@metamask/snaps-rpc-methods 7.0.1 → 8.0.0

package/CHANGELOG.md

@@ -6,6 +6,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [8.0.0]
+### Changed
+- **BREAKING:** Refactor to support changes to encryption ([#2316](https://github.com/MetaMask/snaps/pull/2316))
+  - No longer expects `encrypt` or `decrypt`, instead expects `updateSnapState` and `getSnapState` to be asynchronous
+
+## [7.0.2]
+### Changed
+- Bump MetaMask dependencies ([#2270](https://github.com/MetaMask/snaps/pull/2270))
+- Bump @metamask/json-rpc-engine from 7.3.2 to 7.3.3 ([#2247](https://github.com/MetaMask/snaps/pull/2247))
+
 ## [7.0.1]
 ### Fixed
 - Fix minor build configuration problems ([#2220](https://github.com/MetaMask/snaps/pull/2220))
@@ -120,7 +130,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - The version of the package no longer needs to match the version of all other
     MetaMask Snaps packages.
 
-[Unreleased]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-rpc-methods@7.0.1...HEAD
+[Unreleased]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-rpc-methods@8.0.0...HEAD
+[8.0.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-rpc-methods@7.0.2...@metamask/snaps-rpc-methods@8.0.0
+[7.0.2]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-rpc-methods@7.0.1...@metamask/snaps-rpc-methods@7.0.2
 [7.0.1]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-rpc-methods@7.0.0...@metamask/snaps-rpc-methods@7.0.1
 [7.0.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-rpc-methods@6.0.0...@metamask/snaps-rpc-methods@7.0.0
 [6.0.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-rpc-methods@5.0.0...@metamask/snaps-rpc-methods@6.0.0

package/dist/{chunk-AKRFLGOS.mjs → chunk-AMBEX4N4.mjs}

@@ -1,6 +1,6 @@
 import {
   restrictedMethodPermissionBuilders
-} from "./chunk-3S7DJI4I.mjs";
+} from "./chunk-SU6KOIVB.mjs";
 import {
   caveatMappers
 } from "./chunk-Y4LNTDZ2.mjs";
@@ -56,4 +56,4 @@ export {
   buildSnapEndowmentSpecifications,
   buildSnapRestrictedMethodSpecifications
 };
-//# sourceMappingURL=chunk-AKRFLGOS.mjs.map
+//# sourceMappingURL=chunk-AMBEX4N4.mjs.map

package/dist/{chunk-FBOZCV3C.js → chunk-EGKFC56F.js}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkLVTN25J2js = require('./chunk-LVTN25J2.js');
+var _chunkRZXF4KSRjs = require('./chunk-RZXF4KSR.js');
 
 
 var _chunkAYJK7MSHjs = require('./chunk-AYJK7MSH.js');
@@ -38,7 +38,7 @@ var buildSnapEndowmentSpecifications = (excludedEndowments) => Object.values(_ch
   }
   return allSpecifications;
 }, {});
-var buildSnapRestrictedMethodSpecifications = (excludedPermissions, hooks) => Object.values(_chunkLVTN25J2js.restrictedMethodPermissionBuilders).reduce((specifications, { targetName, specificationBuilder, methodHooks }) => {
+var buildSnapRestrictedMethodSpecifications = (excludedPermissions, hooks) => Object.values(_chunkRZXF4KSRjs.restrictedMethodPermissionBuilders).reduce((specifications, { targetName, specificationBuilder, methodHooks }) => {
   if (!excludedPermissions.includes(targetName)) {
     specifications[targetName] = specificationBuilder({
       // @ts-expect-error The selectHooks type is wonky
@@ -56,4 +56,4 @@ var buildSnapRestrictedMethodSpecifications = (excludedPermissions, hooks) => Ob
 
 
 exports.processSnapPermissions = processSnapPermissions; exports.buildSnapEndowmentSpecifications = buildSnapEndowmentSpecifications; exports.buildSnapRestrictedMethodSpecifications = buildSnapRestrictedMethodSpecifications;
-//# sourceMappingURL=chunk-FBOZCV3C.js.map
+//# sourceMappingURL=chunk-EGKFC56F.js.map

package/dist/{chunk-7NBRKDKJ.mjs → chunk-NESDQ4PF.mjs}

@@ -6,8 +6,8 @@ import {
 import { PermissionType, SubjectType } from "@metamask/permission-controller";
 import { rpcErrors } from "@metamask/rpc-errors";
 import { ManageStateOperation } from "@metamask/snaps-sdk";
-import { STATE_ENCRYPTION_MAGIC_VALUE, parseJson } from "@metamask/snaps-utils";
-import { isObject, getJsonSize, assert, isValidJson } from "@metamask/utils";
+import { STATE_ENCRYPTION_MAGIC_VALUE } from "@metamask/snaps-utils";
+import { isObject, getJsonSize } from "@metamask/utils";
 var STATE_ENCRYPTION_SALT = "snap_manageState encryption";
 var methodName = "snap_manageState";
 var specificationBuilder = ({
@@ -23,13 +23,10 @@ var specificationBuilder = ({
   };
 };
 var methodHooks = {
-  getMnemonic: true,
   getUnlockPromise: true,
   clearSnapState: true,
   getSnapState: true,
-  updateSnapState: true,
-  encrypt: true,
-  decrypt: true
+  updateSnapState: true
 };
 var manageStateBuilder = Object.freeze({
   targetName: methodName,
@@ -37,7 +34,7 @@ var manageStateBuilder = Object.freeze({
   methodHooks
 });
 var STORAGE_SIZE_LIMIT = 104857600;
-async function getEncryptionKey({
+async function getEncryptionEntropy({
   mnemonicPhrase,
   snapId
 }) {
@@ -48,38 +45,11 @@ async function getEncryptionKey({
     magic: STATE_ENCRYPTION_MAGIC_VALUE
   });
 }
-async function encryptState({
-  state,
-  encryptFunction,
-  ...keyArgs
-}) {
-  const encryptionKey = await getEncryptionKey(keyArgs);
-  return await encryptFunction(encryptionKey, state);
-}
-async function decryptState({
-  state,
-  decryptFunction,
-  ...keyArgs
-}) {
-  try {
-    const encryptionKey = await getEncryptionKey(keyArgs);
-    const decryptedState = await decryptFunction(encryptionKey, state);
-    assert(isValidJson(decryptedState));
-    return decryptedState;
-  } catch {
-    throw rpcErrors.internal({
-      message: "Failed to decrypt snap state, the state must be corrupted."
-    });
-  }
-}
 function getManageStateImplementation({
-  getMnemonic,
   getUnlockPromise,
   clearSnapState,
   getSnapState,
-  updateSnapState,
-  encrypt,
-  decrypt
+  updateSnapState
 }) {
   return async function manageState(options) {
     const {
@@ -97,25 +67,10 @@ function getManageStateImplementation({
         clearSnapState(origin, shouldEncrypt);
         return null;
       case ManageStateOperation.GetState: {
-        const state = getSnapState(origin, shouldEncrypt);
-        if (state === null) {
-          return state;
-        }
-        return shouldEncrypt ? await decryptState({
-          state,
-          decryptFunction: decrypt,
-          mnemonicPhrase: await getMnemonic(),
-          snapId: origin
-        }) : parseJson(state);
+        return await getSnapState(origin, shouldEncrypt);
       }
       case ManageStateOperation.UpdateState: {
-        const finalizedState = shouldEncrypt ? await encryptState({
-          state: validatedParams.newState,
-          encryptFunction: encrypt,
-          mnemonicPhrase: await getMnemonic(),
-          snapId: origin
-        }) : JSON.stringify(validatedParams.newState);
-        updateSnapState(origin, finalizedState, shouldEncrypt);
+        await updateSnapState(origin, validatedParams.newState, shouldEncrypt);
         return null;
       }
       default:
@@ -181,8 +136,8 @@ export {
   specificationBuilder,
   manageStateBuilder,
   STORAGE_SIZE_LIMIT,
-  getEncryptionKey,
+  getEncryptionEntropy,
   getManageStateImplementation,
   getValidatedParams
 };
-//# sourceMappingURL=chunk-7NBRKDKJ.mjs.map
+//# sourceMappingURL=chunk-NESDQ4PF.mjs.map

package/dist/chunk-NESDQ4PF.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/restricted/manageState.ts"],"sourcesContent":["import type {\n  PermissionSpecificationBuilder,\n  RestrictedMethodOptions,\n  ValidPermissionSpecification,\n} from '@metamask/permission-controller';\nimport { PermissionType, SubjectType } from '@metamask/permission-controller';\nimport { rpcErrors } from '@metamask/rpc-errors';\nimport type { ManageStateParams, ManageStateResult } from '@metamask/snaps-sdk';\nimport { ManageStateOperation } from '@metamask/snaps-sdk';\nimport { STATE_ENCRYPTION_MAGIC_VALUE } from '@metamask/snaps-utils';\nimport type { Json, NonEmptyArray } from '@metamask/utils';\nimport { isObject, getJsonSize } from '@metamask/utils';\n\nimport type { MethodHooksObject } from '../utils';\nimport { deriveEntropy } from '../utils';\n\n// The salt used for SIP-6-based entropy derivation.\nexport const STATE_ENCRYPTION_SALT = 'snap_manageState encryption';\n\nconst methodName = 'snap_manageState';\n\nexport type ManageStateMethodHooks = {\n  /**\n   * Waits for the extension to be unlocked.\n   *\n   * @returns A promise that resolves once the extension is unlocked.\n   */\n  getUnlockPromise: (shouldShowUnlockRequest: boolean) => Promise<void>;\n\n  /**\n   * A function that clears the state of the requesting Snap.\n   */\n  clearSnapState: (snapId: string, encrypted: boolean) => void;\n\n  /**\n   * A function that gets the encrypted state of the requesting Snap.\n   *\n   * @returns The current state of the Snap.\n   */\n  getSnapState: (\n    snapId: string,\n    encrypted: boolean,\n  ) => Promise<Record<string, Json>>;\n\n  /**\n   * A function that updates the state of the requesting Snap.\n   *\n   * @param newState - The new state of the Snap.\n   */\n  updateSnapState: (\n    snapId: string,\n    newState: Record<string, Json>,\n    encrypted: boolean,\n  ) => Promise<void>;\n};\n\ntype ManageStateSpecificationBuilderOptions = {\n  allowedCaveats?: Readonly<NonEmptyArray<string>> | null;\n  methodHooks: ManageStateMethodHooks;\n};\n\ntype ManageStateSpecification = ValidPermissionSpecification<{\n  permissionType: PermissionType.RestrictedMethod;\n  targetName: typeof methodName;\n  methodImplementation: ReturnType<typeof getManageStateImplementation>;\n  allowedCaveats: Readonly<NonEmptyArray<string>> | null;\n}>;\n\n/**\n * The specification builder for the `snap_manageState` permission.\n * `snap_manageState` lets the Snap store and manage some of its state on\n * your device.\n *\n * @param options - The specification builder options.\n * @param options.allowedCaveats - The optional allowed caveats for the permission.\n * @param options.methodHooks - The RPC method hooks needed by the method implementation.\n * @returns The specification for the `snap_manageState` permission.\n */\nexport const specificationBuilder: PermissionSpecificationBuilder<\n  PermissionType.RestrictedMethod,\n  ManageStateSpecificationBuilderOptions,\n  ManageStateSpecification\n> = ({\n  allowedCaveats = null,\n  methodHooks,\n}: ManageStateSpecificationBuilderOptions) => {\n  return {\n    permissionType: PermissionType.RestrictedMethod,\n    targetName: methodName,\n    allowedCaveats,\n    methodImplementation: getManageStateImplementation(methodHooks),\n    subjectTypes: [SubjectType.Snap],\n  };\n};\n\nconst methodHooks: MethodHooksObject<ManageStateMethodHooks> = {\n  getUnlockPromise: true,\n  clearSnapState: true,\n  getSnapState: true,\n  updateSnapState: true,\n};\n\nexport const manageStateBuilder = Object.freeze({\n  targetName: methodName,\n  specificationBuilder,\n  methodHooks,\n} as const);\n\nexport const STORAGE_SIZE_LIMIT = 104857600; // In bytes (100MB)\n\ntype GetEncryptionKeyArgs = {\n  snapId: string;\n  mnemonicPhrase: Uint8Array;\n};\n\n/**\n * Get a deterministic encryption key to use for encrypting and decrypting the\n * state.\n *\n * This key should only be used for state encryption using `snap_manageState`.\n * To get other encryption keys, a different salt can be used.\n *\n * @param args - The encryption key args.\n * @param args.snapId - The ID of the snap to get the encryption key for.\n * @param args.mnemonicPhrase - The mnemonic phrase to derive the encryption key\n * from.\n * @returns The state encryption key.\n */\nexport async function getEncryptionEntropy({\n  mnemonicPhrase,\n  snapId,\n}: GetEncryptionKeyArgs) {\n  return await deriveEntropy({\n    mnemonicPhrase,\n    input: snapId,\n    salt: STATE_ENCRYPTION_SALT,\n    magic: STATE_ENCRYPTION_MAGIC_VALUE,\n  });\n}\n\n/**\n * Builds the method implementation for `snap_manageState`.\n *\n * @param hooks - The RPC method hooks.\n * @param hooks.clearSnapState - A function that clears the state stored for a\n * snap.\n * @param hooks.getSnapState - A function that fetches the persisted decrypted\n * state for a snap.\n * @param hooks.updateSnapState - A function that updates the state stored for a\n * snap.\n * @param hooks.getUnlockPromise - A function that resolves once the MetaMask\n * extension is unlocked and prompts the user to unlock their MetaMask if it is\n * locked.\n * @returns The method implementation which either returns `null` for a\n * successful state update/deletion or returns the decrypted state.\n * @throws If the params are invalid.\n */\nexport function getManageStateImplementation({\n  getUnlockPromise,\n  clearSnapState,\n  getSnapState,\n  updateSnapState,\n}: ManageStateMethodHooks) {\n  return async function manageState(\n    options: RestrictedMethodOptions<ManageStateParams>,\n  ): Promise<ManageStateResult> {\n    const {\n      params = {},\n      method,\n      context: { origin },\n    } = options;\n    const validatedParams = getValidatedParams(params, method);\n\n    // If the encrypted param is undefined or null we default to true.\n    const shouldEncrypt = validatedParams.encrypted ?? true;\n\n    // We only need to prompt the user when the mnemonic is needed\n    // which it isn't for the clear operation or unencrypted storage.\n    if (\n      shouldEncrypt &&\n      validatedParams.operation !== ManageStateOperation.ClearState\n    ) {\n      await getUnlockPromise(true);\n    }\n\n    switch (validatedParams.operation) {\n      case ManageStateOperation.ClearState:\n        clearSnapState(origin, shouldEncrypt);\n        return null;\n\n      case ManageStateOperation.GetState: {\n        return await getSnapState(origin, shouldEncrypt);\n      }\n\n      case ManageStateOperation.UpdateState: {\n        await updateSnapState(origin, validatedParams.newState, shouldEncrypt);\n        return null;\n      }\n\n      default:\n        throw rpcErrors.invalidParams(\n          `Invalid ${method} operation: \"${\n            validatedParams.operation as string\n          }\"`,\n        );\n    }\n  };\n}\n\n/**\n * Validates the manageState method `params` and returns them cast to the correct\n * type. Throws if validation fails.\n *\n * @param params - The unvalidated params object from the method request.\n * @param method - RPC method name used for debugging errors.\n * @param storageSizeLimit - Maximum allowed size (in bytes) of a new state object.\n * @returns The validated method parameter object.\n */\nexport function getValidatedParams(\n  params: unknown,\n  method: string,\n  storageSizeLimit = STORAGE_SIZE_LIMIT,\n): ManageStateParams {\n  if (!isObject(params)) {\n    throw rpcErrors.invalidParams({\n      message: 'Expected params to be a single object.',\n    });\n  }\n\n  const { operation, newState, encrypted } = params;\n\n  if (\n    !operation ||\n    typeof operation !== 'string' ||\n    !Object.values(ManageStateOperation).includes(\n      operation as ManageStateOperation,\n    )\n  ) {\n    throw rpcErrors.invalidParams({\n      message: 'Must specify a valid manage state \"operation\".',\n    });\n  }\n\n  if (encrypted !== undefined && typeof encrypted !== 'boolean') {\n    throw rpcErrors.invalidParams({\n      message: '\"encrypted\" parameter must be a boolean if specified.',\n    });\n  }\n\n  if (operation === ManageStateOperation.UpdateState) {\n    if (!isObject(newState)) {\n      throw rpcErrors.invalidParams({\n        message: `Invalid ${method} \"updateState\" parameter: The new state must be a plain object.`,\n        data: {\n          receivedNewState:\n            typeof newState === 'undefined' ? 'undefined' : newState,\n        },\n      });\n    }\n\n    let size;\n    try {\n      // `getJsonSize` will throw if the state is not JSON serializable.\n      size = getJsonSize(newState);\n    } catch {\n      throw rpcErrors.invalidParams({\n        message: `Invalid ${method} \"updateState\" parameter: The new state must be JSON serializable.`,\n        data: {\n          receivedNewState:\n            typeof newState === 'undefined' ? 'undefined' : newState,\n        },\n      });\n    }\n\n    if (size > storageSizeLimit) {\n      throw rpcErrors.invalidParams({\n        message: `Invalid ${method} \"updateState\" parameter: The new state must not exceed ${storageSizeLimit} bytes in size.`,\n        data: {\n          receivedNewState:\n            typeof newState === 'undefined' ? 'undefined' : newState,\n        },\n      });\n    }\n  }\n\n  return params as ManageStateParams;\n}\n"],"mappings":";;;;;AAKA,SAAS,gBAAgB,mBAAmB;AAC5C,SAAS,iBAAiB;AAE1B,SAAS,4BAA4B;AACrC,SAAS,oCAAoC;AAE7C,SAAS,UAAU,mBAAmB;AAM/B,IAAM,wBAAwB;AAErC,IAAM,aAAa;AA2DZ,IAAM,uBAIT,CAAC;AAAA,EACH,iBAAiB;AAAA,EACjB,aAAAA;AACF,MAA8C;AAC5C,SAAO;AAAA,IACL,gBAAgB,eAAe;AAAA,IAC/B,YAAY;AAAA,IACZ;AAAA,IACA,sBAAsB,6BAA6BA,YAAW;AAAA,IAC9D,cAAc,CAAC,YAAY,IAAI;AAAA,EACjC;AACF;AAEA,IAAM,cAAyD;AAAA,EAC7D,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,iBAAiB;AACnB;AAEO,IAAM,qBAAqB,OAAO,OAAO;AAAA,EAC9C,YAAY;AAAA,EACZ;AAAA,EACA;AACF,CAAU;AAEH,IAAM,qBAAqB;AAoBlC,eAAsB,qBAAqB;AAAA,EACzC;AAAA,EACA;AACF,GAAyB;AACvB,SAAO,MAAM,cAAc;AAAA,IACzB;AAAA,IACA,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AACH;AAmBO,SAAS,6BAA6B;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA2B;AACzB,SAAO,eAAe,YACpB,SAC4B;AAC5B,UAAM;AAAA,MACJ,SAAS,CAAC;AAAA,MACV;AAAA,MACA,SAAS,EAAE,OAAO;AAAA,IACpB,IAAI;AACJ,UAAM,kBAAkB,mBAAmB,QAAQ,MAAM;AAGzD,UAAM,gBAAgB,gBAAgB,aAAa;AAInD,QACE,iBACA,gBAAgB,cAAc,qBAAqB,YACnD;AACA,YAAM,iBAAiB,IAAI;AAAA,IAC7B;AAEA,YAAQ,gBAAgB,WAAW;AAAA,MACjC,KAAK,qBAAqB;AACxB,uBAAe,QAAQ,aAAa;AACpC,eAAO;AAAA,MAET,KAAK,qBAAqB,UAAU;AAClC,eAAO,MAAM,aAAa,QAAQ,aAAa;AAAA,MACjD;AAAA,MAEA,KAAK,qBAAqB,aAAa;AACrC,cAAM,gBAAgB,QAAQ,gBAAgB,UAAU,aAAa;AACrE,eAAO;AAAA,MACT;AAAA,MAEA;AACE,cAAM,UAAU;AAAA,UACd,WAAW,MAAM,gBACf,gBAAgB,SAClB;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;AAWO,SAAS,mBACd,QACA,QACA,mBAAmB,oBACA;AACnB,MAAI,CAAC,SAAS,MAAM,GAAG;AACrB,UAAM,UAAU,cAAc;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,EAAE,WAAW,UAAU,UAAU,IAAI;AAE3C,MACE,CAAC,aACD,OAAO,cAAc,YACrB,CAAC,OAAO,OAAO,oBAAoB,EAAE;AAAA,IACnC;AAAA,EACF,GACA;AACA,UAAM,UAAU,cAAc;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,MAAI,cAAc,UAAa,OAAO,cAAc,WAAW;AAC7D,UAAM,UAAU,cAAc;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,MAAI,cAAc,qBAAqB,aAAa;AAClD,QAAI,CAAC,SAAS,QAAQ,GAAG;AACvB,YAAM,UAAU,cAAc;AAAA,QAC5B,SAAS,WAAW,MAAM;AAAA,QAC1B,MAAM;AAAA,UACJ,kBACE,OAAO,aAAa,cAAc,cAAc;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AAEF,aAAO,YAAY,QAAQ;AAAA,IAC7B,QAAQ;AACN,YAAM,UAAU,cAAc;AAAA,QAC5B,SAAS,WAAW,MAAM;AAAA,QAC1B,MAAM;AAAA,UACJ,kBACE,OAAO,aAAa,cAAc,cAAc;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,kBAAkB;AAC3B,YAAM,UAAU,cAAc;AAAA,QAC5B,SAAS,WAAW,MAAM,2DAA2D,gBAAgB;AAAA,QACrG,MAAM;AAAA,UACJ,kBACE,OAAO,aAAa,cAAc,cAAc;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;","names":["methodHooks"]}

package/dist/{chunk-KO4MKRYZ.js → chunk-R2M4YLJ7.js}

@@ -23,13 +23,10 @@ var specificationBuilder = ({
   };
 };
 var methodHooks = {
-  getMnemonic: true,
   getUnlockPromise: true,
   clearSnapState: true,
   getSnapState: true,
-  updateSnapState: true,
-  encrypt: true,
-  decrypt: true
+  updateSnapState: true
 };
 var manageStateBuilder = Object.freeze({
   targetName: methodName,
@@ -37,7 +34,7 @@ var manageStateBuilder = Object.freeze({
   methodHooks
 });
 var STORAGE_SIZE_LIMIT = 104857600;
-async function getEncryptionKey({
+async function getEncryptionEntropy({
   mnemonicPhrase,
   snapId
 }) {
@@ -48,38 +45,11 @@ async function getEncryptionKey({
     magic: _snapsutils.STATE_ENCRYPTION_MAGIC_VALUE
   });
 }
-async function encryptState({
-  state,
-  encryptFunction,
-  ...keyArgs
-}) {
-  const encryptionKey = await getEncryptionKey(keyArgs);
-  return await encryptFunction(encryptionKey, state);
-}
-async function decryptState({
-  state,
-  decryptFunction,
-  ...keyArgs
-}) {
-  try {
-    const encryptionKey = await getEncryptionKey(keyArgs);
-    const decryptedState = await decryptFunction(encryptionKey, state);
-    _utils.assert.call(void 0, _utils.isValidJson.call(void 0, decryptedState));
-    return decryptedState;
-  } catch {
-    throw _rpcerrors.rpcErrors.internal({
-      message: "Failed to decrypt snap state, the state must be corrupted."
-    });
-  }
-}
 function getManageStateImplementation({
-  getMnemonic,
   getUnlockPromise,
   clearSnapState,
   getSnapState,
-  updateSnapState,
-  encrypt,
-  decrypt
+  updateSnapState
 }) {
   return async function manageState(options) {
     const {
@@ -97,25 +67,10 @@ function getManageStateImplementation({
         clearSnapState(origin, shouldEncrypt);
         return null;
       case _snapssdk.ManageStateOperation.GetState: {
-        const state = getSnapState(origin, shouldEncrypt);
-        if (state === null) {
-          return state;
-        }
-        return shouldEncrypt ? await decryptState({
-          state,
-          decryptFunction: decrypt,
-          mnemonicPhrase: await getMnemonic(),
-          snapId: origin
-        }) : _snapsutils.parseJson.call(void 0, state);
+        return await getSnapState(origin, shouldEncrypt);
       }
       case _snapssdk.ManageStateOperation.UpdateState: {
-        const finalizedState = shouldEncrypt ? await encryptState({
-          state: validatedParams.newState,
-          encryptFunction: encrypt,
-          mnemonicPhrase: await getMnemonic(),
-          snapId: origin
-        }) : JSON.stringify(validatedParams.newState);
-        updateSnapState(origin, finalizedState, shouldEncrypt);
+        await updateSnapState(origin, validatedParams.newState, shouldEncrypt);
         return null;
       }
       default:
@@ -184,5 +139,5 @@ function getValidatedParams(params, method, storageSizeLimit = STORAGE_SIZE_LIMI
 
 
 
-exports.STATE_ENCRYPTION_SALT = STATE_ENCRYPTION_SALT; exports.specificationBuilder = specificationBuilder; exports.manageStateBuilder = manageStateBuilder; exports.STORAGE_SIZE_LIMIT = STORAGE_SIZE_LIMIT; exports.getEncryptionKey = getEncryptionKey; exports.getManageStateImplementation = getManageStateImplementation; exports.getValidatedParams = getValidatedParams;
-//# sourceMappingURL=chunk-KO4MKRYZ.js.map
+exports.STATE_ENCRYPTION_SALT = STATE_ENCRYPTION_SALT; exports.specificationBuilder = specificationBuilder; exports.manageStateBuilder = manageStateBuilder; exports.STORAGE_SIZE_LIMIT = STORAGE_SIZE_LIMIT; exports.getEncryptionEntropy = getEncryptionEntropy; exports.getManageStateImplementation = getManageStateImplementation; exports.getValidatedParams = getValidatedParams;
+//# sourceMappingURL=chunk-R2M4YLJ7.js.map

package/dist/chunk-R2M4YLJ7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/restricted/manageState.ts"],"names":["methodHooks"],"mappings":";;;;;AAKA,SAAS,gBAAgB,mBAAmB;AAC5C,SAAS,iBAAiB;AAE1B,SAAS,4BAA4B;AACrC,SAAS,oCAAoC;AAE7C,SAAS,UAAU,mBAAmB;AAM/B,IAAM,wBAAwB;AAErC,IAAM,aAAa;AA2DZ,IAAM,uBAIT,CAAC;AAAA,EACH,iBAAiB;AAAA,EACjB,aAAAA;AACF,MAA8C;AAC5C,SAAO;AAAA,IACL,gBAAgB,eAAe;AAAA,IAC/B,YAAY;AAAA,IACZ;AAAA,IACA,sBAAsB,6BAA6BA,YAAW;AAAA,IAC9D,cAAc,CAAC,YAAY,IAAI;AAAA,EACjC;AACF;AAEA,IAAM,cAAyD;AAAA,EAC7D,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,iBAAiB;AACnB;AAEO,IAAM,qBAAqB,OAAO,OAAO;AAAA,EAC9C,YAAY;AAAA,EACZ;AAAA,EACA;AACF,CAAU;AAEH,IAAM,qBAAqB;AAoBlC,eAAsB,qBAAqB;AAAA,EACzC;AAAA,EACA;AACF,GAAyB;AACvB,SAAO,MAAM,cAAc;AAAA,IACzB;AAAA,IACA,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AACH;AAmBO,SAAS,6BAA6B;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA2B;AACzB,SAAO,eAAe,YACpB,SAC4B;AAC5B,UAAM;AAAA,MACJ,SAAS,CAAC;AAAA,MACV;AAAA,MACA,SAAS,EAAE,OAAO;AAAA,IACpB,IAAI;AACJ,UAAM,kBAAkB,mBAAmB,QAAQ,MAAM;AAGzD,UAAM,gBAAgB,gBAAgB,aAAa;AAInD,QACE,iBACA,gBAAgB,cAAc,qBAAqB,YACnD;AACA,YAAM,iBAAiB,IAAI;AAAA,IAC7B;AAEA,YAAQ,gBAAgB,WAAW;AAAA,MACjC,KAAK,qBAAqB;AACxB,uBAAe,QAAQ,aAAa;AACpC,eAAO;AAAA,MAET,KAAK,qBAAqB,UAAU;AAClC,eAAO,MAAM,aAAa,QAAQ,aAAa;AAAA,MACjD;AAAA,MAEA,KAAK,qBAAqB,aAAa;AACrC,cAAM,gBAAgB,QAAQ,gBAAgB,UAAU,aAAa;AACrE,eAAO;AAAA,MACT;AAAA,MAEA;AACE,cAAM,UAAU;AAAA,UACd,WAAW,MAAM,gBACf,gBAAgB,SAClB;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;AAWO,SAAS,mBACd,QACA,QACA,mBAAmB,oBACA;AACnB,MAAI,CAAC,SAAS,MAAM,GAAG;AACrB,UAAM,UAAU,cAAc;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,EAAE,WAAW,UAAU,UAAU,IAAI;AAE3C,MACE,CAAC,aACD,OAAO,cAAc,YACrB,CAAC,OAAO,OAAO,oBAAoB,EAAE;AAAA,IACnC;AAAA,EACF,GACA;AACA,UAAM,UAAU,cAAc;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,MAAI,cAAc,UAAa,OAAO,cAAc,WAAW;AAC7D,UAAM,UAAU,cAAc;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,MAAI,cAAc,qBAAqB,aAAa;AAClD,QAAI,CAAC,SAAS,QAAQ,GAAG;AACvB,YAAM,UAAU,cAAc;AAAA,QAC5B,SAAS,WAAW,MAAM;AAAA,QAC1B,MAAM;AAAA,UACJ,kBACE,OAAO,aAAa,cAAc,cAAc;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AAEF,aAAO,YAAY,QAAQ;AAAA,IAC7B,QAAQ;AACN,YAAM,UAAU,cAAc;AAAA,QAC5B,SAAS,WAAW,MAAM;AAAA,QAC1B,MAAM;AAAA,UACJ,kBACE,OAAO,aAAa,cAAc,cAAc;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,OAAO,kBAAkB;AAC3B,YAAM,UAAU,cAAc;AAAA,QAC5B,SAAS,WAAW,MAAM,2DAA2D,gBAAgB;AAAA,QACrG,MAAM;AAAA,UACJ,kBACE,OAAO,aAAa,cAAc,cAAc;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT","sourcesContent":["import type {\n  PermissionSpecificationBuilder,\n  RestrictedMethodOptions,\n  ValidPermissionSpecification,\n} from '@metamask/permission-controller';\nimport { PermissionType, SubjectType } from '@metamask/permission-controller';\nimport { rpcErrors } from '@metamask/rpc-errors';\nimport type { ManageStateParams, ManageStateResult } from '@metamask/snaps-sdk';\nimport { ManageStateOperation } from '@metamask/snaps-sdk';\nimport { STATE_ENCRYPTION_MAGIC_VALUE } from '@metamask/snaps-utils';\nimport type { Json, NonEmptyArray } from '@metamask/utils';\nimport { isObject, getJsonSize } from '@metamask/utils';\n\nimport type { MethodHooksObject } from '../utils';\nimport { deriveEntropy } from '../utils';\n\n// The salt used for SIP-6-based entropy derivation.\nexport const STATE_ENCRYPTION_SALT = 'snap_manageState encryption';\n\nconst methodName = 'snap_manageState';\n\nexport type ManageStateMethodHooks = {\n  /**\n   * Waits for the extension to be unlocked.\n   *\n   * @returns A promise that resolves once the extension is unlocked.\n   */\n  getUnlockPromise: (shouldShowUnlockRequest: boolean) => Promise<void>;\n\n  /**\n   * A function that clears the state of the requesting Snap.\n   */\n  clearSnapState: (snapId: string, encrypted: boolean) => void;\n\n  /**\n   * A function that gets the encrypted state of the requesting Snap.\n   *\n   * @returns The current state of the Snap.\n   */\n  getSnapState: (\n    snapId: string,\n    encrypted: boolean,\n  ) => Promise<Record<string, Json>>;\n\n  /**\n   * A function that updates the state of the requesting Snap.\n   *\n   * @param newState - The new state of the Snap.\n   */\n  updateSnapState: (\n    snapId: string,\n    newState: Record<string, Json>,\n    encrypted: boolean,\n  ) => Promise<void>;\n};\n\ntype ManageStateSpecificationBuilderOptions = {\n  allowedCaveats?: Readonly<NonEmptyArray<string>> | null;\n  methodHooks: ManageStateMethodHooks;\n};\n\ntype ManageStateSpecification = ValidPermissionSpecification<{\n  permissionType: PermissionType.RestrictedMethod;\n  targetName: typeof methodName;\n  methodImplementation: ReturnType<typeof getManageStateImplementation>;\n  allowedCaveats: Readonly<NonEmptyArray<string>> | null;\n}>;\n\n/**\n * The specification builder for the `snap_manageState` permission.\n * `snap_manageState` lets the Snap store and manage some of its state on\n * your device.\n *\n * @param options - The specification builder options.\n * @param options.allowedCaveats - The optional allowed caveats for the permission.\n * @param options.methodHooks - The RPC method hooks needed by the method implementation.\n * @returns The specification for the `snap_manageState` permission.\n */\nexport const specificationBuilder: PermissionSpecificationBuilder<\n  PermissionType.RestrictedMethod,\n  ManageStateSpecificationBuilderOptions,\n  ManageStateSpecification\n> = ({\n  allowedCaveats = null,\n  methodHooks,\n}: ManageStateSpecificationBuilderOptions) => {\n  return {\n    permissionType: PermissionType.RestrictedMethod,\n    targetName: methodName,\n    allowedCaveats,\n    methodImplementation: getManageStateImplementation(methodHooks),\n    subjectTypes: [SubjectType.Snap],\n  };\n};\n\nconst methodHooks: MethodHooksObject<ManageStateMethodHooks> = {\n  getUnlockPromise: true,\n  clearSnapState: true,\n  getSnapState: true,\n  updateSnapState: true,\n};\n\nexport const manageStateBuilder = Object.freeze({\n  targetName: methodName,\n  specificationBuilder,\n  methodHooks,\n} as const);\n\nexport const STORAGE_SIZE_LIMIT = 104857600; // In bytes (100MB)\n\ntype GetEncryptionKeyArgs = {\n  snapId: string;\n  mnemonicPhrase: Uint8Array;\n};\n\n/**\n * Get a deterministic encryption key to use for encrypting and decrypting the\n * state.\n *\n * This key should only be used for state encryption using `snap_manageState`.\n * To get other encryption keys, a different salt can be used.\n *\n * @param args - The encryption key args.\n * @param args.snapId - The ID of the snap to get the encryption key for.\n * @param args.mnemonicPhrase - The mnemonic phrase to derive the encryption key\n * from.\n * @returns The state encryption key.\n */\nexport async function getEncryptionEntropy({\n  mnemonicPhrase,\n  snapId,\n}: GetEncryptionKeyArgs) {\n  return await deriveEntropy({\n    mnemonicPhrase,\n    input: snapId,\n    salt: STATE_ENCRYPTION_SALT,\n    magic: STATE_ENCRYPTION_MAGIC_VALUE,\n  });\n}\n\n/**\n * Builds the method implementation for `snap_manageState`.\n *\n * @param hooks - The RPC method hooks.\n * @param hooks.clearSnapState - A function that clears the state stored for a\n * snap.\n * @param hooks.getSnapState - A function that fetches the persisted decrypted\n * state for a snap.\n * @param hooks.updateSnapState - A function that updates the state stored for a\n * snap.\n * @param hooks.getUnlockPromise - A function that resolves once the MetaMask\n * extension is unlocked and prompts the user to unlock their MetaMask if it is\n * locked.\n * @returns The method implementation which either returns `null` for a\n * successful state update/deletion or returns the decrypted state.\n * @throws If the params are invalid.\n */\nexport function getManageStateImplementation({\n  getUnlockPromise,\n  clearSnapState,\n  getSnapState,\n  updateSnapState,\n}: ManageStateMethodHooks) {\n  return async function manageState(\n    options: RestrictedMethodOptions<ManageStateParams>,\n  ): Promise<ManageStateResult> {\n    const {\n      params = {},\n      method,\n      context: { origin },\n    } = options;\n    const validatedParams = getValidatedParams(params, method);\n\n    // If the encrypted param is undefined or null we default to true.\n    const shouldEncrypt = validatedParams.encrypted ?? true;\n\n    // We only need to prompt the user when the mnemonic is needed\n    // which it isn't for the clear operation or unencrypted storage.\n    if (\n      shouldEncrypt &&\n      validatedParams.operation !== ManageStateOperation.ClearState\n    ) {\n      await getUnlockPromise(true);\n    }\n\n    switch (validatedParams.operation) {\n      case ManageStateOperation.ClearState:\n        clearSnapState(origin, shouldEncrypt);\n        return null;\n\n      case ManageStateOperation.GetState: {\n        return await getSnapState(origin, shouldEncrypt);\n      }\n\n      case ManageStateOperation.UpdateState: {\n        await updateSnapState(origin, validatedParams.newState, shouldEncrypt);\n        return null;\n      }\n\n      default:\n        throw rpcErrors.invalidParams(\n          `Invalid ${method} operation: \"${\n            validatedParams.operation as string\n          }\"`,\n        );\n    }\n  };\n}\n\n/**\n * Validates the manageState method `params` and returns them cast to the correct\n * type. Throws if validation fails.\n *\n * @param params - The unvalidated params object from the method request.\n * @param method - RPC method name used for debugging errors.\n * @param storageSizeLimit - Maximum allowed size (in bytes) of a new state object.\n * @returns The validated method parameter object.\n */\nexport function getValidatedParams(\n  params: unknown,\n  method: string,\n  storageSizeLimit = STORAGE_SIZE_LIMIT,\n): ManageStateParams {\n  if (!isObject(params)) {\n    throw rpcErrors.invalidParams({\n      message: 'Expected params to be a single object.',\n    });\n  }\n\n  const { operation, newState, encrypted } = params;\n\n  if (\n    !operation ||\n    typeof operation !== 'string' ||\n    !Object.values(ManageStateOperation).includes(\n      operation as ManageStateOperation,\n    )\n  ) {\n    throw rpcErrors.invalidParams({\n      message: 'Must specify a valid manage state \"operation\".',\n    });\n  }\n\n  if (encrypted !== undefined && typeof encrypted !== 'boolean') {\n    throw rpcErrors.invalidParams({\n      message: '\"encrypted\" parameter must be a boolean if specified.',\n    });\n  }\n\n  if (operation === ManageStateOperation.UpdateState) {\n    if (!isObject(newState)) {\n      throw rpcErrors.invalidParams({\n        message: `Invalid ${method} \"updateState\" parameter: The new state must be a plain object.`,\n        data: {\n          receivedNewState:\n            typeof newState === 'undefined' ? 'undefined' : newState,\n        },\n      });\n    }\n\n    let size;\n    try {\n      // `getJsonSize` will throw if the state is not JSON serializable.\n      size = getJsonSize(newState);\n    } catch {\n      throw rpcErrors.invalidParams({\n        message: `Invalid ${method} \"updateState\" parameter: The new state must be JSON serializable.`,\n        data: {\n          receivedNewState:\n            typeof newState === 'undefined' ? 'undefined' : newState,\n        },\n      });\n    }\n\n    if (size > storageSizeLimit) {\n      throw rpcErrors.invalidParams({\n        message: `Invalid ${method} \"updateState\" parameter: The new state must not exceed ${storageSizeLimit} bytes in size.`,\n        data: {\n          receivedNewState:\n            typeof newState === 'undefined' ? 'undefined' : newState,\n        },\n      });\n    }\n  }\n\n  return params as ManageStateParams;\n}\n"]}

package/dist/{chunk-LVTN25J2.js → chunk-RZXF4KSR.js}

@@ -12,7 +12,7 @@ var _chunkSYUGPLEPjs = require('./chunk-SYUGPLEP.js');
 var _chunkP74WXDY4js = require('./chunk-P74WXDY4.js');
 
 
-var _chunkKO4MKRYZjs = require('./chunk-KO4MKRYZ.js');
+var _chunkR2M4YLJ7js = require('./chunk-R2M4YLJ7.js');
 
 
 var _chunkQDZAWH6Fjs = require('./chunk-QDZAWH6F.js');
@@ -37,7 +37,7 @@ var restrictedMethodPermissionBuilders = {
   [_chunkVUA6ICJOjs.getBip44EntropyBuilder.targetName]: _chunkVUA6ICJOjs.getBip44EntropyBuilder,
   [_chunkQ5W3YGEBjs.getEntropyBuilder.targetName]: _chunkQ5W3YGEBjs.getEntropyBuilder,
   [_chunkFFHVA6PPjs.invokeSnapBuilder.targetName]: _chunkFFHVA6PPjs.invokeSnapBuilder,
-  [_chunkKO4MKRYZjs.manageStateBuilder.targetName]: _chunkKO4MKRYZjs.manageStateBuilder,
+  [_chunkR2M4YLJ7js.manageStateBuilder.targetName]: _chunkR2M4YLJ7js.manageStateBuilder,
   [_chunkQDZAWH6Fjs.notifyBuilder.targetName]: _chunkQDZAWH6Fjs.notifyBuilder,
   [_chunkP74WXDY4js.manageAccountsBuilder.targetName]: _chunkP74WXDY4js.manageAccountsBuilder,
   [_chunkSYUGPLEPjs.getLocaleBuilder.targetName]: _chunkSYUGPLEPjs.getLocaleBuilder
@@ -46,4 +46,4 @@ var restrictedMethodPermissionBuilders = {
 
 
 exports.restrictedMethodPermissionBuilders = restrictedMethodPermissionBuilders;
-//# sourceMappingURL=chunk-LVTN25J2.js.map
+//# sourceMappingURL=chunk-RZXF4KSR.js.map

package/dist/{chunk-LVTN25J2.js.map → chunk-RZXF4KSR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/restricted/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCO,IAAM,qCAAqC;AAAA,EAChD,CAAC,cAAc,UAAU,GAAG;AAAA,EAC5B,CAAC,uBAAuB,UAAU,GAAG;AAAA,EACrC,CAAC,yBAAyB,UAAU,GAAG;AAAA,EACvC,CAAC,uBAAuB,UAAU,GAAG;AAAA,EACrC,CAAC,kBAAkB,UAAU,GAAG;AAAA,EAChC,CAAC,kBAAkB,UAAU,GAAG;AAAA,EAChC,CAAC,mBAAmB,UAAU,GAAG;AAAA,EACjC,CAAC,cAAc,UAAU,GAAG;AAAA,EAC5B,CAAC,sBAAsB,UAAU,GAAG;AAAA,EACpC,CAAC,iBAAiB,UAAU,GAAG;AACjC","sourcesContent":["import type { DialogMethodHooks } from './dialog';\nimport { dialogBuilder } from './dialog';\nimport type { GetBip32EntropyMethodHooks } from './getBip32Entropy';\nimport { getBip32EntropyBuilder } from './getBip32Entropy';\nimport type { GetBip32PublicKeyMethodHooks } from './getBip32PublicKey';\nimport { getBip32PublicKeyBuilder } from './getBip32PublicKey';\nimport type { GetBip44EntropyMethodHooks } from './getBip44Entropy';\nimport { getBip44EntropyBuilder } from './getBip44Entropy';\nimport type { GetEntropyHooks } from './getEntropy';\nimport { getEntropyBuilder } from './getEntropy';\nimport type { GetLocaleMethodHooks } from './getLocale';\nimport { getLocaleBuilder } from './getLocale';\nimport type { InvokeSnapMethodHooks } from './invokeSnap';\nimport { invokeSnapBuilder } from './invokeSnap';\nimport type { ManageAccountsMethodHooks } from './manageAccounts';\nimport { manageAccountsBuilder } from './manageAccounts';\nimport type { ManageStateMethodHooks } from './manageState';\nimport { manageStateBuilder } from './manageState';\nimport type { NotifyMethodHooks } from './notify';\nimport { notifyBuilder } from './notify';\n\nexport { WALLET_SNAP_PERMISSION_KEY } from './invokeSnap';\nexport { getEncryptionKey } from './manageState';\n\nexport type RestrictedMethodHooks = DialogMethodHooks &\n  GetBip32EntropyMethodHooks &\n  GetBip32PublicKeyMethodHooks &\n  GetBip44EntropyMethodHooks &\n  GetEntropyHooks &\n  InvokeSnapMethodHooks &\n  ManageStateMethodHooks &\n  NotifyMethodHooks &\n  ManageAccountsMethodHooks &\n  GetLocaleMethodHooks;\n\nexport const restrictedMethodPermissionBuilders = {\n  [dialogBuilder.targetName]: dialogBuilder,\n  [getBip32EntropyBuilder.targetName]: getBip32EntropyBuilder,\n  [getBip32PublicKeyBuilder.targetName]: getBip32PublicKeyBuilder,\n  [getBip44EntropyBuilder.targetName]: getBip44EntropyBuilder,\n  [getEntropyBuilder.targetName]: getEntropyBuilder,\n  [invokeSnapBuilder.targetName]: invokeSnapBuilder,\n  [manageStateBuilder.targetName]: manageStateBuilder,\n  [notifyBuilder.targetName]: notifyBuilder,\n  [manageAccountsBuilder.targetName]: manageAccountsBuilder,\n  [getLocaleBuilder.targetName]: getLocaleBuilder,\n} as const;\n\nexport * from './caveats';\n"]}
+{"version":3,"sources":["../src/restricted/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCO,IAAM,qCAAqC;AAAA,EAChD,CAAC,cAAc,UAAU,GAAG;AAAA,EAC5B,CAAC,uBAAuB,UAAU,GAAG;AAAA,EACrC,CAAC,yBAAyB,UAAU,GAAG;AAAA,EACvC,CAAC,uBAAuB,UAAU,GAAG;AAAA,EACrC,CAAC,kBAAkB,UAAU,GAAG;AAAA,EAChC,CAAC,kBAAkB,UAAU,GAAG;AAAA,EAChC,CAAC,mBAAmB,UAAU,GAAG;AAAA,EACjC,CAAC,cAAc,UAAU,GAAG;AAAA,EAC5B,CAAC,sBAAsB,UAAU,GAAG;AAAA,EACpC,CAAC,iBAAiB,UAAU,GAAG;AACjC","sourcesContent":["import type { DialogMethodHooks } from './dialog';\nimport { dialogBuilder } from './dialog';\nimport type { GetBip32EntropyMethodHooks } from './getBip32Entropy';\nimport { getBip32EntropyBuilder } from './getBip32Entropy';\nimport type { GetBip32PublicKeyMethodHooks } from './getBip32PublicKey';\nimport { getBip32PublicKeyBuilder } from './getBip32PublicKey';\nimport type { GetBip44EntropyMethodHooks } from './getBip44Entropy';\nimport { getBip44EntropyBuilder } from './getBip44Entropy';\nimport type { GetEntropyHooks } from './getEntropy';\nimport { getEntropyBuilder } from './getEntropy';\nimport type { GetLocaleMethodHooks } from './getLocale';\nimport { getLocaleBuilder } from './getLocale';\nimport type { InvokeSnapMethodHooks } from './invokeSnap';\nimport { invokeSnapBuilder } from './invokeSnap';\nimport type { ManageAccountsMethodHooks } from './manageAccounts';\nimport { manageAccountsBuilder } from './manageAccounts';\nimport type { ManageStateMethodHooks } from './manageState';\nimport { manageStateBuilder } from './manageState';\nimport type { NotifyMethodHooks } from './notify';\nimport { notifyBuilder } from './notify';\n\nexport { WALLET_SNAP_PERMISSION_KEY } from './invokeSnap';\nexport { getEncryptionEntropy } from './manageState';\n\nexport type RestrictedMethodHooks = DialogMethodHooks &\n  GetBip32EntropyMethodHooks &\n  GetBip32PublicKeyMethodHooks &\n  GetBip44EntropyMethodHooks &\n  GetEntropyHooks &\n  InvokeSnapMethodHooks &\n  ManageStateMethodHooks &\n  NotifyMethodHooks &\n  ManageAccountsMethodHooks &\n  GetLocaleMethodHooks;\n\nexport const restrictedMethodPermissionBuilders = {\n  [dialogBuilder.targetName]: dialogBuilder,\n  [getBip32EntropyBuilder.targetName]: getBip32EntropyBuilder,\n  [getBip32PublicKeyBuilder.targetName]: getBip32PublicKeyBuilder,\n  [getBip44EntropyBuilder.targetName]: getBip44EntropyBuilder,\n  [getEntropyBuilder.targetName]: getEntropyBuilder,\n  [invokeSnapBuilder.targetName]: invokeSnapBuilder,\n  [manageStateBuilder.targetName]: manageStateBuilder,\n  [notifyBuilder.targetName]: notifyBuilder,\n  [manageAccountsBuilder.targetName]: manageAccountsBuilder,\n  [getLocaleBuilder.targetName]: getLocaleBuilder,\n} as const;\n\nexport * from './caveats';\n"]}

package/dist/{chunk-3S7DJI4I.mjs → chunk-SU6KOIVB.mjs}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-E6WUMFQT.mjs";
 import {
   manageStateBuilder
-} from "./chunk-7NBRKDKJ.mjs";
+} from "./chunk-NESDQ4PF.mjs";
 import {
   notifyBuilder
 } from "./chunk-JWDQUKKU.mjs";
@@ -46,4 +46,4 @@ var restrictedMethodPermissionBuilders = {
 export {
   restrictedMethodPermissionBuilders
 };
-//# sourceMappingURL=chunk-3S7DJI4I.mjs.map
+//# sourceMappingURL=chunk-SU6KOIVB.mjs.map

package/dist/chunk-SU6KOIVB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/restricted/index.ts"],"sourcesContent":["import type { DialogMethodHooks } from './dialog';\nimport { dialogBuilder } from './dialog';\nimport type { GetBip32EntropyMethodHooks } from './getBip32Entropy';\nimport { getBip32EntropyBuilder } from './getBip32Entropy';\nimport type { GetBip32PublicKeyMethodHooks } from './getBip32PublicKey';\nimport { getBip32PublicKeyBuilder } from './getBip32PublicKey';\nimport type { GetBip44EntropyMethodHooks } from './getBip44Entropy';\nimport { getBip44EntropyBuilder } from './getBip44Entropy';\nimport type { GetEntropyHooks } from './getEntropy';\nimport { getEntropyBuilder } from './getEntropy';\nimport type { GetLocaleMethodHooks } from './getLocale';\nimport { getLocaleBuilder } from './getLocale';\nimport type { InvokeSnapMethodHooks } from './invokeSnap';\nimport { invokeSnapBuilder } from './invokeSnap';\nimport type { ManageAccountsMethodHooks } from './manageAccounts';\nimport { manageAccountsBuilder } from './manageAccounts';\nimport type { ManageStateMethodHooks } from './manageState';\nimport { manageStateBuilder } from './manageState';\nimport type { NotifyMethodHooks } from './notify';\nimport { notifyBuilder } from './notify';\n\nexport { WALLET_SNAP_PERMISSION_KEY } from './invokeSnap';\nexport { getEncryptionEntropy } from './manageState';\n\nexport type RestrictedMethodHooks = DialogMethodHooks &\n  GetBip32EntropyMethodHooks &\n  GetBip32PublicKeyMethodHooks &\n  GetBip44EntropyMethodHooks &\n  GetEntropyHooks &\n  InvokeSnapMethodHooks &\n  ManageStateMethodHooks &\n  NotifyMethodHooks &\n  ManageAccountsMethodHooks &\n  GetLocaleMethodHooks;\n\nexport const restrictedMethodPermissionBuilders = {\n  [dialogBuilder.targetName]: dialogBuilder,\n  [getBip32EntropyBuilder.targetName]: getBip32EntropyBuilder,\n  [getBip32PublicKeyBuilder.targetName]: getBip32PublicKeyBuilder,\n  [getBip44EntropyBuilder.targetName]: getBip44EntropyBuilder,\n  [getEntropyBuilder.targetName]: getEntropyBuilder,\n  [invokeSnapBuilder.targetName]: invokeSnapBuilder,\n  [manageStateBuilder.targetName]: manageStateBuilder,\n  [notifyBuilder.targetName]: notifyBuilder,\n  [manageAccountsBuilder.targetName]: manageAccountsBuilder,\n  [getLocaleBuilder.targetName]: getLocaleBuilder,\n} as const;\n\nexport * from './caveats';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCO,IAAM,qCAAqC;AAAA,EAChD,CAAC,cAAc,UAAU,GAAG;AAAA,EAC5B,CAAC,uBAAuB,UAAU,GAAG;AAAA,EACrC,CAAC,yBAAyB,UAAU,GAAG;AAAA,EACvC,CAAC,uBAAuB,UAAU,GAAG;AAAA,EACrC,CAAC,kBAAkB,UAAU,GAAG;AAAA,EAChC,CAAC,kBAAkB,UAAU,GAAG;AAAA,EAChC,CAAC,mBAAmB,UAAU,GAAG;AAAA,EACjC,CAAC,cAAc,UAAU,GAAG;AAAA,EAC5B,CAAC,sBAAsB,UAAU,GAAG;AAAA,EACpC,CAAC,iBAAiB,UAAU,GAAG;AACjC;","names":[]}

package/dist/index.js

@@ -19,10 +19,10 @@ require('./chunk-NWT2EXFD.js');
 
 
 
-var _chunkFBOZCV3Cjs = require('./chunk-FBOZCV3C.js');
+var _chunkEGKFC56Fjs = require('./chunk-EGKFC56F.js');
 
 
-var _chunkLVTN25J2js = require('./chunk-LVTN25J2.js');
+var _chunkRZXF4KSRjs = require('./chunk-RZXF4KSR.js');
 
 
 
@@ -36,7 +36,7 @@ require('./chunk-SYUGPLEP.js');
 require('./chunk-P74WXDY4.js');
 
 
-var _chunkKO4MKRYZjs = require('./chunk-KO4MKRYZ.js');
+var _chunkR2M4YLJ7js = require('./chunk-R2M4YLJ7.js');
 require('./chunk-QDZAWH6F.js');
 require('./chunk-GYZV5UBD.js');
 require('./chunk-S7AR3ROH.js');
@@ -114,5 +114,5 @@ var _snapsutils = require('@metamask/snaps-utils');
 
 
 
-exports.SnapCaveatType = _snapsutils.SnapCaveatType; exports.SnapEndowments = _chunkYGKFOOWIjs.SnapEndowments; exports.WALLET_SNAP_PERMISSION_KEY = _chunkFFHVA6PPjs.WALLET_SNAP_PERMISSION_KEY; exports.buildSnapEndowmentSpecifications = _chunkFBOZCV3Cjs.buildSnapEndowmentSpecifications; exports.buildSnapRestrictedMethodSpecifications = _chunkFBOZCV3Cjs.buildSnapRestrictedMethodSpecifications; exports.caveatMappers = _chunkAYJK7MSHjs.caveatMappers; exports.caveatSpecifications = _chunkAYJK7MSHjs.caveatSpecifications; exports.createSnapsMethodMiddleware = _chunk6UY23OOZjs.createSnapsMethodMiddleware; exports.endowmentCaveatMappers = _chunkJRSPKOFGjs.endowmentCaveatMappers; exports.endowmentCaveatSpecifications = _chunkJRSPKOFGjs.endowmentCaveatSpecifications; exports.endowmentPermissionBuilders = _chunkJRSPKOFGjs.endowmentPermissionBuilders; exports.getChainIdsCaveat = _chunkIEUCBULUjs.getChainIdsCaveat; exports.getCronjobCaveatJobs = _chunkOQOTJFFVjs.getCronjobCaveatJobs; exports.getEncryptionKey = _chunkKO4MKRYZjs.getEncryptionKey; exports.getKeyringCaveatOrigins = _chunkPWUEAR4Hjs.getKeyringCaveatOrigins; exports.getLookupMatchersCaveat = _chunkIEUCBULUjs.getLookupMatchersCaveat; exports.getMaxRequestTimeCaveat = _chunkFCVWU5XHjs.getMaxRequestTimeCaveat; exports.getRpcCaveatOrigins = _chunkLIWV3FMYjs.getRpcCaveatOrigins; exports.getSignatureOriginCaveat = _chunkTEXEQGNZjs.getSignatureOriginCaveat; exports.getTransactionOriginCaveat = _chunk6TKD32TSjs.getTransactionOriginCaveat; exports.handlerEndowments = _chunkJRSPKOFGjs.handlerEndowments; exports.permittedMethods = _chunkD6MUXDVIjs.handlers; exports.processSnapPermissions = _chunkFBOZCV3Cjs.processSnapPermissions; exports.restrictedMethodPermissionBuilders = _chunkLVTN25J2js.restrictedMethodPermissionBuilders; exports.selectHooks = _chunkYG7W4CDTjs.selectHooks;
+exports.SnapCaveatType = _snapsutils.SnapCaveatType; exports.SnapEndowments = _chunkYGKFOOWIjs.SnapEndowments; exports.WALLET_SNAP_PERMISSION_KEY = _chunkFFHVA6PPjs.WALLET_SNAP_PERMISSION_KEY; exports.buildSnapEndowmentSpecifications = _chunkEGKFC56Fjs.buildSnapEndowmentSpecifications; exports.buildSnapRestrictedMethodSpecifications = _chunkEGKFC56Fjs.buildSnapRestrictedMethodSpecifications; exports.caveatMappers = _chunkAYJK7MSHjs.caveatMappers; exports.caveatSpecifications = _chunkAYJK7MSHjs.caveatSpecifications; exports.createSnapsMethodMiddleware = _chunk6UY23OOZjs.createSnapsMethodMiddleware; exports.endowmentCaveatMappers = _chunkJRSPKOFGjs.endowmentCaveatMappers; exports.endowmentCaveatSpecifications = _chunkJRSPKOFGjs.endowmentCaveatSpecifications; exports.endowmentPermissionBuilders = _chunkJRSPKOFGjs.endowmentPermissionBuilders; exports.getChainIdsCaveat = _chunkIEUCBULUjs.getChainIdsCaveat; exports.getCronjobCaveatJobs = _chunkOQOTJFFVjs.getCronjobCaveatJobs; exports.getEncryptionEntropy = _chunkR2M4YLJ7js.getEncryptionEntropy; exports.getKeyringCaveatOrigins = _chunkPWUEAR4Hjs.getKeyringCaveatOrigins; exports.getLookupMatchersCaveat = _chunkIEUCBULUjs.getLookupMatchersCaveat; exports.getMaxRequestTimeCaveat = _chunkFCVWU5XHjs.getMaxRequestTimeCaveat; exports.getRpcCaveatOrigins = _chunkLIWV3FMYjs.getRpcCaveatOrigins; exports.getSignatureOriginCaveat = _chunkTEXEQGNZjs.getSignatureOriginCaveat; exports.getTransactionOriginCaveat = _chunk6TKD32TSjs.getTransactionOriginCaveat; exports.handlerEndowments = _chunkJRSPKOFGjs.handlerEndowments; exports.permittedMethods = _chunkD6MUXDVIjs.handlers; exports.processSnapPermissions = _chunkEGKFC56Fjs.processSnapPermissions; exports.restrictedMethodPermissionBuilders = _chunkRZXF4KSRjs.restrictedMethodPermissionBuilders; exports.selectHooks = _chunkYG7W4CDTjs.selectHooks;
 //# sourceMappingURL=index.js.map

package/dist/index.mjs

@@ -19,10 +19,10 @@ import {
   buildSnapEndowmentSpecifications,
   buildSnapRestrictedMethodSpecifications,
   processSnapPermissions
-} from "./chunk-AKRFLGOS.mjs";
+} from "./chunk-AMBEX4N4.mjs";
 import {
   restrictedMethodPermissionBuilders
-} from "./chunk-3S7DJI4I.mjs";
+} from "./chunk-SU6KOIVB.mjs";
 import {
   caveatMappers,
   caveatSpecifications
@@ -35,8 +35,8 @@ import "./chunk-IBV23QOX.mjs";
 import "./chunk-IZYMBIBD.mjs";
 import "./chunk-E6WUMFQT.mjs";
 import {
-  getEncryptionKey
-} from "./chunk-7NBRKDKJ.mjs";
+  getEncryptionEntropy
+} from "./chunk-NESDQ4PF.mjs";
 import "./chunk-JWDQUKKU.mjs";
 import "./chunk-4SQWLI2S.mjs";
 import "./chunk-TNRH2LRU.mjs";
@@ -102,7 +102,7 @@ export {
   endowmentPermissionBuilders,
   getChainIdsCaveat,
   getCronjobCaveatJobs,
-  getEncryptionKey,
+  getEncryptionEntropy,
   getKeyringCaveatOrigins,
   getLookupMatchersCaveat,
   getMaxRequestTimeCaveat,

package/dist/permissions.js

@@ -2,8 +2,8 @@
 
 
 
-var _chunkFBOZCV3Cjs = require('./chunk-FBOZCV3C.js');
-require('./chunk-LVTN25J2.js');
+var _chunkEGKFC56Fjs = require('./chunk-EGKFC56F.js');
+require('./chunk-RZXF4KSR.js');
 require('./chunk-AYJK7MSH.js');
 require('./chunk-2KTJCF3C.js');
 require('./chunk-VHY3NATP.js');
@@ -12,7 +12,7 @@ require('./chunk-VUA6ICJO.js');
 require('./chunk-Q5W3YGEB.js');
 require('./chunk-SYUGPLEP.js');
 require('./chunk-P74WXDY4.js');
-require('./chunk-KO4MKRYZ.js');
+require('./chunk-R2M4YLJ7.js');
 require('./chunk-QDZAWH6F.js');
 require('./chunk-GYZV5UBD.js');
 require('./chunk-S7AR3ROH.js');
@@ -39,5 +39,5 @@ require('./chunk-YGKFOOWI.js');
 
 
 
-exports.buildSnapEndowmentSpecifications = _chunkFBOZCV3Cjs.buildSnapEndowmentSpecifications; exports.buildSnapRestrictedMethodSpecifications = _chunkFBOZCV3Cjs.buildSnapRestrictedMethodSpecifications; exports.processSnapPermissions = _chunkFBOZCV3Cjs.processSnapPermissions;
+exports.buildSnapEndowmentSpecifications = _chunkEGKFC56Fjs.buildSnapEndowmentSpecifications; exports.buildSnapRestrictedMethodSpecifications = _chunkEGKFC56Fjs.buildSnapRestrictedMethodSpecifications; exports.processSnapPermissions = _chunkEGKFC56Fjs.processSnapPermissions;
 //# sourceMappingURL=permissions.js.map

package/dist/permissions.mjs

@@ -2,8 +2,8 @@ import {
   buildSnapEndowmentSpecifications,
   buildSnapRestrictedMethodSpecifications,
   processSnapPermissions
-} from "./chunk-AKRFLGOS.mjs";
-import "./chunk-3S7DJI4I.mjs";
+} from "./chunk-AMBEX4N4.mjs";
+import "./chunk-SU6KOIVB.mjs";
 import "./chunk-Y4LNTDZ2.mjs";
 import "./chunk-EKXDFYIX.mjs";
 import "./chunk-WFAY5FPP.mjs";
@@ -12,7 +12,7 @@ import "./chunk-LR7UR4YU.mjs";
 import "./chunk-IBV23QOX.mjs";
 import "./chunk-IZYMBIBD.mjs";
 import "./chunk-E6WUMFQT.mjs";
-import "./chunk-7NBRKDKJ.mjs";
+import "./chunk-NESDQ4PF.mjs";
 import "./chunk-JWDQUKKU.mjs";
 import "./chunk-4SQWLI2S.mjs";
 import "./chunk-TNRH2LRU.mjs";

package/dist/restricted/index.js

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkLVTN25J2js = require('../chunk-LVTN25J2.js');
+var _chunkRZXF4KSRjs = require('../chunk-RZXF4KSR.js');
 
 
 
@@ -14,7 +14,7 @@ require('../chunk-SYUGPLEP.js');
 require('../chunk-P74WXDY4.js');
 
 
-var _chunkKO4MKRYZjs = require('../chunk-KO4MKRYZ.js');
+var _chunkR2M4YLJ7js = require('../chunk-R2M4YLJ7.js');
 require('../chunk-QDZAWH6F.js');
 require('../chunk-GYZV5UBD.js');
 require('../chunk-S7AR3ROH.js');
@@ -29,5 +29,5 @@ require('../chunk-YG7W4CDT.js');
 
 
 
-exports.WALLET_SNAP_PERMISSION_KEY = _chunkFFHVA6PPjs.WALLET_SNAP_PERMISSION_KEY; exports.caveatMappers = _chunkAYJK7MSHjs.caveatMappers; exports.caveatSpecifications = _chunkAYJK7MSHjs.caveatSpecifications; exports.getEncryptionKey = _chunkKO4MKRYZjs.getEncryptionKey; exports.restrictedMethodPermissionBuilders = _chunkLVTN25J2js.restrictedMethodPermissionBuilders;
+exports.WALLET_SNAP_PERMISSION_KEY = _chunkFFHVA6PPjs.WALLET_SNAP_PERMISSION_KEY; exports.caveatMappers = _chunkAYJK7MSHjs.caveatMappers; exports.caveatSpecifications = _chunkAYJK7MSHjs.caveatSpecifications; exports.getEncryptionEntropy = _chunkR2M4YLJ7js.getEncryptionEntropy; exports.restrictedMethodPermissionBuilders = _chunkRZXF4KSRjs.restrictedMethodPermissionBuilders;
 //# sourceMappingURL=index.js.map

package/dist/restricted/index.mjs

@@ -1,6 +1,6 @@
 import {
   restrictedMethodPermissionBuilders
-} from "../chunk-3S7DJI4I.mjs";
+} from "../chunk-SU6KOIVB.mjs";
 import {
   caveatMappers,
   caveatSpecifications
@@ -13,8 +13,8 @@ import "../chunk-IBV23QOX.mjs";
 import "../chunk-IZYMBIBD.mjs";
 import "../chunk-E6WUMFQT.mjs";
 import {
-  getEncryptionKey
-} from "../chunk-7NBRKDKJ.mjs";
+  getEncryptionEntropy
+} from "../chunk-NESDQ4PF.mjs";
 import "../chunk-JWDQUKKU.mjs";
 import "../chunk-4SQWLI2S.mjs";
 import "../chunk-TNRH2LRU.mjs";
@@ -27,7 +27,7 @@ export {
   WALLET_SNAP_PERMISSION_KEY,
   caveatMappers,
   caveatSpecifications,
-  getEncryptionKey,
+  getEncryptionEntropy,
   restrictedMethodPermissionBuilders
 };
 //# sourceMappingURL=index.mjs.map

package/dist/restricted/manageState.js

@@ -6,7 +6,7 @@
 
 
 
-var _chunkKO4MKRYZjs = require('../chunk-KO4MKRYZ.js');
+var _chunkR2M4YLJ7js = require('../chunk-R2M4YLJ7.js');
 require('../chunk-YG7W4CDT.js');
 
 
@@ -16,5 +16,5 @@ require('../chunk-YG7W4CDT.js');
 
 
 
-exports.STATE_ENCRYPTION_SALT = _chunkKO4MKRYZjs.STATE_ENCRYPTION_SALT; exports.STORAGE_SIZE_LIMIT = _chunkKO4MKRYZjs.STORAGE_SIZE_LIMIT; exports.getEncryptionKey = _chunkKO4MKRYZjs.getEncryptionKey; exports.getManageStateImplementation = _chunkKO4MKRYZjs.getManageStateImplementation; exports.getValidatedParams = _chunkKO4MKRYZjs.getValidatedParams; exports.manageStateBuilder = _chunkKO4MKRYZjs.manageStateBuilder; exports.specificationBuilder = _chunkKO4MKRYZjs.specificationBuilder;
+exports.STATE_ENCRYPTION_SALT = _chunkR2M4YLJ7js.STATE_ENCRYPTION_SALT; exports.STORAGE_SIZE_LIMIT = _chunkR2M4YLJ7js.STORAGE_SIZE_LIMIT; exports.getEncryptionEntropy = _chunkR2M4YLJ7js.getEncryptionEntropy; exports.getManageStateImplementation = _chunkR2M4YLJ7js.getManageStateImplementation; exports.getValidatedParams = _chunkR2M4YLJ7js.getValidatedParams; exports.manageStateBuilder = _chunkR2M4YLJ7js.manageStateBuilder; exports.specificationBuilder = _chunkR2M4YLJ7js.specificationBuilder;
 //# sourceMappingURL=manageState.js.map

package/dist/restricted/manageState.mjs

@@ -1,17 +1,17 @@
 import {
   STATE_ENCRYPTION_SALT,
   STORAGE_SIZE_LIMIT,
-  getEncryptionKey,
+  getEncryptionEntropy,
   getManageStateImplementation,
   getValidatedParams,
   manageStateBuilder,
   specificationBuilder
-} from "../chunk-7NBRKDKJ.mjs";
+} from "../chunk-NESDQ4PF.mjs";
 import "../chunk-SGQXD5K7.mjs";
 export {
   STATE_ENCRYPTION_SALT,
   STORAGE_SIZE_LIMIT,
-  getEncryptionKey,
+  getEncryptionEntropy,
   getManageStateImplementation,
   getValidatedParams,
   manageStateBuilder,