@metamask-previews/chain-agnostic-permission 0.4.0-preview-4f38c5b → 0.4.0-preview-514219da

package/CHANGELOG.md

@@ -18,9 +18,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
+- **BREAKING:** Renamed `setPermittedAccounts` to `setNonSCACaipAccountIdsInCaip25CaveatValue`.
+- **BREAKING:** Renamed `setPermittedChainIds` to `setCaipChainIdsInCaip25CaveatValue`.
 - Bump `@metamask/controller-utils` to `^11.7.0` ([#5583](https://github.com/MetaMask/core/pull/5583))
 - Bump `@metamask/network-controller` to `^23.2.0` ([#5583](https://github.com/MetaMask/core/pull/5583))
 
+### Added
+
+- Added `getCaipAccountIdsFromScopesObject`, `getCaipAccountIdsFromScopesObjects`, and `getCaipAccountIdsFromCaip25CaveatValue` functions.
+- Added `getAllScopesFromScopesObjects`, `getAllScopesFromCaip25CaveatValue`, `getAllNonWalletNamespacesFromCaip25CaveatValue`, and `getAllScopesFromPermission`
+  functions.
+
 ## [0.3.0]
 
 ### Added

package/dist/adapters/caip-permission-adapter-accounts.cjs

@@ -1,11 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.setPermittedAccounts = exports.setEthAccounts = exports.getEthAccounts = void 0;
+exports.isCaipAccountIdInPermittedAccountIds = exports.isInternalAccountInPermittedAccountIds = exports.setNonSCACaipAccountIdsInCaip25CaveatValue = exports.getCaipAccountIdsFromCaip25CaveatValue = exports.getCaipAccountIdsFromScopesObjects = exports.setEthAccounts = exports.getEthAccounts = void 0;
 const utils_1 = require("@metamask/utils");
 const constants_1 = require("../scope/constants.cjs");
 const transform_1 = require("../scope/transform.cjs");
 const types_1 = require("../scope/types.cjs");
+/*
+ *
+ *
+ * EVM SPECIFIC GETTERS AND SETTERS
+ *
+ *
+ */
 /**
+ *
  * Checks if a scope string is either an EIP155 or wallet namespaced scope string.
  *
  * @param scopeString - The scope string to check.
@@ -100,52 +108,161 @@ const setEthAccounts = (caip25CaveatValue, accounts) => {
     };
 };
 exports.setEthAccounts = setEthAccounts;
+/*
+ *
+ *
+ * GENERALIZED GETTERS AND SETTERS
+ *
+ *
+ */
 /**
- * Sets the permitted accounts to scopes with matching namespaces in the given scopes object.
  *
- * @param scopesObject - The scopes object to set the permitted accounts for.
- * @param accounts - The permitted accounts to add to the appropriate scopes.
- * @returns The updated scopes object with the permitted accounts set.
+ * Getters
+ *
+ */
+/**
+ * Gets all accounts from an array of scopes objects
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param scopesObjects - The scopes objects to extract accounts from
+ * @returns Array of unique account IDs
+ */
+function getCaipAccountIdsFromScopesObjects(scopesObjects) {
+    const allAccounts = new Set();
+    for (const scopeObject of scopesObjects) {
+        for (const { accounts } of Object.values(scopeObject)) {
+            for (const account of accounts) {
+                allAccounts.add(account);
+            }
+        }
+    }
+    return Array.from(allAccounts);
+}
+exports.getCaipAccountIdsFromScopesObjects = getCaipAccountIdsFromScopesObjects;
+/**
+ * Gets all permitted accounts from a CAIP-25 caveat
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param caip25CaveatValue - The CAIP-25 caveat value to extract accounts from
+ * @returns Array of unique account IDs
+ */
+function getCaipAccountIdsFromCaip25CaveatValue(caip25CaveatValue) {
+    return getCaipAccountIdsFromScopesObjects([
+        caip25CaveatValue.requiredScopes,
+        caip25CaveatValue.optionalScopes,
+    ]);
+}
+exports.getCaipAccountIdsFromCaip25CaveatValue = getCaipAccountIdsFromCaip25CaveatValue;
+/**
+ *
+ * Setters
+ *
+ */
+/**
+ * Sets the CAIP account IDs to scopes with matching namespaces in the given scopes object.
+ * This function should not be used with Smart Contract Accounts (SCA) because
+ * it adds the same account ID to all the scopes that have the same namespace.
+ *
+ * @param scopesObject - The scopes object to set the CAIP account IDs for.
+ * @param accounts - The CAIP account IDs to add to the appropriate scopes.
+ * @returns The updated scopes object with the CAIP account IDs set.
  */
-const setPermittedAccountsForScopesObject = (scopesObject, accounts) => {
+const setNonSCACaipAccountIdsInScopesObject = (scopesObject, accounts) => {
+    const accountsByNamespace = new Map();
+    for (const account of accounts) {
+        const { chain: { namespace }, address, } = (0, utils_1.parseCaipAccountId)(account);
+        if (!accountsByNamespace.has(namespace)) {
+            accountsByNamespace.set(namespace, new Set());
+        }
+        accountsByNamespace.get(namespace)?.add(address);
+    }
     const updatedScopesObject = {};
-    Object.entries(scopesObject).forEach(([key, scopeObject]) => {
-        // Cast needed because index type is returned as `string` by `Object.entries`
-        const scopeString = key;
+    for (const [scopeString, scopeObject] of Object.entries(scopesObject)) {
         const { namespace, reference } = (0, types_1.parseScopeString)(scopeString);
         let caipAccounts = [];
-        if (namespace && reference) {
-            caipAccounts = accounts.reduce((acc, account) => {
-                const { chain: { namespace: accountNamespace }, address: accountAddress, } = (0, utils_1.parseCaipAccountId)(account);
-                // If the account namespace is the same as the scope namespace, add the account to the scope
-                // This will, for example, distribute all EIP155 accounts, regardless of reference, to all EIP155 scopes
-                if (namespace === accountNamespace) {
-                    acc.push(`${namespace}:${reference}:${accountAddress}`);
-                }
-                return acc;
-            }, []);
+        if (namespace && reference && accountsByNamespace.has(namespace)) {
+            const addressSet = accountsByNamespace.get(namespace);
+            if (addressSet) {
+                caipAccounts = Array.from(addressSet).map((address) => `${namespace}:${reference}:${address}`);
+            }
         }
-        const uniqueCaipAccounts = (0, transform_1.getUniqueArrayItems)(caipAccounts);
         updatedScopesObject[scopeString] = {
             ...scopeObject,
-            accounts: uniqueCaipAccounts,
+            accounts: (0, transform_1.getUniqueArrayItems)(caipAccounts),
         };
-    });
+    }
     return updatedScopesObject;
 };
 /**
  * Sets the permitted accounts to scopes with matching namespaces in the given CAIP-25 caveat value.
+ * This function should not be used with Smart Contract Accounts (SCA) because
+ * it adds the same account ID to all scopes that have the same namespace as the account.
  *
  * @param caip25CaveatValue - The CAIP-25 caveat value to set the permitted accounts for.
  * @param accounts - The permitted accounts to add to the appropriate scopes.
  * @returns The updated CAIP-25 caveat value with the permitted accounts set.
  */
-const setPermittedAccounts = (caip25CaveatValue, accounts) => {
+const setNonSCACaipAccountIdsInCaip25CaveatValue = (caip25CaveatValue, accounts) => {
     return {
         ...caip25CaveatValue,
-        requiredScopes: setPermittedAccountsForScopesObject(caip25CaveatValue.requiredScopes, accounts),
-        optionalScopes: setPermittedAccountsForScopesObject(caip25CaveatValue.optionalScopes, accounts),
+        requiredScopes: setNonSCACaipAccountIdsInScopesObject(caip25CaveatValue.requiredScopes, accounts),
+        optionalScopes: setNonSCACaipAccountIdsInScopesObject(caip25CaveatValue.optionalScopes, accounts),
     };
 };
-exports.setPermittedAccounts = setPermittedAccounts;
+exports.setNonSCACaipAccountIdsInCaip25CaveatValue = setNonSCACaipAccountIdsInCaip25CaveatValue;
+/**
+ * Checks if an address and list of parsed scopes are connected to any of
+ * the permitted accounts based on scope matching
+ *
+ * @param address - The CAIP account address to check against permitted accounts
+ * @param parsedAccountScopes - The list of parsed CAIP chain ID to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the address and any account scope is connected to any permitted account
+ */
+function isAddressWithParsedScopesInPermittedAccountIds(address, parsedAccountScopes, permittedAccounts) {
+    if (!address || !parsedAccountScopes.length || !permittedAccounts.length) {
+        return false;
+    }
+    return permittedAccounts.some((account) => {
+        const parsedPermittedAccount = (0, utils_1.parseCaipAccountId)(account);
+        return parsedAccountScopes.some(({ namespace, reference }) => {
+            if (namespace !== parsedPermittedAccount.chain.namespace ||
+                address !== parsedPermittedAccount.address) {
+                return false;
+            }
+            return (reference === '0' ||
+                reference === parsedPermittedAccount.chain.reference);
+        });
+    });
+}
+/**
+ * Checks if an internal account is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param internalAccount - The internal account to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+function isInternalAccountInPermittedAccountIds(internalAccount, permittedAccounts) {
+    const parsedInteralAccountScopes = internalAccount.scopes.map((scope) => {
+        return (0, types_1.parseScopeString)(scope);
+    });
+    return isAddressWithParsedScopesInPermittedAccountIds(internalAccount.address, parsedInteralAccountScopes, permittedAccounts);
+}
+exports.isInternalAccountInPermittedAccountIds = isInternalAccountInPermittedAccountIds;
+/**
+ * Checks if an CAIP account ID is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param accountId - The CAIP account ID to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+function isCaipAccountIdInPermittedAccountIds(accountId, permittedAccounts) {
+    const { address, chain } = (0, utils_1.parseCaipAccountId)(accountId);
+    return isAddressWithParsedScopesInPermittedAccountIds(address, [chain], permittedAccounts);
+}
+exports.isCaipAccountIdInPermittedAccountIds = isCaipAccountIdInPermittedAccountIds;
 //# sourceMappingURL=caip-permission-adapter-accounts.cjs.map

package/dist/adapters/caip-permission-adapter-accounts.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"caip-permission-adapter-accounts.cjs","sourceRoot":"","sources":["../../src/adapters/caip-permission-adapter-accounts.ts"],"names":[],"mappings":";;;AAAA,2CAMyB;AAGzB,sDAA4D;AAC5D,sDAAyD;AAEzD,8CAAkD;AAElD;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,CAAC,WAAgC,EAAE,EAAE;IAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;IAEpD,OAAO,CACL,SAAS,KAAK,0BAAkB,CAAC,MAAM;QACvC,sDAAsD;QACtD,wEAAwE;QACxE,WAAW,KAAK,kCAAsB,CAAC,MAAM,CAC9C,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,CAAC,MAA4B,EAAE,EAAE;IAChE,MAAM,WAAW,GAAU,EAAE,CAAC;IAE9B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;QACnD,QAAQ,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;YAEzD,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE;gBAChC,2DAA2D;gBAC3D,kCAAkC;gBAClC,IAAA,+BAAuB,EAAC,OAAO,CAAC,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC3B;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;GAKG;AACI,MAAM,cAAc,GAAG,CAC5B,iBAGC,EACM,EAAE;IACT,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC;IAE7D,MAAM,WAAW,GAAU;QACzB,GAAG,wBAAwB,CAAC,cAAc,CAAC;QAC3C,GAAG,wBAAwB,CAAC,cAAc,CAAC;KAC5C,CAAC;IAEF,OAAO,IAAA,+BAAmB,EAAC,WAAW,CAAC,CAAC;AAC1C,CAAC,CAAC;AAdW,QAAA,cAAc,kBAczB;AAEF;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAG,CACpC,YAAkC,EAClC,QAAe,EACf,EAAE;IACF,MAAM,mBAAmB,GAAyB,EAAE,CAAC;IACrD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE;QAC1D,6EAA6E;QAC7E,MAAM,WAAW,GAAG,GAAgC,CAAC;QACrD,MAAM,iBAAiB,GAAG,WAAW,KAAK,0BAAkB,CAAC,MAAM,CAAC;QACpE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3D,mBAAmB,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;YAC/C,OAAO;SACR;QAED,IAAI,YAAY,GAAoB,EAAE,CAAC;QACvC,IAAI,SAAS,IAAI,SAAS,EAAE;YAC1B,YAAY,GAAG,QAAQ,CAAC,GAAG,CACzB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE,CACpD,CAAC;SACH;QAED,mBAAmB,CAAC,WAAW,CAAC,GAAG;YACjC,GAAG,WAAW;YACd,QAAQ,EAAE,YAAY;SACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,cAAc,GAAG,CAC5B,iBAAoC,EACpC,QAAe,EACI,EAAE;IACrB,OAAO;QACL,GAAG,iBAAiB;QACpB,cAAc,EAAE,6BAA6B,CAC3C,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;QACD,cAAc,EAAE,6BAA6B,CAC3C,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;KACF,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,cAAc,kBAezB;AAEF;;;;;;GAMG;AACH,MAAM,mCAAmC,GAAG,CAC1C,YAAkC,EAClC,QAAyB,EACzB,EAAE;IACF,MAAM,mBAAmB,GAAyB,EAAE,CAAC;IACrD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE;QAC1D,6EAA6E;QAC7E,MAAM,WAAW,GAAG,GAAgC,CAAC;QACrD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;QAE/D,IAAI,YAAY,GAAoB,EAAE,CAAC;QACvC,IAAI,SAAS,IAAI,SAAS,EAAE;YAC1B,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBAC/D,MAAM,EACJ,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EACtC,OAAO,EAAE,cAAc,GACxB,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;gBAChC,4FAA4F;gBAC5F,wGAAwG;gBACxG,IAAI,SAAS,KAAK,gBAAgB,EAAE;oBAClC,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC,CAAC;iBACzD;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,EAAE,CAAC,CAAC;SACR;QAED,MAAM,kBAAkB,GAAG,IAAA,+BAAmB,EAAC,YAAY,CAAC,CAAC;QAE7D,mBAAmB,CAAC,WAAW,CAAC,GAAG;YACjC,GAAG,WAAW;YACd,QAAQ,EAAE,kBAAkB;SAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;GAMG;AACI,MAAM,oBAAoB,GAAG,CAClC,iBAAoC,EACpC,QAAyB,EACN,EAAE;IACrB,OAAO;QACL,GAAG,iBAAiB;QACpB,cAAc,EAAE,mCAAmC,CACjD,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;QACD,cAAc,EAAE,mCAAmC,CACjD,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;KACF,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,oBAAoB,wBAe/B","sourcesContent":["import {\n  assertIsStrictHexString,\n  type CaipAccountId,\n  type Hex,\n  KnownCaipNamespace,\n  parseCaipAccountId,\n} from '@metamask/utils';\n\nimport type { Caip25CaveatValue } from '../caip25Permission';\nimport { KnownWalletScopeString } from '../scope/constants';\nimport { getUniqueArrayItems } from '../scope/transform';\nimport type { InternalScopeString, InternalScopesObject } from '../scope/types';\nimport { parseScopeString } from '../scope/types';\n\n/**\n * Checks if a scope string is either an EIP155 or wallet namespaced scope string.\n *\n * @param scopeString - The scope string to check.\n * @returns True if the scope string is an EIP155 or wallet namespaced scope string, false otherwise.\n */\nconst isEip155ScopeString = (scopeString: InternalScopeString) => {\n  const { namespace } = parseScopeString(scopeString);\n\n  return (\n    namespace === KnownCaipNamespace.Eip155 ||\n    // We are trying to discern the type of `scopeString`.\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-enum-comparison\n    scopeString === KnownWalletScopeString.Eip155\n  );\n};\n\n/**\n * Gets the Ethereum (EIP155 namespaced) accounts from internal scopes.\n *\n * @param scopes - The internal scopes from which to get the Ethereum accounts.\n * @returns An array of Ethereum accounts.\n */\nconst getEthAccountsFromScopes = (scopes: InternalScopesObject) => {\n  const ethAccounts: Hex[] = [];\n\n  Object.entries(scopes).forEach(([_, { accounts }]) => {\n    accounts?.forEach((account) => {\n      const { address, chainId } = parseCaipAccountId(account);\n\n      if (isEip155ScopeString(chainId)) {\n        // This address should always be a valid Hex string because\n        // it's an EIP155/Ethereum account\n        assertIsStrictHexString(address);\n        ethAccounts.push(address);\n      }\n    });\n  });\n\n  return ethAccounts;\n};\n\n/**\n * Gets the Ethereum (EIP155 namespaced) accounts from the required and optional scopes.\n *\n * @param caip25CaveatValue - The CAIP-25 caveat value to get the Ethereum accounts from.\n * @returns An array of Ethereum accounts.\n */\nexport const getEthAccounts = (\n  caip25CaveatValue: Pick<\n    Caip25CaveatValue,\n    'requiredScopes' | 'optionalScopes'\n  >,\n): Hex[] => {\n  const { requiredScopes, optionalScopes } = caip25CaveatValue;\n\n  const ethAccounts: Hex[] = [\n    ...getEthAccountsFromScopes(requiredScopes),\n    ...getEthAccountsFromScopes(optionalScopes),\n  ];\n\n  return getUniqueArrayItems(ethAccounts);\n};\n\n/**\n * Sets the Ethereum (EIP155 namespaced) accounts for the given scopes object.\n *\n * @param scopesObject - The scopes object to set the Ethereum accounts for.\n * @param accounts - The Ethereum accounts to set.\n * @returns The updated scopes object with the Ethereum accounts set.\n */\nconst setEthAccountsForScopesObject = (\n  scopesObject: InternalScopesObject,\n  accounts: Hex[],\n) => {\n  const updatedScopesObject: InternalScopesObject = {};\n  Object.entries(scopesObject).forEach(([key, scopeObject]) => {\n    // Cast needed because index type is returned as `string` by `Object.entries`\n    const scopeString = key as keyof typeof scopesObject;\n    const isWalletNamespace = scopeString === KnownCaipNamespace.Wallet;\n    const { namespace, reference } = parseScopeString(scopeString);\n    if (!isEip155ScopeString(scopeString) && !isWalletNamespace) {\n      updatedScopesObject[scopeString] = scopeObject;\n      return;\n    }\n\n    let caipAccounts: CaipAccountId[] = [];\n    if (namespace && reference) {\n      caipAccounts = accounts.map<CaipAccountId>(\n        (account) => `${namespace}:${reference}:${account}`,\n      );\n    }\n\n    updatedScopesObject[scopeString] = {\n      ...scopeObject,\n      accounts: caipAccounts,\n    };\n  });\n\n  return updatedScopesObject;\n};\n\n/**\n * Sets the Ethereum (EIP155 namespaced) accounts for the given CAIP-25 caveat value.\n * We set the same accounts for all the scopes that are EIP155 or Wallet namespaced because\n * we do not provide UI/UX flows for selecting different accounts across different chains.\n *\n * @param caip25CaveatValue - The CAIP-25 caveat value to set the Ethereum accounts for.\n * @param accounts - The Ethereum accounts to set.\n * @returns The updated CAIP-25 caveat value with the Ethereum accounts set.\n */\nexport const setEthAccounts = (\n  caip25CaveatValue: Caip25CaveatValue,\n  accounts: Hex[],\n): Caip25CaveatValue => {\n  return {\n    ...caip25CaveatValue,\n    requiredScopes: setEthAccountsForScopesObject(\n      caip25CaveatValue.requiredScopes,\n      accounts,\n    ),\n    optionalScopes: setEthAccountsForScopesObject(\n      caip25CaveatValue.optionalScopes,\n      accounts,\n    ),\n  };\n};\n\n/**\n * Sets the permitted accounts to scopes with matching namespaces in the given scopes object.\n *\n * @param scopesObject - The scopes object to set the permitted accounts for.\n * @param accounts - The permitted accounts to add to the appropriate scopes.\n * @returns The updated scopes object with the permitted accounts set.\n */\nconst setPermittedAccountsForScopesObject = (\n  scopesObject: InternalScopesObject,\n  accounts: CaipAccountId[],\n) => {\n  const updatedScopesObject: InternalScopesObject = {};\n  Object.entries(scopesObject).forEach(([key, scopeObject]) => {\n    // Cast needed because index type is returned as `string` by `Object.entries`\n    const scopeString = key as keyof typeof scopesObject;\n    const { namespace, reference } = parseScopeString(scopeString);\n\n    let caipAccounts: CaipAccountId[] = [];\n    if (namespace && reference) {\n      caipAccounts = accounts.reduce<CaipAccountId[]>((acc, account) => {\n        const {\n          chain: { namespace: accountNamespace },\n          address: accountAddress,\n        } = parseCaipAccountId(account);\n        // If the account namespace is the same as the scope namespace, add the account to the scope\n        // This will, for example, distribute all EIP155 accounts, regardless of reference, to all EIP155 scopes\n        if (namespace === accountNamespace) {\n          acc.push(`${namespace}:${reference}:${accountAddress}`);\n        }\n        return acc;\n      }, []);\n    }\n\n    const uniqueCaipAccounts = getUniqueArrayItems(caipAccounts);\n\n    updatedScopesObject[scopeString] = {\n      ...scopeObject,\n      accounts: uniqueCaipAccounts,\n    };\n  });\n\n  return updatedScopesObject;\n};\n\n/**\n * Sets the permitted accounts to scopes with matching namespaces in the given CAIP-25 caveat value.\n *\n * @param caip25CaveatValue - The CAIP-25 caveat value to set the permitted accounts for.\n * @param accounts - The permitted accounts to add to the appropriate scopes.\n * @returns The updated CAIP-25 caveat value with the permitted accounts set.\n */\nexport const setPermittedAccounts = (\n  caip25CaveatValue: Caip25CaveatValue,\n  accounts: CaipAccountId[],\n): Caip25CaveatValue => {\n  return {\n    ...caip25CaveatValue,\n    requiredScopes: setPermittedAccountsForScopesObject(\n      caip25CaveatValue.requiredScopes,\n      accounts,\n    ),\n    optionalScopes: setPermittedAccountsForScopesObject(\n      caip25CaveatValue.optionalScopes,\n      accounts,\n    ),\n  };\n};\n"]}
+{"version":3,"file":"caip-permission-adapter-accounts.cjs","sourceRoot":"","sources":["../../src/adapters/caip-permission-adapter-accounts.ts"],"names":[],"mappings":";;;AACA,2CASyB;AAGzB,sDAA4D;AAC5D,sDAAyD;AAEzD,8CAAkD;AAElD;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,CAAC,WAAgC,EAAE,EAAE;IAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;IAEpD,OAAO,CACL,SAAS,KAAK,0BAAkB,CAAC,MAAM;QACvC,sDAAsD;QACtD,wEAAwE;QACxE,WAAW,KAAK,kCAAsB,CAAC,MAAM,CAC9C,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,CAAC,MAA4B,EAAE,EAAE;IAChE,MAAM,WAAW,GAAU,EAAE,CAAC;IAE9B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;QACnD,QAAQ,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;YAEzD,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE;gBAChC,2DAA2D;gBAC3D,kCAAkC;gBAClC,IAAA,+BAAuB,EAAC,OAAO,CAAC,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC3B;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;GAKG;AACI,MAAM,cAAc,GAAG,CAC5B,iBAGC,EACM,EAAE;IACT,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC;IAE7D,MAAM,WAAW,GAAU;QACzB,GAAG,wBAAwB,CAAC,cAAc,CAAC;QAC3C,GAAG,wBAAwB,CAAC,cAAc,CAAC;KAC5C,CAAC;IAEF,OAAO,IAAA,+BAAmB,EAAC,WAAW,CAAC,CAAC;AAC1C,CAAC,CAAC;AAdW,QAAA,cAAc,kBAczB;AAEF;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAG,CACpC,YAAkC,EAClC,QAAe,EACf,EAAE;IACF,MAAM,mBAAmB,GAAyB,EAAE,CAAC;IACrD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE;QAC1D,6EAA6E;QAC7E,MAAM,WAAW,GAAG,GAAgC,CAAC;QACrD,MAAM,iBAAiB,GAAG,WAAW,KAAK,0BAAkB,CAAC,MAAM,CAAC;QACpE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3D,mBAAmB,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;YAC/C,OAAO;SACR;QAED,IAAI,YAAY,GAAoB,EAAE,CAAC;QACvC,IAAI,SAAS,IAAI,SAAS,EAAE;YAC1B,YAAY,GAAG,QAAQ,CAAC,GAAG,CACzB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE,CACpD,CAAC;SACH;QAED,mBAAmB,CAAC,WAAW,CAAC,GAAG;YACjC,GAAG,WAAW;YACd,QAAQ,EAAE,YAAY;SACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,cAAc,GAAG,CAC5B,iBAAoC,EACpC,QAAe,EACI,EAAE;IACrB,OAAO;QACL,GAAG,iBAAiB;QACpB,cAAc,EAAE,6BAA6B,CAC3C,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;QACD,cAAc,EAAE,6BAA6B,CAC3C,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;KACF,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,cAAc,kBAezB;AAEF;;;;;;GAMG;AAEH;;;;GAIG;AAEH;;;;;;;GAOG;AACH,SAAgB,kCAAkC,CAChD,aAAqC;IAErC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE7C,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE;QACvC,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;YACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;gBAC9B,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aAC1B;SACF;KACF;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC;AAdD,gFAcC;AAED;;;;;;;GAOG;AACH,SAAgB,sCAAsC,CACpD,iBAAoC;IAEpC,OAAO,kCAAkC,CAAC;QACxC,iBAAiB,CAAC,cAAc;QAChC,iBAAiB,CAAC,cAAc;KACjC,CAAC,CAAC;AACL,CAAC;AAPD,wFAOC;AAED;;;;GAIG;AAEH;;;;;;;;GAQG;AACH,MAAM,qCAAqC,GAAG,CAC5C,YAAkC,EAClC,QAAyB,EACzB,EAAE;IACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC9B,MAAM,EACJ,KAAK,EAAE,EAAE,SAAS,EAAE,EACpB,OAAO,GACR,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;QAEhC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;YACvC,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;SAC/C;QAED,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;KAClD;IAED,MAAM,mBAAmB,GAAyB,EAAE,CAAC;IAErD,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;QACrE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAgB,EAAC,WAAqB,CAAC,CAAC;QAEzE,IAAI,YAAY,GAAoB,EAAE,CAAC;QAEvC,IAAI,SAAS,IAAI,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;YAChE,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,UAAU,EAAE;gBACd,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CACvC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAmB,CACrE,CAAC;aACH;SACF;QAED,mBAAmB,CAAC,WAAwC,CAAC,GAAG;YAC9D,GAAG,WAAW;YACd,QAAQ,EAAE,IAAA,+BAAmB,EAAC,YAAY,CAAC;SAC5C,CAAC;KACH;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,0CAA0C,GAAG,CACxD,iBAAoC,EACpC,QAAyB,EACN,EAAE;IACrB,OAAO;QACL,GAAG,iBAAiB;QACpB,cAAc,EAAE,qCAAqC,CACnD,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;QACD,cAAc,EAAE,qCAAqC,CACnD,iBAAiB,CAAC,cAAc,EAChC,QAAQ,CACT;KACF,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,0CAA0C,8CAerD;AAEF;;;;;;;;GAQG;AACH,SAAS,8CAA8C,CACrD,OAA2B,EAC3B,mBAGG,EACH,iBAAkC;IAElC,IAAI,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;QACxE,OAAO,KAAK,CAAC;KACd;IAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACxC,MAAM,sBAAsB,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;QAE3D,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;YAC3D,IACE,SAAS,KAAK,sBAAsB,CAAC,KAAK,CAAC,SAAS;gBACpD,OAAO,KAAK,sBAAsB,CAAC,OAAO,EAC1C;gBACA,OAAO,KAAK,CAAC;aACd;YAED,OAAO,CACL,SAAS,KAAK,GAAG;gBACjB,SAAS,KAAK,sBAAsB,CAAC,KAAK,CAAC,SAAS,CACrD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sCAAsC,CACpD,eAAgC,EAChC,iBAAkC;IAElC,MAAM,0BAA0B,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACtE,OAAO,IAAA,wBAAgB,EAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,OAAO,8CAA8C,CACnD,eAAe,CAAC,OAAO,EACvB,0BAA0B,EAC1B,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAbD,wFAaC;AAED;;;;;;;GAOG;AACH,SAAgB,oCAAoC,CAClD,SAAwB,EACxB,iBAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAA,0BAAkB,EAAC,SAAS,CAAC,CAAC;IAEzD,OAAO,8CAA8C,CACnD,OAAO,EACP,CAAC,KAAK,CAAC,EACP,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAXD,oFAWC","sourcesContent":["import type { InternalAccount } from '@metamask/keyring-internal-api';\nimport {\n  assertIsStrictHexString,\n  type CaipAccountAddress,\n  type CaipAccountId,\n  type CaipNamespace,\n  type CaipReference,\n  type Hex,\n  KnownCaipNamespace,\n  parseCaipAccountId,\n} from '@metamask/utils';\n\nimport type { Caip25CaveatValue } from '../caip25Permission';\nimport { KnownWalletScopeString } from '../scope/constants';\nimport { getUniqueArrayItems } from '../scope/transform';\nimport type { InternalScopeString, InternalScopesObject } from '../scope/types';\nimport { parseScopeString } from '../scope/types';\n\n/*\n *\n *\n * EVM SPECIFIC GETTERS AND SETTERS\n *\n *\n */\n\n/**\n *\n * Checks if a scope string is either an EIP155 or wallet namespaced scope string.\n *\n * @param scopeString - The scope string to check.\n * @returns True if the scope string is an EIP155 or wallet namespaced scope string, false otherwise.\n */\nconst isEip155ScopeString = (scopeString: InternalScopeString) => {\n  const { namespace } = parseScopeString(scopeString);\n\n  return (\n    namespace === KnownCaipNamespace.Eip155 ||\n    // We are trying to discern the type of `scopeString`.\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-enum-comparison\n    scopeString === KnownWalletScopeString.Eip155\n  );\n};\n\n/**\n * Gets the Ethereum (EIP155 namespaced) accounts from internal scopes.\n *\n * @param scopes - The internal scopes from which to get the Ethereum accounts.\n * @returns An array of Ethereum accounts.\n */\nconst getEthAccountsFromScopes = (scopes: InternalScopesObject) => {\n  const ethAccounts: Hex[] = [];\n\n  Object.entries(scopes).forEach(([_, { accounts }]) => {\n    accounts?.forEach((account) => {\n      const { address, chainId } = parseCaipAccountId(account);\n\n      if (isEip155ScopeString(chainId)) {\n        // This address should always be a valid Hex string because\n        // it's an EIP155/Ethereum account\n        assertIsStrictHexString(address);\n        ethAccounts.push(address);\n      }\n    });\n  });\n\n  return ethAccounts;\n};\n\n/**\n * Gets the Ethereum (EIP155 namespaced) accounts from the required and optional scopes.\n *\n * @param caip25CaveatValue - The CAIP-25 caveat value to get the Ethereum accounts from.\n * @returns An array of Ethereum accounts.\n */\nexport const getEthAccounts = (\n  caip25CaveatValue: Pick<\n    Caip25CaveatValue,\n    'requiredScopes' | 'optionalScopes'\n  >,\n): Hex[] => {\n  const { requiredScopes, optionalScopes } = caip25CaveatValue;\n\n  const ethAccounts: Hex[] = [\n    ...getEthAccountsFromScopes(requiredScopes),\n    ...getEthAccountsFromScopes(optionalScopes),\n  ];\n\n  return getUniqueArrayItems(ethAccounts);\n};\n\n/**\n * Sets the Ethereum (EIP155 namespaced) accounts for the given scopes object.\n *\n * @param scopesObject - The scopes object to set the Ethereum accounts for.\n * @param accounts - The Ethereum accounts to set.\n * @returns The updated scopes object with the Ethereum accounts set.\n */\nconst setEthAccountsForScopesObject = (\n  scopesObject: InternalScopesObject,\n  accounts: Hex[],\n) => {\n  const updatedScopesObject: InternalScopesObject = {};\n  Object.entries(scopesObject).forEach(([key, scopeObject]) => {\n    // Cast needed because index type is returned as `string` by `Object.entries`\n    const scopeString = key as keyof typeof scopesObject;\n    const isWalletNamespace = scopeString === KnownCaipNamespace.Wallet;\n    const { namespace, reference } = parseScopeString(scopeString);\n    if (!isEip155ScopeString(scopeString) && !isWalletNamespace) {\n      updatedScopesObject[scopeString] = scopeObject;\n      return;\n    }\n\n    let caipAccounts: CaipAccountId[] = [];\n    if (namespace && reference) {\n      caipAccounts = accounts.map<CaipAccountId>(\n        (account) => `${namespace}:${reference}:${account}`,\n      );\n    }\n\n    updatedScopesObject[scopeString] = {\n      ...scopeObject,\n      accounts: caipAccounts,\n    };\n  });\n\n  return updatedScopesObject;\n};\n\n/**\n * Sets the Ethereum (EIP155 namespaced) accounts for the given CAIP-25 caveat value.\n * We set the same accounts for all the scopes that are EIP155 or Wallet namespaced because\n * we do not provide UI/UX flows for selecting different accounts across different chains.\n *\n * @param caip25CaveatValue - The CAIP-25 caveat value to set the Ethereum accounts for.\n * @param accounts - The Ethereum accounts to set.\n * @returns The updated CAIP-25 caveat value with the Ethereum accounts set.\n */\nexport const setEthAccounts = (\n  caip25CaveatValue: Caip25CaveatValue,\n  accounts: Hex[],\n): Caip25CaveatValue => {\n  return {\n    ...caip25CaveatValue,\n    requiredScopes: setEthAccountsForScopesObject(\n      caip25CaveatValue.requiredScopes,\n      accounts,\n    ),\n    optionalScopes: setEthAccountsForScopesObject(\n      caip25CaveatValue.optionalScopes,\n      accounts,\n    ),\n  };\n};\n\n/*\n *\n *\n * GENERALIZED GETTERS AND SETTERS\n *\n *\n */\n\n/**\n *\n * Getters\n *\n */\n\n/**\n * Gets all accounts from an array of scopes objects\n * This extracts all account IDs from both required and optional scopes\n * and returns a unique set.\n *\n * @param scopesObjects - The scopes objects to extract accounts from\n * @returns Array of unique account IDs\n */\nexport function getCaipAccountIdsFromScopesObjects(\n  scopesObjects: InternalScopesObject[],\n): CaipAccountId[] {\n  const allAccounts = new Set<CaipAccountId>();\n\n  for (const scopeObject of scopesObjects) {\n    for (const { accounts } of Object.values(scopeObject)) {\n      for (const account of accounts) {\n        allAccounts.add(account);\n      }\n    }\n  }\n\n  return Array.from(allAccounts);\n}\n\n/**\n * Gets all permitted accounts from a CAIP-25 caveat\n * This extracts all account IDs from both required and optional scopes\n * and returns a unique set.\n *\n * @param caip25CaveatValue - The CAIP-25 caveat value to extract accounts from\n * @returns Array of unique account IDs\n */\nexport function getCaipAccountIdsFromCaip25CaveatValue(\n  caip25CaveatValue: Caip25CaveatValue,\n): CaipAccountId[] {\n  return getCaipAccountIdsFromScopesObjects([\n    caip25CaveatValue.requiredScopes,\n    caip25CaveatValue.optionalScopes,\n  ]);\n}\n\n/**\n *\n * Setters\n *\n */\n\n/**\n * Sets the CAIP account IDs to scopes with matching namespaces in the given scopes object.\n * This function should not be used with Smart Contract Accounts (SCA) because\n * it adds the same account ID to all the scopes that have the same namespace.\n *\n * @param scopesObject - The scopes object to set the CAIP account IDs for.\n * @param accounts - The CAIP account IDs to add to the appropriate scopes.\n * @returns The updated scopes object with the CAIP account IDs set.\n */\nconst setNonSCACaipAccountIdsInScopesObject = (\n  scopesObject: InternalScopesObject,\n  accounts: CaipAccountId[],\n) => {\n  const accountsByNamespace = new Map<string, Set<string>>();\n\n  for (const account of accounts) {\n    const {\n      chain: { namespace },\n      address,\n    } = parseCaipAccountId(account);\n\n    if (!accountsByNamespace.has(namespace)) {\n      accountsByNamespace.set(namespace, new Set());\n    }\n\n    accountsByNamespace.get(namespace)?.add(address);\n  }\n\n  const updatedScopesObject: InternalScopesObject = {};\n\n  for (const [scopeString, scopeObject] of Object.entries(scopesObject)) {\n    const { namespace, reference } = parseScopeString(scopeString as string);\n\n    let caipAccounts: CaipAccountId[] = [];\n\n    if (namespace && reference && accountsByNamespace.has(namespace)) {\n      const addressSet = accountsByNamespace.get(namespace);\n      if (addressSet) {\n        caipAccounts = Array.from(addressSet).map(\n          (address) => `${namespace}:${reference}:${address}` as CaipAccountId,\n        );\n      }\n    }\n\n    updatedScopesObject[scopeString as keyof typeof scopesObject] = {\n      ...scopeObject,\n      accounts: getUniqueArrayItems(caipAccounts),\n    };\n  }\n\n  return updatedScopesObject;\n};\n\n/**\n * Sets the permitted accounts to scopes with matching namespaces in the given CAIP-25 caveat value.\n * This function should not be used with Smart Contract Accounts (SCA) because\n * it adds the same account ID to all scopes that have the same namespace as the account.\n *\n * @param caip25CaveatValue - The CAIP-25 caveat value to set the permitted accounts for.\n * @param accounts - The permitted accounts to add to the appropriate scopes.\n * @returns The updated CAIP-25 caveat value with the permitted accounts set.\n */\nexport const setNonSCACaipAccountIdsInCaip25CaveatValue = (\n  caip25CaveatValue: Caip25CaveatValue,\n  accounts: CaipAccountId[],\n): Caip25CaveatValue => {\n  return {\n    ...caip25CaveatValue,\n    requiredScopes: setNonSCACaipAccountIdsInScopesObject(\n      caip25CaveatValue.requiredScopes,\n      accounts,\n    ),\n    optionalScopes: setNonSCACaipAccountIdsInScopesObject(\n      caip25CaveatValue.optionalScopes,\n      accounts,\n    ),\n  };\n};\n\n/**\n * Checks if an address and list of parsed scopes are connected to any of\n * the permitted accounts based on scope matching\n *\n * @param address - The CAIP account address to check against permitted accounts\n * @param parsedAccountScopes - The list of parsed CAIP chain ID to check against permitted accounts\n * @param permittedAccounts - Array of CAIP account IDs that are permitted\n * @returns True if the address and any account scope is connected to any permitted account\n */\nfunction isAddressWithParsedScopesInPermittedAccountIds(\n  address: CaipAccountAddress,\n  parsedAccountScopes: {\n    namespace?: CaipNamespace;\n    reference?: CaipReference;\n  }[],\n  permittedAccounts: CaipAccountId[],\n) {\n  if (!address || !parsedAccountScopes.length || !permittedAccounts.length) {\n    return false;\n  }\n\n  return permittedAccounts.some((account) => {\n    const parsedPermittedAccount = parseCaipAccountId(account);\n\n    return parsedAccountScopes.some(({ namespace, reference }) => {\n      if (\n        namespace !== parsedPermittedAccount.chain.namespace ||\n        address !== parsedPermittedAccount.address\n      ) {\n        return false;\n      }\n\n      return (\n        reference === '0' ||\n        reference === parsedPermittedAccount.chain.reference\n      );\n    });\n  });\n}\n\n/**\n * Checks if an internal account is connected to any of the permitted accounts\n * based on scope matching\n *\n * @param internalAccount - The internal account to check against permitted accounts\n * @param permittedAccounts - Array of CAIP account IDs that are permitted\n * @returns True if the account is connected to any permitted account\n */\nexport function isInternalAccountInPermittedAccountIds(\n  internalAccount: InternalAccount,\n  permittedAccounts: CaipAccountId[],\n): boolean {\n  const parsedInteralAccountScopes = internalAccount.scopes.map((scope) => {\n    return parseScopeString(scope);\n  });\n\n  return isAddressWithParsedScopesInPermittedAccountIds(\n    internalAccount.address,\n    parsedInteralAccountScopes,\n    permittedAccounts,\n  );\n}\n\n/**\n * Checks if an CAIP account ID is connected to any of the permitted accounts\n * based on scope matching\n *\n * @param accountId - The CAIP account ID to check against permitted accounts\n * @param permittedAccounts - Array of CAIP account IDs that are permitted\n * @returns True if the account is connected to any permitted account\n */\nexport function isCaipAccountIdInPermittedAccountIds(\n  accountId: CaipAccountId,\n  permittedAccounts: CaipAccountId[],\n): boolean {\n  const { address, chain } = parseCaipAccountId(accountId);\n\n  return isAddressWithParsedScopesInPermittedAccountIds(\n    address,\n    [chain],\n    permittedAccounts,\n  );\n}\n"]}

package/dist/adapters/caip-permission-adapter-accounts.d.cts

@@ -1,5 +1,7 @@
+import type { InternalAccount } from "@metamask/keyring-internal-api";
 import { type CaipAccountId, type Hex } from "@metamask/utils";
 import type { Caip25CaveatValue } from "../caip25Permission.cjs";
+import type { InternalScopesObject } from "../scope/types.cjs";
 /**
  * Gets the Ethereum (EIP155 namespaced) accounts from the required and optional scopes.
  *
@@ -17,12 +19,55 @@ export declare const getEthAccounts: (caip25CaveatValue: Pick<Caip25CaveatValue,
  * @returns The updated CAIP-25 caveat value with the Ethereum accounts set.
  */
 export declare const setEthAccounts: (caip25CaveatValue: Caip25CaveatValue, accounts: Hex[]) => Caip25CaveatValue;
+/**
+ *
+ * Getters
+ *
+ */
+/**
+ * Gets all accounts from an array of scopes objects
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param scopesObjects - The scopes objects to extract accounts from
+ * @returns Array of unique account IDs
+ */
+export declare function getCaipAccountIdsFromScopesObjects(scopesObjects: InternalScopesObject[]): CaipAccountId[];
+/**
+ * Gets all permitted accounts from a CAIP-25 caveat
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param caip25CaveatValue - The CAIP-25 caveat value to extract accounts from
+ * @returns Array of unique account IDs
+ */
+export declare function getCaipAccountIdsFromCaip25CaveatValue(caip25CaveatValue: Caip25CaveatValue): CaipAccountId[];
 /**
  * Sets the permitted accounts to scopes with matching namespaces in the given CAIP-25 caveat value.
+ * This function should not be used with Smart Contract Accounts (SCA) because
+ * it adds the same account ID to all scopes that have the same namespace as the account.
  *
  * @param caip25CaveatValue - The CAIP-25 caveat value to set the permitted accounts for.
  * @param accounts - The permitted accounts to add to the appropriate scopes.
  * @returns The updated CAIP-25 caveat value with the permitted accounts set.
  */
-export declare const setPermittedAccounts: (caip25CaveatValue: Caip25CaveatValue, accounts: CaipAccountId[]) => Caip25CaveatValue;
+export declare const setNonSCACaipAccountIdsInCaip25CaveatValue: (caip25CaveatValue: Caip25CaveatValue, accounts: CaipAccountId[]) => Caip25CaveatValue;
+/**
+ * Checks if an internal account is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param internalAccount - The internal account to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+export declare function isInternalAccountInPermittedAccountIds(internalAccount: InternalAccount, permittedAccounts: CaipAccountId[]): boolean;
+/**
+ * Checks if an CAIP account ID is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param accountId - The CAIP account ID to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+export declare function isCaipAccountIdInPermittedAccountIds(accountId: CaipAccountId, permittedAccounts: CaipAccountId[]): boolean;
 //# sourceMappingURL=caip-permission-adapter-accounts.d.cts.map

package/dist/adapters/caip-permission-adapter-accounts.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"caip-permission-adapter-accounts.d.cts","sourceRoot":"","sources":["../../src/adapters/caip-permission-adapter-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,GAAG,EAGT,wBAAwB;AAEzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,gCAA4B;AAgD7D;;;;;GAKG;AACH,eAAO,MAAM,cAAc,sBACN,KACjB,iBAAiB,EACjB,gBAAgB,GAAG,gBAAgB,CACpC,KACA,GAAG,EASL,CAAC;AAwCF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,sBACN,iBAAiB,YAC1B,GAAG,EAAE,KACd,iBAYF,CAAC;AA8CF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,sBACZ,iBAAiB,YAC1B,aAAa,EAAE,KACxB,iBAYF,CAAC"}
+{"version":3,"file":"caip-permission-adapter-accounts.d.cts","sourceRoot":"","sources":["../../src/adapters/caip-permission-adapter-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,uCAAuC;AACtE,OAAO,EAGL,KAAK,aAAa,EAGlB,KAAK,GAAG,EAGT,wBAAwB;AAEzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,gCAA4B;AAG7D,OAAO,KAAK,EAAuB,oBAAoB,EAAE,2BAAuB;AAsDhF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,sBACN,KACjB,iBAAiB,EACjB,gBAAgB,GAAG,gBAAgB,CACpC,KACA,GAAG,EASL,CAAC;AAwCF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,sBACN,iBAAiB,YAC1B,GAAG,EAAE,KACd,iBAYF,CAAC;AAUF;;;;GAIG;AAEH;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAChD,aAAa,EAAE,oBAAoB,EAAE,GACpC,aAAa,EAAE,CAYjB;AAED;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CACpD,iBAAiB,EAAE,iBAAiB,GACnC,aAAa,EAAE,CAKjB;AA6DD;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,sBAClC,iBAAiB,YAC1B,aAAa,EAAE,KACxB,iBAYF,CAAC;AA0CF;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CACpD,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,aAAa,EAAE,GACjC,OAAO,CAUT;AAED;;;;;;;GAOG;AACH,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,aAAa,EACxB,iBAAiB,EAAE,aAAa,EAAE,GACjC,OAAO,CAQT"}

package/dist/adapters/caip-permission-adapter-accounts.d.mts

@@ -1,5 +1,7 @@
+import type { InternalAccount } from "@metamask/keyring-internal-api";
 import { type CaipAccountId, type Hex } from "@metamask/utils";
 import type { Caip25CaveatValue } from "../caip25Permission.mjs";
+import type { InternalScopesObject } from "../scope/types.mjs";
 /**
  * Gets the Ethereum (EIP155 namespaced) accounts from the required and optional scopes.
  *
@@ -17,12 +19,55 @@ export declare const getEthAccounts: (caip25CaveatValue: Pick<Caip25CaveatValue,
  * @returns The updated CAIP-25 caveat value with the Ethereum accounts set.
  */
 export declare const setEthAccounts: (caip25CaveatValue: Caip25CaveatValue, accounts: Hex[]) => Caip25CaveatValue;
+/**
+ *
+ * Getters
+ *
+ */
+/**
+ * Gets all accounts from an array of scopes objects
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param scopesObjects - The scopes objects to extract accounts from
+ * @returns Array of unique account IDs
+ */
+export declare function getCaipAccountIdsFromScopesObjects(scopesObjects: InternalScopesObject[]): CaipAccountId[];
+/**
+ * Gets all permitted accounts from a CAIP-25 caveat
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param caip25CaveatValue - The CAIP-25 caveat value to extract accounts from
+ * @returns Array of unique account IDs
+ */
+export declare function getCaipAccountIdsFromCaip25CaveatValue(caip25CaveatValue: Caip25CaveatValue): CaipAccountId[];
 /**
  * Sets the permitted accounts to scopes with matching namespaces in the given CAIP-25 caveat value.
+ * This function should not be used with Smart Contract Accounts (SCA) because
+ * it adds the same account ID to all scopes that have the same namespace as the account.
  *
  * @param caip25CaveatValue - The CAIP-25 caveat value to set the permitted accounts for.
  * @param accounts - The permitted accounts to add to the appropriate scopes.
  * @returns The updated CAIP-25 caveat value with the permitted accounts set.
  */
-export declare const setPermittedAccounts: (caip25CaveatValue: Caip25CaveatValue, accounts: CaipAccountId[]) => Caip25CaveatValue;
+export declare const setNonSCACaipAccountIdsInCaip25CaveatValue: (caip25CaveatValue: Caip25CaveatValue, accounts: CaipAccountId[]) => Caip25CaveatValue;
+/**
+ * Checks if an internal account is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param internalAccount - The internal account to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+export declare function isInternalAccountInPermittedAccountIds(internalAccount: InternalAccount, permittedAccounts: CaipAccountId[]): boolean;
+/**
+ * Checks if an CAIP account ID is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param accountId - The CAIP account ID to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+export declare function isCaipAccountIdInPermittedAccountIds(accountId: CaipAccountId, permittedAccounts: CaipAccountId[]): boolean;
 //# sourceMappingURL=caip-permission-adapter-accounts.d.mts.map

package/dist/adapters/caip-permission-adapter-accounts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"caip-permission-adapter-accounts.d.mts","sourceRoot":"","sources":["../../src/adapters/caip-permission-adapter-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,GAAG,EAGT,wBAAwB;AAEzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,gCAA4B;AAgD7D;;;;;GAKG;AACH,eAAO,MAAM,cAAc,sBACN,KACjB,iBAAiB,EACjB,gBAAgB,GAAG,gBAAgB,CACpC,KACA,GAAG,EASL,CAAC;AAwCF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,sBACN,iBAAiB,YAC1B,GAAG,EAAE,KACd,iBAYF,CAAC;AA8CF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,sBACZ,iBAAiB,YAC1B,aAAa,EAAE,KACxB,iBAYF,CAAC"}
+{"version":3,"file":"caip-permission-adapter-accounts.d.mts","sourceRoot":"","sources":["../../src/adapters/caip-permission-adapter-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,uCAAuC;AACtE,OAAO,EAGL,KAAK,aAAa,EAGlB,KAAK,GAAG,EAGT,wBAAwB;AAEzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,gCAA4B;AAG7D,OAAO,KAAK,EAAuB,oBAAoB,EAAE,2BAAuB;AAsDhF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,sBACN,KACjB,iBAAiB,EACjB,gBAAgB,GAAG,gBAAgB,CACpC,KACA,GAAG,EASL,CAAC;AAwCF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,sBACN,iBAAiB,YAC1B,GAAG,EAAE,KACd,iBAYF,CAAC;AAUF;;;;GAIG;AAEH;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAChD,aAAa,EAAE,oBAAoB,EAAE,GACpC,aAAa,EAAE,CAYjB;AAED;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CACpD,iBAAiB,EAAE,iBAAiB,GACnC,aAAa,EAAE,CAKjB;AA6DD;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,sBAClC,iBAAiB,YAC1B,aAAa,EAAE,KACxB,iBAYF,CAAC;AA0CF;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CACpD,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,aAAa,EAAE,GACjC,OAAO,CAUT;AAED;;;;;;;GAOG;AACH,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,aAAa,EACxB,iBAAiB,EAAE,aAAa,EAAE,GACjC,OAAO,CAQT"}

package/dist/adapters/caip-permission-adapter-accounts.mjs

@@ -2,7 +2,15 @@ import { assertIsStrictHexString, KnownCaipNamespace, parseCaipAccountId } from
 import { KnownWalletScopeString } from "../scope/constants.mjs";
 import { getUniqueArrayItems } from "../scope/transform.mjs";
 import { parseScopeString } from "../scope/types.mjs";
+/*
+ *
+ *
+ * EVM SPECIFIC GETTERS AND SETTERS
+ *
+ *
+ */
 /**
+ *
  * Checks if a scope string is either an EIP155 or wallet namespaced scope string.
  *
  * @param scopeString - The scope string to check.
@@ -95,51 +103,156 @@ export const setEthAccounts = (caip25CaveatValue, accounts) => {
         optionalScopes: setEthAccountsForScopesObject(caip25CaveatValue.optionalScopes, accounts),
     };
 };
+/*
+ *
+ *
+ * GENERALIZED GETTERS AND SETTERS
+ *
+ *
+ */
 /**
- * Sets the permitted accounts to scopes with matching namespaces in the given scopes object.
  *
- * @param scopesObject - The scopes object to set the permitted accounts for.
- * @param accounts - The permitted accounts to add to the appropriate scopes.
- * @returns The updated scopes object with the permitted accounts set.
+ * Getters
+ *
+ */
+/**
+ * Gets all accounts from an array of scopes objects
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param scopesObjects - The scopes objects to extract accounts from
+ * @returns Array of unique account IDs
+ */
+export function getCaipAccountIdsFromScopesObjects(scopesObjects) {
+    const allAccounts = new Set();
+    for (const scopeObject of scopesObjects) {
+        for (const { accounts } of Object.values(scopeObject)) {
+            for (const account of accounts) {
+                allAccounts.add(account);
+            }
+        }
+    }
+    return Array.from(allAccounts);
+}
+/**
+ * Gets all permitted accounts from a CAIP-25 caveat
+ * This extracts all account IDs from both required and optional scopes
+ * and returns a unique set.
+ *
+ * @param caip25CaveatValue - The CAIP-25 caveat value to extract accounts from
+ * @returns Array of unique account IDs
+ */
+export function getCaipAccountIdsFromCaip25CaveatValue(caip25CaveatValue) {
+    return getCaipAccountIdsFromScopesObjects([
+        caip25CaveatValue.requiredScopes,
+        caip25CaveatValue.optionalScopes,
+    ]);
+}
+/**
+ *
+ * Setters
+ *
+ */
+/**
+ * Sets the CAIP account IDs to scopes with matching namespaces in the given scopes object.
+ * This function should not be used with Smart Contract Accounts (SCA) because
+ * it adds the same account ID to all the scopes that have the same namespace.
+ *
+ * @param scopesObject - The scopes object to set the CAIP account IDs for.
+ * @param accounts - The CAIP account IDs to add to the appropriate scopes.
+ * @returns The updated scopes object with the CAIP account IDs set.
  */
-const setPermittedAccountsForScopesObject = (scopesObject, accounts) => {
+const setNonSCACaipAccountIdsInScopesObject = (scopesObject, accounts) => {
+    const accountsByNamespace = new Map();
+    for (const account of accounts) {
+        const { chain: { namespace }, address, } = parseCaipAccountId(account);
+        if (!accountsByNamespace.has(namespace)) {
+            accountsByNamespace.set(namespace, new Set());
+        }
+        accountsByNamespace.get(namespace)?.add(address);
+    }
     const updatedScopesObject = {};
-    Object.entries(scopesObject).forEach(([key, scopeObject]) => {
-        // Cast needed because index type is returned as `string` by `Object.entries`
-        const scopeString = key;
+    for (const [scopeString, scopeObject] of Object.entries(scopesObject)) {
         const { namespace, reference } = parseScopeString(scopeString);
         let caipAccounts = [];
-        if (namespace && reference) {
-            caipAccounts = accounts.reduce((acc, account) => {
-                const { chain: { namespace: accountNamespace }, address: accountAddress, } = parseCaipAccountId(account);
-                // If the account namespace is the same as the scope namespace, add the account to the scope
-                // This will, for example, distribute all EIP155 accounts, regardless of reference, to all EIP155 scopes
-                if (namespace === accountNamespace) {
-                    acc.push(`${namespace}:${reference}:${accountAddress}`);
-                }
-                return acc;
-            }, []);
+        if (namespace && reference && accountsByNamespace.has(namespace)) {
+            const addressSet = accountsByNamespace.get(namespace);
+            if (addressSet) {
+                caipAccounts = Array.from(addressSet).map((address) => `${namespace}:${reference}:${address}`);
+            }
         }
-        const uniqueCaipAccounts = getUniqueArrayItems(caipAccounts);
         updatedScopesObject[scopeString] = {
             ...scopeObject,
-            accounts: uniqueCaipAccounts,
+            accounts: getUniqueArrayItems(caipAccounts),
         };
-    });
+    }
     return updatedScopesObject;
 };
 /**
  * Sets the permitted accounts to scopes with matching namespaces in the given CAIP-25 caveat value.
+ * This function should not be used with Smart Contract Accounts (SCA) because
+ * it adds the same account ID to all scopes that have the same namespace as the account.
  *
  * @param caip25CaveatValue - The CAIP-25 caveat value to set the permitted accounts for.
  * @param accounts - The permitted accounts to add to the appropriate scopes.
  * @returns The updated CAIP-25 caveat value with the permitted accounts set.
  */
-export const setPermittedAccounts = (caip25CaveatValue, accounts) => {
+export const setNonSCACaipAccountIdsInCaip25CaveatValue = (caip25CaveatValue, accounts) => {
     return {
         ...caip25CaveatValue,
-        requiredScopes: setPermittedAccountsForScopesObject(caip25CaveatValue.requiredScopes, accounts),
-        optionalScopes: setPermittedAccountsForScopesObject(caip25CaveatValue.optionalScopes, accounts),
+        requiredScopes: setNonSCACaipAccountIdsInScopesObject(caip25CaveatValue.requiredScopes, accounts),
+        optionalScopes: setNonSCACaipAccountIdsInScopesObject(caip25CaveatValue.optionalScopes, accounts),
     };
 };
+/**
+ * Checks if an address and list of parsed scopes are connected to any of
+ * the permitted accounts based on scope matching
+ *
+ * @param address - The CAIP account address to check against permitted accounts
+ * @param parsedAccountScopes - The list of parsed CAIP chain ID to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the address and any account scope is connected to any permitted account
+ */
+function isAddressWithParsedScopesInPermittedAccountIds(address, parsedAccountScopes, permittedAccounts) {
+    if (!address || !parsedAccountScopes.length || !permittedAccounts.length) {
+        return false;
+    }
+    return permittedAccounts.some((account) => {
+        const parsedPermittedAccount = parseCaipAccountId(account);
+        return parsedAccountScopes.some(({ namespace, reference }) => {
+            if (namespace !== parsedPermittedAccount.chain.namespace ||
+                address !== parsedPermittedAccount.address) {
+                return false;
+            }
+            return (reference === '0' ||
+                reference === parsedPermittedAccount.chain.reference);
+        });
+    });
+}
+/**
+ * Checks if an internal account is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param internalAccount - The internal account to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+export function isInternalAccountInPermittedAccountIds(internalAccount, permittedAccounts) {
+    const parsedInteralAccountScopes = internalAccount.scopes.map((scope) => {
+        return parseScopeString(scope);
+    });
+    return isAddressWithParsedScopesInPermittedAccountIds(internalAccount.address, parsedInteralAccountScopes, permittedAccounts);
+}
+/**
+ * Checks if an CAIP account ID is connected to any of the permitted accounts
+ * based on scope matching
+ *
+ * @param accountId - The CAIP account ID to check against permitted accounts
+ * @param permittedAccounts - Array of CAIP account IDs that are permitted
+ * @returns True if the account is connected to any permitted account
+ */
+export function isCaipAccountIdInPermittedAccountIds(accountId, permittedAccounts) {
+    const { address, chain } = parseCaipAccountId(accountId);
+    return isAddressWithParsedScopesInPermittedAccountIds(address, [chain], permittedAccounts);
+}
 //# sourceMappingURL=caip-permission-adapter-accounts.mjs.map