@metamask/snaps-utils 9.2.2 → 9.4.0

package/dist/manifest/validators/production-platform-version.d.mts

@@ -0,0 +1,7 @@
+import type { ValidatorMeta } from "../validator-types.mjs";
+/**
+ * Check if the platform version in manifest exceeds the version
+ * used in production.
+ */
+export declare const productionPlatformVersion: ValidatorMeta;
+//# sourceMappingURL=production-platform-version.d.mts.map

package/dist/manifest/validators/production-platform-version.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-platform-version.d.mts","sourceRoot":"","sources":["../../../src/manifest/validators/production-platform-version.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,+BAA2B;AAqCxD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,aAqBvC,CAAC"}

package/dist/manifest/validators/production-platform-version.mjs

@@ -0,0 +1,44 @@
+import { Duration, inMilliseconds } from "@metamask/utils";
+import { minVersion, gt } from "semver";
+import { useFileSystemCache } from "../../fs.mjs";
+/**
+ * Determine the production version of the Snaps platform by inspecting
+ * the latest GitHub release of the MetaMask extension.
+ *
+ * @returns The production version of the Snaps platform or null if any error occurred.
+ */
+const determineProductionVersion = useFileSystemCache('snaps-production-version', inMilliseconds(3, Duration.Day), async () => {
+    try {
+        const latestRelease = await fetch('https://api.github.com/repos/metamask/metamask-extension/releases/latest');
+        const latestReleaseJson = await latestRelease.json();
+        const latestReleaseCommit = latestReleaseJson.target_commitish;
+        const packageJsonResponse = await fetch(`https://api.github.com/repos/metamask/metamask-extension/contents/package.json?ref=${latestReleaseCommit}`, { headers: new Headers({ accept: 'application/vnd.github.raw+json' }) });
+        const packageJson = await packageJsonResponse.json();
+        const versionRange = packageJson.dependencies['@metamask/snaps-sdk'];
+        return minVersion(versionRange)?.format();
+    }
+    catch {
+        return null;
+    }
+});
+/**
+ * Check if the platform version in manifest exceeds the version
+ * used in production.
+ */
+export const productionPlatformVersion = {
+    severity: 'warning',
+    async semanticCheck(files, context) {
+        const manifestPlatformVersion = files.manifest.result.platformVersion;
+        if (!manifestPlatformVersion) {
+            return;
+        }
+        const maximumVersion = await determineProductionVersion();
+        if (!maximumVersion) {
+            return;
+        }
+        if (gt(manifestPlatformVersion, maximumVersion)) {
+            context.report(`The specified platform version "${manifestPlatformVersion}" is not supported in the production version of MetaMask. The current maximum supported version is "${maximumVersion}". To resolve this, downgrade \`@metamask/snaps-sdk\` to a compatible version.`);
+        }
+    },
+};
+//# sourceMappingURL=production-platform-version.mjs.map

package/dist/manifest/validators/production-platform-version.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-platform-version.mjs","sourceRoot":"","sources":["../../../src/manifest/validators/production-platform-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,wBAAwB;AAC3D,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe;AAExC,OAAO,EAAE,kBAAkB,EAAE,qBAAiB;AAG9C;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,kBAAkB,CACnD,0BAA0B,EAC1B,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAC/B,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,KAAK,CAC/B,0EAA0E,CAC3E,CAAC;QAEF,MAAM,iBAAiB,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAErD,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,gBAAgB,CAAC;QAE/D,MAAM,mBAAmB,GAAG,MAAM,KAAK,CACrC,sFAAsF,mBAAmB,EAAE,EAC3G,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,EAAE,CACxE,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAErD,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAErE,OAAO,UAAU,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAkB;IACtD,QAAQ,EAAE,SAAS;IACnB,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO;QAChC,MAAM,uBAAuB,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC;QAEtE,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,0BAA0B,EAAE,CAAC;QAE1D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,uBAAuB,EAAE,cAAc,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,MAAM,CACZ,mCAAmC,uBAAuB,uGAAuG,cAAc,gFAAgF,CAChQ,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC","sourcesContent":["import { Duration, inMilliseconds } from '@metamask/utils';\nimport { minVersion, gt } from 'semver';\n\nimport { useFileSystemCache } from '../../fs';\nimport type { ValidatorMeta } from '../validator-types';\n\n/**\n * Determine the production version of the Snaps platform by inspecting\n * the latest GitHub release of the MetaMask extension.\n *\n * @returns The production version of the Snaps platform or null if any error occurred.\n */\nconst determineProductionVersion = useFileSystemCache(\n  'snaps-production-version',\n  inMilliseconds(3, Duration.Day),\n  async () => {\n    try {\n      const latestRelease = await fetch(\n        'https://api.github.com/repos/metamask/metamask-extension/releases/latest',\n      );\n\n      const latestReleaseJson = await latestRelease.json();\n\n      const latestReleaseCommit = latestReleaseJson.target_commitish;\n\n      const packageJsonResponse = await fetch(\n        `https://api.github.com/repos/metamask/metamask-extension/contents/package.json?ref=${latestReleaseCommit}`,\n        { headers: new Headers({ accept: 'application/vnd.github.raw+json' }) },\n      );\n\n      const packageJson = await packageJsonResponse.json();\n\n      const versionRange = packageJson.dependencies['@metamask/snaps-sdk'];\n\n      return minVersion(versionRange)?.format();\n    } catch {\n      return null;\n    }\n  },\n);\n\n/**\n * Check if the platform version in manifest exceeds the version\n * used in production.\n */\nexport const productionPlatformVersion: ValidatorMeta = {\n  severity: 'warning',\n  async semanticCheck(files, context) {\n    const manifestPlatformVersion = files.manifest.result.platformVersion;\n\n    if (!manifestPlatformVersion) {\n      return;\n    }\n\n    const maximumVersion = await determineProductionVersion();\n\n    if (!maximumVersion) {\n      return;\n    }\n\n    if (gt(manifestPlatformVersion, maximumVersion)) {\n      context.report(\n        `The specified platform version \"${manifestPlatformVersion}\" is not supported in the production version of MetaMask. The current maximum supported version is \"${maximumVersion}\". To resolve this, downgrade \\`@metamask/snaps-sdk\\` to a compatible version.`,\n      );\n    }\n  },\n};\n"]}

package/dist/manifest/validators/unused-exports.cjs

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unusedExports = void 0;
+/**
+ * Check if the Snap exports handlers that are not requested in the manifest, or
+ * if the Snap requests permissions for handlers that are not exported.
+ */
+exports.unusedExports = {
+    severity: 'warning',
+    semanticCheck(files, context) {
+        const { handlerEndowments, exports } = context.options ?? {};
+        // The handler endowments or exports must be provided for this check to be
+        // performed.
+        if (!handlerEndowments || !exports) {
+            return;
+        }
+        const unusedHandlers = Object.entries(handlerEndowments)
+            .filter(([handler, endowment]) => {
+            if (endowment === null) {
+                return false;
+            }
+            return (exports.includes(handler) &&
+                !files.manifest.result.initialPermissions[endowment]);
+        })
+            .map(([handler, endowment]) => `${handler} (${endowment})`);
+        const unusedEndowments = Object.entries(handlerEndowments).filter(([handler, endowment]) => {
+            if (endowment === null) {
+                return false;
+            }
+            return (files.manifest.result.initialPermissions[endowment] && !exports.includes(handler));
+        });
+        if (unusedHandlers.length > 0) {
+            // We don't specify a fix function here, because:
+            // 1. Removing the export from the Snap bundle is complicated, as it
+            //    requires AST manipulation.
+            // 2. Adding the permission to the manifest is not always possible, as it
+            //    may require additional configuration in the manifest.
+            context.report(`The Snap exports the following handlers, but does not request permission for them: ${unusedHandlers.join(', ')}.`);
+        }
+        if (unusedEndowments.length > 0) {
+            const formattedEndowments = unusedEndowments
+                .map(([handler, endowment]) => `${handler} (${endowment})`)
+                .join(', ');
+            context.report(`The Snap requests permission for the following handlers, but does not export them: ${formattedEndowments}.`, ({ manifest }) => {
+                unusedEndowments.forEach(([, endowment]) => {
+                    delete manifest.initialPermissions[endowment];
+                });
+                return { manifest };
+            });
+        }
+    },
+};
+//# sourceMappingURL=unused-exports.cjs.map

package/dist/manifest/validators/unused-exports.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"unused-exports.cjs","sourceRoot":"","sources":["../../../src/manifest/validators/unused-exports.ts"],"names":[],"mappings":";;;AAIA;;;GAGG;AACU,QAAA,aAAa,GAAkB;IAC1C,QAAQ,EAAE,SAAS;IACnB,aAAa,CAAC,KAAK,EAAE,OAAO;QAC1B,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAE7D,0EAA0E;QAC1E,aAAa;QACb,IAAI,CAAC,iBAAiB,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;YAC/B,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CACvC,SAAqC,CACtC,CACF,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,KAAK,SAAS,GAAG,CAAC,CAAC;QAE9D,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAC/D,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;YACvB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CACtC,SAAqC,CACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAChC,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,iDAAiD;YACjD,oEAAoE;YACpE,gCAAgC;YAChC,yEAAyE;YACzE,2DAA2D;YAC3D,OAAO,CAAC,MAAM,CACZ,sFAAsF,cAAc,CAAC,IAAI,CACvG,IAAI,CACL,GAAG,CACL,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,mBAAmB,GAAG,gBAAgB;iBACzC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,KAAK,SAAS,GAAG,CAAC;iBAC1D,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,OAAO,CAAC,MAAM,CACZ,sFAAsF,mBAAmB,GAAG,EAC5G,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACf,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE;oBACzC,OAAO,QAAQ,CAAC,kBAAkB,CAChC,SAAqC,CACtC,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAEH,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC","sourcesContent":["import type { InitialPermissions } from '@metamask/snaps-sdk';\n\nimport type { ValidatorMeta } from '../validator-types';\n\n/**\n * Check if the Snap exports handlers that are not requested in the manifest, or\n * if the Snap requests permissions for handlers that are not exported.\n */\nexport const unusedExports: ValidatorMeta = {\n  severity: 'warning',\n  semanticCheck(files, context) {\n    const { handlerEndowments, exports } = context.options ?? {};\n\n    // The handler endowments or exports must be provided for this check to be\n    // performed.\n    if (!handlerEndowments || !exports) {\n      return;\n    }\n\n    const unusedHandlers = Object.entries(handlerEndowments)\n      .filter(([handler, endowment]) => {\n        if (endowment === null) {\n          return false;\n        }\n\n        return (\n          exports.includes(handler) &&\n          !files.manifest.result.initialPermissions[\n            endowment as keyof InitialPermissions\n          ]\n        );\n      })\n      .map(([handler, endowment]) => `${handler} (${endowment})`);\n\n    const unusedEndowments = Object.entries(handlerEndowments).filter(\n      ([handler, endowment]) => {\n        if (endowment === null) {\n          return false;\n        }\n\n        return (\n          files.manifest.result.initialPermissions[\n            endowment as keyof InitialPermissions\n          ] && !exports.includes(handler)\n        );\n      },\n    );\n\n    if (unusedHandlers.length > 0) {\n      // We don't specify a fix function here, because:\n      // 1. Removing the export from the Snap bundle is complicated, as it\n      //    requires AST manipulation.\n      // 2. Adding the permission to the manifest is not always possible, as it\n      //    may require additional configuration in the manifest.\n      context.report(\n        `The Snap exports the following handlers, but does not request permission for them: ${unusedHandlers.join(\n          ', ',\n        )}.`,\n      );\n    }\n\n    if (unusedEndowments.length > 0) {\n      const formattedEndowments = unusedEndowments\n        .map(([handler, endowment]) => `${handler} (${endowment})`)\n        .join(', ');\n\n      context.report(\n        `The Snap requests permission for the following handlers, but does not export them: ${formattedEndowments}.`,\n        ({ manifest }) => {\n          unusedEndowments.forEach(([, endowment]) => {\n            delete manifest.initialPermissions[\n              endowment as keyof InitialPermissions\n            ];\n          });\n\n          return { manifest };\n        },\n      );\n    }\n  },\n};\n"]}

package/dist/manifest/validators/unused-exports.d.cts

@@ -0,0 +1,7 @@
+import type { ValidatorMeta } from "../validator-types.cjs";
+/**
+ * Check if the Snap exports handlers that are not requested in the manifest, or
+ * if the Snap requests permissions for handlers that are not exported.
+ */
+export declare const unusedExports: ValidatorMeta;
+//# sourceMappingURL=unused-exports.d.cts.map

package/dist/manifest/validators/unused-exports.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unused-exports.d.cts","sourceRoot":"","sources":["../../../src/manifest/validators/unused-exports.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,+BAA2B;AAExD;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,aAwE3B,CAAC"}

package/dist/manifest/validators/unused-exports.d.mts

@@ -0,0 +1,7 @@
+import type { ValidatorMeta } from "../validator-types.mjs";
+/**
+ * Check if the Snap exports handlers that are not requested in the manifest, or
+ * if the Snap requests permissions for handlers that are not exported.
+ */
+export declare const unusedExports: ValidatorMeta;
+//# sourceMappingURL=unused-exports.d.mts.map

package/dist/manifest/validators/unused-exports.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unused-exports.d.mts","sourceRoot":"","sources":["../../../src/manifest/validators/unused-exports.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,+BAA2B;AAExD;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,aAwE3B,CAAC"}

package/dist/manifest/validators/unused-exports.mjs

@@ -0,0 +1,50 @@
+/**
+ * Check if the Snap exports handlers that are not requested in the manifest, or
+ * if the Snap requests permissions for handlers that are not exported.
+ */
+export const unusedExports = {
+    severity: 'warning',
+    semanticCheck(files, context) {
+        const { handlerEndowments, exports } = context.options ?? {};
+        // The handler endowments or exports must be provided for this check to be
+        // performed.
+        if (!handlerEndowments || !exports) {
+            return;
+        }
+        const unusedHandlers = Object.entries(handlerEndowments)
+            .filter(([handler, endowment]) => {
+            if (endowment === null) {
+                return false;
+            }
+            return (exports.includes(handler) &&
+                !files.manifest.result.initialPermissions[endowment]);
+        })
+            .map(([handler, endowment]) => `${handler} (${endowment})`);
+        const unusedEndowments = Object.entries(handlerEndowments).filter(([handler, endowment]) => {
+            if (endowment === null) {
+                return false;
+            }
+            return (files.manifest.result.initialPermissions[endowment] && !exports.includes(handler));
+        });
+        if (unusedHandlers.length > 0) {
+            // We don't specify a fix function here, because:
+            // 1. Removing the export from the Snap bundle is complicated, as it
+            //    requires AST manipulation.
+            // 2. Adding the permission to the manifest is not always possible, as it
+            //    may require additional configuration in the manifest.
+            context.report(`The Snap exports the following handlers, but does not request permission for them: ${unusedHandlers.join(', ')}.`);
+        }
+        if (unusedEndowments.length > 0) {
+            const formattedEndowments = unusedEndowments
+                .map(([handler, endowment]) => `${handler} (${endowment})`)
+                .join(', ');
+            context.report(`The Snap requests permission for the following handlers, but does not export them: ${formattedEndowments}.`, ({ manifest }) => {
+                unusedEndowments.forEach(([, endowment]) => {
+                    delete manifest.initialPermissions[endowment];
+                });
+                return { manifest };
+            });
+        }
+    },
+};
+//# sourceMappingURL=unused-exports.mjs.map

package/dist/manifest/validators/unused-exports.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"unused-exports.mjs","sourceRoot":"","sources":["../../../src/manifest/validators/unused-exports.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,QAAQ,EAAE,SAAS;IACnB,aAAa,CAAC,KAAK,EAAE,OAAO;QAC1B,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAE7D,0EAA0E;QAC1E,aAAa;QACb,IAAI,CAAC,iBAAiB,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;YAC/B,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CACvC,SAAqC,CACtC,CACF,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,KAAK,SAAS,GAAG,CAAC,CAAC;QAE9D,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAC/D,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;YACvB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CACtC,SAAqC,CACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAChC,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,iDAAiD;YACjD,oEAAoE;YACpE,gCAAgC;YAChC,yEAAyE;YACzE,2DAA2D;YAC3D,OAAO,CAAC,MAAM,CACZ,sFAAsF,cAAc,CAAC,IAAI,CACvG,IAAI,CACL,GAAG,CACL,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,mBAAmB,GAAG,gBAAgB;iBACzC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,KAAK,SAAS,GAAG,CAAC;iBAC1D,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,OAAO,CAAC,MAAM,CACZ,sFAAsF,mBAAmB,GAAG,EAC5G,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACf,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE;oBACzC,OAAO,QAAQ,CAAC,kBAAkB,CAChC,SAAqC,CACtC,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAEH,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC","sourcesContent":["import type { InitialPermissions } from '@metamask/snaps-sdk';\n\nimport type { ValidatorMeta } from '../validator-types';\n\n/**\n * Check if the Snap exports handlers that are not requested in the manifest, or\n * if the Snap requests permissions for handlers that are not exported.\n */\nexport const unusedExports: ValidatorMeta = {\n  severity: 'warning',\n  semanticCheck(files, context) {\n    const { handlerEndowments, exports } = context.options ?? {};\n\n    // The handler endowments or exports must be provided for this check to be\n    // performed.\n    if (!handlerEndowments || !exports) {\n      return;\n    }\n\n    const unusedHandlers = Object.entries(handlerEndowments)\n      .filter(([handler, endowment]) => {\n        if (endowment === null) {\n          return false;\n        }\n\n        return (\n          exports.includes(handler) &&\n          !files.manifest.result.initialPermissions[\n            endowment as keyof InitialPermissions\n          ]\n        );\n      })\n      .map(([handler, endowment]) => `${handler} (${endowment})`);\n\n    const unusedEndowments = Object.entries(handlerEndowments).filter(\n      ([handler, endowment]) => {\n        if (endowment === null) {\n          return false;\n        }\n\n        return (\n          files.manifest.result.initialPermissions[\n            endowment as keyof InitialPermissions\n          ] && !exports.includes(handler)\n        );\n      },\n    );\n\n    if (unusedHandlers.length > 0) {\n      // We don't specify a fix function here, because:\n      // 1. Removing the export from the Snap bundle is complicated, as it\n      //    requires AST manipulation.\n      // 2. Adding the permission to the manifest is not always possible, as it\n      //    may require additional configuration in the manifest.\n      context.report(\n        `The Snap exports the following handlers, but does not request permission for them: ${unusedHandlers.join(\n          ', ',\n        )}.`,\n      );\n    }\n\n    if (unusedEndowments.length > 0) {\n      const formattedEndowments = unusedEndowments\n        .map(([handler, endowment]) => `${handler} (${endowment})`)\n        .join(', ');\n\n      context.report(\n        `The Snap requests permission for the following handlers, but does not export them: ${formattedEndowments}.`,\n        ({ manifest }) => {\n          unusedEndowments.forEach(([, endowment]) => {\n            delete manifest.initialPermissions[\n              endowment as keyof InitialPermissions\n            ];\n          });\n\n          return { manifest };\n        },\n      );\n    }\n  },\n};\n"]}

package/dist/time.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ISO8601DateStruct = exports.ISO8601DurationStruct = void 0;
+exports.toCensoredISO8601String = exports.ISO8601DateStruct = exports.ISO8601DurationStruct = void 0;
 const superstruct_1 = require("@metamask/superstruct");
 const luxon_1 = require("luxon");
 /**
@@ -31,4 +31,18 @@ exports.ISO8601DateStruct = (0, superstruct_1.refine)((0, superstruct_1.string)(
     }
     return true;
 });
+/**
+ * Remove millisecond precision from an ISO 8601 string.
+ *
+ * @param value - A valid ISO 8601 date.
+ * @returns A valid ISO 8601 date with millisecond precision removed.
+ */
+function toCensoredISO8601String(value) {
+    const date = luxon_1.DateTime.fromISO(value, { setZone: true });
+    // Make sure any millisecond precision is removed.
+    return date.startOf('second').toISO({
+        suppressMilliseconds: true,
+    });
+}
+exports.toCensoredISO8601String = toCensoredISO8601String;
 //# sourceMappingURL=time.cjs.map

package/dist/time.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"time.cjs","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":";;;AAAA,uDAAuD;AACvD,iCAA2C;AAE3C;;GAEG;AACU,QAAA,qBAAqB,GAAG,IAAA,oBAAM,EACzC,IAAA,oBAAM,GAAE,EACR,mBAAmB,EACnB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,cAAc,GAAG,gBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C;;GAEG;AACU,QAAA,iBAAiB,GAAG,IAAA,oBAAM,EAAC,IAAA,oBAAM,GAAE,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;IAC3E,MAAM,UAAU,GAAG,gBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE3C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,+EAA+E;QAC/E,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC","sourcesContent":["import { refine, string } from '@metamask/superstruct';\nimport { DateTime, Duration } from 'luxon';\n\n/**\n * Refines a string as an ISO 8601 duration.\n */\nexport const ISO8601DurationStruct = refine(\n  string(),\n  'ISO 8601 duration',\n  (value) => {\n    const parsedDuration = Duration.fromISO(value);\n    if (!parsedDuration.isValid) {\n      return 'Not a valid ISO 8601 duration';\n    }\n    return true;\n  },\n);\n\n/**\n * Regex to match the offset part of an ISO 8601 date.\n */\nconst offsetRegex = /Z|([+-]\\d{2}:?\\d{2})$/u;\n\n/**\n * Refines a string as an ISO 8601 date.\n */\nexport const ISO8601DateStruct = refine(string(), 'ISO 8601 date', (value) => {\n  const parsedDate = DateTime.fromISO(value);\n\n  if (!parsedDate.isValid) {\n    return 'Not a valid ISO 8601 date';\n  }\n\n  if (!offsetRegex.test(value)) {\n    // Luxon doesn't have a reliable way to check if timezone info was not provided\n    return 'ISO 8601 date must have timezone information';\n  }\n\n  return true;\n});\n"]}
+{"version":3,"file":"time.cjs","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":";;;AAAA,uDAAuD;AACvD,iCAA2C;AAE3C;;GAEG;AACU,QAAA,qBAAqB,GAAG,IAAA,oBAAM,EACzC,IAAA,oBAAM,GAAE,EACR,mBAAmB,EACnB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,cAAc,GAAG,gBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C;;GAEG;AACU,QAAA,iBAAiB,GAAG,IAAA,oBAAM,EAAC,IAAA,oBAAM,GAAE,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;IAC3E,MAAM,UAAU,GAAG,gBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE3C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,+EAA+E;QAC/E,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,KAAa;IACnD,MAAM,IAAI,GAAG,gBAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAExD,kDAAkD;IAClD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC;QAClC,oBAAoB,EAAE,IAAI;KAC3B,CAAW,CAAC;AACf,CAAC;AAPD,0DAOC","sourcesContent":["import { refine, string } from '@metamask/superstruct';\nimport { DateTime, Duration } from 'luxon';\n\n/**\n * Refines a string as an ISO 8601 duration.\n */\nexport const ISO8601DurationStruct = refine(\n  string(),\n  'ISO 8601 duration',\n  (value) => {\n    const parsedDuration = Duration.fromISO(value);\n    if (!parsedDuration.isValid) {\n      return 'Not a valid ISO 8601 duration';\n    }\n    return true;\n  },\n);\n\n/**\n * Regex to match the offset part of an ISO 8601 date.\n */\nconst offsetRegex = /Z|([+-]\\d{2}:?\\d{2})$/u;\n\n/**\n * Refines a string as an ISO 8601 date.\n */\nexport const ISO8601DateStruct = refine(string(), 'ISO 8601 date', (value) => {\n  const parsedDate = DateTime.fromISO(value);\n\n  if (!parsedDate.isValid) {\n    return 'Not a valid ISO 8601 date';\n  }\n\n  if (!offsetRegex.test(value)) {\n    // Luxon doesn't have a reliable way to check if timezone info was not provided\n    return 'ISO 8601 date must have timezone information';\n  }\n\n  return true;\n});\n\n/**\n * Remove millisecond precision from an ISO 8601 string.\n *\n * @param value - A valid ISO 8601 date.\n * @returns A valid ISO 8601 date with millisecond precision removed.\n */\nexport function toCensoredISO8601String(value: string) {\n  const date = DateTime.fromISO(value, { setZone: true });\n\n  // Make sure any millisecond precision is removed.\n  return date.startOf('second').toISO({\n    suppressMilliseconds: true,\n  }) as string;\n}\n"]}

package/dist/time.d.cts

@@ -6,4 +6,11 @@ export declare const ISO8601DurationStruct: import("@metamask/superstruct").Stru
  * Refines a string as an ISO 8601 date.
  */
 export declare const ISO8601DateStruct: import("@metamask/superstruct").Struct<string, null>;
+/**
+ * Remove millisecond precision from an ISO 8601 string.
+ *
+ * @param value - A valid ISO 8601 date.
+ * @returns A valid ISO 8601 date with millisecond precision removed.
+ */
+export declare function toCensoredISO8601String(value: string): string;
 //# sourceMappingURL=time.d.cts.map

package/dist/time.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"time.d.cts","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,qBAAqB,sDAUjC,CAAC;AAOF;;GAEG;AACH,eAAO,MAAM,iBAAiB,sDAa5B,CAAC"}
+{"version":3,"file":"time.d.cts","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,qBAAqB,sDAUjC,CAAC;AAOF;;GAEG;AACH,eAAO,MAAM,iBAAiB,sDAa5B,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,UAOpD"}

package/dist/time.d.mts

@@ -6,4 +6,11 @@ export declare const ISO8601DurationStruct: import("@metamask/superstruct").Stru
  * Refines a string as an ISO 8601 date.
  */
 export declare const ISO8601DateStruct: import("@metamask/superstruct").Struct<string, null>;
+/**
+ * Remove millisecond precision from an ISO 8601 string.
+ *
+ * @param value - A valid ISO 8601 date.
+ * @returns A valid ISO 8601 date with millisecond precision removed.
+ */
+export declare function toCensoredISO8601String(value: string): string;
 //# sourceMappingURL=time.d.mts.map

package/dist/time.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"time.d.mts","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,qBAAqB,sDAUjC,CAAC;AAOF;;GAEG;AACH,eAAO,MAAM,iBAAiB,sDAa5B,CAAC"}
+{"version":3,"file":"time.d.mts","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,qBAAqB,sDAUjC,CAAC;AAOF;;GAEG;AACH,eAAO,MAAM,iBAAiB,sDAa5B,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,UAOpD"}

package/dist/time.mjs

@@ -28,4 +28,17 @@ export const ISO8601DateStruct = refine(string(), 'ISO 8601 date', (value) => {
     }
     return true;
 });
+/**
+ * Remove millisecond precision from an ISO 8601 string.
+ *
+ * @param value - A valid ISO 8601 date.
+ * @returns A valid ISO 8601 date with millisecond precision removed.
+ */
+export function toCensoredISO8601String(value) {
+    const date = DateTime.fromISO(value, { setZone: true });
+    // Make sure any millisecond precision is removed.
+    return date.startOf('second').toISO({
+        suppressMilliseconds: true,
+    });
+}
 //# sourceMappingURL=time.mjs.map

package/dist/time.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"time.mjs","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B;AACvD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc;AAE3C;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CACzC,MAAM,EAAE,EACR,mBAAmB,EACnB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;IAC3E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE3C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,+EAA+E;QAC/E,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC","sourcesContent":["import { refine, string } from '@metamask/superstruct';\nimport { DateTime, Duration } from 'luxon';\n\n/**\n * Refines a string as an ISO 8601 duration.\n */\nexport const ISO8601DurationStruct = refine(\n  string(),\n  'ISO 8601 duration',\n  (value) => {\n    const parsedDuration = Duration.fromISO(value);\n    if (!parsedDuration.isValid) {\n      return 'Not a valid ISO 8601 duration';\n    }\n    return true;\n  },\n);\n\n/**\n * Regex to match the offset part of an ISO 8601 date.\n */\nconst offsetRegex = /Z|([+-]\\d{2}:?\\d{2})$/u;\n\n/**\n * Refines a string as an ISO 8601 date.\n */\nexport const ISO8601DateStruct = refine(string(), 'ISO 8601 date', (value) => {\n  const parsedDate = DateTime.fromISO(value);\n\n  if (!parsedDate.isValid) {\n    return 'Not a valid ISO 8601 date';\n  }\n\n  if (!offsetRegex.test(value)) {\n    // Luxon doesn't have a reliable way to check if timezone info was not provided\n    return 'ISO 8601 date must have timezone information';\n  }\n\n  return true;\n});\n"]}
+{"version":3,"file":"time.mjs","sourceRoot":"","sources":["../src/time.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B;AACvD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc;AAE3C;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CACzC,MAAM,EAAE,EACR,mBAAmB,EACnB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;IAC3E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE3C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,+EAA+E;QAC/E,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAExD,kDAAkD;IAClD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC;QAClC,oBAAoB,EAAE,IAAI;KAC3B,CAAW,CAAC;AACf,CAAC","sourcesContent":["import { refine, string } from '@metamask/superstruct';\nimport { DateTime, Duration } from 'luxon';\n\n/**\n * Refines a string as an ISO 8601 duration.\n */\nexport const ISO8601DurationStruct = refine(\n  string(),\n  'ISO 8601 duration',\n  (value) => {\n    const parsedDuration = Duration.fromISO(value);\n    if (!parsedDuration.isValid) {\n      return 'Not a valid ISO 8601 duration';\n    }\n    return true;\n  },\n);\n\n/**\n * Regex to match the offset part of an ISO 8601 date.\n */\nconst offsetRegex = /Z|([+-]\\d{2}:?\\d{2})$/u;\n\n/**\n * Refines a string as an ISO 8601 date.\n */\nexport const ISO8601DateStruct = refine(string(), 'ISO 8601 date', (value) => {\n  const parsedDate = DateTime.fromISO(value);\n\n  if (!parsedDate.isValid) {\n    return 'Not a valid ISO 8601 date';\n  }\n\n  if (!offsetRegex.test(value)) {\n    // Luxon doesn't have a reliable way to check if timezone info was not provided\n    return 'ISO 8601 date must have timezone information';\n  }\n\n  return true;\n});\n\n/**\n * Remove millisecond precision from an ISO 8601 string.\n *\n * @param value - A valid ISO 8601 date.\n * @returns A valid ISO 8601 date with millisecond precision removed.\n */\nexport function toCensoredISO8601String(value: string) {\n  const date = DateTime.fromISO(value, { setZone: true });\n\n  // Make sure any millisecond precision is removed.\n  return date.startOf('second').toISO({\n    suppressMilliseconds: true,\n  }) as string;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask/snaps-utils",
-  "version": "9.2.2",
+  "version": "9.4.0",
   "description": "A collection of utilities for MetaMask Snaps",
   "keywords": [
     "MetaMask",
@@ -84,9 +84,9 @@
     "@metamask/key-tree": "^10.1.1",
     "@metamask/permission-controller": "^11.0.6",
     "@metamask/rpc-errors": "^7.0.2",
-    "@metamask/slip44": "^4.1.0",
+    "@metamask/slip44": "^4.2.0",
     "@metamask/snaps-registry": "^3.2.3",
-    "@metamask/snaps-sdk": "^6.23.0",
+    "@metamask/snaps-sdk": "^7.1.0",
     "@metamask/superstruct": "^3.2.1",
     "@metamask/utils": "^11.4.0",
     "@noble/hashes": "^1.7.1",
@@ -125,6 +125,7 @@
     "istanbul-lib-report": "^3.0.0",
     "istanbul-reports": "^3.1.5",
     "jest": "^29.0.2",
+    "jest-fetch-mock": "^3.0.3",
     "jest-silent-reporter": "^0.6.0",
     "memfs": "^3.4.13",
     "prettier": "^3.3.3",