@metamask-previews/chain-agnostic-permission 0.2.0-preview-57dc1075 → 0.3.0-preview-b0b2930

package/dist/caip25Permission.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"caip25Permission.cjs","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":";;;AASA,2EAGyC;AAEzC,2CAOyB;AACzB,mCAA4C;AAE5C,+CAA8D;AAC9D,qDAI2B;AAC3B,qDAAwD;AACxD,6CAKuB;AAcvB;;GAEG;AACU,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;GAEG;AACU,QAAA,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE;;;;;GAKG;AACI,MAAM,kBAAkB,GAAG,CAAC,KAAwB,EAAE,EAAE;IAC7D,OAAO;QACL,IAAI,EAAE,wBAAgB;QACtB,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AALW,QAAA,kBAAkB,sBAK7B;AASF;;;;;;;GAOG;AACH,SAAgB,8BAA8B,CAC5C,aAAgC,EAChC,WAA8B,EAC9B,WAAgD;IAEhD,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,iBAAiB,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,IAAI,MAAM,CAAC,OAAO,CAC3D,iBAAiB,CAClB,EAAE;QACD,MAAM,mBAAmB,GAAG,WAA6C,CAAC;QAC1E,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAEnE,IAAI,mBAAmB,EAAE;YACvB,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CACnD,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC9D,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC1B,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG;oBACvC,QAAQ,EAAE,WAAW;iBACtB,CAAC;gBACF,SAAS;aACV;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;SAC/C;aAAM;YACL,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG,iBAAiB,CAAC;SAC5D;KACF;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AA/BD,wEA+BC;AAED;;;;;;;;GAQG;AACH,SAAS,qCAAqC,CAC5C,YAAkC,EAClC,YAAoD,EACpD,yBAA2D;IAE3D,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CACvD,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,IAAA,8BAAkB,EAAC,OAAO,EAAE;QAC1B,sBAAsB,EAAE,YAAY;QACpC,yBAAyB;KAC1B,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACI,MAAM,mBAAmB,GAAG,CAAC,EAClC,4BAA4B,EAC5B,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,GACwB,EAG/C,EAAE;IACJ,OAAO;QACL,IAAI,EAAE,wBAAgB;QACtB,SAAS,EAAE,CACT,MAAyD,EACzD,OAAgB,EAChB,OAAgB,EAChB,EAAE;YACF,IACE,CAAC,MAAM,CAAC,KAAK;gBACb,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC;gBAChD,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC;gBAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACpD,CAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EACzC;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,sDAAsD,wBAAgB,IAAI,CAC3G,CAAC;aACH;YAED,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,GACzD,MAAM,CAAC,KAAK,CAAC;YAEf,MAAM,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAC/C,iBAAiB,CAClB,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,IAAA,sCAA0B,EAAC,eAAe,CAAC,CAAC,CAAC;YAE1E,IAAI,CAAC,6BAA6B,EAAE;gBAClC,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,oEAAoE,wBAAgB,IAAI,CACzH,CAAC;aACH;YAED,IAAA,qCAA4B,EAAC,cAAc,CAAC,CAAC;YAC7C,IAAA,qCAA4B,EAAC,cAAc,CAAC,CAAC;YAE7C,MAAM,qBAAqB,GAAG,CAAC,OAAY,EAAE,EAAE;gBAC7C,IAAI;oBACF,4BAA4B,CAAC,OAAO,CAAC,CAAC;oBACtC,OAAO,IAAI,CAAC;iBACb;gBAAC,MAAM;oBACN,OAAO,KAAK,CAAC;iBACd;YACH,CAAC,CAAC;YAEF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,IAAA,kCAAsB,EAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,IAAA,kCAAsB,EAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,IAAI,CAAC,0BAA0B,IAAI,CAAC,0BAA0B,EAAE;gBAC9D,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,6DAA6D,wBAAgB,yCAAyC,CACvJ,CAAC;aACH;YAED,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,IAAI,CAAC,4BAA4B,IAAI,CAAC,4BAA4B,EAAE;gBAClE,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,yDAAyD,wBAAgB,yCAAyC,CACnJ,CAAC;aACH;QACH,CAAC;QACD,MAAM,EAAE,CACN,SAA4B,EAC5B,UAA6B,EACW,EAAE;YAC1C,MAAM,oBAAoB,GAAG,IAAA,+BAAmB,EAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YACF,MAAM,oBAAoB,GAAG,IAAA,+BAAmB,EAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YAEF,MAAM,uBAAuB,GAAG;gBAC9B,GAAG,SAAS,CAAC,iBAAiB;gBAC9B,GAAG,UAAU,CAAC,iBAAiB;aAChC,CAAC;YAEF,MAAM,WAAW,GAAsB;gBACrC,cAAc,EAAE,oBAAoB;gBACpC,cAAc,EAAE,oBAAoB;gBACpC,iBAAiB,EAAE,uBAAuB;gBAC1C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;aACjD,CAAC;YAEF,MAAM,WAAW,GAAG,8BAA8B,CAChD,SAAS,EACT,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,MAAM,IAAI,GAAG,8BAA8B,CACzC,WAAW,EACX,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AArIW,QAAA,mBAAmB,uBAqI9B;AAUF;;;;;GAKG;AACH,MAAM,oBAAoB,GAItB,GAAG,EAAE;IACP,OAAO;QACL,cAAc,EAAE,sCAAc,CAAC,SAAS;QACxC,UAAU,EAAE,qCAA6B;QACzC,cAAc,EAAE,CAAC,wBAAgB,CAAC;QAClC,eAAe,EAAE,CAAC,cAAsC,EAAE,EAAE,CAAC,IAAI;QACjE,SAAS,EAAE,CAAC,UAAgC,EAAE,EAAE;YAC9C,IACE,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC;gBAChC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,wBAAgB,EAClD;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,mEAAmE,wBAAgB,IAAI,CACxH,CAAC;aACH;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,qCAA6B;IACzC,oBAAoB;CACZ,CAAC,CAAC;AAEZ;;;GAGG;AACU,QAAA,oBAAoB,GAAG;IAClC,CAAC,wBAAgB,CAAC,EAAE;QAClB,WAAW;QACX,aAAa;KACd;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,aAAqB;IAClD,OAAO,CAAC,OAAsB,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,OAAO,KAAK,aAAa,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CACnC,WAAgC,EAChC,aAAqB;IAErB,IAAI,WAAW,CAAC,QAAQ,EAAE;QACxB,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAChD,qBAAqB,CAAC,aAAa,CAAC,CACrC,CAAC;KACH;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,iBAAoC,EACpC,aAAkB;IAElB,MAAM,kBAAkB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IAExD;QACE,kBAAkB,CAAC,cAAc;QACjC,kBAAkB,CAAC,cAAc;KAClC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE;YACjD,4BAA4B,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAA,gBAAO,EAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;IAEhE,IAAI,QAAQ,EAAE;QACZ,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;QACnD,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;KACpD,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE9C,IAAI,WAAW,EAAE;QACf,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,8CAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAClB,iBAAoC,EACpC,iBAAsC;IAEtC,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;QACnB,OAAO,KAAK,KAAK,iBAAiB,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IAEvD,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB,EAAE;QACpD,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,kBAAkB,GAAG;QACzB,GAAG,iBAAiB;QACpB,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;QACrD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;KACtD,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE;QAChB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;QACpD,OAAO,SAAS,KAAK,0BAAkB,CAAC,MAAM,CAAC;IACjD,CAAC,CACF,CAAC;IAEF,IAAI,kBAAkB,EAAE;QACtB,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,8CAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC","sourcesContent":["import type { NetworkClientId } from '@metamask/network-controller';\nimport type {\n  PermissionSpecificationBuilder,\n  EndowmentGetterParams,\n  ValidPermissionSpecification,\n  PermissionValidatorConstraint,\n  PermissionConstraint,\n  EndowmentCaveatSpecificationConstraint,\n} from '@metamask/permission-controller';\nimport {\n  CaveatMutatorOperation,\n  PermissionType,\n} from '@metamask/permission-controller';\nimport type { CaipAccountId, CaipChainId, Json } from '@metamask/utils';\nimport {\n  hasProperty,\n  KnownCaipNamespace,\n  parseCaipAccountId,\n  isObject,\n  type Hex,\n  type NonEmptyArray,\n} from '@metamask/utils';\nimport { cloneDeep, isEqual } from 'lodash';\n\nimport { assertIsInternalScopesObject } from './scope/assert';\nimport {\n  isSupportedAccount,\n  isSupportedScopeString,\n  isSupportedSessionProperty,\n} from './scope/supported';\nimport { mergeInternalScopes } from './scope/transform';\nimport {\n  parseScopeString,\n  type ExternalScopeString,\n  type InternalScopeObject,\n  type InternalScopesObject,\n} from './scope/types';\n\n/**\n * The CAIP-25 permission caveat value.\n * This permission contains the required and optional scopes and session properties from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request that initiated the permission session.\n * It also contains a boolean (isMultichainOrigin) indicating if the permission session is multichain, which may be needed to determine implicit permissioning.\n */\nexport type Caip25CaveatValue = {\n  requiredScopes: InternalScopesObject;\n  optionalScopes: InternalScopesObject;\n  sessionProperties: Record<string, Json>;\n  isMultichainOrigin: boolean;\n};\n\n/**\n * The name of the CAIP-25 permission caveat.\n */\nexport const Caip25CaveatType = 'authorizedScopes';\n\n/**\n * The target name of the CAIP-25 endowment permission.\n */\nexport const Caip25EndowmentPermissionName = 'endowment:caip25';\n\n/**\n * Creates a CAIP-25 permission caveat.\n *\n * @param value - The CAIP-25 permission caveat value.\n * @returns The CAIP-25 permission caveat (now including the type).\n */\nexport const createCaip25Caveat = (value: Caip25CaveatValue) => {\n  return {\n    type: Caip25CaveatType,\n    value,\n  };\n};\n\ntype Caip25EndowmentCaveatSpecificationBuilderOptions = {\n  findNetworkClientIdByChainId: (chainId: Hex) => NetworkClientId;\n  listAccounts: () => { type: string; address: Hex }[];\n  isNonEvmScopeSupported: (scope: CaipChainId) => boolean;\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[];\n};\n\n/**\n * Calculates the difference between two provided CAIP-25 permission caveat values, but only considering a single scope property at a time.\n *\n * @param originalValue - The existing CAIP-25 permission caveat value.\n * @param mergedValue - The result from merging existing and incoming CAIP-25 permission caveat values.\n * @param scopeToDiff - The required or optional scopes from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request.\n * @returns The difference between original and merged CAIP-25 permission caveat values.\n */\nexport function diffScopesForCaip25CaveatValue(\n  originalValue: Caip25CaveatValue,\n  mergedValue: Caip25CaveatValue,\n  scopeToDiff: 'optionalScopes' | 'requiredScopes',\n): Caip25CaveatValue {\n  const diff = cloneDeep(originalValue);\n\n  const mergedScopeToDiff = mergedValue[scopeToDiff];\n  for (const [scopeString, mergedScopeObject] of Object.entries(\n    mergedScopeToDiff,\n  )) {\n    const internalScopeString = scopeString as keyof typeof mergedScopeToDiff;\n    const originalScopeObject = diff[scopeToDiff][internalScopeString];\n\n    if (originalScopeObject) {\n      const newAccounts = mergedScopeObject.accounts.filter(\n        (account) => !originalScopeObject?.accounts.includes(account),\n      );\n      if (newAccounts.length > 0) {\n        diff[scopeToDiff][internalScopeString] = {\n          accounts: newAccounts,\n        };\n        continue;\n      }\n      delete diff[scopeToDiff][internalScopeString];\n    } else {\n      diff[scopeToDiff][internalScopeString] = mergedScopeObject;\n    }\n  }\n\n  return diff;\n}\n\n/**\n * Checks if every account in the given scopes object is supported.\n *\n * @param scopesObject - The scopes object to iterate over.\n * @param listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * addresses.\n * @returns True if every account in the scopes object is supported, false otherwise.\n */\nfunction isEveryAccountInScopesObjectSupported(\n  scopesObject: InternalScopesObject,\n  listAccounts: () => { type: string; address: Hex }[],\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[],\n) {\n  return Object.values(scopesObject).every((scopeObject) =>\n    scopeObject.accounts.every((account) =>\n      isSupportedAccount(account, {\n        getEvmInternalAccounts: listAccounts,\n        getNonEvmAccountAddresses,\n      }),\n    ),\n  );\n}\n\n/**\n * Helper that returns a `authorizedScopes` CAIP-25 caveat specification\n * that can be passed into the PermissionController constructor.\n *\n * @param options - The specification builder options.\n * @param options.findNetworkClientIdByChainId - The hook for getting the networkClientId that serves a chainId.\n * @param options.listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param options.isNonEvmScopeSupported - The hook that determines if an non EVM scopeString is supported.\n * @param options.getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * @returns The specification for the `caip25` caveat.\n */\nexport const caip25CaveatBuilder = ({\n  findNetworkClientIdByChainId,\n  listAccounts,\n  isNonEvmScopeSupported,\n  getNonEvmAccountAddresses,\n}: Caip25EndowmentCaveatSpecificationBuilderOptions): EndowmentCaveatSpecificationConstraint &\n  Required<\n    Pick<EndowmentCaveatSpecificationConstraint, 'validator' | 'merger'>\n  > => {\n  return {\n    type: Caip25CaveatType,\n    validator: (\n      caveat: { type: typeof Caip25CaveatType; value: unknown },\n      _origin?: string,\n      _target?: string,\n    ) => {\n      if (\n        !caveat.value ||\n        !hasProperty(caveat.value, 'requiredScopes') ||\n        !hasProperty(caveat.value, 'optionalScopes') ||\n        !hasProperty(caveat.value, 'isMultichainOrigin') ||\n        !hasProperty(caveat.value, 'sessionProperties') ||\n        typeof caveat.value.isMultichainOrigin !== 'boolean' ||\n        !isObject(caveat.value.sessionProperties)\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received invalid value for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      const { requiredScopes, optionalScopes, sessionProperties } =\n        caveat.value;\n\n      const allSessionPropertiesSupported = Object.keys(\n        sessionProperties,\n      ).every((sessionProperty) => isSupportedSessionProperty(sessionProperty));\n\n      if (!allSessionPropertiesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received unknown session property(s) for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      assertIsInternalScopesObject(requiredScopes);\n      assertIsInternalScopesObject(optionalScopes);\n\n      const isEvmChainIdSupported = (chainId: Hex) => {\n        try {\n          findNetworkClientIdByChainId(chainId);\n          return true;\n        } catch {\n          return false;\n        }\n      };\n\n      const allRequiredScopesSupported = Object.keys(requiredScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      const allOptionalScopesSupported = Object.keys(optionalScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      if (!allRequiredScopesSupported || !allOptionalScopesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received scopeString value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n\n      const allRequiredAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          requiredScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      const allOptionalAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          optionalScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      if (!allRequiredAccountsSupported || !allOptionalAccountsSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received account value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n    },\n    merger: (\n      leftValue: Caip25CaveatValue,\n      rightValue: Caip25CaveatValue,\n    ): [Caip25CaveatValue, Caip25CaveatValue] => {\n      const mergedRequiredScopes = mergeInternalScopes(\n        leftValue.requiredScopes,\n        rightValue.requiredScopes,\n      );\n      const mergedOptionalScopes = mergeInternalScopes(\n        leftValue.optionalScopes,\n        rightValue.optionalScopes,\n      );\n\n      const mergedSessionProperties = {\n        ...leftValue.sessionProperties,\n        ...rightValue.sessionProperties,\n      };\n\n      const mergedValue: Caip25CaveatValue = {\n        requiredScopes: mergedRequiredScopes,\n        optionalScopes: mergedOptionalScopes,\n        sessionProperties: mergedSessionProperties,\n        isMultichainOrigin: leftValue.isMultichainOrigin,\n      };\n\n      const partialDiff = diffScopesForCaip25CaveatValue(\n        leftValue,\n        mergedValue,\n        'requiredScopes',\n      );\n\n      const diff = diffScopesForCaip25CaveatValue(\n        partialDiff,\n        mergedValue,\n        'optionalScopes',\n      );\n\n      return [mergedValue, diff];\n    },\n  };\n};\n\ntype Caip25EndowmentSpecification = ValidPermissionSpecification<{\n  permissionType: PermissionType.Endowment;\n  targetName: typeof Caip25EndowmentPermissionName;\n  endowmentGetter: (_options?: EndowmentGetterParams) => null;\n  validator: PermissionValidatorConstraint;\n  allowedCaveats: Readonly<NonEmptyArray<string>> | null;\n}>;\n\n/**\n * Helper that returns a `endowment:caip25` specification that\n * can be passed into the PermissionController constructor.\n *\n * @returns The specification for the `caip25` endowment.\n */\nconst specificationBuilder: PermissionSpecificationBuilder<\n  PermissionType.Endowment,\n  Record<never, never>,\n  Caip25EndowmentSpecification\n> = () => {\n  return {\n    permissionType: PermissionType.Endowment,\n    targetName: Caip25EndowmentPermissionName,\n    allowedCaveats: [Caip25CaveatType],\n    endowmentGetter: (_getterOptions?: EndowmentGetterParams) => null,\n    validator: (permission: PermissionConstraint) => {\n      if (\n        permission.caveats?.length !== 1 ||\n        permission.caveats?.[0]?.type !== Caip25CaveatType\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Invalid caveats. There must be a single caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n    },\n  };\n};\n\n/**\n * The `caip25` endowment specification builder. Passed to the\n * `PermissionController` for constructing and validating the\n * `endowment:caip25` permission.\n */\nexport const caip25EndowmentBuilder = Object.freeze({\n  targetName: Caip25EndowmentPermissionName,\n  specificationBuilder,\n} as const);\n\n/**\n * Factories that construct caveat mutator functions that are passed to\n * PermissionController.updatePermissionsByCaveat.\n */\nexport const Caip25CaveatMutators = {\n  [Caip25CaveatType]: {\n    removeScope,\n    removeAccount,\n  },\n};\n\n/**\n * Removes the account from the scope object.\n *\n * @param targetAddress - The address to remove from the scope object.\n * @returns A function that removes the account from the scope object.\n */\nfunction removeAccountFilterFn(targetAddress: string) {\n  return (account: CaipAccountId) => {\n    const parsed = parseCaipAccountId(account);\n    return parsed.address !== targetAddress;\n  };\n}\n\n/**\n * Removes the account from the scope object.\n *\n * @param scopeObject - The scope object to remove the account from.\n * @param targetAddress - The address to remove from the scope object.\n */\nfunction removeAccountFromScopeObject(\n  scopeObject: InternalScopeObject,\n  targetAddress: string,\n) {\n  if (scopeObject.accounts) {\n    scopeObject.accounts = scopeObject.accounts.filter(\n      removeAccountFilterFn(targetAddress),\n    );\n  }\n}\n\n/**\n * Removes the target account from the scope object.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value from which to remove the account (across all chain scopes).\n * @param targetAddress - The address to remove from the scope object. Not a CAIP-10 formatted address because it will be removed across each chain scope.\n * @returns The updated scope object.\n */\nfunction removeAccount(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetAddress: Hex,\n) {\n  const updatedCaveatValue = cloneDeep(caip25CaveatValue);\n\n  [\n    updatedCaveatValue.requiredScopes,\n    updatedCaveatValue.optionalScopes,\n  ].forEach((scopes) => {\n    Object.entries(scopes).forEach(([, scopeObject]) => {\n      removeAccountFromScopeObject(scopeObject, targetAddress);\n    });\n  });\n\n  const noChange = isEqual(updatedCaveatValue, caip25CaveatValue);\n\n  if (noChange) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const hasAccounts = [\n    ...Object.values(updatedCaveatValue.requiredScopes),\n    ...Object.values(updatedCaveatValue.optionalScopes),\n  ].some(({ accounts }) => accounts.length > 0);\n\n  if (hasAccounts) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n\n/**\n * Removes the target scope from the value arrays of the given\n * `endowment:caip25` caveat. No-ops if the target scopeString is not in\n * the existing scopes.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value to remove the scope from.\n * @param targetScopeString - The scope that is being removed.\n * @returns The updated CAIP-25 permission caveat value.\n */\nfunction removeScope(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetScopeString: ExternalScopeString,\n) {\n  const newRequiredScopes = Object.entries(\n    caip25CaveatValue.requiredScopes,\n  ).filter(([scope]) => scope !== targetScopeString);\n  const newOptionalScopes = Object.entries(\n    caip25CaveatValue.optionalScopes,\n  ).filter(([scope]) => {\n    return scope !== targetScopeString;\n  });\n\n  const requiredScopesRemoved =\n    newRequiredScopes.length !==\n    Object.keys(caip25CaveatValue.requiredScopes).length;\n  const optionalScopesRemoved =\n    newOptionalScopes.length !==\n    Object.keys(caip25CaveatValue.optionalScopes).length;\n\n  if (!requiredScopesRemoved && !optionalScopesRemoved) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const updatedCaveatValue = {\n    ...caip25CaveatValue,\n    requiredScopes: Object.fromEntries(newRequiredScopes),\n    optionalScopes: Object.fromEntries(newOptionalScopes),\n  };\n\n  const hasNonWalletScopes = [...newRequiredScopes, ...newOptionalScopes].some(\n    ([scopeString]) => {\n      const { namespace } = parseScopeString(scopeString);\n      return namespace !== KnownCaipNamespace.Wallet;\n    },\n  );\n\n  if (hasNonWalletScopes) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n"]}
+{"version":3,"file":"caip25Permission.cjs","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":";;;AASA,2EAGyC;AAEzC,2CAOyB;AACzB,mCAA4C;AAE5C,sGAAmF;AACnF,oHAA0F;AAC1F,+CAA8D;AAC9D,qDAI2B;AAC3B,qDAAwD;AACxD,6CAKuB;AAcvB;;GAEG;AACU,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;GAEG;AACU,QAAA,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE;;;;;GAKG;AACI,MAAM,kBAAkB,GAAG,CAAC,KAAwB,EAAE,EAAE;IAC7D,OAAO;QACL,IAAI,EAAE,wBAAgB;QACtB,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AALW,QAAA,kBAAkB,sBAK7B;AASF;;;;;;;GAOG;AACH,SAAgB,8BAA8B,CAC5C,aAAgC,EAChC,WAA8B,EAC9B,WAAgD;IAEhD,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,iBAAiB,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,IAAI,MAAM,CAAC,OAAO,CAC3D,iBAAiB,CAClB,EAAE;QACD,MAAM,mBAAmB,GAAG,WAA6C,CAAC;QAC1E,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAEnE,IAAI,mBAAmB,EAAE;YACvB,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CACnD,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC9D,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC1B,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG;oBACvC,QAAQ,EAAE,WAAW;iBACtB,CAAC;gBACF,SAAS;aACV;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;SAC/C;aAAM;YACL,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG,iBAAiB,CAAC;SAC5D;KACF;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AA/BD,wEA+BC;AAED;;;;;;;;GAQG;AACH,SAAS,qCAAqC,CAC5C,YAAkC,EAClC,YAAoD,EACpD,yBAA2D;IAE3D,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CACvD,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,IAAA,8BAAkB,EAAC,OAAO,EAAE;QAC1B,sBAAsB,EAAE,YAAY;QACpC,yBAAyB;KAC1B,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACI,MAAM,mBAAmB,GAAG,CAAC,EAClC,4BAA4B,EAC5B,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,GACwB,EAG/C,EAAE;IACJ,OAAO;QACL,IAAI,EAAE,wBAAgB;QACtB,SAAS,EAAE,CACT,MAAyD,EACzD,OAAgB,EAChB,OAAgB,EAChB,EAAE;YACF,IACE,CAAC,MAAM,CAAC,KAAK;gBACb,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC;gBAChD,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC;gBAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACpD,CAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EACzC;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,sDAAsD,wBAAgB,IAAI,CAC3G,CAAC;aACH;YAED,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,GACzD,MAAM,CAAC,KAAK,CAAC;YAEf,MAAM,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAC/C,iBAAiB,CAClB,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,IAAA,sCAA0B,EAAC,eAAe,CAAC,CAAC,CAAC;YAE1E,IAAI,CAAC,6BAA6B,EAAE;gBAClC,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,oEAAoE,wBAAgB,IAAI,CACzH,CAAC;aACH;YAED,IAAA,qCAA4B,EAAC,cAAc,CAAC,CAAC;YAC7C,IAAA,qCAA4B,EAAC,cAAc,CAAC,CAAC;YAE7C,IACE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EACxC;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,kDAAkD,wBAAgB,IAAI,CACvG,CAAC;aACH;YAED,MAAM,qBAAqB,GAAG,CAAC,OAAY,EAAE,EAAE;gBAC7C,IAAI;oBACF,4BAA4B,CAAC,OAAO,CAAC,CAAC;oBACtC,OAAO,IAAI,CAAC;iBACb;gBAAC,MAAM;oBACN,OAAO,KAAK,CAAC;iBACd;YACH,CAAC,CAAC;YAEF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,IAAA,kCAAsB,EAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,IAAA,kCAAsB,EAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,IAAI,CAAC,0BAA0B,IAAI,CAAC,0BAA0B,EAAE;gBAC9D,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,6DAA6D,wBAAgB,yCAAyC,CACvJ,CAAC;aACH;YAED,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,IAAI,CAAC,4BAA4B,IAAI,CAAC,4BAA4B,EAAE;gBAClE,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,yDAAyD,wBAAgB,yCAAyC,CACnJ,CAAC;aACH;QACH,CAAC;QACD,MAAM,EAAE,CACN,SAA4B,EAC5B,UAA6B,EACW,EAAE;YAC1C,MAAM,oBAAoB,GAAG,IAAA,+BAAmB,EAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YACF,MAAM,oBAAoB,GAAG,IAAA,+BAAmB,EAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YAEF,MAAM,uBAAuB,GAAG;gBAC9B,GAAG,SAAS,CAAC,iBAAiB;gBAC9B,GAAG,UAAU,CAAC,iBAAiB;aAChC,CAAC;YAEF,MAAM,WAAW,GAAsB;gBACrC,cAAc,EAAE,oBAAoB;gBACpC,cAAc,EAAE,oBAAoB;gBACpC,iBAAiB,EAAE,uBAAuB;gBAC1C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;aACjD,CAAC;YAEF,MAAM,WAAW,GAAG,8BAA8B,CAChD,SAAS,EACT,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,MAAM,IAAI,GAAG,8BAA8B,CACzC,WAAW,EACX,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AA9IW,QAAA,mBAAmB,uBA8I9B;AAUF;;;;;GAKG;AACH,MAAM,oBAAoB,GAItB,GAAG,EAAE;IACP,OAAO;QACL,cAAc,EAAE,sCAAc,CAAC,SAAS;QACxC,UAAU,EAAE,qCAA6B;QACzC,cAAc,EAAE,CAAC,wBAAgB,CAAC;QAClC,eAAe,EAAE,CAAC,cAAsC,EAAE,EAAE,CAAC,IAAI;QACjE,SAAS,EAAE,CAAC,UAAgC,EAAE,EAAE;YAC9C,IACE,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC;gBAChC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,wBAAgB,EAClD;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,qCAA6B,mEAAmE,wBAAgB,IAAI,CACxH,CAAC;aACH;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,qCAA6B;IACzC,oBAAoB;CACZ,CAAC,CAAC;AAEZ;;;GAGG;AACU,QAAA,oBAAoB,GAAG;IAClC,CAAC,wBAAgB,CAAC,EAAE;QAClB,WAAW;QACX,aAAa;KACd;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,aAAqB;IAClD,OAAO,CAAC,OAAsB,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,OAAO,KAAK,aAAa,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CACnC,WAAgC,EAChC,aAAqB;IAErB,IAAI,WAAW,CAAC,QAAQ,EAAE;QACxB,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAChD,qBAAqB,CAAC,aAAa,CAAC,CACrC,CAAC;KACH;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,iBAAoC,EACpC,aAAkB;IAElB,MAAM,kBAAkB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IAExD;QACE,kBAAkB,CAAC,cAAc;QACjC,kBAAkB,CAAC,cAAc;KAClC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE;YACjD,4BAA4B,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAA,gBAAO,EAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;IAEhE,IAAI,QAAQ,EAAE;QACZ,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;QACnD,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;KACpD,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE9C,IAAI,WAAW,EAAE;QACf,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,8CAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAClB,iBAAoC,EACpC,iBAAsC;IAEtC,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;QACnB,OAAO,KAAK,KAAK,iBAAiB,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IAEvD,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB,EAAE;QACpD,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,kBAAkB,GAAG;QACzB,GAAG,iBAAiB;QACpB,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;QACrD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;KACtD,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE;QAChB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;QACpD,OAAO,SAAS,KAAK,0BAAkB,CAAC,MAAM,CAAC;IACjD,CAAC,CACF,CAAC;IAEF,IAAI,kBAAkB,EAAE;QACtB,OAAO;YACL,SAAS,EAAE,8CAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,8CAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACI,MAAM,oBAAoB,GAAG,CAClC,iBAAoC,EACpC,gBAAiC,EACjC,QAAuB,EAKvB,EAAE;IACF,MAAM,qBAAqB,GAAG,IAAA,8DAAoB,EAChD,iBAAiB,EACjB,QAAQ,CACT,CAAC;IAEF,MAAM,uBAAuB,GAAG,IAAA,uDAAoB,EAClD,qBAAqB,EACrB,gBAAgB,CACjB,CAAC;IAEF,OAAO;QACL,CAAC,qCAA6B,CAAC,EAAE;YAC/B,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,wBAAgB;oBACtB,KAAK,EAAE,uBAAuB;iBAC/B;aACF;SACF;KACF,CAAC;AACJ,CAAC,CAAC;AA7BW,QAAA,oBAAoB,wBA6B/B","sourcesContent":["import type { NetworkClientId } from '@metamask/network-controller';\nimport type {\n  PermissionSpecificationBuilder,\n  EndowmentGetterParams,\n  ValidPermissionSpecification,\n  PermissionValidatorConstraint,\n  PermissionConstraint,\n  EndowmentCaveatSpecificationConstraint,\n} from '@metamask/permission-controller';\nimport {\n  CaveatMutatorOperation,\n  PermissionType,\n} from '@metamask/permission-controller';\nimport type { CaipAccountId, CaipChainId, Json } from '@metamask/utils';\nimport {\n  hasProperty,\n  KnownCaipNamespace,\n  parseCaipAccountId,\n  isObject,\n  type Hex,\n  type NonEmptyArray,\n} from '@metamask/utils';\nimport { cloneDeep, isEqual } from 'lodash';\n\nimport { setPermittedAccounts } from './adapters/caip-permission-adapter-accounts';\nimport { setPermittedChainIds } from './adapters/caip-permission-adapter-permittedChains';\nimport { assertIsInternalScopesObject } from './scope/assert';\nimport {\n  isSupportedAccount,\n  isSupportedScopeString,\n  isSupportedSessionProperty,\n} from './scope/supported';\nimport { mergeInternalScopes } from './scope/transform';\nimport {\n  parseScopeString,\n  type ExternalScopeString,\n  type InternalScopeObject,\n  type InternalScopesObject,\n} from './scope/types';\n\n/**\n * The CAIP-25 permission caveat value.\n * This permission contains the required and optional scopes and session properties from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request that initiated the permission session.\n * It also contains a boolean (isMultichainOrigin) indicating if the permission session is multichain, which may be needed to determine implicit permissioning.\n */\nexport type Caip25CaveatValue = {\n  requiredScopes: InternalScopesObject;\n  optionalScopes: InternalScopesObject;\n  sessionProperties: Record<string, Json>;\n  isMultichainOrigin: boolean;\n};\n\n/**\n * The name of the CAIP-25 permission caveat.\n */\nexport const Caip25CaveatType = 'authorizedScopes';\n\n/**\n * The target name of the CAIP-25 endowment permission.\n */\nexport const Caip25EndowmentPermissionName = 'endowment:caip25';\n\n/**\n * Creates a CAIP-25 permission caveat.\n *\n * @param value - The CAIP-25 permission caveat value.\n * @returns The CAIP-25 permission caveat (now including the type).\n */\nexport const createCaip25Caveat = (value: Caip25CaveatValue) => {\n  return {\n    type: Caip25CaveatType,\n    value,\n  };\n};\n\ntype Caip25EndowmentCaveatSpecificationBuilderOptions = {\n  findNetworkClientIdByChainId: (chainId: Hex) => NetworkClientId;\n  listAccounts: () => { type: string; address: Hex }[];\n  isNonEvmScopeSupported: (scope: CaipChainId) => boolean;\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[];\n};\n\n/**\n * Calculates the difference between two provided CAIP-25 permission caveat values, but only considering a single scope property at a time.\n *\n * @param originalValue - The existing CAIP-25 permission caveat value.\n * @param mergedValue - The result from merging existing and incoming CAIP-25 permission caveat values.\n * @param scopeToDiff - The required or optional scopes from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request.\n * @returns The difference between original and merged CAIP-25 permission caveat values.\n */\nexport function diffScopesForCaip25CaveatValue(\n  originalValue: Caip25CaveatValue,\n  mergedValue: Caip25CaveatValue,\n  scopeToDiff: 'optionalScopes' | 'requiredScopes',\n): Caip25CaveatValue {\n  const diff = cloneDeep(originalValue);\n\n  const mergedScopeToDiff = mergedValue[scopeToDiff];\n  for (const [scopeString, mergedScopeObject] of Object.entries(\n    mergedScopeToDiff,\n  )) {\n    const internalScopeString = scopeString as keyof typeof mergedScopeToDiff;\n    const originalScopeObject = diff[scopeToDiff][internalScopeString];\n\n    if (originalScopeObject) {\n      const newAccounts = mergedScopeObject.accounts.filter(\n        (account) => !originalScopeObject?.accounts.includes(account),\n      );\n      if (newAccounts.length > 0) {\n        diff[scopeToDiff][internalScopeString] = {\n          accounts: newAccounts,\n        };\n        continue;\n      }\n      delete diff[scopeToDiff][internalScopeString];\n    } else {\n      diff[scopeToDiff][internalScopeString] = mergedScopeObject;\n    }\n  }\n\n  return diff;\n}\n\n/**\n * Checks if every account in the given scopes object is supported.\n *\n * @param scopesObject - The scopes object to iterate over.\n * @param listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * addresses.\n * @returns True if every account in the scopes object is supported, false otherwise.\n */\nfunction isEveryAccountInScopesObjectSupported(\n  scopesObject: InternalScopesObject,\n  listAccounts: () => { type: string; address: Hex }[],\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[],\n) {\n  return Object.values(scopesObject).every((scopeObject) =>\n    scopeObject.accounts.every((account) =>\n      isSupportedAccount(account, {\n        getEvmInternalAccounts: listAccounts,\n        getNonEvmAccountAddresses,\n      }),\n    ),\n  );\n}\n\n/**\n * Helper that returns a `authorizedScopes` CAIP-25 caveat specification\n * that can be passed into the PermissionController constructor.\n *\n * @param options - The specification builder options.\n * @param options.findNetworkClientIdByChainId - The hook for getting the networkClientId that serves a chainId.\n * @param options.listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param options.isNonEvmScopeSupported - The hook that determines if an non EVM scopeString is supported.\n * @param options.getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * @returns The specification for the `caip25` caveat.\n */\nexport const caip25CaveatBuilder = ({\n  findNetworkClientIdByChainId,\n  listAccounts,\n  isNonEvmScopeSupported,\n  getNonEvmAccountAddresses,\n}: Caip25EndowmentCaveatSpecificationBuilderOptions): EndowmentCaveatSpecificationConstraint &\n  Required<\n    Pick<EndowmentCaveatSpecificationConstraint, 'validator' | 'merger'>\n  > => {\n  return {\n    type: Caip25CaveatType,\n    validator: (\n      caveat: { type: typeof Caip25CaveatType; value: unknown },\n      _origin?: string,\n      _target?: string,\n    ) => {\n      if (\n        !caveat.value ||\n        !hasProperty(caveat.value, 'requiredScopes') ||\n        !hasProperty(caveat.value, 'optionalScopes') ||\n        !hasProperty(caveat.value, 'isMultichainOrigin') ||\n        !hasProperty(caveat.value, 'sessionProperties') ||\n        typeof caveat.value.isMultichainOrigin !== 'boolean' ||\n        !isObject(caveat.value.sessionProperties)\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received invalid value for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      const { requiredScopes, optionalScopes, sessionProperties } =\n        caveat.value;\n\n      const allSessionPropertiesSupported = Object.keys(\n        sessionProperties,\n      ).every((sessionProperty) => isSupportedSessionProperty(sessionProperty));\n\n      if (!allSessionPropertiesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received unknown session property(s) for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      assertIsInternalScopesObject(requiredScopes);\n      assertIsInternalScopesObject(optionalScopes);\n\n      if (\n        Object.keys(requiredScopes).length === 0 &&\n        Object.keys(optionalScopes).length === 0\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received no scopes for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      const isEvmChainIdSupported = (chainId: Hex) => {\n        try {\n          findNetworkClientIdByChainId(chainId);\n          return true;\n        } catch {\n          return false;\n        }\n      };\n\n      const allRequiredScopesSupported = Object.keys(requiredScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      const allOptionalScopesSupported = Object.keys(optionalScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      if (!allRequiredScopesSupported || !allOptionalScopesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received scopeString value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n\n      const allRequiredAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          requiredScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      const allOptionalAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          optionalScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      if (!allRequiredAccountsSupported || !allOptionalAccountsSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received account value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n    },\n    merger: (\n      leftValue: Caip25CaveatValue,\n      rightValue: Caip25CaveatValue,\n    ): [Caip25CaveatValue, Caip25CaveatValue] => {\n      const mergedRequiredScopes = mergeInternalScopes(\n        leftValue.requiredScopes,\n        rightValue.requiredScopes,\n      );\n      const mergedOptionalScopes = mergeInternalScopes(\n        leftValue.optionalScopes,\n        rightValue.optionalScopes,\n      );\n\n      const mergedSessionProperties = {\n        ...leftValue.sessionProperties,\n        ...rightValue.sessionProperties,\n      };\n\n      const mergedValue: Caip25CaveatValue = {\n        requiredScopes: mergedRequiredScopes,\n        optionalScopes: mergedOptionalScopes,\n        sessionProperties: mergedSessionProperties,\n        isMultichainOrigin: leftValue.isMultichainOrigin,\n      };\n\n      const partialDiff = diffScopesForCaip25CaveatValue(\n        leftValue,\n        mergedValue,\n        'requiredScopes',\n      );\n\n      const diff = diffScopesForCaip25CaveatValue(\n        partialDiff,\n        mergedValue,\n        'optionalScopes',\n      );\n\n      return [mergedValue, diff];\n    },\n  };\n};\n\ntype Caip25EndowmentSpecification = ValidPermissionSpecification<{\n  permissionType: PermissionType.Endowment;\n  targetName: typeof Caip25EndowmentPermissionName;\n  endowmentGetter: (_options?: EndowmentGetterParams) => null;\n  validator: PermissionValidatorConstraint;\n  allowedCaveats: Readonly<NonEmptyArray<string>> | null;\n}>;\n\n/**\n * Helper that returns a `endowment:caip25` specification that\n * can be passed into the PermissionController constructor.\n *\n * @returns The specification for the `caip25` endowment.\n */\nconst specificationBuilder: PermissionSpecificationBuilder<\n  PermissionType.Endowment,\n  Record<never, never>,\n  Caip25EndowmentSpecification\n> = () => {\n  return {\n    permissionType: PermissionType.Endowment,\n    targetName: Caip25EndowmentPermissionName,\n    allowedCaveats: [Caip25CaveatType],\n    endowmentGetter: (_getterOptions?: EndowmentGetterParams) => null,\n    validator: (permission: PermissionConstraint) => {\n      if (\n        permission.caveats?.length !== 1 ||\n        permission.caveats?.[0]?.type !== Caip25CaveatType\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Invalid caveats. There must be a single caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n    },\n  };\n};\n\n/**\n * The `caip25` endowment specification builder. Passed to the\n * `PermissionController` for constructing and validating the\n * `endowment:caip25` permission.\n */\nexport const caip25EndowmentBuilder = Object.freeze({\n  targetName: Caip25EndowmentPermissionName,\n  specificationBuilder,\n} as const);\n\n/**\n * Factories that construct caveat mutator functions that are passed to\n * PermissionController.updatePermissionsByCaveat.\n */\nexport const Caip25CaveatMutators = {\n  [Caip25CaveatType]: {\n    removeScope,\n    removeAccount,\n  },\n};\n\n/**\n * Removes the account from the scope object.\n *\n * @param targetAddress - The address to remove from the scope object.\n * @returns A function that removes the account from the scope object.\n */\nfunction removeAccountFilterFn(targetAddress: string) {\n  return (account: CaipAccountId) => {\n    const parsed = parseCaipAccountId(account);\n    return parsed.address !== targetAddress;\n  };\n}\n\n/**\n * Removes the account from the scope object.\n *\n * @param scopeObject - The scope object to remove the account from.\n * @param targetAddress - The address to remove from the scope object.\n */\nfunction removeAccountFromScopeObject(\n  scopeObject: InternalScopeObject,\n  targetAddress: string,\n) {\n  if (scopeObject.accounts) {\n    scopeObject.accounts = scopeObject.accounts.filter(\n      removeAccountFilterFn(targetAddress),\n    );\n  }\n}\n\n/**\n * Removes the target account from the scope object.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value from which to remove the account (across all chain scopes).\n * @param targetAddress - The address to remove from the scope object. Not a CAIP-10 formatted address because it will be removed across each chain scope.\n * @returns The updated scope object.\n */\nfunction removeAccount(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetAddress: Hex,\n) {\n  const updatedCaveatValue = cloneDeep(caip25CaveatValue);\n\n  [\n    updatedCaveatValue.requiredScopes,\n    updatedCaveatValue.optionalScopes,\n  ].forEach((scopes) => {\n    Object.entries(scopes).forEach(([, scopeObject]) => {\n      removeAccountFromScopeObject(scopeObject, targetAddress);\n    });\n  });\n\n  const noChange = isEqual(updatedCaveatValue, caip25CaveatValue);\n\n  if (noChange) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const hasAccounts = [\n    ...Object.values(updatedCaveatValue.requiredScopes),\n    ...Object.values(updatedCaveatValue.optionalScopes),\n  ].some(({ accounts }) => accounts.length > 0);\n\n  if (hasAccounts) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n\n/**\n * Removes the target scope from the value arrays of the given\n * `endowment:caip25` caveat. No-ops if the target scopeString is not in\n * the existing scopes.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value to remove the scope from.\n * @param targetScopeString - The scope that is being removed.\n * @returns The updated CAIP-25 permission caveat value.\n */\nfunction removeScope(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetScopeString: ExternalScopeString,\n) {\n  const newRequiredScopes = Object.entries(\n    caip25CaveatValue.requiredScopes,\n  ).filter(([scope]) => scope !== targetScopeString);\n  const newOptionalScopes = Object.entries(\n    caip25CaveatValue.optionalScopes,\n  ).filter(([scope]) => {\n    return scope !== targetScopeString;\n  });\n\n  const requiredScopesRemoved =\n    newRequiredScopes.length !==\n    Object.keys(caip25CaveatValue.requiredScopes).length;\n  const optionalScopesRemoved =\n    newOptionalScopes.length !==\n    Object.keys(caip25CaveatValue.optionalScopes).length;\n\n  if (!requiredScopesRemoved && !optionalScopesRemoved) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const updatedCaveatValue = {\n    ...caip25CaveatValue,\n    requiredScopes: Object.fromEntries(newRequiredScopes),\n    optionalScopes: Object.fromEntries(newOptionalScopes),\n  };\n\n  const hasNonWalletScopes = [...newRequiredScopes, ...newOptionalScopes].some(\n    ([scopeString]) => {\n      const { namespace } = parseScopeString(scopeString);\n      return namespace !== KnownCaipNamespace.Wallet;\n    },\n  );\n\n  if (hasNonWalletScopes) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n\n/**\n * Modifies the requested CAIP-25 permissions object after UI confirmation.\n *\n * @param caip25CaveatValue - The requested CAIP-25 caveat value to modify.\n * @param accountAddresses - The list of permitted eth addresses.\n * @param chainIds - The list of permitted eth chainIds.\n * @returns The updated CAIP-25 caveat value with the permitted accounts and chainIds set.\n */\nexport const generateCaip25Caveat = (\n  caip25CaveatValue: Caip25CaveatValue,\n  accountAddresses: CaipAccountId[],\n  chainIds: CaipChainId[],\n): {\n  [Caip25EndowmentPermissionName]: {\n    caveats: [{ type: string; value: Caip25CaveatValue }];\n  };\n} => {\n  const caveatValueWithChains = setPermittedChainIds(\n    caip25CaveatValue,\n    chainIds,\n  );\n\n  const caveatValueWithAccounts = setPermittedAccounts(\n    caveatValueWithChains,\n    accountAddresses,\n  );\n\n  return {\n    [Caip25EndowmentPermissionName]: {\n      caveats: [\n        {\n          type: Caip25CaveatType,\n          value: caveatValueWithAccounts,\n        },\n      ],\n    },\n  };\n};\n"]}

package/dist/caip25Permission.d.cts

@@ -1,7 +1,7 @@
 import type { NetworkClientId } from "@metamask/network-controller";
 import type { PermissionSpecificationBuilder, EndowmentGetterParams, PermissionValidatorConstraint, EndowmentCaveatSpecificationConstraint } from "@metamask/permission-controller";
 import { CaveatMutatorOperation, PermissionType } from "@metamask/permission-controller";
-import type { CaipChainId, Json } from "@metamask/utils";
+import type { CaipAccountId, CaipChainId, Json } from "@metamask/utils";
 import { type Hex, type NonEmptyArray } from "@metamask/utils";
 import { type ExternalScopeString, type InternalScopeObject, type InternalScopesObject } from "./scope/types.cjs";
 /**
@@ -127,5 +127,21 @@ declare function removeScope(caip25CaveatValue: Caip25CaveatValue, targetScopeSt
         isMultichainOrigin: boolean;
     };
 };
+/**
+ * Modifies the requested CAIP-25 permissions object after UI confirmation.
+ *
+ * @param caip25CaveatValue - The requested CAIP-25 caveat value to modify.
+ * @param accountAddresses - The list of permitted eth addresses.
+ * @param chainIds - The list of permitted eth chainIds.
+ * @returns The updated CAIP-25 caveat value with the permitted accounts and chainIds set.
+ */
+export declare const generateCaip25Caveat: (caip25CaveatValue: Caip25CaveatValue, accountAddresses: CaipAccountId[], chainIds: CaipChainId[]) => {
+    [Caip25EndowmentPermissionName]: {
+        caveats: [{
+            type: string;
+            value: Caip25CaveatValue;
+        }];
+    };
+};
 export {};
 //# sourceMappingURL=caip25Permission.d.cts.map

package/dist/caip25Permission.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"caip25Permission.d.cts","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,qCAAqC;AACpE,OAAO,KAAK,EACV,8BAA8B,EAC9B,qBAAqB,EAErB,6BAA6B,EAE7B,sCAAsC,EACvC,wCAAwC;AACzC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACf,wCAAwC;AACzC,OAAO,KAAK,EAAiB,WAAW,EAAE,IAAI,EAAE,wBAAwB;AACxE,OAAO,EAKL,KAAK,GAAG,EACR,KAAK,aAAa,EACnB,wBAAwB;AAUzB,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,0BAAsB;AAEvB;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,oBAAoB,CAAC;IACrC,cAAc,EAAE,oBAAoB,CAAC;IACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;GAEG;AACH,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,UAAW,iBAAiB;;;CAK1D,CAAC;AAEF,KAAK,gDAAgD,GAAG;IACtD,4BAA4B,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,eAAe,CAAC;IAChE,YAAY,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,EAAE,CAAC;IACrD,sBAAsB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IACxD,yBAAyB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,MAAM,EAAE,CAAC;CAC7D,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,iBAAiB,EAChC,WAAW,EAAE,iBAAiB,EAC9B,WAAW,EAAE,gBAAgB,GAAG,gBAAgB,GAC/C,iBAAiB,CA2BnB;AA0BD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,uGAK7B,gDAAgD,KAAG,sCAAsC,GAC1F,SACE,KAAK,sCAAsC,EAAE,WAAW,GAAG,QAAQ,CAAC,CA8HvE,CAAC;AAuCF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;wBAzCjB,eAAe,SAAS;oBAC5B,oCAAoC;qCACnB,qBAAqB,KAAK,IAAI;mBAChD,6BAA6B;wBACxB,SAAS,cAAc,MAAM,CAAC,CAAC,GAAG,IAAI;;EAwC7C,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;CAKhC,CAAC;AAgCF;;;;;;GAMG;AACH,iBAAS,aAAa,CACpB,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,GAAG;;;;;;EAoCnB;AAED;;;;;;;;GAQG;AACH,iBAAS,WAAW,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,mBAAmB;;;;;;;;;;;;;;;EA+CvC"}
+{"version":3,"file":"caip25Permission.d.cts","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,qCAAqC;AACpE,OAAO,KAAK,EACV,8BAA8B,EAC9B,qBAAqB,EAErB,6BAA6B,EAE7B,sCAAsC,EACvC,wCAAwC;AACzC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACf,wCAAwC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB;AACxE,OAAO,EAKL,KAAK,GAAG,EACR,KAAK,aAAa,EACnB,wBAAwB;AAYzB,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,0BAAsB;AAEvB;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,oBAAoB,CAAC;IACrC,cAAc,EAAE,oBAAoB,CAAC;IACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;GAEG;AACH,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,UAAW,iBAAiB;;;CAK1D,CAAC;AAEF,KAAK,gDAAgD,GAAG;IACtD,4BAA4B,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,eAAe,CAAC;IAChE,YAAY,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,EAAE,CAAC;IACrD,sBAAsB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IACxD,yBAAyB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,MAAM,EAAE,CAAC;CAC7D,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,iBAAiB,EAChC,WAAW,EAAE,iBAAiB,EAC9B,WAAW,EAAE,gBAAgB,GAAG,gBAAgB,GAC/C,iBAAiB,CA2BnB;AA0BD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,uGAK7B,gDAAgD,KAAG,sCAAsC,GAC1F,SACE,KAAK,sCAAsC,EAAE,WAAW,GAAG,QAAQ,CAAC,CAuIvE,CAAC;AAuCF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;wBAzCjB,eAAe,SAAS;oBAC5B,oCAAoC;qCACnB,qBAAqB,KAAK,IAAI;mBAChD,6BAA6B;wBACxB,SAAS,cAAc,MAAM,CAAC,CAAC,GAAG,IAAI;;EAwC7C,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;CAKhC,CAAC;AAgCF;;;;;;GAMG;AACH,iBAAS,aAAa,CACpB,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,GAAG;;;;;;EAoCnB;AAED;;;;;;;;GAQG;AACH,iBAAS,WAAW,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,mBAAmB;;;;;;;;;;;;;;;EA+CvC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,sBACZ,iBAAiB,oBAClB,aAAa,EAAE,YACvB,WAAW,EAAE,KACtB;IACD,+BAA+B,EAAE;QAC/B,OAAO,EAAE,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,iBAAiB,CAAA;SAAE,CAAC,CAAC;KACvD,CAAC;CAsBH,CAAC"}

package/dist/caip25Permission.d.mts

@@ -1,7 +1,7 @@
 import type { NetworkClientId } from "@metamask/network-controller";
 import type { PermissionSpecificationBuilder, EndowmentGetterParams, PermissionValidatorConstraint, EndowmentCaveatSpecificationConstraint } from "@metamask/permission-controller";
 import { CaveatMutatorOperation, PermissionType } from "@metamask/permission-controller";
-import type { CaipChainId, Json } from "@metamask/utils";
+import type { CaipAccountId, CaipChainId, Json } from "@metamask/utils";
 import { type Hex, type NonEmptyArray } from "@metamask/utils";
 import { type ExternalScopeString, type InternalScopeObject, type InternalScopesObject } from "./scope/types.mjs";
 /**
@@ -127,5 +127,21 @@ declare function removeScope(caip25CaveatValue: Caip25CaveatValue, targetScopeSt
         isMultichainOrigin: boolean;
     };
 };
+/**
+ * Modifies the requested CAIP-25 permissions object after UI confirmation.
+ *
+ * @param caip25CaveatValue - The requested CAIP-25 caveat value to modify.
+ * @param accountAddresses - The list of permitted eth addresses.
+ * @param chainIds - The list of permitted eth chainIds.
+ * @returns The updated CAIP-25 caveat value with the permitted accounts and chainIds set.
+ */
+export declare const generateCaip25Caveat: (caip25CaveatValue: Caip25CaveatValue, accountAddresses: CaipAccountId[], chainIds: CaipChainId[]) => {
+    [Caip25EndowmentPermissionName]: {
+        caveats: [{
+            type: string;
+            value: Caip25CaveatValue;
+        }];
+    };
+};
 export {};
 //# sourceMappingURL=caip25Permission.d.mts.map

package/dist/caip25Permission.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"caip25Permission.d.mts","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,qCAAqC;AACpE,OAAO,KAAK,EACV,8BAA8B,EAC9B,qBAAqB,EAErB,6BAA6B,EAE7B,sCAAsC,EACvC,wCAAwC;AACzC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACf,wCAAwC;AACzC,OAAO,KAAK,EAAiB,WAAW,EAAE,IAAI,EAAE,wBAAwB;AACxE,OAAO,EAKL,KAAK,GAAG,EACR,KAAK,aAAa,EACnB,wBAAwB;AAUzB,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,0BAAsB;AAEvB;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,oBAAoB,CAAC;IACrC,cAAc,EAAE,oBAAoB,CAAC;IACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;GAEG;AACH,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,UAAW,iBAAiB;;;CAK1D,CAAC;AAEF,KAAK,gDAAgD,GAAG;IACtD,4BAA4B,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,eAAe,CAAC;IAChE,YAAY,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,EAAE,CAAC;IACrD,sBAAsB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IACxD,yBAAyB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,MAAM,EAAE,CAAC;CAC7D,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,iBAAiB,EAChC,WAAW,EAAE,iBAAiB,EAC9B,WAAW,EAAE,gBAAgB,GAAG,gBAAgB,GAC/C,iBAAiB,CA2BnB;AA0BD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,uGAK7B,gDAAgD,KAAG,sCAAsC,GAC1F,SACE,KAAK,sCAAsC,EAAE,WAAW,GAAG,QAAQ,CAAC,CA8HvE,CAAC;AAuCF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;wBAzCjB,eAAe,SAAS;oBAC5B,oCAAoC;qCACnB,qBAAqB,KAAK,IAAI;mBAChD,6BAA6B;wBACxB,SAAS,cAAc,MAAM,CAAC,CAAC,GAAG,IAAI;;EAwC7C,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;CAKhC,CAAC;AAgCF;;;;;;GAMG;AACH,iBAAS,aAAa,CACpB,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,GAAG;;;;;;EAoCnB;AAED;;;;;;;;GAQG;AACH,iBAAS,WAAW,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,mBAAmB;;;;;;;;;;;;;;;EA+CvC"}
+{"version":3,"file":"caip25Permission.d.mts","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,qCAAqC;AACpE,OAAO,KAAK,EACV,8BAA8B,EAC9B,qBAAqB,EAErB,6BAA6B,EAE7B,sCAAsC,EACvC,wCAAwC;AACzC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACf,wCAAwC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB;AACxE,OAAO,EAKL,KAAK,GAAG,EACR,KAAK,aAAa,EACnB,wBAAwB;AAYzB,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,0BAAsB;AAEvB;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,oBAAoB,CAAC;IACrC,cAAc,EAAE,oBAAoB,CAAC;IACrC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;GAEG;AACH,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,UAAW,iBAAiB;;;CAK1D,CAAC;AAEF,KAAK,gDAAgD,GAAG;IACtD,4BAA4B,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,eAAe,CAAC;IAChE,YAAY,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,EAAE,CAAC;IACrD,sBAAsB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IACxD,yBAAyB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,MAAM,EAAE,CAAC;CAC7D,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,iBAAiB,EAChC,WAAW,EAAE,iBAAiB,EAC9B,WAAW,EAAE,gBAAgB,GAAG,gBAAgB,GAC/C,iBAAiB,CA2BnB;AA0BD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,uGAK7B,gDAAgD,KAAG,sCAAsC,GAC1F,SACE,KAAK,sCAAsC,EAAE,WAAW,GAAG,QAAQ,CAAC,CAuIvE,CAAC;AAuCF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;wBAzCjB,eAAe,SAAS;oBAC5B,oCAAoC;qCACnB,qBAAqB,KAAK,IAAI;mBAChD,6BAA6B;wBACxB,SAAS,cAAc,MAAM,CAAC,CAAC,GAAG,IAAI;;EAwC7C,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;CAKhC,CAAC;AAgCF;;;;;;GAMG;AACH,iBAAS,aAAa,CACpB,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,GAAG;;;;;;EAoCnB;AAED;;;;;;;;GAQG;AACH,iBAAS,WAAW,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,mBAAmB;;;;;;;;;;;;;;;EA+CvC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,sBACZ,iBAAiB,oBAClB,aAAa,EAAE,YACvB,WAAW,EAAE,KACtB;IACD,+BAA+B,EAAE;QAC/B,OAAO,EAAE,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,iBAAiB,CAAA;SAAE,CAAC,CAAC;KACvD,CAAC;CAsBH,CAAC"}

package/dist/caip25Permission.mjs

@@ -2,6 +2,8 @@ import { CaveatMutatorOperation, PermissionType } from "@metamask/permission-con
 import { hasProperty, KnownCaipNamespace, parseCaipAccountId, isObject } from "@metamask/utils";
 import $lodash from "lodash";
 const { cloneDeep, isEqual } = $lodash;
+import { setPermittedAccounts } from "./adapters/caip-permission-adapter-accounts.mjs";
+import { setPermittedChainIds } from "./adapters/caip-permission-adapter-permittedChains.mjs";
 import { assertIsInternalScopesObject } from "./scope/assert.mjs";
 import { isSupportedAccount, isSupportedScopeString, isSupportedSessionProperty } from "./scope/supported.mjs";
 import { mergeInternalScopes } from "./scope/transform.mjs";
@@ -102,6 +104,10 @@ export const caip25CaveatBuilder = ({ findNetworkClientIdByChainId, listAccounts
             }
             assertIsInternalScopesObject(requiredScopes);
             assertIsInternalScopesObject(optionalScopes);
+            if (Object.keys(requiredScopes).length === 0 &&
+                Object.keys(optionalScopes).length === 0) {
+                throw new Error(`${Caip25EndowmentPermissionName} error: Received no scopes for caveat of type "${Caip25CaveatType}".`);
+            }
             const isEvmChainIdSupported = (chainId) => {
                 try {
                     findNetworkClientIdByChainId(chainId);
@@ -288,4 +294,26 @@ function removeScope(caip25CaveatValue, targetScopeString) {
         operation: CaveatMutatorOperation.RevokePermission,
     };
 }
+/**
+ * Modifies the requested CAIP-25 permissions object after UI confirmation.
+ *
+ * @param caip25CaveatValue - The requested CAIP-25 caveat value to modify.
+ * @param accountAddresses - The list of permitted eth addresses.
+ * @param chainIds - The list of permitted eth chainIds.
+ * @returns The updated CAIP-25 caveat value with the permitted accounts and chainIds set.
+ */
+export const generateCaip25Caveat = (caip25CaveatValue, accountAddresses, chainIds) => {
+    const caveatValueWithChains = setPermittedChainIds(caip25CaveatValue, chainIds);
+    const caveatValueWithAccounts = setPermittedAccounts(caveatValueWithChains, accountAddresses);
+    return {
+        [Caip25EndowmentPermissionName]: {
+            caveats: [
+                {
+                    type: Caip25CaveatType,
+                    value: caveatValueWithAccounts,
+                },
+            ],
+        },
+    };
+};
 //# sourceMappingURL=caip25Permission.mjs.map

package/dist/caip25Permission.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"caip25Permission.mjs","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":"AASA,OAAO,EACL,sBAAsB,EACtB,cAAc,EACf,wCAAwC;AAEzC,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EAGT,wBAAwB;;;AAGzB,OAAO,EAAE,4BAA4B,EAAE,2BAAuB;AAC9D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC3B,8BAA0B;AAC3B,OAAO,EAAE,mBAAmB,EAAE,8BAA0B;AACxD,OAAO,EACL,gBAAgB,EAIjB,0BAAsB;AAcvB;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAwB,EAAE,EAAE;IAC7D,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AASF;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAC5C,aAAgC,EAChC,WAA8B,EAC9B,WAAgD;IAEhD,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,iBAAiB,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,IAAI,MAAM,CAAC,OAAO,CAC3D,iBAAiB,CAClB,EAAE;QACD,MAAM,mBAAmB,GAAG,WAA6C,CAAC;QAC1E,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAEnE,IAAI,mBAAmB,EAAE;YACvB,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CACnD,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC9D,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC1B,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG;oBACvC,QAAQ,EAAE,WAAW;iBACtB,CAAC;gBACF,SAAS;aACV;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;SAC/C;aAAM;YACL,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG,iBAAiB,CAAC;SAC5D;KACF;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qCAAqC,CAC5C,YAAkC,EAClC,YAAoD,EACpD,yBAA2D;IAE3D,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CACvD,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,kBAAkB,CAAC,OAAO,EAAE;QAC1B,sBAAsB,EAAE,YAAY;QACpC,yBAAyB;KAC1B,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAClC,4BAA4B,EAC5B,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,GACwB,EAG/C,EAAE;IACJ,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,CACT,MAAyD,EACzD,OAAgB,EAChB,OAAgB,EAChB,EAAE;YACF,IACE,CAAC,MAAM,CAAC,KAAK;gBACb,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC;gBAChD,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC;gBAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EACzC;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,sDAAsD,gBAAgB,IAAI,CAC3G,CAAC;aACH;YAED,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,GACzD,MAAM,CAAC,KAAK,CAAC;YAEf,MAAM,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAC/C,iBAAiB,CAClB,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC;YAE1E,IAAI,CAAC,6BAA6B,EAAE;gBAClC,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,oEAAoE,gBAAgB,IAAI,CACzH,CAAC;aACH;YAED,4BAA4B,CAAC,cAAc,CAAC,CAAC;YAC7C,4BAA4B,CAAC,cAAc,CAAC,CAAC;YAE7C,MAAM,qBAAqB,GAAG,CAAC,OAAY,EAAE,EAAE;gBAC7C,IAAI;oBACF,4BAA4B,CAAC,OAAO,CAAC,CAAC;oBACtC,OAAO,IAAI,CAAC;iBACb;gBAAC,MAAM;oBACN,OAAO,KAAK,CAAC;iBACd;YACH,CAAC,CAAC;YAEF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,sBAAsB,CAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,sBAAsB,CAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,IAAI,CAAC,0BAA0B,IAAI,CAAC,0BAA0B,EAAE;gBAC9D,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,6DAA6D,gBAAgB,yCAAyC,CACvJ,CAAC;aACH;YAED,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,IAAI,CAAC,4BAA4B,IAAI,CAAC,4BAA4B,EAAE;gBAClE,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,yDAAyD,gBAAgB,yCAAyC,CACnJ,CAAC;aACH;QACH,CAAC;QACD,MAAM,EAAE,CACN,SAA4B,EAC5B,UAA6B,EACW,EAAE;YAC1C,MAAM,oBAAoB,GAAG,mBAAmB,CAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YACF,MAAM,oBAAoB,GAAG,mBAAmB,CAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YAEF,MAAM,uBAAuB,GAAG;gBAC9B,GAAG,SAAS,CAAC,iBAAiB;gBAC9B,GAAG,UAAU,CAAC,iBAAiB;aAChC,CAAC;YAEF,MAAM,WAAW,GAAsB;gBACrC,cAAc,EAAE,oBAAoB;gBACpC,cAAc,EAAE,oBAAoB;gBACpC,iBAAiB,EAAE,uBAAuB;gBAC1C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;aACjD,CAAC;YAEF,MAAM,WAAW,GAAG,8BAA8B,CAChD,SAAS,EACT,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,MAAM,IAAI,GAAG,8BAA8B,CACzC,WAAW,EACX,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAUF;;;;;GAKG;AACH,MAAM,oBAAoB,GAItB,GAAG,EAAE;IACP,OAAO;QACL,cAAc,EAAE,cAAc,CAAC,SAAS;QACxC,UAAU,EAAE,6BAA6B;QACzC,cAAc,EAAE,CAAC,gBAAgB,CAAC;QAClC,eAAe,EAAE,CAAC,cAAsC,EAAE,EAAE,CAAC,IAAI;QACjE,SAAS,EAAE,CAAC,UAAgC,EAAE,EAAE;YAC9C,IACE,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC;gBAChC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,gBAAgB,EAClD;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,mEAAmE,gBAAgB,IAAI,CACxH,CAAC;aACH;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,6BAA6B;IACzC,oBAAoB;CACZ,CAAC,CAAC;AAEZ;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,CAAC,gBAAgB,CAAC,EAAE;QAClB,WAAW;QACX,aAAa;KACd;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,aAAqB;IAClD,OAAO,CAAC,OAAsB,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,OAAO,KAAK,aAAa,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CACnC,WAAgC,EAChC,aAAqB;IAErB,IAAI,WAAW,CAAC,QAAQ,EAAE;QACxB,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAChD,qBAAqB,CAAC,aAAa,CAAC,CACrC,CAAC;KACH;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,iBAAoC,EACpC,aAAkB;IAElB,MAAM,kBAAkB,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAExD;QACE,kBAAkB,CAAC,cAAc;QACjC,kBAAkB,CAAC,cAAc;KAClC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE;YACjD,4BAA4B,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;IAEhE,IAAI,QAAQ,EAAE;QACZ,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;QACnD,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;KACpD,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE9C,IAAI,WAAW,EAAE;QACf,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,sBAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAClB,iBAAoC,EACpC,iBAAsC;IAEtC,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;QACnB,OAAO,KAAK,KAAK,iBAAiB,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IAEvD,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB,EAAE;QACpD,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,kBAAkB,GAAG;QACzB,GAAG,iBAAiB;QACpB,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;QACrD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;KACtD,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE;QAChB,MAAM,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,SAAS,KAAK,kBAAkB,CAAC,MAAM,CAAC;IACjD,CAAC,CACF,CAAC;IAEF,IAAI,kBAAkB,EAAE;QACtB,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,sBAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC","sourcesContent":["import type { NetworkClientId } from '@metamask/network-controller';\nimport type {\n  PermissionSpecificationBuilder,\n  EndowmentGetterParams,\n  ValidPermissionSpecification,\n  PermissionValidatorConstraint,\n  PermissionConstraint,\n  EndowmentCaveatSpecificationConstraint,\n} from '@metamask/permission-controller';\nimport {\n  CaveatMutatorOperation,\n  PermissionType,\n} from '@metamask/permission-controller';\nimport type { CaipAccountId, CaipChainId, Json } from '@metamask/utils';\nimport {\n  hasProperty,\n  KnownCaipNamespace,\n  parseCaipAccountId,\n  isObject,\n  type Hex,\n  type NonEmptyArray,\n} from '@metamask/utils';\nimport { cloneDeep, isEqual } from 'lodash';\n\nimport { assertIsInternalScopesObject } from './scope/assert';\nimport {\n  isSupportedAccount,\n  isSupportedScopeString,\n  isSupportedSessionProperty,\n} from './scope/supported';\nimport { mergeInternalScopes } from './scope/transform';\nimport {\n  parseScopeString,\n  type ExternalScopeString,\n  type InternalScopeObject,\n  type InternalScopesObject,\n} from './scope/types';\n\n/**\n * The CAIP-25 permission caveat value.\n * This permission contains the required and optional scopes and session properties from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request that initiated the permission session.\n * It also contains a boolean (isMultichainOrigin) indicating if the permission session is multichain, which may be needed to determine implicit permissioning.\n */\nexport type Caip25CaveatValue = {\n  requiredScopes: InternalScopesObject;\n  optionalScopes: InternalScopesObject;\n  sessionProperties: Record<string, Json>;\n  isMultichainOrigin: boolean;\n};\n\n/**\n * The name of the CAIP-25 permission caveat.\n */\nexport const Caip25CaveatType = 'authorizedScopes';\n\n/**\n * The target name of the CAIP-25 endowment permission.\n */\nexport const Caip25EndowmentPermissionName = 'endowment:caip25';\n\n/**\n * Creates a CAIP-25 permission caveat.\n *\n * @param value - The CAIP-25 permission caveat value.\n * @returns The CAIP-25 permission caveat (now including the type).\n */\nexport const createCaip25Caveat = (value: Caip25CaveatValue) => {\n  return {\n    type: Caip25CaveatType,\n    value,\n  };\n};\n\ntype Caip25EndowmentCaveatSpecificationBuilderOptions = {\n  findNetworkClientIdByChainId: (chainId: Hex) => NetworkClientId;\n  listAccounts: () => { type: string; address: Hex }[];\n  isNonEvmScopeSupported: (scope: CaipChainId) => boolean;\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[];\n};\n\n/**\n * Calculates the difference between two provided CAIP-25 permission caveat values, but only considering a single scope property at a time.\n *\n * @param originalValue - The existing CAIP-25 permission caveat value.\n * @param mergedValue - The result from merging existing and incoming CAIP-25 permission caveat values.\n * @param scopeToDiff - The required or optional scopes from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request.\n * @returns The difference between original and merged CAIP-25 permission caveat values.\n */\nexport function diffScopesForCaip25CaveatValue(\n  originalValue: Caip25CaveatValue,\n  mergedValue: Caip25CaveatValue,\n  scopeToDiff: 'optionalScopes' | 'requiredScopes',\n): Caip25CaveatValue {\n  const diff = cloneDeep(originalValue);\n\n  const mergedScopeToDiff = mergedValue[scopeToDiff];\n  for (const [scopeString, mergedScopeObject] of Object.entries(\n    mergedScopeToDiff,\n  )) {\n    const internalScopeString = scopeString as keyof typeof mergedScopeToDiff;\n    const originalScopeObject = diff[scopeToDiff][internalScopeString];\n\n    if (originalScopeObject) {\n      const newAccounts = mergedScopeObject.accounts.filter(\n        (account) => !originalScopeObject?.accounts.includes(account),\n      );\n      if (newAccounts.length > 0) {\n        diff[scopeToDiff][internalScopeString] = {\n          accounts: newAccounts,\n        };\n        continue;\n      }\n      delete diff[scopeToDiff][internalScopeString];\n    } else {\n      diff[scopeToDiff][internalScopeString] = mergedScopeObject;\n    }\n  }\n\n  return diff;\n}\n\n/**\n * Checks if every account in the given scopes object is supported.\n *\n * @param scopesObject - The scopes object to iterate over.\n * @param listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * addresses.\n * @returns True if every account in the scopes object is supported, false otherwise.\n */\nfunction isEveryAccountInScopesObjectSupported(\n  scopesObject: InternalScopesObject,\n  listAccounts: () => { type: string; address: Hex }[],\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[],\n) {\n  return Object.values(scopesObject).every((scopeObject) =>\n    scopeObject.accounts.every((account) =>\n      isSupportedAccount(account, {\n        getEvmInternalAccounts: listAccounts,\n        getNonEvmAccountAddresses,\n      }),\n    ),\n  );\n}\n\n/**\n * Helper that returns a `authorizedScopes` CAIP-25 caveat specification\n * that can be passed into the PermissionController constructor.\n *\n * @param options - The specification builder options.\n * @param options.findNetworkClientIdByChainId - The hook for getting the networkClientId that serves a chainId.\n * @param options.listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param options.isNonEvmScopeSupported - The hook that determines if an non EVM scopeString is supported.\n * @param options.getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * @returns The specification for the `caip25` caveat.\n */\nexport const caip25CaveatBuilder = ({\n  findNetworkClientIdByChainId,\n  listAccounts,\n  isNonEvmScopeSupported,\n  getNonEvmAccountAddresses,\n}: Caip25EndowmentCaveatSpecificationBuilderOptions): EndowmentCaveatSpecificationConstraint &\n  Required<\n    Pick<EndowmentCaveatSpecificationConstraint, 'validator' | 'merger'>\n  > => {\n  return {\n    type: Caip25CaveatType,\n    validator: (\n      caveat: { type: typeof Caip25CaveatType; value: unknown },\n      _origin?: string,\n      _target?: string,\n    ) => {\n      if (\n        !caveat.value ||\n        !hasProperty(caveat.value, 'requiredScopes') ||\n        !hasProperty(caveat.value, 'optionalScopes') ||\n        !hasProperty(caveat.value, 'isMultichainOrigin') ||\n        !hasProperty(caveat.value, 'sessionProperties') ||\n        typeof caveat.value.isMultichainOrigin !== 'boolean' ||\n        !isObject(caveat.value.sessionProperties)\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received invalid value for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      const { requiredScopes, optionalScopes, sessionProperties } =\n        caveat.value;\n\n      const allSessionPropertiesSupported = Object.keys(\n        sessionProperties,\n      ).every((sessionProperty) => isSupportedSessionProperty(sessionProperty));\n\n      if (!allSessionPropertiesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received unknown session property(s) for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      assertIsInternalScopesObject(requiredScopes);\n      assertIsInternalScopesObject(optionalScopes);\n\n      const isEvmChainIdSupported = (chainId: Hex) => {\n        try {\n          findNetworkClientIdByChainId(chainId);\n          return true;\n        } catch {\n          return false;\n        }\n      };\n\n      const allRequiredScopesSupported = Object.keys(requiredScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      const allOptionalScopesSupported = Object.keys(optionalScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      if (!allRequiredScopesSupported || !allOptionalScopesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received scopeString value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n\n      const allRequiredAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          requiredScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      const allOptionalAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          optionalScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      if (!allRequiredAccountsSupported || !allOptionalAccountsSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received account value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n    },\n    merger: (\n      leftValue: Caip25CaveatValue,\n      rightValue: Caip25CaveatValue,\n    ): [Caip25CaveatValue, Caip25CaveatValue] => {\n      const mergedRequiredScopes = mergeInternalScopes(\n        leftValue.requiredScopes,\n        rightValue.requiredScopes,\n      );\n      const mergedOptionalScopes = mergeInternalScopes(\n        leftValue.optionalScopes,\n        rightValue.optionalScopes,\n      );\n\n      const mergedSessionProperties = {\n        ...leftValue.sessionProperties,\n        ...rightValue.sessionProperties,\n      };\n\n      const mergedValue: Caip25CaveatValue = {\n        requiredScopes: mergedRequiredScopes,\n        optionalScopes: mergedOptionalScopes,\n        sessionProperties: mergedSessionProperties,\n        isMultichainOrigin: leftValue.isMultichainOrigin,\n      };\n\n      const partialDiff = diffScopesForCaip25CaveatValue(\n        leftValue,\n        mergedValue,\n        'requiredScopes',\n      );\n\n      const diff = diffScopesForCaip25CaveatValue(\n        partialDiff,\n        mergedValue,\n        'optionalScopes',\n      );\n\n      return [mergedValue, diff];\n    },\n  };\n};\n\ntype Caip25EndowmentSpecification = ValidPermissionSpecification<{\n  permissionType: PermissionType.Endowment;\n  targetName: typeof Caip25EndowmentPermissionName;\n  endowmentGetter: (_options?: EndowmentGetterParams) => null;\n  validator: PermissionValidatorConstraint;\n  allowedCaveats: Readonly<NonEmptyArray<string>> | null;\n}>;\n\n/**\n * Helper that returns a `endowment:caip25` specification that\n * can be passed into the PermissionController constructor.\n *\n * @returns The specification for the `caip25` endowment.\n */\nconst specificationBuilder: PermissionSpecificationBuilder<\n  PermissionType.Endowment,\n  Record<never, never>,\n  Caip25EndowmentSpecification\n> = () => {\n  return {\n    permissionType: PermissionType.Endowment,\n    targetName: Caip25EndowmentPermissionName,\n    allowedCaveats: [Caip25CaveatType],\n    endowmentGetter: (_getterOptions?: EndowmentGetterParams) => null,\n    validator: (permission: PermissionConstraint) => {\n      if (\n        permission.caveats?.length !== 1 ||\n        permission.caveats?.[0]?.type !== Caip25CaveatType\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Invalid caveats. There must be a single caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n    },\n  };\n};\n\n/**\n * The `caip25` endowment specification builder. Passed to the\n * `PermissionController` for constructing and validating the\n * `endowment:caip25` permission.\n */\nexport const caip25EndowmentBuilder = Object.freeze({\n  targetName: Caip25EndowmentPermissionName,\n  specificationBuilder,\n} as const);\n\n/**\n * Factories that construct caveat mutator functions that are passed to\n * PermissionController.updatePermissionsByCaveat.\n */\nexport const Caip25CaveatMutators = {\n  [Caip25CaveatType]: {\n    removeScope,\n    removeAccount,\n  },\n};\n\n/**\n * Removes the account from the scope object.\n *\n * @param targetAddress - The address to remove from the scope object.\n * @returns A function that removes the account from the scope object.\n */\nfunction removeAccountFilterFn(targetAddress: string) {\n  return (account: CaipAccountId) => {\n    const parsed = parseCaipAccountId(account);\n    return parsed.address !== targetAddress;\n  };\n}\n\n/**\n * Removes the account from the scope object.\n *\n * @param scopeObject - The scope object to remove the account from.\n * @param targetAddress - The address to remove from the scope object.\n */\nfunction removeAccountFromScopeObject(\n  scopeObject: InternalScopeObject,\n  targetAddress: string,\n) {\n  if (scopeObject.accounts) {\n    scopeObject.accounts = scopeObject.accounts.filter(\n      removeAccountFilterFn(targetAddress),\n    );\n  }\n}\n\n/**\n * Removes the target account from the scope object.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value from which to remove the account (across all chain scopes).\n * @param targetAddress - The address to remove from the scope object. Not a CAIP-10 formatted address because it will be removed across each chain scope.\n * @returns The updated scope object.\n */\nfunction removeAccount(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetAddress: Hex,\n) {\n  const updatedCaveatValue = cloneDeep(caip25CaveatValue);\n\n  [\n    updatedCaveatValue.requiredScopes,\n    updatedCaveatValue.optionalScopes,\n  ].forEach((scopes) => {\n    Object.entries(scopes).forEach(([, scopeObject]) => {\n      removeAccountFromScopeObject(scopeObject, targetAddress);\n    });\n  });\n\n  const noChange = isEqual(updatedCaveatValue, caip25CaveatValue);\n\n  if (noChange) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const hasAccounts = [\n    ...Object.values(updatedCaveatValue.requiredScopes),\n    ...Object.values(updatedCaveatValue.optionalScopes),\n  ].some(({ accounts }) => accounts.length > 0);\n\n  if (hasAccounts) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n\n/**\n * Removes the target scope from the value arrays of the given\n * `endowment:caip25` caveat. No-ops if the target scopeString is not in\n * the existing scopes.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value to remove the scope from.\n * @param targetScopeString - The scope that is being removed.\n * @returns The updated CAIP-25 permission caveat value.\n */\nfunction removeScope(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetScopeString: ExternalScopeString,\n) {\n  const newRequiredScopes = Object.entries(\n    caip25CaveatValue.requiredScopes,\n  ).filter(([scope]) => scope !== targetScopeString);\n  const newOptionalScopes = Object.entries(\n    caip25CaveatValue.optionalScopes,\n  ).filter(([scope]) => {\n    return scope !== targetScopeString;\n  });\n\n  const requiredScopesRemoved =\n    newRequiredScopes.length !==\n    Object.keys(caip25CaveatValue.requiredScopes).length;\n  const optionalScopesRemoved =\n    newOptionalScopes.length !==\n    Object.keys(caip25CaveatValue.optionalScopes).length;\n\n  if (!requiredScopesRemoved && !optionalScopesRemoved) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const updatedCaveatValue = {\n    ...caip25CaveatValue,\n    requiredScopes: Object.fromEntries(newRequiredScopes),\n    optionalScopes: Object.fromEntries(newOptionalScopes),\n  };\n\n  const hasNonWalletScopes = [...newRequiredScopes, ...newOptionalScopes].some(\n    ([scopeString]) => {\n      const { namespace } = parseScopeString(scopeString);\n      return namespace !== KnownCaipNamespace.Wallet;\n    },\n  );\n\n  if (hasNonWalletScopes) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n"]}
+{"version":3,"file":"caip25Permission.mjs","sourceRoot":"","sources":["../src/caip25Permission.ts"],"names":[],"mappings":"AASA,OAAO,EACL,sBAAsB,EACtB,cAAc,EACf,wCAAwC;AAEzC,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EAGT,wBAAwB;;;AAGzB,OAAO,EAAE,oBAAoB,EAAE,wDAAoD;AACnF,OAAO,EAAE,oBAAoB,EAAE,+DAA2D;AAC1F,OAAO,EAAE,4BAA4B,EAAE,2BAAuB;AAC9D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC3B,8BAA0B;AAC3B,OAAO,EAAE,mBAAmB,EAAE,8BAA0B;AACxD,OAAO,EACL,gBAAgB,EAIjB,0BAAsB;AAcvB;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAwB,EAAE,EAAE;IAC7D,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AASF;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAC5C,aAAgC,EAChC,WAA8B,EAC9B,WAAgD;IAEhD,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,iBAAiB,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,IAAI,MAAM,CAAC,OAAO,CAC3D,iBAAiB,CAClB,EAAE;QACD,MAAM,mBAAmB,GAAG,WAA6C,CAAC;QAC1E,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAEnE,IAAI,mBAAmB,EAAE;YACvB,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CACnD,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC9D,CAAC;YACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC1B,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG;oBACvC,QAAQ,EAAE,WAAW;iBACtB,CAAC;gBACF,SAAS;aACV;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,CAAC;SAC/C;aAAM;YACL,IAAI,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAC,GAAG,iBAAiB,CAAC;SAC5D;KACF;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qCAAqC,CAC5C,YAAkC,EAClC,YAAoD,EACpD,yBAA2D;IAE3D,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CACvD,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,kBAAkB,CAAC,OAAO,EAAE;QAC1B,sBAAsB,EAAE,YAAY;QACpC,yBAAyB;KAC1B,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAClC,4BAA4B,EAC5B,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,GACwB,EAG/C,EAAE;IACJ,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,CACT,MAAyD,EACzD,OAAgB,EAChB,OAAgB,EAChB,EAAE;YACF,IACE,CAAC,MAAM,CAAC,KAAK;gBACb,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBAC5C,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC;gBAChD,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC;gBAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EACzC;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,sDAAsD,gBAAgB,IAAI,CAC3G,CAAC;aACH;YAED,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,GACzD,MAAM,CAAC,KAAK,CAAC;YAEf,MAAM,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAC/C,iBAAiB,CAClB,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC;YAE1E,IAAI,CAAC,6BAA6B,EAAE;gBAClC,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,oEAAoE,gBAAgB,IAAI,CACzH,CAAC;aACH;YAED,4BAA4B,CAAC,cAAc,CAAC,CAAC;YAC7C,4BAA4B,CAAC,cAAc,CAAC,CAAC;YAE7C,IACE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EACxC;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,kDAAkD,gBAAgB,IAAI,CACvG,CAAC;aACH;YAED,MAAM,qBAAqB,GAAG,CAAC,OAAY,EAAE,EAAE;gBAC7C,IAAI;oBACF,4BAA4B,CAAC,OAAO,CAAC,CAAC;oBACtC,OAAO,IAAI,CAAC;iBACb;gBAAC,MAAM;oBACN,OAAO,KAAK,CAAC;iBACd;YACH,CAAC,CAAC;YAEF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,sBAAsB,CAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAClE,CAAC,WAAW,EAAE,EAAE,CACd,sBAAsB,CAAC,WAAW,EAAE;gBAClC,qBAAqB;gBACrB,sBAAsB;aACvB,CAAC,CACL,CAAC;YACF,IAAI,CAAC,0BAA0B,IAAI,CAAC,0BAA0B,EAAE;gBAC9D,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,6DAA6D,gBAAgB,yCAAyC,CACvJ,CAAC;aACH;YAED,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,MAAM,4BAA4B,GAChC,qCAAqC,CACnC,cAAc,EACd,YAAY,EACZ,yBAAyB,CAC1B,CAAC;YACJ,IAAI,CAAC,4BAA4B,IAAI,CAAC,4BAA4B,EAAE;gBAClE,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,yDAAyD,gBAAgB,yCAAyC,CACnJ,CAAC;aACH;QACH,CAAC;QACD,MAAM,EAAE,CACN,SAA4B,EAC5B,UAA6B,EACW,EAAE;YAC1C,MAAM,oBAAoB,GAAG,mBAAmB,CAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YACF,MAAM,oBAAoB,GAAG,mBAAmB,CAC9C,SAAS,CAAC,cAAc,EACxB,UAAU,CAAC,cAAc,CAC1B,CAAC;YAEF,MAAM,uBAAuB,GAAG;gBAC9B,GAAG,SAAS,CAAC,iBAAiB;gBAC9B,GAAG,UAAU,CAAC,iBAAiB;aAChC,CAAC;YAEF,MAAM,WAAW,GAAsB;gBACrC,cAAc,EAAE,oBAAoB;gBACpC,cAAc,EAAE,oBAAoB;gBACpC,iBAAiB,EAAE,uBAAuB;gBAC1C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;aACjD,CAAC;YAEF,MAAM,WAAW,GAAG,8BAA8B,CAChD,SAAS,EACT,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,MAAM,IAAI,GAAG,8BAA8B,CACzC,WAAW,EACX,WAAW,EACX,gBAAgB,CACjB,CAAC;YAEF,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAUF;;;;;GAKG;AACH,MAAM,oBAAoB,GAItB,GAAG,EAAE;IACP,OAAO;QACL,cAAc,EAAE,cAAc,CAAC,SAAS;QACxC,UAAU,EAAE,6BAA6B;QACzC,cAAc,EAAE,CAAC,gBAAgB,CAAC;QAClC,eAAe,EAAE,CAAC,cAAsC,EAAE,EAAE,CAAC,IAAI;QACjE,SAAS,EAAE,CAAC,UAAgC,EAAE,EAAE;YAC9C,IACE,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC;gBAChC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,gBAAgB,EAClD;gBACA,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,mEAAmE,gBAAgB,IAAI,CACxH,CAAC;aACH;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,6BAA6B;IACzC,oBAAoB;CACZ,CAAC,CAAC;AAEZ;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,CAAC,gBAAgB,CAAC,EAAE;QAClB,WAAW;QACX,aAAa;KACd;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,aAAqB;IAClD,OAAO,CAAC,OAAsB,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,OAAO,KAAK,aAAa,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CACnC,WAAgC,EAChC,aAAqB;IAErB,IAAI,WAAW,CAAC,QAAQ,EAAE;QACxB,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAChD,qBAAqB,CAAC,aAAa,CAAC,CACrC,CAAC;KACH;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,iBAAoC,EACpC,aAAkB;IAElB,MAAM,kBAAkB,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAExD;QACE,kBAAkB,CAAC,cAAc;QACjC,kBAAkB,CAAC,cAAc;KAClC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE;YACjD,4BAA4B,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;IAEhE,IAAI,QAAQ,EAAE;QACZ,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;QACnD,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC;KACpD,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE9C,IAAI,WAAW,EAAE;QACf,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,sBAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAClB,iBAAoC,EACpC,iBAAsC;IAEtC,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CACtC,iBAAiB,CAAC,cAAc,CACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;QACnB,OAAO,KAAK,KAAK,iBAAiB,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;IAEvD,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB,EAAE;QACpD,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,IAAI;SACvC,CAAC;KACH;IAED,MAAM,kBAAkB,GAAG;QACzB,GAAG,iBAAiB;QACpB,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;QACrD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;KACtD,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE;QAChB,MAAM,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,SAAS,KAAK,kBAAkB,CAAC,MAAM,CAAC;IACjD,CAAC,CACF,CAAC;IAEF,IAAI,kBAAkB,EAAE;QACtB,OAAO;YACL,SAAS,EAAE,sBAAsB,CAAC,WAAW;YAC7C,KAAK,EAAE,kBAAkB;SAC1B,CAAC;KACH;IAED,OAAO;QACL,SAAS,EAAE,sBAAsB,CAAC,gBAAgB;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,iBAAoC,EACpC,gBAAiC,EACjC,QAAuB,EAKvB,EAAE;IACF,MAAM,qBAAqB,GAAG,oBAAoB,CAChD,iBAAiB,EACjB,QAAQ,CACT,CAAC;IAEF,MAAM,uBAAuB,GAAG,oBAAoB,CAClD,qBAAqB,EACrB,gBAAgB,CACjB,CAAC;IAEF,OAAO;QACL,CAAC,6BAA6B,CAAC,EAAE;YAC/B,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,gBAAgB;oBACtB,KAAK,EAAE,uBAAuB;iBAC/B;aACF;SACF;KACF,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import type { NetworkClientId } from '@metamask/network-controller';\nimport type {\n  PermissionSpecificationBuilder,\n  EndowmentGetterParams,\n  ValidPermissionSpecification,\n  PermissionValidatorConstraint,\n  PermissionConstraint,\n  EndowmentCaveatSpecificationConstraint,\n} from '@metamask/permission-controller';\nimport {\n  CaveatMutatorOperation,\n  PermissionType,\n} from '@metamask/permission-controller';\nimport type { CaipAccountId, CaipChainId, Json } from '@metamask/utils';\nimport {\n  hasProperty,\n  KnownCaipNamespace,\n  parseCaipAccountId,\n  isObject,\n  type Hex,\n  type NonEmptyArray,\n} from '@metamask/utils';\nimport { cloneDeep, isEqual } from 'lodash';\n\nimport { setPermittedAccounts } from './adapters/caip-permission-adapter-accounts';\nimport { setPermittedChainIds } from './adapters/caip-permission-adapter-permittedChains';\nimport { assertIsInternalScopesObject } from './scope/assert';\nimport {\n  isSupportedAccount,\n  isSupportedScopeString,\n  isSupportedSessionProperty,\n} from './scope/supported';\nimport { mergeInternalScopes } from './scope/transform';\nimport {\n  parseScopeString,\n  type ExternalScopeString,\n  type InternalScopeObject,\n  type InternalScopesObject,\n} from './scope/types';\n\n/**\n * The CAIP-25 permission caveat value.\n * This permission contains the required and optional scopes and session properties from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request that initiated the permission session.\n * It also contains a boolean (isMultichainOrigin) indicating if the permission session is multichain, which may be needed to determine implicit permissioning.\n */\nexport type Caip25CaveatValue = {\n  requiredScopes: InternalScopesObject;\n  optionalScopes: InternalScopesObject;\n  sessionProperties: Record<string, Json>;\n  isMultichainOrigin: boolean;\n};\n\n/**\n * The name of the CAIP-25 permission caveat.\n */\nexport const Caip25CaveatType = 'authorizedScopes';\n\n/**\n * The target name of the CAIP-25 endowment permission.\n */\nexport const Caip25EndowmentPermissionName = 'endowment:caip25';\n\n/**\n * Creates a CAIP-25 permission caveat.\n *\n * @param value - The CAIP-25 permission caveat value.\n * @returns The CAIP-25 permission caveat (now including the type).\n */\nexport const createCaip25Caveat = (value: Caip25CaveatValue) => {\n  return {\n    type: Caip25CaveatType,\n    value,\n  };\n};\n\ntype Caip25EndowmentCaveatSpecificationBuilderOptions = {\n  findNetworkClientIdByChainId: (chainId: Hex) => NetworkClientId;\n  listAccounts: () => { type: string; address: Hex }[];\n  isNonEvmScopeSupported: (scope: CaipChainId) => boolean;\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[];\n};\n\n/**\n * Calculates the difference between two provided CAIP-25 permission caveat values, but only considering a single scope property at a time.\n *\n * @param originalValue - The existing CAIP-25 permission caveat value.\n * @param mergedValue - The result from merging existing and incoming CAIP-25 permission caveat values.\n * @param scopeToDiff - The required or optional scopes from the [CAIP-25](https://github.com/ChainAgnostic/CAIPs/blob/main/CAIPs/caip-25.md) request.\n * @returns The difference between original and merged CAIP-25 permission caveat values.\n */\nexport function diffScopesForCaip25CaveatValue(\n  originalValue: Caip25CaveatValue,\n  mergedValue: Caip25CaveatValue,\n  scopeToDiff: 'optionalScopes' | 'requiredScopes',\n): Caip25CaveatValue {\n  const diff = cloneDeep(originalValue);\n\n  const mergedScopeToDiff = mergedValue[scopeToDiff];\n  for (const [scopeString, mergedScopeObject] of Object.entries(\n    mergedScopeToDiff,\n  )) {\n    const internalScopeString = scopeString as keyof typeof mergedScopeToDiff;\n    const originalScopeObject = diff[scopeToDiff][internalScopeString];\n\n    if (originalScopeObject) {\n      const newAccounts = mergedScopeObject.accounts.filter(\n        (account) => !originalScopeObject?.accounts.includes(account),\n      );\n      if (newAccounts.length > 0) {\n        diff[scopeToDiff][internalScopeString] = {\n          accounts: newAccounts,\n        };\n        continue;\n      }\n      delete diff[scopeToDiff][internalScopeString];\n    } else {\n      diff[scopeToDiff][internalScopeString] = mergedScopeObject;\n    }\n  }\n\n  return diff;\n}\n\n/**\n * Checks if every account in the given scopes object is supported.\n *\n * @param scopesObject - The scopes object to iterate over.\n * @param listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * addresses.\n * @returns True if every account in the scopes object is supported, false otherwise.\n */\nfunction isEveryAccountInScopesObjectSupported(\n  scopesObject: InternalScopesObject,\n  listAccounts: () => { type: string; address: Hex }[],\n  getNonEvmAccountAddresses: (scope: CaipChainId) => string[],\n) {\n  return Object.values(scopesObject).every((scopeObject) =>\n    scopeObject.accounts.every((account) =>\n      isSupportedAccount(account, {\n        getEvmInternalAccounts: listAccounts,\n        getNonEvmAccountAddresses,\n      }),\n    ),\n  );\n}\n\n/**\n * Helper that returns a `authorizedScopes` CAIP-25 caveat specification\n * that can be passed into the PermissionController constructor.\n *\n * @param options - The specification builder options.\n * @param options.findNetworkClientIdByChainId - The hook for getting the networkClientId that serves a chainId.\n * @param options.listAccounts - The hook for getting internalAccount objects for all evm accounts.\n * @param options.isNonEvmScopeSupported - The hook that determines if an non EVM scopeString is supported.\n * @param options.getNonEvmAccountAddresses - The hook that returns the supported CAIP-10 account addresses for a non EVM scope.\n * @returns The specification for the `caip25` caveat.\n */\nexport const caip25CaveatBuilder = ({\n  findNetworkClientIdByChainId,\n  listAccounts,\n  isNonEvmScopeSupported,\n  getNonEvmAccountAddresses,\n}: Caip25EndowmentCaveatSpecificationBuilderOptions): EndowmentCaveatSpecificationConstraint &\n  Required<\n    Pick<EndowmentCaveatSpecificationConstraint, 'validator' | 'merger'>\n  > => {\n  return {\n    type: Caip25CaveatType,\n    validator: (\n      caveat: { type: typeof Caip25CaveatType; value: unknown },\n      _origin?: string,\n      _target?: string,\n    ) => {\n      if (\n        !caveat.value ||\n        !hasProperty(caveat.value, 'requiredScopes') ||\n        !hasProperty(caveat.value, 'optionalScopes') ||\n        !hasProperty(caveat.value, 'isMultichainOrigin') ||\n        !hasProperty(caveat.value, 'sessionProperties') ||\n        typeof caveat.value.isMultichainOrigin !== 'boolean' ||\n        !isObject(caveat.value.sessionProperties)\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received invalid value for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      const { requiredScopes, optionalScopes, sessionProperties } =\n        caveat.value;\n\n      const allSessionPropertiesSupported = Object.keys(\n        sessionProperties,\n      ).every((sessionProperty) => isSupportedSessionProperty(sessionProperty));\n\n      if (!allSessionPropertiesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received unknown session property(s) for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      assertIsInternalScopesObject(requiredScopes);\n      assertIsInternalScopesObject(optionalScopes);\n\n      if (\n        Object.keys(requiredScopes).length === 0 &&\n        Object.keys(optionalScopes).length === 0\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received no scopes for caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n\n      const isEvmChainIdSupported = (chainId: Hex) => {\n        try {\n          findNetworkClientIdByChainId(chainId);\n          return true;\n        } catch {\n          return false;\n        }\n      };\n\n      const allRequiredScopesSupported = Object.keys(requiredScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      const allOptionalScopesSupported = Object.keys(optionalScopes).every(\n        (scopeString) =>\n          isSupportedScopeString(scopeString, {\n            isEvmChainIdSupported,\n            isNonEvmScopeSupported,\n          }),\n      );\n      if (!allRequiredScopesSupported || !allOptionalScopesSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received scopeString value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n\n      const allRequiredAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          requiredScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      const allOptionalAccountsSupported =\n        isEveryAccountInScopesObjectSupported(\n          optionalScopes,\n          listAccounts,\n          getNonEvmAccountAddresses,\n        );\n      if (!allRequiredAccountsSupported || !allOptionalAccountsSupported) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Received account value(s) for caveat of type \"${Caip25CaveatType}\" that are not supported by the wallet.`,\n        );\n      }\n    },\n    merger: (\n      leftValue: Caip25CaveatValue,\n      rightValue: Caip25CaveatValue,\n    ): [Caip25CaveatValue, Caip25CaveatValue] => {\n      const mergedRequiredScopes = mergeInternalScopes(\n        leftValue.requiredScopes,\n        rightValue.requiredScopes,\n      );\n      const mergedOptionalScopes = mergeInternalScopes(\n        leftValue.optionalScopes,\n        rightValue.optionalScopes,\n      );\n\n      const mergedSessionProperties = {\n        ...leftValue.sessionProperties,\n        ...rightValue.sessionProperties,\n      };\n\n      const mergedValue: Caip25CaveatValue = {\n        requiredScopes: mergedRequiredScopes,\n        optionalScopes: mergedOptionalScopes,\n        sessionProperties: mergedSessionProperties,\n        isMultichainOrigin: leftValue.isMultichainOrigin,\n      };\n\n      const partialDiff = diffScopesForCaip25CaveatValue(\n        leftValue,\n        mergedValue,\n        'requiredScopes',\n      );\n\n      const diff = diffScopesForCaip25CaveatValue(\n        partialDiff,\n        mergedValue,\n        'optionalScopes',\n      );\n\n      return [mergedValue, diff];\n    },\n  };\n};\n\ntype Caip25EndowmentSpecification = ValidPermissionSpecification<{\n  permissionType: PermissionType.Endowment;\n  targetName: typeof Caip25EndowmentPermissionName;\n  endowmentGetter: (_options?: EndowmentGetterParams) => null;\n  validator: PermissionValidatorConstraint;\n  allowedCaveats: Readonly<NonEmptyArray<string>> | null;\n}>;\n\n/**\n * Helper that returns a `endowment:caip25` specification that\n * can be passed into the PermissionController constructor.\n *\n * @returns The specification for the `caip25` endowment.\n */\nconst specificationBuilder: PermissionSpecificationBuilder<\n  PermissionType.Endowment,\n  Record<never, never>,\n  Caip25EndowmentSpecification\n> = () => {\n  return {\n    permissionType: PermissionType.Endowment,\n    targetName: Caip25EndowmentPermissionName,\n    allowedCaveats: [Caip25CaveatType],\n    endowmentGetter: (_getterOptions?: EndowmentGetterParams) => null,\n    validator: (permission: PermissionConstraint) => {\n      if (\n        permission.caveats?.length !== 1 ||\n        permission.caveats?.[0]?.type !== Caip25CaveatType\n      ) {\n        throw new Error(\n          `${Caip25EndowmentPermissionName} error: Invalid caveats. There must be a single caveat of type \"${Caip25CaveatType}\".`,\n        );\n      }\n    },\n  };\n};\n\n/**\n * The `caip25` endowment specification builder. Passed to the\n * `PermissionController` for constructing and validating the\n * `endowment:caip25` permission.\n */\nexport const caip25EndowmentBuilder = Object.freeze({\n  targetName: Caip25EndowmentPermissionName,\n  specificationBuilder,\n} as const);\n\n/**\n * Factories that construct caveat mutator functions that are passed to\n * PermissionController.updatePermissionsByCaveat.\n */\nexport const Caip25CaveatMutators = {\n  [Caip25CaveatType]: {\n    removeScope,\n    removeAccount,\n  },\n};\n\n/**\n * Removes the account from the scope object.\n *\n * @param targetAddress - The address to remove from the scope object.\n * @returns A function that removes the account from the scope object.\n */\nfunction removeAccountFilterFn(targetAddress: string) {\n  return (account: CaipAccountId) => {\n    const parsed = parseCaipAccountId(account);\n    return parsed.address !== targetAddress;\n  };\n}\n\n/**\n * Removes the account from the scope object.\n *\n * @param scopeObject - The scope object to remove the account from.\n * @param targetAddress - The address to remove from the scope object.\n */\nfunction removeAccountFromScopeObject(\n  scopeObject: InternalScopeObject,\n  targetAddress: string,\n) {\n  if (scopeObject.accounts) {\n    scopeObject.accounts = scopeObject.accounts.filter(\n      removeAccountFilterFn(targetAddress),\n    );\n  }\n}\n\n/**\n * Removes the target account from the scope object.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value from which to remove the account (across all chain scopes).\n * @param targetAddress - The address to remove from the scope object. Not a CAIP-10 formatted address because it will be removed across each chain scope.\n * @returns The updated scope object.\n */\nfunction removeAccount(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetAddress: Hex,\n) {\n  const updatedCaveatValue = cloneDeep(caip25CaveatValue);\n\n  [\n    updatedCaveatValue.requiredScopes,\n    updatedCaveatValue.optionalScopes,\n  ].forEach((scopes) => {\n    Object.entries(scopes).forEach(([, scopeObject]) => {\n      removeAccountFromScopeObject(scopeObject, targetAddress);\n    });\n  });\n\n  const noChange = isEqual(updatedCaveatValue, caip25CaveatValue);\n\n  if (noChange) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const hasAccounts = [\n    ...Object.values(updatedCaveatValue.requiredScopes),\n    ...Object.values(updatedCaveatValue.optionalScopes),\n  ].some(({ accounts }) => accounts.length > 0);\n\n  if (hasAccounts) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n\n/**\n * Removes the target scope from the value arrays of the given\n * `endowment:caip25` caveat. No-ops if the target scopeString is not in\n * the existing scopes.\n *\n * @param caip25CaveatValue - The CAIP-25 permission caveat value to remove the scope from.\n * @param targetScopeString - The scope that is being removed.\n * @returns The updated CAIP-25 permission caveat value.\n */\nfunction removeScope(\n  caip25CaveatValue: Caip25CaveatValue,\n  targetScopeString: ExternalScopeString,\n) {\n  const newRequiredScopes = Object.entries(\n    caip25CaveatValue.requiredScopes,\n  ).filter(([scope]) => scope !== targetScopeString);\n  const newOptionalScopes = Object.entries(\n    caip25CaveatValue.optionalScopes,\n  ).filter(([scope]) => {\n    return scope !== targetScopeString;\n  });\n\n  const requiredScopesRemoved =\n    newRequiredScopes.length !==\n    Object.keys(caip25CaveatValue.requiredScopes).length;\n  const optionalScopesRemoved =\n    newOptionalScopes.length !==\n    Object.keys(caip25CaveatValue.optionalScopes).length;\n\n  if (!requiredScopesRemoved && !optionalScopesRemoved) {\n    return {\n      operation: CaveatMutatorOperation.Noop,\n    };\n  }\n\n  const updatedCaveatValue = {\n    ...caip25CaveatValue,\n    requiredScopes: Object.fromEntries(newRequiredScopes),\n    optionalScopes: Object.fromEntries(newOptionalScopes),\n  };\n\n  const hasNonWalletScopes = [...newRequiredScopes, ...newOptionalScopes].some(\n    ([scopeString]) => {\n      const { namespace } = parseScopeString(scopeString);\n      return namespace !== KnownCaipNamespace.Wallet;\n    },\n  );\n\n  if (hasNonWalletScopes) {\n    return {\n      operation: CaveatMutatorOperation.UpdateValue,\n      value: updatedCaveatValue,\n    };\n  }\n\n  return {\n    operation: CaveatMutatorOperation.RevokePermission,\n  };\n}\n\n/**\n * Modifies the requested CAIP-25 permissions object after UI confirmation.\n *\n * @param caip25CaveatValue - The requested CAIP-25 caveat value to modify.\n * @param accountAddresses - The list of permitted eth addresses.\n * @param chainIds - The list of permitted eth chainIds.\n * @returns The updated CAIP-25 caveat value with the permitted accounts and chainIds set.\n */\nexport const generateCaip25Caveat = (\n  caip25CaveatValue: Caip25CaveatValue,\n  accountAddresses: CaipAccountId[],\n  chainIds: CaipChainId[],\n): {\n  [Caip25EndowmentPermissionName]: {\n    caveats: [{ type: string; value: Caip25CaveatValue }];\n  };\n} => {\n  const caveatValueWithChains = setPermittedChainIds(\n    caip25CaveatValue,\n    chainIds,\n  );\n\n  const caveatValueWithAccounts = setPermittedAccounts(\n    caveatValueWithChains,\n    accountAddresses,\n  );\n\n  return {\n    [Caip25EndowmentPermissionName]: {\n      caveats: [\n        {\n          type: Caip25CaveatType,\n          value: caveatValueWithAccounts,\n        },\n      ],\n    },\n  };\n};\n"]}

package/dist/index.cjs

@@ -1,13 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Caip25CaveatMutators = exports.caip25EndowmentBuilder = exports.Caip25EndowmentPermissionName = exports.createCaip25Caveat = exports.Caip25CaveatType = exports.caip25CaveatBuilder = exports.normalizeAndMergeScopes = exports.mergeInternalScopes = exports.mergeNormalizedScopes = exports.mergeScopeObject = exports.normalizeScope = exports.getUniqueArrayItems = exports.parseScopeString = exports.getSupportedScopeObjects = exports.KnownWalletScopeString = exports.KnownNotifications = exports.KnownWalletNamespaceRpcMethods = exports.KnownRpcMethods = exports.KnownWalletRpcMethods = exports.assertIsInternalScopeString = exports.bucketScopes = exports.validateAndNormalizeScopes = exports.getPermittedAccountsForScopes = exports.getSessionScopes = exports.getInternalScopesObject = exports.setPermittedEthChainIds = exports.addPermittedEthChainId = exports.getPermittedEthChainIds = exports.setEthAccounts = exports.getEthAccounts = void 0;
-var caip_permission_adapter_eth_accounts_1 = require("./adapters/caip-permission-adapter-eth-accounts.cjs");
-Object.defineProperty(exports, "getEthAccounts", { enumerable: true, get: function () { return caip_permission_adapter_eth_accounts_1.getEthAccounts; } });
-Object.defineProperty(exports, "setEthAccounts", { enumerable: true, get: function () { return caip_permission_adapter_eth_accounts_1.setEthAccounts; } });
+exports.KnownSessionProperties = exports.generateCaip25Caveat = exports.Caip25CaveatMutators = exports.caip25EndowmentBuilder = exports.Caip25EndowmentPermissionName = exports.createCaip25Caveat = exports.Caip25CaveatType = exports.caip25CaveatBuilder = exports.normalizeAndMergeScopes = exports.mergeInternalScopes = exports.mergeNormalizedScopes = exports.mergeScopeObject = exports.normalizeScope = exports.getUniqueArrayItems = exports.parseScopeString = exports.getSupportedScopeObjects = exports.KnownWalletScopeString = exports.KnownNotifications = exports.KnownWalletNamespaceRpcMethods = exports.KnownRpcMethods = exports.KnownWalletRpcMethods = exports.assertIsInternalScopeString = exports.bucketScopes = exports.validateAndNormalizeScopes = exports.getPermittedAccountsForScopes = exports.getSessionScopes = exports.getInternalScopesObject = exports.addPermittedChainId = exports.setPermittedChainIds = exports.setPermittedEthChainIds = exports.addPermittedEthChainId = exports.getPermittedEthChainIds = exports.setPermittedAccounts = exports.setEthAccounts = exports.getEthAccounts = void 0;
+var caip_permission_adapter_accounts_1 = require("./adapters/caip-permission-adapter-accounts.cjs");
+Object.defineProperty(exports, "getEthAccounts", { enumerable: true, get: function () { return caip_permission_adapter_accounts_1.getEthAccounts; } });
+Object.defineProperty(exports, "setEthAccounts", { enumerable: true, get: function () { return caip_permission_adapter_accounts_1.setEthAccounts; } });
+Object.defineProperty(exports, "setPermittedAccounts", { enumerable: true, get: function () { return caip_permission_adapter_accounts_1.setPermittedAccounts; } });
 var caip_permission_adapter_permittedChains_1 = require("./adapters/caip-permission-adapter-permittedChains.cjs");
 Object.defineProperty(exports, "getPermittedEthChainIds", { enumerable: true, get: function () { return caip_permission_adapter_permittedChains_1.getPermittedEthChainIds; } });
 Object.defineProperty(exports, "addPermittedEthChainId", { enumerable: true, get: function () { return caip_permission_adapter_permittedChains_1.addPermittedEthChainId; } });
 Object.defineProperty(exports, "setPermittedEthChainIds", { enumerable: true, get: function () { return caip_permission_adapter_permittedChains_1.setPermittedEthChainIds; } });
+Object.defineProperty(exports, "setPermittedChainIds", { enumerable: true, get: function () { return caip_permission_adapter_permittedChains_1.setPermittedChainIds; } });
+Object.defineProperty(exports, "addPermittedChainId", { enumerable: true, get: function () { return caip_permission_adapter_permittedChains_1.addPermittedChainId; } });
 var caip_permission_adapter_session_scopes_1 = require("./adapters/caip-permission-adapter-session-scopes.cjs");
 Object.defineProperty(exports, "getInternalScopesObject", { enumerable: true, get: function () { return caip_permission_adapter_session_scopes_1.getInternalScopesObject; } });
 Object.defineProperty(exports, "getSessionScopes", { enumerable: true, get: function () { return caip_permission_adapter_session_scopes_1.getSessionScopes; } });
@@ -41,4 +44,7 @@ Object.defineProperty(exports, "createCaip25Caveat", { enumerable: true, get: fu
 Object.defineProperty(exports, "Caip25EndowmentPermissionName", { enumerable: true, get: function () { return caip25Permission_1.Caip25EndowmentPermissionName; } });
 Object.defineProperty(exports, "caip25EndowmentBuilder", { enumerable: true, get: function () { return caip25Permission_1.caip25EndowmentBuilder; } });
 Object.defineProperty(exports, "Caip25CaveatMutators", { enumerable: true, get: function () { return caip25Permission_1.Caip25CaveatMutators; } });
+Object.defineProperty(exports, "generateCaip25Caveat", { enumerable: true, get: function () { return caip25Permission_1.generateCaip25Caveat; } });
+var constants_2 = require("./scope/constants.cjs");
+Object.defineProperty(exports, "KnownSessionProperties", { enumerable: true, get: function () { return constants_2.KnownSessionProperties; } });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,4GAGyD;AAFvD,sIAAA,cAAc,OAAA;AACd,sIAAA,cAAc,OAAA;AAEhB,kHAI4D;AAH1D,kJAAA,uBAAuB,OAAA;AACvB,iJAAA,sBAAsB,OAAA;AACtB,kJAAA,uBAAuB,OAAA;AAEzB,gHAI2D;AAHzD,iJAAA,uBAAuB,OAAA;AACvB,0IAAA,gBAAgB,OAAA;AAChB,uJAAA,6BAA6B,OAAA;AAI/B,2DAG+B;AAF7B,2HAAA,0BAA0B,OAAA;AAC1B,6GAAA,YAAY,OAAA;AAEd,6CAA6D;AAApD,qHAAA,2BAA2B,OAAA;AACpC,mDAM2B;AALzB,kHAAA,qBAAqB,OAAA;AACrB,4GAAA,eAAe,OAAA;AACf,2HAAA,8BAA8B,OAAA;AAC9B,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AAExB,6CAA0D;AAAjD,kHAAA,wBAAwB,OAAA;AAajC,2CAAiD;AAAxC,yGAAA,gBAAgB,OAAA;AACzB,mDAO2B;AANzB,gHAAA,mBAAmB,OAAA;AACnB,2GAAA,cAAc,OAAA;AACd,6GAAA,gBAAgB,OAAA;AAChB,kHAAA,qBAAqB,OAAA;AACrB,gHAAA,mBAAmB,OAAA;AACnB,oHAAA,uBAAuB,OAAA;AAIzB,2DAO4B;AAN1B,uHAAA,mBAAmB,OAAA;AACnB,oHAAA,gBAAgB,OAAA;AAChB,sHAAA,kBAAkB,OAAA;AAClB,iIAAA,6BAA6B,OAAA;AAC7B,0HAAA,sBAAsB,OAAA;AACtB,wHAAA,oBAAoB,OAAA","sourcesContent":["export {\n  getEthAccounts,\n  setEthAccounts,\n} from './adapters/caip-permission-adapter-eth-accounts';\nexport {\n  getPermittedEthChainIds,\n  addPermittedEthChainId,\n  setPermittedEthChainIds,\n} from './adapters/caip-permission-adapter-permittedChains';\nexport {\n  getInternalScopesObject,\n  getSessionScopes,\n  getPermittedAccountsForScopes,\n} from './adapters/caip-permission-adapter-session-scopes';\n\nexport type { Caip25Authorization } from './scope/authorization';\nexport {\n  validateAndNormalizeScopes,\n  bucketScopes,\n} from './scope/authorization';\nexport { assertIsInternalScopeString } from './scope/assert';\nexport {\n  KnownWalletRpcMethods,\n  KnownRpcMethods,\n  KnownWalletNamespaceRpcMethods,\n  KnownNotifications,\n  KnownWalletScopeString,\n} from './scope/constants';\nexport { getSupportedScopeObjects } from './scope/filter';\nexport type {\n  ExternalScopeString,\n  ExternalScopeObject,\n  ExternalScopesObject,\n  InternalScopeString,\n  InternalScopeObject,\n  InternalScopesObject,\n  NormalizedScopeObject,\n  NormalizedScopesObject,\n  ScopedProperties,\n  NonWalletKnownCaipNamespace,\n} from './scope/types';\nexport { parseScopeString } from './scope/types';\nexport {\n  getUniqueArrayItems,\n  normalizeScope,\n  mergeScopeObject,\n  mergeNormalizedScopes,\n  mergeInternalScopes,\n  normalizeAndMergeScopes,\n} from './scope/transform';\n\nexport type { Caip25CaveatValue } from './caip25Permission';\nexport {\n  caip25CaveatBuilder,\n  Caip25CaveatType,\n  createCaip25Caveat,\n  Caip25EndowmentPermissionName,\n  caip25EndowmentBuilder,\n  Caip25CaveatMutators,\n} from './caip25Permission';\n"]}
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,oGAIqD;AAHnD,kIAAA,cAAc,OAAA;AACd,kIAAA,cAAc,OAAA;AACd,wIAAA,oBAAoB,OAAA;AAEtB,kHAM4D;AAL1D,kJAAA,uBAAuB,OAAA;AACvB,iJAAA,sBAAsB,OAAA;AACtB,kJAAA,uBAAuB,OAAA;AACvB,+IAAA,oBAAoB,OAAA;AACpB,8IAAA,mBAAmB,OAAA;AAErB,gHAI2D;AAHzD,iJAAA,uBAAuB,OAAA;AACvB,0IAAA,gBAAgB,OAAA;AAChB,uJAAA,6BAA6B,OAAA;AAI/B,2DAG+B;AAF7B,2HAAA,0BAA0B,OAAA;AAC1B,6GAAA,YAAY,OAAA;AAEd,6CAA6D;AAApD,qHAAA,2BAA2B,OAAA;AACpC,mDAM2B;AALzB,kHAAA,qBAAqB,OAAA;AACrB,4GAAA,eAAe,OAAA;AACf,2HAAA,8BAA8B,OAAA;AAC9B,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AAExB,6CAA0D;AAAjD,kHAAA,wBAAwB,OAAA;AAajC,2CAAiD;AAAxC,yGAAA,gBAAgB,OAAA;AACzB,mDAO2B;AANzB,gHAAA,mBAAmB,OAAA;AACnB,2GAAA,cAAc,OAAA;AACd,6GAAA,gBAAgB,OAAA;AAChB,kHAAA,qBAAqB,OAAA;AACrB,gHAAA,mBAAmB,OAAA;AACnB,oHAAA,uBAAuB,OAAA;AAIzB,2DAQ4B;AAP1B,uHAAA,mBAAmB,OAAA;AACnB,oHAAA,gBAAgB,OAAA;AAChB,sHAAA,kBAAkB,OAAA;AAClB,iIAAA,6BAA6B,OAAA;AAC7B,0HAAA,sBAAsB,OAAA;AACtB,wHAAA,oBAAoB,OAAA;AACpB,wHAAA,oBAAoB,OAAA;AAEtB,mDAA2D;AAAlD,mHAAA,sBAAsB,OAAA","sourcesContent":["export {\n  getEthAccounts,\n  setEthAccounts,\n  setPermittedAccounts,\n} from './adapters/caip-permission-adapter-accounts';\nexport {\n  getPermittedEthChainIds,\n  addPermittedEthChainId,\n  setPermittedEthChainIds,\n  setPermittedChainIds,\n  addPermittedChainId,\n} from './adapters/caip-permission-adapter-permittedChains';\nexport {\n  getInternalScopesObject,\n  getSessionScopes,\n  getPermittedAccountsForScopes,\n} from './adapters/caip-permission-adapter-session-scopes';\n\nexport type { Caip25Authorization } from './scope/authorization';\nexport {\n  validateAndNormalizeScopes,\n  bucketScopes,\n} from './scope/authorization';\nexport { assertIsInternalScopeString } from './scope/assert';\nexport {\n  KnownWalletRpcMethods,\n  KnownRpcMethods,\n  KnownWalletNamespaceRpcMethods,\n  KnownNotifications,\n  KnownWalletScopeString,\n} from './scope/constants';\nexport { getSupportedScopeObjects } from './scope/filter';\nexport type {\n  ExternalScopeString,\n  ExternalScopeObject,\n  ExternalScopesObject,\n  InternalScopeString,\n  InternalScopeObject,\n  InternalScopesObject,\n  NormalizedScopeObject,\n  NormalizedScopesObject,\n  ScopedProperties,\n  NonWalletKnownCaipNamespace,\n} from './scope/types';\nexport { parseScopeString } from './scope/types';\nexport {\n  getUniqueArrayItems,\n  normalizeScope,\n  mergeScopeObject,\n  mergeNormalizedScopes,\n  mergeInternalScopes,\n  normalizeAndMergeScopes,\n} from './scope/transform';\n\nexport type { Caip25CaveatValue } from './caip25Permission';\nexport {\n  caip25CaveatBuilder,\n  Caip25CaveatType,\n  createCaip25Caveat,\n  Caip25EndowmentPermissionName,\n  caip25EndowmentBuilder,\n  Caip25CaveatMutators,\n  generateCaip25Caveat,\n} from './caip25Permission';\nexport { KnownSessionProperties } from './scope/constants';\n"]}

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-export { getEthAccounts, setEthAccounts, } from "./adapters/caip-permission-adapter-eth-accounts.cjs";
-export { getPermittedEthChainIds, addPermittedEthChainId, setPermittedEthChainIds, } from "./adapters/caip-permission-adapter-permittedChains.cjs";
+export { getEthAccounts, setEthAccounts, setPermittedAccounts, } from "./adapters/caip-permission-adapter-accounts.cjs";
+export { getPermittedEthChainIds, addPermittedEthChainId, setPermittedEthChainIds, setPermittedChainIds, addPermittedChainId, } from "./adapters/caip-permission-adapter-permittedChains.cjs";
 export { getInternalScopesObject, getSessionScopes, getPermittedAccountsForScopes, } from "./adapters/caip-permission-adapter-session-scopes.cjs";
 export type { Caip25Authorization } from "./scope/authorization.cjs";
 export { validateAndNormalizeScopes, bucketScopes, } from "./scope/authorization.cjs";
@@ -10,5 +10,6 @@ export type { ExternalScopeString, ExternalScopeObject, ExternalScopesObject, In
 export { parseScopeString } from "./scope/types.cjs";
 export { getUniqueArrayItems, normalizeScope, mergeScopeObject, mergeNormalizedScopes, mergeInternalScopes, normalizeAndMergeScopes, } from "./scope/transform.cjs";
 export type { Caip25CaveatValue } from "./caip25Permission.cjs";
-export { caip25CaveatBuilder, Caip25CaveatType, createCaip25Caveat, Caip25EndowmentPermissionName, caip25EndowmentBuilder, Caip25CaveatMutators, } from "./caip25Permission.cjs";
+export { caip25CaveatBuilder, Caip25CaveatType, createCaip25Caveat, Caip25EndowmentPermissionName, caip25EndowmentBuilder, Caip25CaveatMutators, generateCaip25Caveat, } from "./caip25Permission.cjs";
+export { KnownSessionProperties } from "./scope/constants.cjs";
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,GACf,4DAAwD;AACzD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,GACxB,+DAA2D;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,GAC9B,8DAA0D;AAE3D,YAAY,EAAE,mBAAmB,EAAE,kCAA8B;AACjE,OAAO,EACL,0BAA0B,EAC1B,YAAY,GACb,kCAA8B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,2BAAuB;AAC7D,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,GACvB,8BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,2BAAuB;AAC1D,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,0BAAsB;AACvB,OAAO,EAAE,gBAAgB,EAAE,0BAAsB;AACjD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,8BAA0B;AAE3B,YAAY,EAAE,iBAAiB,EAAE,+BAA2B;AAC5D,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,GACrB,+BAA2B"}
+{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,wDAAoD;AACrD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,GACpB,+DAA2D;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,GAC9B,8DAA0D;AAE3D,YAAY,EAAE,mBAAmB,EAAE,kCAA8B;AACjE,OAAO,EACL,0BAA0B,EAC1B,YAAY,GACb,kCAA8B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,2BAAuB;AAC7D,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,GACvB,8BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,2BAAuB;AAC1D,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,0BAAsB;AACvB,OAAO,EAAE,gBAAgB,EAAE,0BAAsB;AACjD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,8BAA0B;AAE3B,YAAY,EAAE,iBAAiB,EAAE,+BAA2B;AAC5D,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,GACrB,+BAA2B;AAC5B,OAAO,EAAE,sBAAsB,EAAE,8BAA0B"}

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-export { getEthAccounts, setEthAccounts, } from "./adapters/caip-permission-adapter-eth-accounts.mjs";
-export { getPermittedEthChainIds, addPermittedEthChainId, setPermittedEthChainIds, } from "./adapters/caip-permission-adapter-permittedChains.mjs";
+export { getEthAccounts, setEthAccounts, setPermittedAccounts, } from "./adapters/caip-permission-adapter-accounts.mjs";
+export { getPermittedEthChainIds, addPermittedEthChainId, setPermittedEthChainIds, setPermittedChainIds, addPermittedChainId, } from "./adapters/caip-permission-adapter-permittedChains.mjs";
 export { getInternalScopesObject, getSessionScopes, getPermittedAccountsForScopes, } from "./adapters/caip-permission-adapter-session-scopes.mjs";
 export type { Caip25Authorization } from "./scope/authorization.mjs";
 export { validateAndNormalizeScopes, bucketScopes, } from "./scope/authorization.mjs";
@@ -10,5 +10,6 @@ export type { ExternalScopeString, ExternalScopeObject, ExternalScopesObject, In
 export { parseScopeString } from "./scope/types.mjs";
 export { getUniqueArrayItems, normalizeScope, mergeScopeObject, mergeNormalizedScopes, mergeInternalScopes, normalizeAndMergeScopes, } from "./scope/transform.mjs";
 export type { Caip25CaveatValue } from "./caip25Permission.mjs";
-export { caip25CaveatBuilder, Caip25CaveatType, createCaip25Caveat, Caip25EndowmentPermissionName, caip25EndowmentBuilder, Caip25CaveatMutators, } from "./caip25Permission.mjs";
+export { caip25CaveatBuilder, Caip25CaveatType, createCaip25Caveat, Caip25EndowmentPermissionName, caip25EndowmentBuilder, Caip25CaveatMutators, generateCaip25Caveat, } from "./caip25Permission.mjs";
+export { KnownSessionProperties } from "./scope/constants.mjs";
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,GACf,4DAAwD;AACzD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,GACxB,+DAA2D;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,GAC9B,8DAA0D;AAE3D,YAAY,EAAE,mBAAmB,EAAE,kCAA8B;AACjE,OAAO,EACL,0BAA0B,EAC1B,YAAY,GACb,kCAA8B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,2BAAuB;AAC7D,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,GACvB,8BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,2BAAuB;AAC1D,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,0BAAsB;AACvB,OAAO,EAAE,gBAAgB,EAAE,0BAAsB;AACjD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,8BAA0B;AAE3B,YAAY,EAAE,iBAAiB,EAAE,+BAA2B;AAC5D,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,GACrB,+BAA2B"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,wDAAoD;AACrD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,GACpB,+DAA2D;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,GAC9B,8DAA0D;AAE3D,YAAY,EAAE,mBAAmB,EAAE,kCAA8B;AACjE,OAAO,EACL,0BAA0B,EAC1B,YAAY,GACb,kCAA8B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,2BAAuB;AAC7D,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,GACvB,8BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,2BAAuB;AAC1D,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,0BAAsB;AACvB,OAAO,EAAE,gBAAgB,EAAE,0BAAsB;AACjD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,8BAA0B;AAE3B,YAAY,EAAE,iBAAiB,EAAE,+BAA2B;AAC5D,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,GACrB,+BAA2B;AAC5B,OAAO,EAAE,sBAAsB,EAAE,8BAA0B"}

package/dist/index.mjs

@@ -1,5 +1,5 @@
-export { getEthAccounts, setEthAccounts } from "./adapters/caip-permission-adapter-eth-accounts.mjs";
-export { getPermittedEthChainIds, addPermittedEthChainId, setPermittedEthChainIds } from "./adapters/caip-permission-adapter-permittedChains.mjs";
+export { getEthAccounts, setEthAccounts, setPermittedAccounts } from "./adapters/caip-permission-adapter-accounts.mjs";
+export { getPermittedEthChainIds, addPermittedEthChainId, setPermittedEthChainIds, setPermittedChainIds, addPermittedChainId } from "./adapters/caip-permission-adapter-permittedChains.mjs";
 export { getInternalScopesObject, getSessionScopes, getPermittedAccountsForScopes } from "./adapters/caip-permission-adapter-session-scopes.mjs";
 export { validateAndNormalizeScopes, bucketScopes } from "./scope/authorization.mjs";
 export { assertIsInternalScopeString } from "./scope/assert.mjs";
@@ -7,5 +7,6 @@ export { KnownWalletRpcMethods, KnownRpcMethods, KnownWalletNamespaceRpcMethods,
 export { getSupportedScopeObjects } from "./scope/filter.mjs";
 export { parseScopeString } from "./scope/types.mjs";
 export { getUniqueArrayItems, normalizeScope, mergeScopeObject, mergeNormalizedScopes, mergeInternalScopes, normalizeAndMergeScopes } from "./scope/transform.mjs";
-export { caip25CaveatBuilder, Caip25CaveatType, createCaip25Caveat, Caip25EndowmentPermissionName, caip25EndowmentBuilder, Caip25CaveatMutators } from "./caip25Permission.mjs";
+export { caip25CaveatBuilder, Caip25CaveatType, createCaip25Caveat, Caip25EndowmentPermissionName, caip25EndowmentBuilder, Caip25CaveatMutators, generateCaip25Caveat } from "./caip25Permission.mjs";
+export { KnownSessionProperties } from "./scope/constants.mjs";
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,EACf,4DAAwD;AACzD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACxB,+DAA2D;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,EAC9B,8DAA0D;AAG3D,OAAO,EACL,0BAA0B,EAC1B,YAAY,EACb,kCAA8B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,2BAAuB;AAC7D,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,EACvB,8BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,2BAAuB;AAa1D,OAAO,EAAE,gBAAgB,EAAE,0BAAsB;AACjD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,8BAA0B;AAG3B,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACrB,+BAA2B","sourcesContent":["export {\n  getEthAccounts,\n  setEthAccounts,\n} from './adapters/caip-permission-adapter-eth-accounts';\nexport {\n  getPermittedEthChainIds,\n  addPermittedEthChainId,\n  setPermittedEthChainIds,\n} from './adapters/caip-permission-adapter-permittedChains';\nexport {\n  getInternalScopesObject,\n  getSessionScopes,\n  getPermittedAccountsForScopes,\n} from './adapters/caip-permission-adapter-session-scopes';\n\nexport type { Caip25Authorization } from './scope/authorization';\nexport {\n  validateAndNormalizeScopes,\n  bucketScopes,\n} from './scope/authorization';\nexport { assertIsInternalScopeString } from './scope/assert';\nexport {\n  KnownWalletRpcMethods,\n  KnownRpcMethods,\n  KnownWalletNamespaceRpcMethods,\n  KnownNotifications,\n  KnownWalletScopeString,\n} from './scope/constants';\nexport { getSupportedScopeObjects } from './scope/filter';\nexport type {\n  ExternalScopeString,\n  ExternalScopeObject,\n  ExternalScopesObject,\n  InternalScopeString,\n  InternalScopeObject,\n  InternalScopesObject,\n  NormalizedScopeObject,\n  NormalizedScopesObject,\n  ScopedProperties,\n  NonWalletKnownCaipNamespace,\n} from './scope/types';\nexport { parseScopeString } from './scope/types';\nexport {\n  getUniqueArrayItems,\n  normalizeScope,\n  mergeScopeObject,\n  mergeNormalizedScopes,\n  mergeInternalScopes,\n  normalizeAndMergeScopes,\n} from './scope/transform';\n\nexport type { Caip25CaveatValue } from './caip25Permission';\nexport {\n  caip25CaveatBuilder,\n  Caip25CaveatType,\n  createCaip25Caveat,\n  Caip25EndowmentPermissionName,\n  caip25EndowmentBuilder,\n  Caip25CaveatMutators,\n} from './caip25Permission';\n"]}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,EACd,oBAAoB,EACrB,wDAAoD;AACrD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACpB,+DAA2D;AAC5D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,EAC9B,8DAA0D;AAG3D,OAAO,EACL,0BAA0B,EAC1B,YAAY,EACb,kCAA8B;AAC/B,OAAO,EAAE,2BAA2B,EAAE,2BAAuB;AAC7D,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,8BAA8B,EAC9B,kBAAkB,EAClB,sBAAsB,EACvB,8BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,2BAAuB;AAa1D,OAAO,EAAE,gBAAgB,EAAE,0BAAsB;AACjD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,8BAA0B;AAG3B,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACrB,+BAA2B;AAC5B,OAAO,EAAE,sBAAsB,EAAE,8BAA0B","sourcesContent":["export {\n  getEthAccounts,\n  setEthAccounts,\n  setPermittedAccounts,\n} from './adapters/caip-permission-adapter-accounts';\nexport {\n  getPermittedEthChainIds,\n  addPermittedEthChainId,\n  setPermittedEthChainIds,\n  setPermittedChainIds,\n  addPermittedChainId,\n} from './adapters/caip-permission-adapter-permittedChains';\nexport {\n  getInternalScopesObject,\n  getSessionScopes,\n  getPermittedAccountsForScopes,\n} from './adapters/caip-permission-adapter-session-scopes';\n\nexport type { Caip25Authorization } from './scope/authorization';\nexport {\n  validateAndNormalizeScopes,\n  bucketScopes,\n} from './scope/authorization';\nexport { assertIsInternalScopeString } from './scope/assert';\nexport {\n  KnownWalletRpcMethods,\n  KnownRpcMethods,\n  KnownWalletNamespaceRpcMethods,\n  KnownNotifications,\n  KnownWalletScopeString,\n} from './scope/constants';\nexport { getSupportedScopeObjects } from './scope/filter';\nexport type {\n  ExternalScopeString,\n  ExternalScopeObject,\n  ExternalScopesObject,\n  InternalScopeString,\n  InternalScopeObject,\n  InternalScopesObject,\n  NormalizedScopeObject,\n  NormalizedScopesObject,\n  ScopedProperties,\n  NonWalletKnownCaipNamespace,\n} from './scope/types';\nexport { parseScopeString } from './scope/types';\nexport {\n  getUniqueArrayItems,\n  normalizeScope,\n  mergeScopeObject,\n  mergeNormalizedScopes,\n  mergeInternalScopes,\n  normalizeAndMergeScopes,\n} from './scope/transform';\n\nexport type { Caip25CaveatValue } from './caip25Permission';\nexport {\n  caip25CaveatBuilder,\n  Caip25CaveatType,\n  createCaip25Caveat,\n  Caip25EndowmentPermissionName,\n  caip25EndowmentBuilder,\n  Caip25CaveatMutators,\n  generateCaip25Caveat,\n} from './caip25Permission';\nexport { KnownSessionProperties } from './scope/constants';\n"]}

package/dist/scope/types.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseScopeString = void 0;
+exports.isWalletScope = exports.parseScopeString = void 0;
 const utils_1 = require("@metamask/utils");
 /**
  * Parses a scope string into a namespace and reference.
@@ -20,4 +20,15 @@ const parseScopeString = (scopeString) => {
     return {};
 };
 exports.parseScopeString = parseScopeString;
+/**
+ * Checks if a scope string is either a 'wallet' scope or a 'wallet:*' scope.
+ *
+ * @param scopeString - The scope string to check.
+ * @returns True if the scope string is a wallet scope, false otherwise.
+ */
+const isWalletScope = (scopeString) => {
+    const { namespace } = (0, exports.parseScopeString)(scopeString);
+    return namespace === utils_1.KnownCaipNamespace.Wallet;
+};
+exports.isWalletScope = isWalletScope;
 //# sourceMappingURL=types.cjs.map

package/dist/scope/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../../src/scope/types.ts"],"names":[],"mappings":";;;AAAA,2CAIyB;AAuFzB;;;;;GAKG;AACI,MAAM,gBAAgB,GAAG,CAC9B,WAAmB,EAInB,EAAE;IACF,IAAI,IAAA,uBAAe,EAAC,WAAW,CAAC,EAAE;QAChC,OAAO;YACL,SAAS,EAAE,WAAW;SACvB,CAAC;KACH;IACD,IAAI,IAAA,qBAAa,EAAC,WAAW,CAAC,EAAE;QAC9B,OAAO,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;KACtC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAhBW,QAAA,gBAAgB,oBAgB3B","sourcesContent":["import {\n  isCaipNamespace,\n  isCaipChainId,\n  parseCaipChainId,\n} from '@metamask/utils';\nimport type {\n  CaipChainId,\n  CaipReference,\n  CaipAccountId,\n  KnownCaipNamespace,\n  CaipNamespace,\n  Json,\n} from '@metamask/utils';\n\n/**\n * Represents a `scopeString` as defined in [CAIP-217](https://chainagnostic.org/CAIPs/caip-217).\n */\nexport type ExternalScopeString = CaipChainId | CaipNamespace;\n/**\n * Represents a `scopeObject` as defined in [CAIP-217](https://chainagnostic.org/CAIPs/caip-217).\n */\nexport type ExternalScopeObject = Omit<NormalizedScopeObject, 'accounts'> & {\n  references?: CaipReference[];\n  accounts?: CaipAccountId[];\n};\n/**\n * Represents a `scope` as defined in [CAIP-217](https://chainagnostic.org/CAIPs/caip-217).\n * TODO update the language in CAIP-217 to use \"scope\" instead of \"scopeObject\" for this full record type.\n */\nexport type ExternalScopesObject = Record<\n  ExternalScopeString,\n  ExternalScopeObject\n>;\n\n/**\n * Represents a `scopeString` as defined in\n * [CAIP-217](https://chainagnostic.org/CAIPs/caip-217), with the exception that\n * CAIP namespaces without a reference (aside from \"wallet\") are disallowed for our internal representations of CAIP-25 session scopes\n */\nexport type InternalScopeString = CaipChainId | KnownCaipNamespace.Wallet;\n\n/**\n * A trimmed down version of a [CAIP-217](https://chainagnostic.org/CAIPs/caip-217) defined scopeObject that is stored in a `endowment:caip25` permission.\n * The only property from the original CAIP-25 scopeObject that we use for permissioning is `accounts`.\n */\nexport type InternalScopeObject = {\n  accounts: CaipAccountId[];\n};\n\n/**\n * A trimmed down version of a [CAIP-217](https://chainagnostic.org/CAIPs/caip-217) scope that is stored in a `endowment:caip25` permission.\n * Accounts arrays are mapped to CAIP-2 chainIds. These are currently the only properties used by the permission system.\n */\nexport type InternalScopesObject = Record<CaipChainId, InternalScopeObject> & {\n  [KnownCaipNamespace.Wallet]?: InternalScopeObject;\n};\n\n/**\n * Represents a `scopeObject` as defined in\n * [CAIP-217](https://chainagnostic.org/CAIPs/caip-217), with the exception that\n * we resolve the `references` property into a scopeObject per reference and\n * assign an empty array to the `accounts` property if not already defined\n * to more easily perform support checks for `wallet_createSession` requests.\n * Also used as the return type for `wallet_createSession` and `wallet_sessionChanged`.\n */\nexport type NormalizedScopeObject = {\n  methods: string[];\n  notifications: string[];\n  accounts: CaipAccountId[];\n  rpcDocuments?: string[];\n  rpcEndpoints?: string[];\n};\n/**\n * Represents a keyed `scopeObject` as defined in\n * [CAIP-217](https://chainagnostic.org/CAIPs/caip-217), with the exception that\n * we resolve the `references` property into a scopeObject per reference and\n * assign an empty array to the `accounts` property if not already defined\n * to more easily perform support checks for `wallet_createSession` requests.\n * Also used as the return type for `wallet_createSession` and `wallet_sessionChanged`.\n */\nexport type NormalizedScopesObject = Record<\n  CaipChainId,\n  NormalizedScopeObject\n> & {\n  [KnownCaipNamespace.Wallet]?: NormalizedScopeObject;\n};\n\nexport type ScopedProperties = Record<CaipChainId, Record<string, Json>> & {\n  [KnownCaipNamespace.Wallet]?: Record<string, Json>;\n};\n\n/**\n * Parses a scope string into a namespace and reference.\n *\n * @param scopeString - The scope string to parse.\n * @returns An object containing the namespace and reference.\n */\nexport const parseScopeString = (\n  scopeString: string,\n): {\n  namespace?: string;\n  reference?: string;\n} => {\n  if (isCaipNamespace(scopeString)) {\n    return {\n      namespace: scopeString,\n    };\n  }\n  if (isCaipChainId(scopeString)) {\n    return parseCaipChainId(scopeString);\n  }\n\n  return {};\n};\n\n/**\n * CAIP namespaces excluding \"wallet\" currently supported by/known to the wallet.\n */\nexport type NonWalletKnownCaipNamespace = Exclude<\n  KnownCaipNamespace,\n  KnownCaipNamespace.Wallet\n>;\n"]}
+{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../../src/scope/types.ts"],"names":[],"mappings":";;;AAAA,2CAKyB;AAsFzB;;;;;GAKG;AACI,MAAM,gBAAgB,GAAG,CAC9B,WAAmB,EAInB,EAAE;IACF,IAAI,IAAA,uBAAe,EAAC,WAAW,CAAC,EAAE;QAChC,OAAO;YACL,SAAS,EAAE,WAAW;SACvB,CAAC;KACH;IACD,IAAI,IAAA,qBAAa,EAAC,WAAW,CAAC,EAAE;QAC9B,OAAO,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;KACtC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAhBW,QAAA,gBAAgB,oBAgB3B;AAUF;;;;;GAKG;AACI,MAAM,aAAa,GAAG,CAC3B,WAAmB,EAGwB,EAAE;IAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;IACpD,OAAO,SAAS,KAAK,0BAAkB,CAAC,MAAM,CAAC;AACjD,CAAC,CAAC;AAPW,QAAA,aAAa,iBAOxB","sourcesContent":["import {\n  isCaipNamespace,\n  isCaipChainId,\n  parseCaipChainId,\n  KnownCaipNamespace,\n} from '@metamask/utils';\nimport type {\n  CaipChainId,\n  CaipReference,\n  CaipAccountId,\n  CaipNamespace,\n  Json,\n} from '@metamask/utils';\n\n/**\n * Represents a `scopeString` as defined in [CAIP-217](https://chainagnostic.org/CAIPs/caip-217).\n */\nexport type ExternalScopeString = CaipChainId | CaipNamespace;\n/**\n * Represents a `scopeObject` as defined in [CAIP-217](https://chainagnostic.org/CAIPs/caip-217).\n */\nexport type ExternalScopeObject = Omit<NormalizedScopeObject, 'accounts'> & {\n  references?: CaipReference[];\n  accounts?: CaipAccountId[];\n};\n/**\n * Represents a `scope` as defined in [CAIP-217](https://chainagnostic.org/CAIPs/caip-217).\n * TODO update the language in CAIP-217 to use \"scope\" instead of \"scopeObject\" for this full record type.\n */\nexport type ExternalScopesObject = Record<\n  ExternalScopeString,\n  ExternalScopeObject\n>;\n\n/**\n * Represents a `scopeString` as defined in\n * [CAIP-217](https://chainagnostic.org/CAIPs/caip-217), with the exception that\n * CAIP namespaces without a reference (aside from \"wallet\") are disallowed for our internal representations of CAIP-25 session scopes\n */\nexport type InternalScopeString = CaipChainId | KnownCaipNamespace.Wallet;\n\n/**\n * A trimmed down version of a [CAIP-217](https://chainagnostic.org/CAIPs/caip-217) defined scopeObject that is stored in a `endowment:caip25` permission.\n * The only property from the original CAIP-25 scopeObject that we use for permissioning is `accounts`.\n */\nexport type InternalScopeObject = {\n  accounts: CaipAccountId[];\n};\n\n/**\n * A trimmed down version of a [CAIP-217](https://chainagnostic.org/CAIPs/caip-217) scope that is stored in a `endowment:caip25` permission.\n * Accounts arrays are mapped to CAIP-2 chainIds. These are currently the only properties used by the permission system.\n */\nexport type InternalScopesObject = Record<CaipChainId, InternalScopeObject> & {\n  [KnownCaipNamespace.Wallet]?: InternalScopeObject;\n};\n\n/**\n * Represents a `scopeObject` as defined in\n * [CAIP-217](https://chainagnostic.org/CAIPs/caip-217), with the exception that\n * we resolve the `references` property into a scopeObject per reference and\n * assign an empty array to the `accounts` property if not already defined\n * to more easily perform support checks for `wallet_createSession` requests.\n * Also used as the return type for `wallet_createSession` and `wallet_sessionChanged`.\n */\nexport type NormalizedScopeObject = {\n  methods: string[];\n  notifications: string[];\n  accounts: CaipAccountId[];\n  rpcDocuments?: string[];\n  rpcEndpoints?: string[];\n};\n/**\n * Represents a keyed `scopeObject` as defined in\n * [CAIP-217](https://chainagnostic.org/CAIPs/caip-217), with the exception that\n * we resolve the `references` property into a scopeObject per reference and\n * assign an empty array to the `accounts` property if not already defined\n * to more easily perform support checks for `wallet_createSession` requests.\n * Also used as the return type for `wallet_createSession` and `wallet_sessionChanged`.\n */\nexport type NormalizedScopesObject = Record<\n  CaipChainId,\n  NormalizedScopeObject\n> & {\n  [KnownCaipNamespace.Wallet]?: NormalizedScopeObject;\n};\n\nexport type ScopedProperties = Record<CaipChainId, Record<string, Json>> & {\n  [KnownCaipNamespace.Wallet]?: Record<string, Json>;\n};\n\n/**\n * Parses a scope string into a namespace and reference.\n *\n * @param scopeString - The scope string to parse.\n * @returns An object containing the namespace and reference.\n */\nexport const parseScopeString = (\n  scopeString: string,\n): {\n  namespace?: string;\n  reference?: string;\n} => {\n  if (isCaipNamespace(scopeString)) {\n    return {\n      namespace: scopeString,\n    };\n  }\n  if (isCaipChainId(scopeString)) {\n    return parseCaipChainId(scopeString);\n  }\n\n  return {};\n};\n\n/**\n * CAIP namespaces excluding \"wallet\" currently supported by/known to the wallet.\n */\nexport type NonWalletKnownCaipNamespace = Exclude<\n  KnownCaipNamespace,\n  KnownCaipNamespace.Wallet\n>;\n\n/**\n * Checks if a scope string is either a 'wallet' scope or a 'wallet:*' scope.\n *\n * @param scopeString - The scope string to check.\n * @returns True if the scope string is a wallet scope, false otherwise.\n */\nexport const isWalletScope = (\n  scopeString: string,\n): scopeString is\n  | KnownCaipNamespace.Wallet\n  | `${KnownCaipNamespace.Wallet}:${string}` => {\n  const { namespace } = parseScopeString(scopeString);\n  return namespace === KnownCaipNamespace.Wallet;\n};\n"]}

package/dist/scope/types.d.cts

@@ -1,4 +1,5 @@
-import type { CaipChainId, CaipReference, CaipAccountId, KnownCaipNamespace, CaipNamespace, Json } from "@metamask/utils";
+import { KnownCaipNamespace } from "@metamask/utils";
+import type { CaipChainId, CaipReference, CaipAccountId, CaipNamespace, Json } from "@metamask/utils";
 /**
  * Represents a `scopeString` as defined in [CAIP-217](https://chainagnostic.org/CAIPs/caip-217).
  */
@@ -78,4 +79,11 @@ export declare const parseScopeString: (scopeString: string) => {
  * CAIP namespaces excluding "wallet" currently supported by/known to the wallet.
  */
 export type NonWalletKnownCaipNamespace = Exclude<KnownCaipNamespace, KnownCaipNamespace.Wallet>;
+/**
+ * Checks if a scope string is either a 'wallet' scope or a 'wallet:*' scope.
+ *
+ * @param scopeString - The scope string to check.
+ * @returns True if the scope string is a wallet scope, false otherwise.
+ */
+export declare const isWalletScope: (scopeString: string) => scopeString is KnownCaipNamespace.Wallet | `wallet:${string}`;
 //# sourceMappingURL=types.d.cts.map