@polkadot/extension-base 0.44.9 → 0.45.1

package/cjs/background/handlers/Extension.js

@@ -1,668 +1,478 @@
 "use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = void 0;
-var _defaults = require("@polkadot/extension-base/defaults");
-var _extensionChains = require("@polkadot/extension-chains");
-var _types = require("@polkadot/types");
-var _uiKeyring = _interopRequireDefault(require("@polkadot/ui-keyring"));
-var _accounts = require("@polkadot/ui-keyring/observable/accounts");
-var _util = require("@polkadot/util");
-var _utilCrypto = require("@polkadot/util-crypto");
-var _helpers = require("./helpers");
-var _subscriptions = require("./subscriptions");
-// Copyright 2019-2023 @polkadot/extension authors & contributors
-// SPDX-License-Identifier: Apache-2.0
-
+var _Extension_cachedUnlocks, _Extension_state;
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const defaults_1 = require("@polkadot/extension-base/defaults");
+const extension_chains_1 = require("@polkadot/extension-chains");
+const types_1 = require("@polkadot/types");
+const ui_keyring_1 = tslib_1.__importDefault(require("@polkadot/ui-keyring"));
+const accounts_1 = require("@polkadot/ui-keyring/observable/accounts");
+const util_1 = require("@polkadot/util");
+const util_crypto_1 = require("@polkadot/util-crypto");
+const helpers_1 = require("./helpers");
+const subscriptions_1 = require("./subscriptions");
 const SEED_DEFAULT_LENGTH = 12;
 const SEED_LENGTHS = [12, 15, 18, 21, 24];
 const ETH_DERIVE_DEFAULT = "/m/44'/60'/0'/0/0";
 function getSuri(seed, type) {
-  return type === 'ethereum' ? `${seed}${ETH_DERIVE_DEFAULT}` : seed;
+    return type === 'ethereum'
+        ? `${seed}${ETH_DERIVE_DEFAULT}`
+        : seed;
 }
 function isJsonPayload(value) {
-  return value.genesisHash !== undefined;
+    return value.genesisHash !== undefined;
 }
 class Extension {
-  #cachedUnlocks;
-  #state;
-  constructor(state) {
-    this.#cachedUnlocks = {};
-    this.#state = state;
-  }
-  transformAccounts(accounts) {
-    return Object.values(accounts).map(_ref => {
-      let {
-        json: {
-          address,
-          meta
-        },
-        type
-      } = _ref;
-      return {
-        address,
-        isDefaultAuthSelected: this.#state.defaultAuthAccountSelection.includes(address),
-        ...meta,
-        type
-      };
-    });
-  }
-  accountsCreateExternal(_ref2) {
-    let {
-      address,
-      genesisHash,
-      name
-    } = _ref2;
-    _uiKeyring.default.addExternal(address, {
-      genesisHash,
-      name
-    });
-    return true;
-  }
-  accountsCreateHardware(_ref3) {
-    let {
-      accountIndex,
-      address,
-      addressOffset,
-      genesisHash,
-      hardwareType,
-      name
-    } = _ref3;
-    _uiKeyring.default.addHardware(address, hardwareType, {
-      accountIndex,
-      addressOffset,
-      genesisHash,
-      name
-    });
-    return true;
-  }
-  accountsCreateSuri(_ref4) {
-    let {
-      genesisHash,
-      name,
-      password,
-      suri,
-      type
-    } = _ref4;
-    _uiKeyring.default.addUri(getSuri(suri, type), password, {
-      genesisHash,
-      name
-    }, type);
-    return true;
-  }
-  accountsChangePassword(_ref5) {
-    let {
-      address,
-      newPass,
-      oldPass
-    } = _ref5;
-    const pair = _uiKeyring.default.getPair(address);
-    (0, _util.assert)(pair, 'Unable to find pair');
-    try {
-      if (!pair.isLocked) {
-        pair.lock();
-      }
-      pair.decodePkcs8(oldPass);
-    } catch (error) {
-      throw new Error('oldPass is invalid');
-    }
-    _uiKeyring.default.encryptAccount(pair, newPass);
-    return true;
-  }
-  accountsEdit(_ref6) {
-    let {
-      address,
-      name
-    } = _ref6;
-    const pair = _uiKeyring.default.getPair(address);
-    (0, _util.assert)(pair, 'Unable to find pair');
-    _uiKeyring.default.saveAccountMeta(pair, {
-      ...pair.meta,
-      name
-    });
-    return true;
-  }
-  accountsExport(_ref7) {
-    let {
-      address,
-      password
-    } = _ref7;
-    return {
-      exportedJson: _uiKeyring.default.backupAccount(_uiKeyring.default.getPair(address), password)
-    };
-  }
-  async accountsBatchExport(_ref8) {
-    let {
-      addresses,
-      password
-    } = _ref8;
-    return {
-      exportedJson: await _uiKeyring.default.backupAccounts(addresses, password)
-    };
-  }
-  accountsForget(_ref9) {
-    let {
-      address
-    } = _ref9;
-    const authorizedAccountsDiff = [];
-
-    // cycle through authUrls and prepare the array of diff
-    Object.entries(this.#state.authUrls).forEach(_ref10 => {
-      let [url, urlInfo] = _ref10;
-      if (!urlInfo.authorizedAccounts.includes(address)) {
-        return;
-      }
-      authorizedAccountsDiff.push([url, urlInfo.authorizedAccounts.filter(previousAddress => previousAddress !== address)]);
-    });
-    this.#state.updateAuthorizedAccounts(authorizedAccountsDiff);
-
-    // cycle through default account selection for auth and remove any occurence of the account
-    const newDefaultAuthAccounts = this.#state.defaultAuthAccountSelection.filter(defaultSelectionAddress => defaultSelectionAddress !== address);
-    this.#state.updateDefaultAuthAccounts(newDefaultAuthAccounts);
-    _uiKeyring.default.forgetAccount(address);
-    return true;
-  }
-  refreshAccountPasswordCache(pair) {
-    const {
-      address
-    } = pair;
-    const savedExpiry = this.#cachedUnlocks[address] || 0;
-    const remainingTime = savedExpiry - Date.now();
-    if (remainingTime < 0) {
-      this.#cachedUnlocks[address] = 0;
-      pair.lock();
-      return 0;
-    }
-    return remainingTime;
-  }
-  accountsShow(_ref11) {
-    let {
-      address,
-      isShowing
-    } = _ref11;
-    const pair = _uiKeyring.default.getPair(address);
-    (0, _util.assert)(pair, 'Unable to find pair');
-    _uiKeyring.default.saveAccountMeta(pair, {
-      ...pair.meta,
-      isHidden: !isShowing
-    });
-    return true;
-  }
-  accountsTie(_ref12) {
-    let {
-      address,
-      genesisHash
-    } = _ref12;
-    const pair = _uiKeyring.default.getPair(address);
-    (0, _util.assert)(pair, 'Unable to find pair');
-    _uiKeyring.default.saveAccountMeta(pair, {
-      ...pair.meta,
-      genesisHash
-    });
-    return true;
-  }
-  accountsValidate(_ref13) {
-    let {
-      address,
-      password
-    } = _ref13;
-    try {
-      _uiKeyring.default.backupAccount(_uiKeyring.default.getPair(address), password);
-      return true;
-    } catch (e) {
-      return false;
-    }
-  }
-  accountsSubscribe(id, port) {
-    const cb = (0, _subscriptions.createSubscription)(id, port);
-    const subscription = _accounts.accounts.subject.subscribe(accounts => cb(this.transformAccounts(accounts)));
-    port.onDisconnect.addListener(() => {
-      (0, _subscriptions.unsubscribe)(id);
-      subscription.unsubscribe();
-    });
-    return true;
-  }
-  authorizeApprove(_ref14) {
-    let {
-      authorizedAccounts,
-      id
-    } = _ref14;
-    const queued = this.#state.getAuthRequest(id);
-    (0, _util.assert)(queued, 'Unable to find request');
-    const {
-      resolve
-    } = queued;
-    resolve({
-      authorizedAccounts,
-      result: true
-    });
-    return true;
-  }
-  authorizeUpdate(_ref15) {
-    let {
-      authorizedAccounts,
-      url
-    } = _ref15;
-    return this.#state.updateAuthorizedAccounts([[url, authorizedAccounts]]);
-  }
-  getAuthList() {
-    return {
-      list: this.#state.authUrls
-    };
-  }
-
-  // FIXME This looks very much like what we have in accounts
-  authorizeSubscribe(id, port) {
-    const cb = (0, _subscriptions.createSubscription)(id, port);
-    const subscription = this.#state.authSubject.subscribe(requests => cb(requests));
-    port.onDisconnect.addListener(() => {
-      (0, _subscriptions.unsubscribe)(id);
-      subscription.unsubscribe();
-    });
-    return true;
-  }
-  metadataApprove(_ref16) {
-    let {
-      id
-    } = _ref16;
-    const queued = this.#state.getMetaRequest(id);
-    (0, _util.assert)(queued, 'Unable to find request');
-    const {
-      request,
-      resolve
-    } = queued;
-    this.#state.saveMetadata(request);
-    resolve(true);
-    return true;
-  }
-  metadataGet(genesisHash) {
-    return this.#state.knownMetadata.find(result => result.genesisHash === genesisHash) || null;
-  }
-  metadataList() {
-    return this.#state.knownMetadata;
-  }
-  metadataReject(_ref17) {
-    let {
-      id
-    } = _ref17;
-    const queued = this.#state.getMetaRequest(id);
-    (0, _util.assert)(queued, 'Unable to find request');
-    const {
-      reject
-    } = queued;
-    reject(new Error('Rejected'));
-    return true;
-  }
-  metadataSubscribe(id, port) {
-    const cb = (0, _subscriptions.createSubscription)(id, port);
-    const subscription = this.#state.metaSubject.subscribe(requests => cb(requests));
-    port.onDisconnect.addListener(() => {
-      (0, _subscriptions.unsubscribe)(id);
-      subscription.unsubscribe();
-    });
-    return true;
-  }
-  jsonRestore(_ref18) {
-    let {
-      file,
-      password
-    } = _ref18;
-    try {
-      _uiKeyring.default.restoreAccount(file, password);
-    } catch (error) {
-      throw new Error(error.message);
-    }
-  }
-  batchRestore(_ref19) {
-    let {
-      file,
-      password
-    } = _ref19;
-    try {
-      _uiKeyring.default.restoreAccounts(file, password);
-    } catch (error) {
-      throw new Error(error.message);
-    }
-  }
-  jsonGetAccountInfo(json) {
-    try {
-      const {
-        address,
-        meta: {
-          genesisHash,
-          name
-        },
-        type
-      } = _uiKeyring.default.createFromJson(json);
-      return {
-        address,
-        genesisHash,
-        name,
-        type
-      };
-    } catch (e) {
-      console.error(e);
-      throw new Error(e.message);
-    }
-  }
-  seedCreate(_ref20) {
-    let {
-      length = SEED_DEFAULT_LENGTH,
-      seed: _seed,
-      type
-    } = _ref20;
-    const seed = _seed || (0, _utilCrypto.mnemonicGenerate)(length);
-    return {
-      address: _uiKeyring.default.createFromUri(getSuri(seed, type), {}, type).address,
-      seed
-    };
-  }
-  seedValidate(_ref21) {
-    let {
-      suri,
-      type
-    } = _ref21;
-    const {
-      phrase
-    } = (0, _utilCrypto.keyExtractSuri)(suri);
-    if ((0, _util.isHex)(phrase)) {
-      (0, _util.assert)((0, _util.isHex)(phrase, 256), 'Hex seed needs to be 256-bits');
-    } else {
-      // sadly isHex detects as string, so we need a cast here
-      (0, _util.assert)(SEED_LENGTHS.includes(phrase.split(' ').length), `Mnemonic needs to contain ${SEED_LENGTHS.join(', ')} words`);
-      (0, _util.assert)((0, _utilCrypto.mnemonicValidate)(phrase), 'Not a valid mnemonic seed');
-    }
-    return {
-      address: _uiKeyring.default.createFromUri(getSuri(suri, type), {}, type).address,
-      suri
-    };
-  }
-  signingApprovePassword(_ref22) {
-    let {
-      id,
-      password,
-      savePass
-    } = _ref22;
-    const queued = this.#state.getSignRequest(id);
-    (0, _util.assert)(queued, 'Unable to find request');
-    const {
-      reject,
-      request,
-      resolve
-    } = queued;
-    const pair = _uiKeyring.default.getPair(queued.account.address);
-    if (!pair) {
-      reject(new Error('Unable to find pair'));
-      return false;
-    }
-    this.refreshAccountPasswordCache(pair);
-
-    // if the keyring pair is locked, the password is needed
-    if (pair.isLocked && !password) {
-      reject(new Error('Password needed to unlock the account'));
-    }
-    if (pair.isLocked) {
-      pair.decodePkcs8(password);
-    }
-
-    // construct a new registry (avoiding pollution), between requests
-    let registry;
-    const {
-      payload
-    } = request;
-    if (isJsonPayload(payload)) {
-      // Get the metadata for the genesisHash
-      const metadata = this.#state.knownMetadata.find(_ref23 => {
-        let {
-          genesisHash
-        } = _ref23;
-        return genesisHash === payload.genesisHash;
-      });
-      if (metadata) {
-        // we have metadata, expand it and extract the info/registry
-        const expanded = (0, _extensionChains.metadataExpand)(metadata, false);
-        registry = expanded.registry;
-        registry.setSignedExtensions(payload.signedExtensions, expanded.definition.userExtensions);
-      } else {
-        // we have no metadata, create a new registry
-        registry = new _types.TypeRegistry();
-        registry.setSignedExtensions(payload.signedExtensions);
-      }
-    } else {
-      // for non-payload, just create a registry to use
-      registry = new _types.TypeRegistry();
-    }
-    const result = request.sign(registry, pair);
-    if (savePass) {
-      // unlike queued.account.address the following
-      // address is encoded with the default prefix
-      // which what is used for password caching mapping
-      this.#cachedUnlocks[pair.address] = Date.now() + _defaults.PASSWORD_EXPIRY_MS;
-    } else {
-      pair.lock();
-    }
-    resolve({
-      id,
-      ...result
-    });
-    return true;
-  }
-  signingApproveSignature(_ref24) {
-    let {
-      id,
-      signature
-    } = _ref24;
-    const queued = this.#state.getSignRequest(id);
-    (0, _util.assert)(queued, 'Unable to find request');
-    const {
-      resolve
-    } = queued;
-    resolve({
-      id,
-      signature
-    });
-    return true;
-  }
-  signingCancel(_ref25) {
-    let {
-      id
-    } = _ref25;
-    const queued = this.#state.getSignRequest(id);
-    (0, _util.assert)(queued, 'Unable to find request');
-    const {
-      reject
-    } = queued;
-    reject(new Error('Cancelled'));
-    return true;
-  }
-  signingIsLocked(_ref26) {
-    let {
-      id
-    } = _ref26;
-    const queued = this.#state.getSignRequest(id);
-    (0, _util.assert)(queued, 'Unable to find request');
-    const address = queued.request.payload.address;
-    const pair = _uiKeyring.default.getPair(address);
-    (0, _util.assert)(pair, 'Unable to find pair');
-    const remainingTime = this.refreshAccountPasswordCache(pair);
-    return {
-      isLocked: pair.isLocked,
-      remainingTime
-    };
-  }
-
-  // FIXME This looks very much like what we have in authorization
-  signingSubscribe(id, port) {
-    const cb = (0, _subscriptions.createSubscription)(id, port);
-    const subscription = this.#state.signSubject.subscribe(requests => cb(requests));
-    port.onDisconnect.addListener(() => {
-      (0, _subscriptions.unsubscribe)(id);
-      subscription.unsubscribe();
-    });
-    return true;
-  }
-  windowOpen(path) {
-    const url = `${chrome.extension.getURL('index.html')}#${path}`;
-    if (!_defaults.ALLOWED_PATH.includes(path)) {
-      console.error('Not allowed to open the url:', url);
-      return false;
-    }
-    (0, _helpers.withErrorLog)(() => chrome.tabs.create({
-      url
-    }));
-    return true;
-  }
-  derive(parentAddress, suri, password, metadata) {
-    const parentPair = _uiKeyring.default.getPair(parentAddress);
-    try {
-      parentPair.decodePkcs8(password);
-    } catch (e) {
-      throw new Error('invalid password');
-    }
-    try {
-      return parentPair.derive(suri, metadata);
-    } catch (err) {
-      throw new Error(`"${suri}" is not a valid derivation path`);
-    }
-  }
-  derivationValidate(_ref27) {
-    let {
-      parentAddress,
-      parentPassword,
-      suri
-    } = _ref27;
-    const childPair = this.derive(parentAddress, suri, parentPassword, {});
-    return {
-      address: childPair.address,
-      suri
-    };
-  }
-  derivationCreate(_ref28) {
-    let {
-      genesisHash,
-      name,
-      parentAddress,
-      parentPassword,
-      password,
-      suri
-    } = _ref28;
-    const childPair = this.derive(parentAddress, suri, parentPassword, {
-      genesisHash,
-      name,
-      parentAddress,
-      suri
-    });
-    _uiKeyring.default.addPair(childPair, password);
-    return true;
-  }
-  removeAuthorization(url) {
-    return {
-      list: this.#state.removeAuthorization(url)
-    };
-  }
-  deleteAuthRequest(requestId) {
-    return this.#state.deleteAuthRequest(requestId);
-  }
-  updateCurrentTabs(_ref29) {
-    let {
-      urls
-    } = _ref29;
-    this.#state.udateCurrentTabsUrl(urls);
-  }
-  getConnectedTabsUrl() {
-    return this.#state.getConnectedTabsUrl();
-  }
-
-  // Weird thought, the eslint override is not needed in Tabs
-  // eslint-disable-next-line @typescript-eslint/require-await
-  async handle(id, type, request, port) {
-    switch (type) {
-      case 'pri(authorize.approve)':
-        return this.authorizeApprove(request);
-      case 'pri(authorize.list)':
-        return this.getAuthList();
-      case 'pri(authorize.remove)':
-        return this.removeAuthorization(request);
-      case 'pri(authorize.delete.request)':
-        return this.deleteAuthRequest(request);
-      case 'pri(authorize.requests)':
-        return port && this.authorizeSubscribe(id, port);
-      case 'pri(authorize.update)':
-        return this.authorizeUpdate(request);
-      case 'pri(accounts.create.external)':
-        return this.accountsCreateExternal(request);
-      case 'pri(accounts.create.hardware)':
-        return this.accountsCreateHardware(request);
-      case 'pri(accounts.create.suri)':
-        return this.accountsCreateSuri(request);
-      case 'pri(accounts.changePassword)':
-        return this.accountsChangePassword(request);
-      case 'pri(accounts.edit)':
-        return this.accountsEdit(request);
-      case 'pri(accounts.export)':
-        return this.accountsExport(request);
-      case 'pri(accounts.batchExport)':
-        return this.accountsBatchExport(request);
-      case 'pri(accounts.forget)':
-        return this.accountsForget(request);
-      case 'pri(accounts.show)':
-        return this.accountsShow(request);
-      case 'pri(accounts.subscribe)':
-        return port && this.accountsSubscribe(id, port);
-      case 'pri(accounts.tie)':
-        return this.accountsTie(request);
-      case 'pri(accounts.validate)':
-        return this.accountsValidate(request);
-      case 'pri(metadata.approve)':
-        return this.metadataApprove(request);
-      case 'pri(metadata.get)':
-        return this.metadataGet(request);
-      case 'pri(metadata.list)':
-        return this.metadataList();
-      case 'pri(metadata.reject)':
-        return this.metadataReject(request);
-      case 'pri(metadata.requests)':
-        return port && this.metadataSubscribe(id, port);
-      case 'pri(activeTabsUrl.update)':
-        return this.updateCurrentTabs(request);
-      case 'pri(connectedTabsUrl.get)':
-        return this.getConnectedTabsUrl();
-      case 'pri(derivation.create)':
-        return this.derivationCreate(request);
-      case 'pri(derivation.validate)':
-        return this.derivationValidate(request);
-      case 'pri(json.restore)':
-        return this.jsonRestore(request);
-      case 'pri(json.batchRestore)':
-        return this.batchRestore(request);
-      case 'pri(json.account.info)':
-        return this.jsonGetAccountInfo(request);
-      case 'pri(ping)':
-        return Promise.resolve(true);
-      case 'pri(seed.create)':
-        return this.seedCreate(request);
-      case 'pri(seed.validate)':
-        return this.seedValidate(request);
-      case 'pri(settings.notification)':
-        return this.#state.setNotification(request);
-      case 'pri(signing.approve.password)':
-        return this.signingApprovePassword(request);
-      case 'pri(signing.approve.signature)':
-        return this.signingApproveSignature(request);
-      case 'pri(signing.cancel)':
-        return this.signingCancel(request);
-      case 'pri(signing.isLocked)':
-        return this.signingIsLocked(request);
-      case 'pri(signing.requests)':
-        return port && this.signingSubscribe(id, port);
-      case 'pri(window.open)':
-        return this.windowOpen(request);
-      default:
-        throw new Error(`Unable to handle message of type ${type}`);
-    }
-  }
+    constructor(state) {
+        _Extension_cachedUnlocks.set(this, void 0);
+        _Extension_state.set(this, void 0);
+        tslib_1.__classPrivateFieldSet(this, _Extension_cachedUnlocks, {}, "f");
+        tslib_1.__classPrivateFieldSet(this, _Extension_state, state, "f");
+    }
+    transformAccounts(accounts) {
+        return Object.values(accounts).map(({ json: { address, meta }, type }) => ({
+            address,
+            isDefaultAuthSelected: tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").defaultAuthAccountSelection.includes(address),
+            ...meta,
+            type
+        }));
+    }
+    accountsCreateExternal({ address, genesisHash, name }) {
+        ui_keyring_1.default.addExternal(address, { genesisHash, name });
+        return true;
+    }
+    accountsCreateHardware({ accountIndex, address, addressOffset, genesisHash, hardwareType, name }) {
+        ui_keyring_1.default.addHardware(address, hardwareType, { accountIndex, addressOffset, genesisHash, name });
+        return true;
+    }
+    accountsCreateSuri({ genesisHash, name, password, suri, type }) {
+        ui_keyring_1.default.addUri(getSuri(suri, type), password, { genesisHash, name }, type);
+        return true;
+    }
+    accountsChangePassword({ address, newPass, oldPass }) {
+        const pair = ui_keyring_1.default.getPair(address);
+        (0, util_1.assert)(pair, 'Unable to find pair');
+        try {
+            if (!pair.isLocked) {
+                pair.lock();
+            }
+            pair.decodePkcs8(oldPass);
+        }
+        catch (error) {
+            throw new Error('oldPass is invalid');
+        }
+        ui_keyring_1.default.encryptAccount(pair, newPass);
+        return true;
+    }
+    accountsEdit({ address, name }) {
+        const pair = ui_keyring_1.default.getPair(address);
+        (0, util_1.assert)(pair, 'Unable to find pair');
+        ui_keyring_1.default.saveAccountMeta(pair, { ...pair.meta, name });
+        return true;
+    }
+    accountsExport({ address, password }) {
+        return { exportedJson: ui_keyring_1.default.backupAccount(ui_keyring_1.default.getPair(address), password) };
+    }
+    async accountsBatchExport({ addresses, password }) {
+        return {
+            exportedJson: await ui_keyring_1.default.backupAccounts(addresses, password)
+        };
+    }
+    accountsForget({ address }) {
+        const authorizedAccountsDiff = [];
+        // cycle through authUrls and prepare the array of diff
+        Object.entries(tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").authUrls).forEach(([url, urlInfo]) => {
+            if (!urlInfo.authorizedAccounts.includes(address)) {
+                return;
+            }
+            authorizedAccountsDiff.push([url, urlInfo.authorizedAccounts.filter((previousAddress) => previousAddress !== address)]);
+        });
+        tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").updateAuthorizedAccounts(authorizedAccountsDiff);
+        // cycle through default account selection for auth and remove any occurence of the account
+        const newDefaultAuthAccounts = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").defaultAuthAccountSelection.filter((defaultSelectionAddress) => defaultSelectionAddress !== address);
+        tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").updateDefaultAuthAccounts(newDefaultAuthAccounts);
+        ui_keyring_1.default.forgetAccount(address);
+        return true;
+    }
+    refreshAccountPasswordCache(pair) {
+        const { address } = pair;
+        const savedExpiry = tslib_1.__classPrivateFieldGet(this, _Extension_cachedUnlocks, "f")[address] || 0;
+        const remainingTime = savedExpiry - Date.now();
+        if (remainingTime < 0) {
+            tslib_1.__classPrivateFieldGet(this, _Extension_cachedUnlocks, "f")[address] = 0;
+            pair.lock();
+            return 0;
+        }
+        return remainingTime;
+    }
+    accountsShow({ address, isShowing }) {
+        const pair = ui_keyring_1.default.getPair(address);
+        (0, util_1.assert)(pair, 'Unable to find pair');
+        ui_keyring_1.default.saveAccountMeta(pair, { ...pair.meta, isHidden: !isShowing });
+        return true;
+    }
+    accountsTie({ address, genesisHash }) {
+        const pair = ui_keyring_1.default.getPair(address);
+        (0, util_1.assert)(pair, 'Unable to find pair');
+        ui_keyring_1.default.saveAccountMeta(pair, { ...pair.meta, genesisHash });
+        return true;
+    }
+    accountsValidate({ address, password }) {
+        try {
+            ui_keyring_1.default.backupAccount(ui_keyring_1.default.getPair(address), password);
+            return true;
+        }
+        catch (e) {
+            return false;
+        }
+    }
+    accountsSubscribe(id, port) {
+        const cb = (0, subscriptions_1.createSubscription)(id, port);
+        const subscription = accounts_1.accounts.subject.subscribe((accounts) => cb(this.transformAccounts(accounts)));
+        port.onDisconnect.addListener(() => {
+            (0, subscriptions_1.unsubscribe)(id);
+            subscription.unsubscribe();
+        });
+        return true;
+    }
+    authorizeApprove({ authorizedAccounts, id }) {
+        const queued = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getAuthRequest(id);
+        (0, util_1.assert)(queued, 'Unable to find request');
+        const { resolve } = queued;
+        resolve({ authorizedAccounts, result: true });
+        return true;
+    }
+    authorizeUpdate({ authorizedAccounts, url }) {
+        return tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").updateAuthorizedAccounts([[url, authorizedAccounts]]);
+    }
+    getAuthList() {
+        return { list: tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").authUrls };
+    }
+    // FIXME This looks very much like what we have in accounts
+    authorizeSubscribe(id, port) {
+        const cb = (0, subscriptions_1.createSubscription)(id, port);
+        const subscription = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").authSubject.subscribe((requests) => cb(requests));
+        port.onDisconnect.addListener(() => {
+            (0, subscriptions_1.unsubscribe)(id);
+            subscription.unsubscribe();
+        });
+        return true;
+    }
+    metadataApprove({ id }) {
+        const queued = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getMetaRequest(id);
+        (0, util_1.assert)(queued, 'Unable to find request');
+        const { request, resolve } = queued;
+        tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").saveMetadata(request);
+        resolve(true);
+        return true;
+    }
+    metadataGet(genesisHash) {
+        return tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").knownMetadata.find((result) => result.genesisHash === genesisHash) || null;
+    }
+    metadataList() {
+        return tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").knownMetadata;
+    }
+    metadataReject({ id }) {
+        const queued = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getMetaRequest(id);
+        (0, util_1.assert)(queued, 'Unable to find request');
+        const { reject } = queued;
+        reject(new Error('Rejected'));
+        return true;
+    }
+    metadataSubscribe(id, port) {
+        const cb = (0, subscriptions_1.createSubscription)(id, port);
+        const subscription = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").metaSubject.subscribe((requests) => cb(requests));
+        port.onDisconnect.addListener(() => {
+            (0, subscriptions_1.unsubscribe)(id);
+            subscription.unsubscribe();
+        });
+        return true;
+    }
+    jsonRestore({ file, password }) {
+        try {
+            ui_keyring_1.default.restoreAccount(file, password);
+        }
+        catch (error) {
+            throw new Error(error.message);
+        }
+    }
+    batchRestore({ file, password }) {
+        try {
+            ui_keyring_1.default.restoreAccounts(file, password);
+        }
+        catch (error) {
+            throw new Error(error.message);
+        }
+    }
+    jsonGetAccountInfo(json) {
+        try {
+            const { address, meta: { genesisHash, name }, type } = ui_keyring_1.default.createFromJson(json);
+            return {
+                address,
+                genesisHash,
+                name,
+                type
+            };
+        }
+        catch (e) {
+            console.error(e);
+            throw new Error(e.message);
+        }
+    }
+    seedCreate({ length = SEED_DEFAULT_LENGTH, seed: _seed, type }) {
+        const seed = _seed || (0, util_crypto_1.mnemonicGenerate)(length);
+        return {
+            address: ui_keyring_1.default.createFromUri(getSuri(seed, type), {}, type).address,
+            seed
+        };
+    }
+    seedValidate({ suri, type }) {
+        const { phrase } = (0, util_crypto_1.keyExtractSuri)(suri);
+        if ((0, util_1.isHex)(phrase)) {
+            (0, util_1.assert)((0, util_1.isHex)(phrase, 256), 'Hex seed needs to be 256-bits');
+        }
+        else {
+            // sadly isHex detects as string, so we need a cast here
+            (0, util_1.assert)(SEED_LENGTHS.includes((phrase).split(' ').length), `Mnemonic needs to contain ${SEED_LENGTHS.join(', ')} words`);
+            (0, util_1.assert)((0, util_crypto_1.mnemonicValidate)(phrase), 'Not a valid mnemonic seed');
+        }
+        return {
+            address: ui_keyring_1.default.createFromUri(getSuri(suri, type), {}, type).address,
+            suri
+        };
+    }
+    signingApprovePassword({ id, password, savePass }) {
+        const queued = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getSignRequest(id);
+        (0, util_1.assert)(queued, 'Unable to find request');
+        const { reject, request, resolve } = queued;
+        const pair = ui_keyring_1.default.getPair(queued.account.address);
+        if (!pair) {
+            reject(new Error('Unable to find pair'));
+            return false;
+        }
+        this.refreshAccountPasswordCache(pair);
+        // if the keyring pair is locked, the password is needed
+        if (pair.isLocked && !password) {
+            reject(new Error('Password needed to unlock the account'));
+        }
+        if (pair.isLocked) {
+            pair.decodePkcs8(password);
+        }
+        // construct a new registry (avoiding pollution), between requests
+        let registry;
+        const { payload } = request;
+        if (isJsonPayload(payload)) {
+            // Get the metadata for the genesisHash
+            const metadata = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").knownMetadata.find(({ genesisHash }) => genesisHash === payload.genesisHash);
+            if (metadata) {
+                // we have metadata, expand it and extract the info/registry
+                const expanded = (0, extension_chains_1.metadataExpand)(metadata, false);
+                registry = expanded.registry;
+                registry.setSignedExtensions(payload.signedExtensions, expanded.definition.userExtensions);
+            }
+            else {
+                // we have no metadata, create a new registry
+                registry = new types_1.TypeRegistry();
+                registry.setSignedExtensions(payload.signedExtensions);
+            }
+        }
+        else {
+            // for non-payload, just create a registry to use
+            registry = new types_1.TypeRegistry();
+        }
+        const result = request.sign(registry, pair);
+        if (savePass) {
+            // unlike queued.account.address the following
+            // address is encoded with the default prefix
+            // which what is used for password caching mapping
+            tslib_1.__classPrivateFieldGet(this, _Extension_cachedUnlocks, "f")[pair.address] = Date.now() + defaults_1.PASSWORD_EXPIRY_MS;
+        }
+        else {
+            pair.lock();
+        }
+        resolve({
+            id,
+            ...result
+        });
+        return true;
+    }
+    signingApproveSignature({ id, signature }) {
+        const queued = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getSignRequest(id);
+        (0, util_1.assert)(queued, 'Unable to find request');
+        const { resolve } = queued;
+        resolve({ id, signature });
+        return true;
+    }
+    signingCancel({ id }) {
+        const queued = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getSignRequest(id);
+        (0, util_1.assert)(queued, 'Unable to find request');
+        const { reject } = queued;
+        reject(new Error('Cancelled'));
+        return true;
+    }
+    signingIsLocked({ id }) {
+        const queued = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getSignRequest(id);
+        (0, util_1.assert)(queued, 'Unable to find request');
+        const address = queued.request.payload.address;
+        const pair = ui_keyring_1.default.getPair(address);
+        (0, util_1.assert)(pair, 'Unable to find pair');
+        const remainingTime = this.refreshAccountPasswordCache(pair);
+        return {
+            isLocked: pair.isLocked,
+            remainingTime
+        };
+    }
+    // FIXME This looks very much like what we have in authorization
+    signingSubscribe(id, port) {
+        const cb = (0, subscriptions_1.createSubscription)(id, port);
+        const subscription = tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").signSubject.subscribe((requests) => cb(requests));
+        port.onDisconnect.addListener(() => {
+            (0, subscriptions_1.unsubscribe)(id);
+            subscription.unsubscribe();
+        });
+        return true;
+    }
+    windowOpen(path) {
+        const url = `${chrome.extension.getURL('index.html')}#${path}`;
+        if (!defaults_1.ALLOWED_PATH.includes(path)) {
+            console.error('Not allowed to open the url:', url);
+            return false;
+        }
+        (0, helpers_1.withErrorLog)(() => chrome.tabs.create({ url }));
+        return true;
+    }
+    derive(parentAddress, suri, password, metadata) {
+        const parentPair = ui_keyring_1.default.getPair(parentAddress);
+        try {
+            parentPair.decodePkcs8(password);
+        }
+        catch (e) {
+            throw new Error('invalid password');
+        }
+        try {
+            return parentPair.derive(suri, metadata);
+        }
+        catch (err) {
+            throw new Error(`"${suri}" is not a valid derivation path`);
+        }
+    }
+    derivationValidate({ parentAddress, parentPassword, suri }) {
+        const childPair = this.derive(parentAddress, suri, parentPassword, {});
+        return {
+            address: childPair.address,
+            suri
+        };
+    }
+    derivationCreate({ genesisHash, name, parentAddress, parentPassword, password, suri }) {
+        const childPair = this.derive(parentAddress, suri, parentPassword, {
+            genesisHash,
+            name,
+            parentAddress,
+            suri
+        });
+        ui_keyring_1.default.addPair(childPair, password);
+        return true;
+    }
+    removeAuthorization(url) {
+        return { list: tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").removeAuthorization(url) };
+    }
+    deleteAuthRequest(requestId) {
+        return tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").deleteAuthRequest(requestId);
+    }
+    updateCurrentTabs({ urls }) {
+        tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").udateCurrentTabsUrl(urls);
+    }
+    getConnectedTabsUrl() {
+        return tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").getConnectedTabsUrl();
+    }
+    // Weird thought, the eslint override is not needed in Tabs
+    // eslint-disable-next-line @typescript-eslint/require-await
+    async handle(id, type, request, port) {
+        switch (type) {
+            case 'pri(authorize.approve)':
+                return this.authorizeApprove(request);
+            case 'pri(authorize.list)':
+                return this.getAuthList();
+            case 'pri(authorize.remove)':
+                return this.removeAuthorization(request);
+            case 'pri(authorize.delete.request)':
+                return this.deleteAuthRequest(request);
+            case 'pri(authorize.requests)':
+                return port && this.authorizeSubscribe(id, port);
+            case 'pri(authorize.update)':
+                return this.authorizeUpdate(request);
+            case 'pri(accounts.create.external)':
+                return this.accountsCreateExternal(request);
+            case 'pri(accounts.create.hardware)':
+                return this.accountsCreateHardware(request);
+            case 'pri(accounts.create.suri)':
+                return this.accountsCreateSuri(request);
+            case 'pri(accounts.changePassword)':
+                return this.accountsChangePassword(request);
+            case 'pri(accounts.edit)':
+                return this.accountsEdit(request);
+            case 'pri(accounts.export)':
+                return this.accountsExport(request);
+            case 'pri(accounts.batchExport)':
+                return this.accountsBatchExport(request);
+            case 'pri(accounts.forget)':
+                return this.accountsForget(request);
+            case 'pri(accounts.show)':
+                return this.accountsShow(request);
+            case 'pri(accounts.subscribe)':
+                return port && this.accountsSubscribe(id, port);
+            case 'pri(accounts.tie)':
+                return this.accountsTie(request);
+            case 'pri(accounts.validate)':
+                return this.accountsValidate(request);
+            case 'pri(metadata.approve)':
+                return this.metadataApprove(request);
+            case 'pri(metadata.get)':
+                return this.metadataGet(request);
+            case 'pri(metadata.list)':
+                return this.metadataList();
+            case 'pri(metadata.reject)':
+                return this.metadataReject(request);
+            case 'pri(metadata.requests)':
+                return port && this.metadataSubscribe(id, port);
+            case 'pri(activeTabsUrl.update)':
+                return this.updateCurrentTabs(request);
+            case 'pri(connectedTabsUrl.get)':
+                return this.getConnectedTabsUrl();
+            case 'pri(derivation.create)':
+                return this.derivationCreate(request);
+            case 'pri(derivation.validate)':
+                return this.derivationValidate(request);
+            case 'pri(json.restore)':
+                return this.jsonRestore(request);
+            case 'pri(json.batchRestore)':
+                return this.batchRestore(request);
+            case 'pri(json.account.info)':
+                return this.jsonGetAccountInfo(request);
+            case 'pri(ping)':
+                return Promise.resolve(true);
+            case 'pri(seed.create)':
+                return this.seedCreate(request);
+            case 'pri(seed.validate)':
+                return this.seedValidate(request);
+            case 'pri(settings.notification)':
+                return tslib_1.__classPrivateFieldGet(this, _Extension_state, "f").setNotification(request);
+            case 'pri(signing.approve.password)':
+                return this.signingApprovePassword(request);
+            case 'pri(signing.approve.signature)':
+                return this.signingApproveSignature(request);
+            case 'pri(signing.cancel)':
+                return this.signingCancel(request);
+            case 'pri(signing.isLocked)':
+                return this.signingIsLocked(request);
+            case 'pri(signing.requests)':
+                return port && this.signingSubscribe(id, port);
+            case 'pri(window.open)':
+                return this.windowOpen(request);
+            default:
+                throw new Error(`Unable to handle message of type ${type}`);
+        }
+    }
 }
-exports.default = Extension;
+exports.default = Extension;
+_Extension_cachedUnlocks = new WeakMap(), _Extension_state = new WeakMap();