YACP,aAAa,EAAE,QAAQ;YACvB,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gFAAgF;QAChF,IAAA,sBAAQ,EAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAdD,0CAcC","sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment\n/// <reference path=\"../../../../../node_modules/ses/types.d.ts\" />\n\nimport { logError } from '@metamask/snaps-utils';\n\n/**\n * Execute SES lockdown in the current context, i.e., the current iframe.\n *\n * @throws If the SES lockdown failed.\n */\nexport function executeLockdown() {\n  try {\n    lockdown({\n      consoleTaming: 'unsafe',\n      errorTaming: 'unsafe',\n      mathTaming: 'unsafe',\n      dateTaming: 'unsafe',\n      overrideTaming: 'severe',\n    });\n  } catch (error) {\n    // If the `lockdown` call throws an exception, it should not be able to continue\n    logError('Lockdown failed:', error);\n    throw error;\n  }\n}\n"]}

package/dist/{types/common/lockdown/lockdown.d.ts → common/lockdown/lockdown.d.cts}

@@ -5,3 +5,4 @@
  * @throws If the SES lockdown failed.
  */
 export declare function executeLockdown(): void;
+//# sourceMappingURL=lockdown.d.cts.map

package/dist/common/lockdown/lockdown.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown.d.cts","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown.ts"],"names":[],"mappings":";AAKA;;;;GAIG;AACH,wBAAgB,eAAe,SAc9B"}

package/dist/common/lockdown/lockdown.d.mts

@@ -0,0 +1,8 @@
+/// <reference types="ses" />
+/**
+ * Execute SES lockdown in the current context, i.e., the current iframe.
+ *
+ * @throws If the SES lockdown failed.
+ */
+export declare function executeLockdown(): void;
+//# sourceMappingURL=lockdown.d.mts.map

package/dist/common/lockdown/lockdown.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockdown.d.mts","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown.ts"],"names":[],"mappings":";AAKA;;;;GAIG;AACH,wBAAgB,eAAe,SAc9B"}

package/dist/common/lockdown/lockdown.mjs

@@ -1,22 +1,25 @@
-import "../../chunk-YRZVIDCF.mjs";
-
-// src/common/lockdown/lockdown.ts
+// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment
+/// <reference path="../../../../../node_modules/ses/types.d.ts" />
 import { logError } from "@metamask/snaps-utils";
-function executeLockdown() {
-  try {
-    lockdown({
-      consoleTaming: "unsafe",
-      errorTaming: "unsafe",
-      mathTaming: "unsafe",
-      dateTaming: "unsafe",
-      overrideTaming: "severe"
-    });
-  } catch (error) {
-    logError("Lockdown failed:", error);
-    throw error;
-  }
+/**
+ * Execute SES lockdown in the current context, i.e., the current iframe.
+ *
+ * @throws If the SES lockdown failed.
+ */
+export function executeLockdown() {
+    try {
+        lockdown({
+            consoleTaming: 'unsafe',
+            errorTaming: 'unsafe',
+            mathTaming: 'unsafe',
+            dateTaming: 'unsafe',
+            overrideTaming: 'severe',
+        });
+    }
+    catch (error) {
+        // If the `lockdown` call throws an exception, it should not be able to continue
+        logError('Lockdown failed:', error);
+        throw error;
+    }
 }
-export {
-  executeLockdown
-};
 //# sourceMappingURL=lockdown.mjs.map

package/dist/common/lockdown/lockdown.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/common/lockdown/lockdown.ts"],"sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment\n/// <reference path=\"../../../../../node_modules/ses/types.d.ts\" />\n\nimport { logError } from '@metamask/snaps-utils';\n\n/**\n * Execute SES lockdown in the current context, i.e., the current iframe.\n *\n * @throws If the SES lockdown failed.\n */\nexport function executeLockdown() {\n  try {\n    lockdown({\n      consoleTaming: 'unsafe',\n      errorTaming: 'unsafe',\n      mathTaming: 'unsafe',\n      dateTaming: 'unsafe',\n      overrideTaming: 'severe',\n    });\n  } catch (error) {\n    // If the `lockdown` call throws an exception, it should not be able to continue\n    logError('Lockdown failed:', error);\n    throw error;\n  }\n}\n"],"mappings":";;;AAGA,SAAS,gBAAgB;AAOlB,SAAS,kBAAkB;AAChC,MAAI;AACF,aAAS;AAAA,MACP,eAAe;AAAA,MACf,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,aAAS,oBAAoB,KAAK;AAClC,UAAM;AAAA,EACR;AACF;","names":[]}
+{"version":3,"file":"lockdown.mjs","sourceRoot":"","sources":["../../../src/common/lockdown/lockdown.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,mEAAmE;AAEnE,OAAO,EAAE,QAAQ,EAAE,8BAA8B;AAEjD;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,QAAQ,CAAC;YACP,aAAa,EAAE,QAAQ;YACvB,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gFAAgF;QAChF,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference, spaced-comment\n/// <reference path=\"../../../../../node_modules/ses/types.d.ts\" />\n\nimport { logError } from '@metamask/snaps-utils';\n\n/**\n * Execute SES lockdown in the current context, i.e., the current iframe.\n *\n * @throws If the SES lockdown failed.\n */\nexport function executeLockdown() {\n  try {\n    lockdown({\n      consoleTaming: 'unsafe',\n      errorTaming: 'unsafe',\n      mathTaming: 'unsafe',\n      dateTaming: 'unsafe',\n      overrideTaming: 'severe',\n    });\n  } catch (error) {\n    // If the `lockdown` call throws an exception, it should not be able to continue\n    logError('Lockdown failed:', error);\n    throw error;\n  }\n}\n"]}

package/dist/common/sortParams.cjs

@@ -0,0 +1,35 @@
+"use strict";
+// original source sortParamKeys from: https://github.com/etclabscore/sig.tools/blob/master/src/postMessageServer/postMessageServer.ts#L75-L77
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sortParamKeys = void 0;
+/**
+ * Deterministically sort JSON-RPC parameter keys. This makes it possible to
+ * support both arrays and objects as parameters. Objects are sorted and turned
+ * into arrays, for easier consumption by the snap.
+ *
+ * The order is defined by the `method` parameter.
+ *
+ * @param methodParams - The parameters of the JSON-RPC method, which
+ * determines the ordering for the parameters.
+ * @param params - JSON-RPC parameters as object or array.
+ * @returns The values for the sorted keys. If `params` is not provided, this
+ * returns an empty array. If `params` is an array, this returns the same
+ * `params`.
+ */
+const sortParamKeys = (methodParams, params) => {
+    if (!params) {
+        return [];
+    }
+    if (params instanceof Array) {
+        return params;
+    }
+    const methodParamsOrder = methodParams.reduce((paramsOrderObj, paramsName, i) => ({
+        ...paramsOrderObj,
+        [paramsName]: i,
+    }), {});
+    return Object.entries(params)
+        .sort(([name1, _1], [name2, _2]) => methodParamsOrder[name1] - methodParamsOrder[name2])
+        .map(([_, val]) => val);
+};
+exports.sortParamKeys = sortParamKeys;
+//# sourceMappingURL=sortParams.cjs.map

package/dist/common/sortParams.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sortParams.cjs","sourceRoot":"","sources":["../../src/common/sortParams.ts"],"names":[],"mappings":";AAAA,8IAA8I;;;AAI9I;;;;;;;;;;;;;GAaG;AACI,MAAM,aAAa,GAAG,CAC3B,YAAsB,EACtB,MAAsB,EACtB,EAAE;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,iBAAiB,GAA4B,YAAY,CAAC,MAAM,CACpE,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,GAAG,cAAc;QACjB,CAAC,UAAU,CAAC,EAAE,CAAC;KAChB,CAAC,EACF,EAAE,CACH,CAAC;IAEF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,IAAI,CACH,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAC3B,iBAAiB,CAAC,KAAK,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CACtD;SACA,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC,CAAC;AA1BW,QAAA,aAAa,iBA0BxB","sourcesContent":["// original source sortParamKeys from: https://github.com/etclabscore/sig.tools/blob/master/src/postMessageServer/postMessageServer.ts#L75-L77\n\nimport type { JsonRpcParams } from '@metamask/utils';\n\n/**\n * Deterministically sort JSON-RPC parameter keys. This makes it possible to\n * support both arrays and objects as parameters. Objects are sorted and turned\n * into arrays, for easier consumption by the snap.\n *\n * The order is defined by the `method` parameter.\n *\n * @param methodParams - The parameters of the JSON-RPC method, which\n * determines the ordering for the parameters.\n * @param params - JSON-RPC parameters as object or array.\n * @returns The values for the sorted keys. If `params` is not provided, this\n * returns an empty array. If `params` is an array, this returns the same\n * `params`.\n */\nexport const sortParamKeys = (\n  methodParams: string[],\n  params?: JsonRpcParams,\n) => {\n  if (!params) {\n    return [];\n  }\n\n  if (params instanceof Array) {\n    return params;\n  }\n\n  const methodParamsOrder: { [k: string]: number } = methodParams.reduce(\n    (paramsOrderObj, paramsName, i) => ({\n      ...paramsOrderObj,\n      [paramsName]: i,\n    }),\n    {},\n  );\n\n  return Object.entries(params)\n    .sort(\n      ([name1, _1], [name2, _2]) =>\n        methodParamsOrder[name1] - methodParamsOrder[name2],\n    )\n    .map(([_, val]) => val);\n};\n"]}

package/dist/{types/common/sortParams.d.ts → common/sortParams.d.cts}

@@ -1,4 +1,4 @@
-import type { JsonRpcParams } from '@metamask/utils';
+import type { JsonRpcParams } from "@metamask/utils";
 /**
  * Deterministically sort JSON-RPC parameter keys. This makes it possible to
  * support both arrays and objects as parameters. Objects are sorted and turned
@@ -14,3 +14,4 @@ import type { JsonRpcParams } from '@metamask/utils';
  * `params`.
  */
 export declare const sortParamKeys: (methodParams: string[], params?: JsonRpcParams) => import("@metamask/utils").Json[];
+//# sourceMappingURL=sortParams.d.cts.map

package/dist/common/sortParams.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sortParams.d.cts","sourceRoot":"","sources":["../../src/common/sortParams.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,wBAAwB;AAErD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa,iBACV,MAAM,EAAE,WACb,aAAa,qCAwBvB,CAAC"}

package/dist/common/sortParams.d.mts

@@ -0,0 +1,17 @@
+import type { JsonRpcParams } from "@metamask/utils";
+/**
+ * Deterministically sort JSON-RPC parameter keys. This makes it possible to
+ * support both arrays and objects as parameters. Objects are sorted and turned
+ * into arrays, for easier consumption by the snap.
+ *
+ * The order is defined by the `method` parameter.
+ *
+ * @param methodParams - The parameters of the JSON-RPC method, which
+ * determines the ordering for the parameters.
+ * @param params - JSON-RPC parameters as object or array.
+ * @returns The values for the sorted keys. If `params` is not provided, this
+ * returns an empty array. If `params` is an array, this returns the same
+ * `params`.
+ */
+export declare const sortParamKeys: (methodParams: string[], params?: JsonRpcParams) => import("@metamask/utils").Json[];
+//# sourceMappingURL=sortParams.d.mts.map

package/dist/common/sortParams.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sortParams.d.mts","sourceRoot":"","sources":["../../src/common/sortParams.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,wBAAwB;AAErD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa,iBACV,MAAM,EAAE,WACb,aAAa,qCAwBvB,CAAC"}