@metamask-previews/eip1193-permission-middleware 0.1.0-preview-b69c669

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0]
+
+### Added
+
+- Initial release
+
+[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/eip1193-permission-middleware@0.1.0...HEAD
+[0.1.0]: https://github.com/MetaMask/core/releases/tag/@metamask/eip1193-permission-middleware@0.1.0

package/LICENSE

@@ -0,0 +1,20 @@
+MIT License
+
+Copyright (c) 2025 MetaMask
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

package/README.md

@@ -0,0 +1,15 @@
+# `@metamask/eip1193-permission-middleware`
+
+Implements the JSON-RPC methods for managing permissions as referenced in [EIP-2255](https://eips.ethereum.org/EIPS/eip-2255) and [MIP-2](https://github.com/MetaMask/metamask-improvement-proposals/blob/main/MIPs/mip-2.md), but adapted to support [chain-agnostic permission caveats](https://npmjs.com/package/@metamask/chain-agnostic-permission).
+
+## Installation
+
+`yarn add @metamask/eip1193-permission-middleware`
+
+or
+
+`npm install @metamask/eip1193-permission-middleware`
+
+## Contributing
+
+This package is part of a monorepo. Instructions for contributing can be found in the [monorepo README](https://github.com/MetaMask/core#readme).

package/dist/index.cjs

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.revokePermissionsHandler = exports.requestPermissionsHandler = exports.getPermissionsHandler = void 0;
+var wallet_getPermissions_1 = require("./wallet-getPermissions.cjs");
+Object.defineProperty(exports, "getPermissionsHandler", { enumerable: true, get: function () { return wallet_getPermissions_1.getPermissionsHandler; } });
+var wallet_requestPermissions_1 = require("./wallet-requestPermissions.cjs");
+Object.defineProperty(exports, "requestPermissionsHandler", { enumerable: true, get: function () { return wallet_requestPermissions_1.requestPermissionsHandler; } });
+var wallet_revokePermissions_1 = require("./wallet-revokePermissions.cjs");
+Object.defineProperty(exports, "revokePermissionsHandler", { enumerable: true, get: function () { return wallet_revokePermissions_1.revokePermissionsHandler; } });
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qEAAgE;AAAvD,8HAAA,qBAAqB,OAAA;AAC9B,6EAAwE;AAA/D,sIAAA,yBAAyB,OAAA;AAClC,2EAAsE;AAA7D,oIAAA,wBAAwB,OAAA","sourcesContent":["export { getPermissionsHandler } from './wallet-getPermissions';\nexport { requestPermissionsHandler } from './wallet-requestPermissions';\nexport { revokePermissionsHandler } from './wallet-revokePermissions';\n"]}

package/dist/index.d.cts

@@ -0,0 +1,4 @@
+export { getPermissionsHandler } from "./wallet-getPermissions.cjs";
+export { requestPermissionsHandler } from "./wallet-requestPermissions.cjs";
+export { revokePermissionsHandler } from "./wallet-revokePermissions.cjs";
+//# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,oCAAgC;AAChE,OAAO,EAAE,yBAAyB,EAAE,wCAAoC;AACxE,OAAO,EAAE,wBAAwB,EAAE,uCAAmC"}

package/dist/index.d.mts

@@ -0,0 +1,4 @@
+export { getPermissionsHandler } from "./wallet-getPermissions.mjs";
+export { requestPermissionsHandler } from "./wallet-requestPermissions.mjs";
+export { revokePermissionsHandler } from "./wallet-revokePermissions.mjs";
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,oCAAgC;AAChE,OAAO,EAAE,yBAAyB,EAAE,wCAAoC;AACxE,OAAO,EAAE,wBAAwB,EAAE,uCAAmC"}

package/dist/index.mjs

@@ -0,0 +1,4 @@
+export { getPermissionsHandler } from "./wallet-getPermissions.mjs";
+export { requestPermissionsHandler } from "./wallet-requestPermissions.mjs";
+export { revokePermissionsHandler } from "./wallet-revokePermissions.mjs";
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,oCAAgC;AAChE,OAAO,EAAE,yBAAyB,EAAE,wCAAoC;AACxE,OAAO,EAAE,wBAAwB,EAAE,uCAAmC","sourcesContent":["export { getPermissionsHandler } from './wallet-getPermissions';\nexport { requestPermissionsHandler } from './wallet-requestPermissions';\nexport { revokePermissionsHandler } from './wallet-revokePermissions';\n"]}

package/dist/types.cjs

@@ -0,0 +1,19 @@
+"use strict";
+// There is no logic in this file.
+/* istanbul ignore file */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RestrictedMethods = exports.EndowmentTypes = exports.CaveatTypes = void 0;
+var CaveatTypes;
+(function (CaveatTypes) {
+    CaveatTypes["RestrictReturnedAccounts"] = "restrictReturnedAccounts";
+    CaveatTypes["RestrictNetworkSwitching"] = "restrictNetworkSwitching";
+})(CaveatTypes || (exports.CaveatTypes = CaveatTypes = {}));
+var EndowmentTypes;
+(function (EndowmentTypes) {
+    EndowmentTypes["PermittedChains"] = "endowment:permitted-chains";
+})(EndowmentTypes || (exports.EndowmentTypes = EndowmentTypes = {}));
+var RestrictedMethods;
+(function (RestrictedMethods) {
+    RestrictedMethods["EthAccounts"] = "eth_accounts";
+})(RestrictedMethods || (exports.RestrictedMethods = RestrictedMethods = {}));
+//# sourceMappingURL=types.cjs.map

package/dist/types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA,kCAAkC;AAClC,0BAA0B;;;AAE1B,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,oEAAqD,CAAA;IACrD,oEAAqD,CAAA;AACvD,CAAC,EAHW,WAAW,2BAAX,WAAW,QAGtB;AAED,IAAY,cAEX;AAFD,WAAY,cAAc;IACxB,gEAA8C,CAAA;AAChD,CAAC,EAFW,cAAc,8BAAd,cAAc,QAEzB;AAED,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,iDAA4B,CAAA;AAC9B,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B","sourcesContent":["// There is no logic in this file.\n/* istanbul ignore file */\n\nexport enum CaveatTypes {\n  RestrictReturnedAccounts = 'restrictReturnedAccounts',\n  RestrictNetworkSwitching = 'restrictNetworkSwitching',\n}\n\nexport enum EndowmentTypes {\n  PermittedChains = 'endowment:permitted-chains',\n}\n\nexport enum RestrictedMethods {\n  EthAccounts = 'eth_accounts',\n}\n"]}

package/dist/types.d.cts

@@ -0,0 +1,11 @@
+export declare enum CaveatTypes {
+    RestrictReturnedAccounts = "restrictReturnedAccounts",
+    RestrictNetworkSwitching = "restrictNetworkSwitching"
+}
+export declare enum EndowmentTypes {
+    PermittedChains = "endowment:permitted-chains"
+}
+export declare enum RestrictedMethods {
+    EthAccounts = "eth_accounts"
+}
+//# sourceMappingURL=types.d.cts.map

package/dist/types.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.cts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA,oBAAY,WAAW;IACrB,wBAAwB,6BAA6B;IACrD,wBAAwB,6BAA6B;CACtD;AAED,oBAAY,cAAc;IACxB,eAAe,+BAA+B;CAC/C;AAED,oBAAY,iBAAiB;IAC3B,WAAW,iBAAiB;CAC7B"}

package/dist/types.d.mts

@@ -0,0 +1,11 @@
+export declare enum CaveatTypes {
+    RestrictReturnedAccounts = "restrictReturnedAccounts",
+    RestrictNetworkSwitching = "restrictNetworkSwitching"
+}
+export declare enum EndowmentTypes {
+    PermittedChains = "endowment:permitted-chains"
+}
+export declare enum RestrictedMethods {
+    EthAccounts = "eth_accounts"
+}
+//# sourceMappingURL=types.d.mts.map

package/dist/types.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA,oBAAY,WAAW;IACrB,wBAAwB,6BAA6B;IACrD,wBAAwB,6BAA6B;CACtD;AAED,oBAAY,cAAc;IACxB,eAAe,+BAA+B;CAC/C;AAED,oBAAY,iBAAiB;IAC3B,WAAW,iBAAiB;CAC7B"}

package/dist/types.mjs

@@ -0,0 +1,16 @@
+// There is no logic in this file.
+/* istanbul ignore file */
+export var CaveatTypes;
+(function (CaveatTypes) {
+    CaveatTypes["RestrictReturnedAccounts"] = "restrictReturnedAccounts";
+    CaveatTypes["RestrictNetworkSwitching"] = "restrictNetworkSwitching";
+})(CaveatTypes || (CaveatTypes = {}));
+export var EndowmentTypes;
+(function (EndowmentTypes) {
+    EndowmentTypes["PermittedChains"] = "endowment:permitted-chains";
+})(EndowmentTypes || (EndowmentTypes = {}));
+export var RestrictedMethods;
+(function (RestrictedMethods) {
+    RestrictedMethods["EthAccounts"] = "eth_accounts";
+})(RestrictedMethods || (RestrictedMethods = {}));
+//# sourceMappingURL=types.mjs.map

package/dist/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,0BAA0B;AAE1B,MAAM,CAAN,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,oEAAqD,CAAA;IACrD,oEAAqD,CAAA;AACvD,CAAC,EAHW,WAAW,KAAX,WAAW,QAGtB;AAED,MAAM,CAAN,IAAY,cAEX;AAFD,WAAY,cAAc;IACxB,gEAA8C,CAAA;AAChD,CAAC,EAFW,cAAc,KAAd,cAAc,QAEzB;AAED,MAAM,CAAN,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,iDAA4B,CAAA;AAC9B,CAAC,EAFW,iBAAiB,KAAjB,iBAAiB,QAE5B","sourcesContent":["// There is no logic in this file.\n/* istanbul ignore file */\n\nexport enum CaveatTypes {\n  RestrictReturnedAccounts = 'restrictReturnedAccounts',\n  RestrictNetworkSwitching = 'restrictNetworkSwitching',\n}\n\nexport enum EndowmentTypes {\n  PermittedChains = 'endowment:permitted-chains',\n}\n\nexport enum RestrictedMethods {\n  EthAccounts = 'eth_accounts',\n}\n"]}

package/dist/wallet-getPermissions.cjs

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPermissionsHandler = void 0;
+const chain_agnostic_permission_1 = require("@metamask/chain-agnostic-permission");
+const permission_controller_1 = require("@metamask/permission-controller");
+const types_1 = require("./types.cjs");
+exports.getPermissionsHandler = {
+    methodNames: [permission_controller_1.MethodNames.GetPermissions],
+    implementation: getPermissionsImplementation,
+    hookNames: {
+        getPermissionsForOrigin: true,
+        getAccounts: true,
+    },
+};
+/**
+ * Get Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_getPermissions` RPC method.
+ * It makes use of a CAIP-25 endowment permission returned by `getPermissionsForOrigin` hook, if it exists.
+ *
+ * @param _req - The JsonRpcEngine request - unused
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getPermissionsForOrigin - The specific method hook needed for this method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @returns A promise that resolves to nothing
+ */
+async function getPermissionsImplementation(_req, res, _next, end, { getPermissionsForOrigin, getAccounts, }) {
+    const permissions = { ...getPermissionsForOrigin() };
+    const caip25Endowment = permissions[chain_agnostic_permission_1.Caip25EndowmentPermissionName];
+    const caip25CaveatValue = caip25Endowment?.caveats?.find(({ type }) => type === chain_agnostic_permission_1.Caip25CaveatType)?.value;
+    delete permissions[chain_agnostic_permission_1.Caip25EndowmentPermissionName];
+    if (caip25CaveatValue) {
+        // We cannot derive ethAccounts directly from the CAIP-25 permission
+        // because the accounts will not be in order of lastSelected
+        const ethAccounts = getAccounts({ ignoreLock: true });
+        if (ethAccounts.length > 0) {
+            permissions[types_1.RestrictedMethods.EthAccounts] = {
+                ...caip25Endowment,
+                parentCapability: types_1.RestrictedMethods.EthAccounts,
+                caveats: [
+                    {
+                        type: types_1.CaveatTypes.RestrictReturnedAccounts,
+                        value: ethAccounts,
+                    },
+                ],
+            };
+        }
+        const ethChainIds = (0, chain_agnostic_permission_1.getPermittedEthChainIds)(caip25CaveatValue);
+        if (ethChainIds.length > 0) {
+            permissions[types_1.EndowmentTypes.PermittedChains] = {
+                ...caip25Endowment,
+                parentCapability: types_1.EndowmentTypes.PermittedChains,
+                caveats: [
+                    {
+                        type: types_1.CaveatTypes.RestrictNetworkSwitching,
+                        value: ethChainIds,
+                    },
+                ],
+            };
+        }
+    }
+    res.result = Object.values(permissions);
+    return end();
+}
+//# sourceMappingURL=wallet-getPermissions.cjs.map

package/dist/wallet-getPermissions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-getPermissions.cjs","sourceRoot":"","sources":["../src/wallet-getPermissions.ts"],"names":[],"mappings":";;;AACA,mFAI6C;AAK7C,2EAKyC;AAOzC,uCAAyE;AAE5D,QAAA,qBAAqB,GAAG;IACnC,WAAW,EAAE,CAAC,mCAAW,CAAC,cAAc,CAAC;IACzC,cAAc,EAAE,4BAA4B;IAC5C,SAAS,EAAE;QACT,uBAAuB,EAAE,IAAI;QAC7B,WAAW,EAAE,IAAI;KAClB;CACF,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,4BAA4B,CACzC,IAA4B,EAC5B,GAAiC,EACjC,KAAqC,EACrC,GAA6B,EAC7B,EACE,uBAAuB,EACvB,WAAW,GASZ;IAED,MAAM,WAAW,GAAG,EAAE,GAAG,uBAAuB,EAAE,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,WAAW,CAAC,yDAA6B,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,eAAe,EAAE,OAAO,EAAE,IAAI,CACtD,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,4CAAgB,CACxC,EAAE,KAAsC,CAAC;IAC1C,OAAO,WAAW,CAAC,yDAA6B,CAAC,CAAC;IAElD,IAAI,iBAAiB,EAAE;QACrB,oEAAoE;QACpE,4DAA4D;QAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1B,WAAW,CAAC,yBAAiB,CAAC,WAAW,CAAC,GAAG;gBAC3C,GAAG,eAAe;gBAClB,gBAAgB,EAAE,yBAAiB,CAAC,WAAW;gBAC/C,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,mBAAW,CAAC,wBAAwB;wBAC1C,KAAK,EAAE,WAAW;qBACnB;iBACF;aACF,CAAC;SACH;QAED,MAAM,WAAW,GAAG,IAAA,mDAAuB,EAAC,iBAAiB,CAAC,CAAC;QAE/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1B,WAAW,CAAC,sBAAc,CAAC,eAAe,CAAC,GAAG;gBAC5C,GAAG,eAAe;gBAClB,gBAAgB,EAAE,sBAAc,CAAC,eAAe;gBAChD,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,mBAAW,CAAC,wBAAwB;wBAC1C,KAAK,EAAE,WAAW;qBACnB;iBACF;aACF,CAAC;SACH;KACF;IAED,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxC,OAAO,GAAG,EAAE,CAAC;AACf,CAAC","sourcesContent":["import type { Caip25CaveatValue } from '@metamask/chain-agnostic-permission';\nimport {\n  Caip25CaveatType,\n  Caip25EndowmentPermissionName,\n  getPermittedEthChainIds,\n} from '@metamask/chain-agnostic-permission';\nimport type {\n  AsyncJsonRpcEngineNextCallback,\n  JsonRpcEngineEndCallback,\n} from '@metamask/json-rpc-engine';\nimport {\n  type CaveatSpecificationConstraint,\n  MethodNames,\n  type PermissionController,\n  type PermissionSpecificationConstraint,\n} from '@metamask/permission-controller';\nimport type {\n  Json,\n  JsonRpcRequest,\n  PendingJsonRpcResponse,\n} from '@metamask/utils';\n\nimport { CaveatTypes, EndowmentTypes, RestrictedMethods } from './types';\n\nexport const getPermissionsHandler = {\n  methodNames: [MethodNames.GetPermissions],\n  implementation: getPermissionsImplementation,\n  hookNames: {\n    getPermissionsForOrigin: true,\n    getAccounts: true,\n  },\n};\n\n/**\n * Get Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_getPermissions` RPC method.\n * It makes use of a CAIP-25 endowment permission returned by `getPermissionsForOrigin` hook, if it exists.\n *\n * @param _req - The JsonRpcEngine request - unused\n * @param res - The JsonRpcEngine result object\n * @param _next - JsonRpcEngine next() callback - unused\n * @param end - JsonRpcEngine end() callback\n * @param options - Method hooks passed to the method implementation\n * @param options.getPermissionsForOrigin - The specific method hook needed for this method implementation\n * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.\n * @returns A promise that resolves to nothing\n */\nasync function getPermissionsImplementation(\n  _req: JsonRpcRequest<Json[]>,\n  res: PendingJsonRpcResponse<Json>,\n  _next: AsyncJsonRpcEngineNextCallback,\n  end: JsonRpcEngineEndCallback,\n  {\n    getPermissionsForOrigin,\n    getAccounts,\n  }: {\n    getPermissionsForOrigin: () => ReturnType<\n      PermissionController<\n        PermissionSpecificationConstraint,\n        CaveatSpecificationConstraint\n      >['getPermissions']\n    >;\n    getAccounts: (options?: { ignoreLock?: boolean }) => string[];\n  },\n) {\n  const permissions = { ...getPermissionsForOrigin() };\n  const caip25Endowment = permissions[Caip25EndowmentPermissionName];\n  const caip25CaveatValue = caip25Endowment?.caveats?.find(\n    ({ type }) => type === Caip25CaveatType,\n  )?.value as Caip25CaveatValue | undefined;\n  delete permissions[Caip25EndowmentPermissionName];\n\n  if (caip25CaveatValue) {\n    // We cannot derive ethAccounts directly from the CAIP-25 permission\n    // because the accounts will not be in order of lastSelected\n    const ethAccounts = getAccounts({ ignoreLock: true });\n\n    if (ethAccounts.length > 0) {\n      permissions[RestrictedMethods.EthAccounts] = {\n        ...caip25Endowment,\n        parentCapability: RestrictedMethods.EthAccounts,\n        caveats: [\n          {\n            type: CaveatTypes.RestrictReturnedAccounts,\n            value: ethAccounts,\n          },\n        ],\n      };\n    }\n\n    const ethChainIds = getPermittedEthChainIds(caip25CaveatValue);\n\n    if (ethChainIds.length > 0) {\n      permissions[EndowmentTypes.PermittedChains] = {\n        ...caip25Endowment,\n        parentCapability: EndowmentTypes.PermittedChains,\n        caveats: [\n          {\n            type: CaveatTypes.RestrictNetworkSwitching,\n            value: ethChainIds,\n          },\n        ],\n      };\n    }\n  }\n\n  res.result = Object.values(permissions);\n  return end();\n}\n"]}

package/dist/wallet-getPermissions.d.cts

@@ -0,0 +1,32 @@
+import type { AsyncJsonRpcEngineNextCallback, JsonRpcEngineEndCallback } from "@metamask/json-rpc-engine";
+import { type CaveatSpecificationConstraint, MethodNames, type PermissionController, type PermissionSpecificationConstraint } from "@metamask/permission-controller";
+import type { Json, JsonRpcRequest, PendingJsonRpcResponse } from "@metamask/utils";
+export declare const getPermissionsHandler: {
+    methodNames: MethodNames[];
+    implementation: typeof getPermissionsImplementation;
+    hookNames: {
+        getPermissionsForOrigin: boolean;
+        getAccounts: boolean;
+    };
+};
+/**
+ * Get Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_getPermissions` RPC method.
+ * It makes use of a CAIP-25 endowment permission returned by `getPermissionsForOrigin` hook, if it exists.
+ *
+ * @param _req - The JsonRpcEngine request - unused
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getPermissionsForOrigin - The specific method hook needed for this method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @returns A promise that resolves to nothing
+ */
+declare function getPermissionsImplementation(_req: JsonRpcRequest<Json[]>, res: PendingJsonRpcResponse<Json>, _next: AsyncJsonRpcEngineNextCallback, end: JsonRpcEngineEndCallback, { getPermissionsForOrigin, getAccounts, }: {
+    getPermissionsForOrigin: () => ReturnType<PermissionController<PermissionSpecificationConstraint, CaveatSpecificationConstraint>['getPermissions']>;
+    getAccounts: (options?: {
+        ignoreLock?: boolean;
+    }) => string[];
+}): Promise<void>;
+export {};
+//# sourceMappingURL=wallet-getPermissions.d.cts.map

package/dist/wallet-getPermissions.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-getPermissions.d.cts","sourceRoot":"","sources":["../src/wallet-getPermissions.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,kCAAkC;AACnC,OAAO,EACL,KAAK,6BAA6B,EAClC,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,iCAAiC,EACvC,wCAAwC;AACzC,OAAO,KAAK,EACV,IAAI,EACJ,cAAc,EACd,sBAAsB,EACvB,wBAAwB;AAIzB,eAAO,MAAM,qBAAqB;;;;;;;CAOjC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,iBAAe,4BAA4B,CACzC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,EAC5B,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,EACjC,KAAK,EAAE,8BAA8B,EACrC,GAAG,EAAE,wBAAwB,EAC7B,EACE,uBAAuB,EACvB,WAAW,GACZ,EAAE;IACD,uBAAuB,EAAE,MAAM,UAAU,CACvC,oBAAoB,CAClB,iCAAiC,EACjC,6BAA6B,CAC9B,CAAC,gBAAgB,CAAC,CACpB,CAAC;IACF,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,MAAM,EAAE,CAAC;CAC/D,iBA6CF"}

package/dist/wallet-getPermissions.d.mts

@@ -0,0 +1,32 @@
+import type { AsyncJsonRpcEngineNextCallback, JsonRpcEngineEndCallback } from "@metamask/json-rpc-engine";
+import { type CaveatSpecificationConstraint, MethodNames, type PermissionController, type PermissionSpecificationConstraint } from "@metamask/permission-controller";
+import type { Json, JsonRpcRequest, PendingJsonRpcResponse } from "@metamask/utils";
+export declare const getPermissionsHandler: {
+    methodNames: MethodNames[];
+    implementation: typeof getPermissionsImplementation;
+    hookNames: {
+        getPermissionsForOrigin: boolean;
+        getAccounts: boolean;
+    };
+};
+/**
+ * Get Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_getPermissions` RPC method.
+ * It makes use of a CAIP-25 endowment permission returned by `getPermissionsForOrigin` hook, if it exists.
+ *
+ * @param _req - The JsonRpcEngine request - unused
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getPermissionsForOrigin - The specific method hook needed for this method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @returns A promise that resolves to nothing
+ */
+declare function getPermissionsImplementation(_req: JsonRpcRequest<Json[]>, res: PendingJsonRpcResponse<Json>, _next: AsyncJsonRpcEngineNextCallback, end: JsonRpcEngineEndCallback, { getPermissionsForOrigin, getAccounts, }: {
+    getPermissionsForOrigin: () => ReturnType<PermissionController<PermissionSpecificationConstraint, CaveatSpecificationConstraint>['getPermissions']>;
+    getAccounts: (options?: {
+        ignoreLock?: boolean;
+    }) => string[];
+}): Promise<void>;
+export {};
+//# sourceMappingURL=wallet-getPermissions.d.mts.map

package/dist/wallet-getPermissions.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-getPermissions.d.mts","sourceRoot":"","sources":["../src/wallet-getPermissions.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,kCAAkC;AACnC,OAAO,EACL,KAAK,6BAA6B,EAClC,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,iCAAiC,EACvC,wCAAwC;AACzC,OAAO,KAAK,EACV,IAAI,EACJ,cAAc,EACd,sBAAsB,EACvB,wBAAwB;AAIzB,eAAO,MAAM,qBAAqB;;;;;;;CAOjC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,iBAAe,4BAA4B,CACzC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,EAC5B,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,EACjC,KAAK,EAAE,8BAA8B,EACrC,GAAG,EAAE,wBAAwB,EAC7B,EACE,uBAAuB,EACvB,WAAW,GACZ,EAAE;IACD,uBAAuB,EAAE,MAAM,UAAU,CACvC,oBAAoB,CAClB,iCAAiC,EACjC,6BAA6B,CAC9B,CAAC,gBAAgB,CAAC,CACpB,CAAC;IACF,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,MAAM,EAAE,CAAC;CAC/D,iBA6CF"}

package/dist/wallet-getPermissions.mjs

@@ -0,0 +1,63 @@
+import { Caip25CaveatType, Caip25EndowmentPermissionName, getPermittedEthChainIds } from "@metamask/chain-agnostic-permission";
+import { MethodNames } from "@metamask/permission-controller";
+import { CaveatTypes, EndowmentTypes, RestrictedMethods } from "./types.mjs";
+export const getPermissionsHandler = {
+    methodNames: [MethodNames.GetPermissions],
+    implementation: getPermissionsImplementation,
+    hookNames: {
+        getPermissionsForOrigin: true,
+        getAccounts: true,
+    },
+};
+/**
+ * Get Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_getPermissions` RPC method.
+ * It makes use of a CAIP-25 endowment permission returned by `getPermissionsForOrigin` hook, if it exists.
+ *
+ * @param _req - The JsonRpcEngine request - unused
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getPermissionsForOrigin - The specific method hook needed for this method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @returns A promise that resolves to nothing
+ */
+async function getPermissionsImplementation(_req, res, _next, end, { getPermissionsForOrigin, getAccounts, }) {
+    const permissions = { ...getPermissionsForOrigin() };
+    const caip25Endowment = permissions[Caip25EndowmentPermissionName];
+    const caip25CaveatValue = caip25Endowment?.caveats?.find(({ type }) => type === Caip25CaveatType)?.value;
+    delete permissions[Caip25EndowmentPermissionName];
+    if (caip25CaveatValue) {
+        // We cannot derive ethAccounts directly from the CAIP-25 permission
+        // because the accounts will not be in order of lastSelected
+        const ethAccounts = getAccounts({ ignoreLock: true });
+        if (ethAccounts.length > 0) {
+            permissions[RestrictedMethods.EthAccounts] = {
+                ...caip25Endowment,
+                parentCapability: RestrictedMethods.EthAccounts,
+                caveats: [
+                    {
+                        type: CaveatTypes.RestrictReturnedAccounts,
+                        value: ethAccounts,
+                    },
+                ],
+            };
+        }
+        const ethChainIds = getPermittedEthChainIds(caip25CaveatValue);
+        if (ethChainIds.length > 0) {
+            permissions[EndowmentTypes.PermittedChains] = {
+                ...caip25Endowment,
+                parentCapability: EndowmentTypes.PermittedChains,
+                caveats: [
+                    {
+                        type: CaveatTypes.RestrictNetworkSwitching,
+                        value: ethChainIds,
+                    },
+                ],
+            };
+        }
+    }
+    res.result = Object.values(permissions);
+    return end();
+}
+//# sourceMappingURL=wallet-getPermissions.mjs.map

package/dist/wallet-getPermissions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-getPermissions.mjs","sourceRoot":"","sources":["../src/wallet-getPermissions.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,uBAAuB,EACxB,4CAA4C;AAK7C,OAAO,EAEL,WAAW,EAGZ,wCAAwC;AAOzC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAgB;AAEzE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC;IACzC,cAAc,EAAE,4BAA4B;IAC5C,SAAS,EAAE;QACT,uBAAuB,EAAE,IAAI;QAC7B,WAAW,EAAE,IAAI;KAClB;CACF,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,4BAA4B,CACzC,IAA4B,EAC5B,GAAiC,EACjC,KAAqC,EACrC,GAA6B,EAC7B,EACE,uBAAuB,EACvB,WAAW,GASZ;IAED,MAAM,WAAW,GAAG,EAAE,GAAG,uBAAuB,EAAE,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,WAAW,CAAC,6BAA6B,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,eAAe,EAAE,OAAO,EAAE,IAAI,CACtD,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,gBAAgB,CACxC,EAAE,KAAsC,CAAC;IAC1C,OAAO,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAElD,IAAI,iBAAiB,EAAE;QACrB,oEAAoE;QACpE,4DAA4D;QAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1B,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAG;gBAC3C,GAAG,eAAe;gBAClB,gBAAgB,EAAE,iBAAiB,CAAC,WAAW;gBAC/C,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,WAAW,CAAC,wBAAwB;wBAC1C,KAAK,EAAE,WAAW;qBACnB;iBACF;aACF,CAAC;SACH;QAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAE/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1B,WAAW,CAAC,cAAc,CAAC,eAAe,CAAC,GAAG;gBAC5C,GAAG,eAAe;gBAClB,gBAAgB,EAAE,cAAc,CAAC,eAAe;gBAChD,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,WAAW,CAAC,wBAAwB;wBAC1C,KAAK,EAAE,WAAW;qBACnB;iBACF;aACF,CAAC;SACH;KACF;IAED,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxC,OAAO,GAAG,EAAE,CAAC;AACf,CAAC","sourcesContent":["import type { Caip25CaveatValue } from '@metamask/chain-agnostic-permission';\nimport {\n  Caip25CaveatType,\n  Caip25EndowmentPermissionName,\n  getPermittedEthChainIds,\n} from '@metamask/chain-agnostic-permission';\nimport type {\n  AsyncJsonRpcEngineNextCallback,\n  JsonRpcEngineEndCallback,\n} from '@metamask/json-rpc-engine';\nimport {\n  type CaveatSpecificationConstraint,\n  MethodNames,\n  type PermissionController,\n  type PermissionSpecificationConstraint,\n} from '@metamask/permission-controller';\nimport type {\n  Json,\n  JsonRpcRequest,\n  PendingJsonRpcResponse,\n} from '@metamask/utils';\n\nimport { CaveatTypes, EndowmentTypes, RestrictedMethods } from './types';\n\nexport const getPermissionsHandler = {\n  methodNames: [MethodNames.GetPermissions],\n  implementation: getPermissionsImplementation,\n  hookNames: {\n    getPermissionsForOrigin: true,\n    getAccounts: true,\n  },\n};\n\n/**\n * Get Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_getPermissions` RPC method.\n * It makes use of a CAIP-25 endowment permission returned by `getPermissionsForOrigin` hook, if it exists.\n *\n * @param _req - The JsonRpcEngine request - unused\n * @param res - The JsonRpcEngine result object\n * @param _next - JsonRpcEngine next() callback - unused\n * @param end - JsonRpcEngine end() callback\n * @param options - Method hooks passed to the method implementation\n * @param options.getPermissionsForOrigin - The specific method hook needed for this method implementation\n * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.\n * @returns A promise that resolves to nothing\n */\nasync function getPermissionsImplementation(\n  _req: JsonRpcRequest<Json[]>,\n  res: PendingJsonRpcResponse<Json>,\n  _next: AsyncJsonRpcEngineNextCallback,\n  end: JsonRpcEngineEndCallback,\n  {\n    getPermissionsForOrigin,\n    getAccounts,\n  }: {\n    getPermissionsForOrigin: () => ReturnType<\n      PermissionController<\n        PermissionSpecificationConstraint,\n        CaveatSpecificationConstraint\n      >['getPermissions']\n    >;\n    getAccounts: (options?: { ignoreLock?: boolean }) => string[];\n  },\n) {\n  const permissions = { ...getPermissionsForOrigin() };\n  const caip25Endowment = permissions[Caip25EndowmentPermissionName];\n  const caip25CaveatValue = caip25Endowment?.caveats?.find(\n    ({ type }) => type === Caip25CaveatType,\n  )?.value as Caip25CaveatValue | undefined;\n  delete permissions[Caip25EndowmentPermissionName];\n\n  if (caip25CaveatValue) {\n    // We cannot derive ethAccounts directly from the CAIP-25 permission\n    // because the accounts will not be in order of lastSelected\n    const ethAccounts = getAccounts({ ignoreLock: true });\n\n    if (ethAccounts.length > 0) {\n      permissions[RestrictedMethods.EthAccounts] = {\n        ...caip25Endowment,\n        parentCapability: RestrictedMethods.EthAccounts,\n        caveats: [\n          {\n            type: CaveatTypes.RestrictReturnedAccounts,\n            value: ethAccounts,\n          },\n        ],\n      };\n    }\n\n    const ethChainIds = getPermittedEthChainIds(caip25CaveatValue);\n\n    if (ethChainIds.length > 0) {\n      permissions[EndowmentTypes.PermittedChains] = {\n        ...caip25Endowment,\n        parentCapability: EndowmentTypes.PermittedChains,\n        caveats: [\n          {\n            type: CaveatTypes.RestrictNetworkSwitching,\n            value: ethChainIds,\n          },\n        ],\n      };\n    }\n  }\n\n  res.result = Object.values(permissions);\n  return end();\n}\n"]}

package/dist/wallet-requestPermissions.cjs

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requestPermissionsHandler = void 0;
+const chain_agnostic_permission_1 = require("@metamask/chain-agnostic-permission");
+const controller_utils_1 = require("@metamask/controller-utils");
+const permission_controller_1 = require("@metamask/permission-controller");
+const lodash_1 = require("lodash");
+const types_1 = require("./types.cjs");
+exports.requestPermissionsHandler = {
+    methodNames: [permission_controller_1.MethodNames.RequestPermissions],
+    implementation: requestPermissionsImplementation,
+    hookNames: {
+        getAccounts: true,
+        requestPermissionsForOrigin: true,
+        getCaip25PermissionFromLegacyPermissionsForOrigin: true,
+    },
+};
+/**
+ * Request Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_requestPermissions` RPC method.
+ * The request object is expected to contain a CAIP-25 endowment permission.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @param options.getCaip25PermissionFromLegacyPermissionsForOrigin - A hook that returns a CAIP-25 permission from a legacy `eth_accounts` and `endowment:permitted-chains` permission.
+ * @param options.requestPermissionsForOrigin - A hook that requests CAIP-25 permissions for the origin.
+ * @returns Nothing.
+ */
+async function requestPermissionsImplementation(req, res, _next, end, { getAccounts, requestPermissionsForOrigin, getCaip25PermissionFromLegacyPermissionsForOrigin, }) {
+    const { params } = req;
+    if (!Array.isArray(params) || !(0, controller_utils_1.isPlainObject)(params[0])) {
+        return end((0, permission_controller_1.invalidParams)({ data: { request: req } }));
+    }
+    let [requestedPermissions] = params;
+    delete requestedPermissions[chain_agnostic_permission_1.Caip25EndowmentPermissionName];
+    const caip25EquivalentPermissions = (0, lodash_1.pick)(requestedPermissions, [
+        types_1.RestrictedMethods.EthAccounts,
+        types_1.EndowmentTypes.PermittedChains,
+    ]);
+    delete requestedPermissions[types_1.RestrictedMethods.EthAccounts];
+    delete requestedPermissions[types_1.EndowmentTypes.PermittedChains];
+    const hasCaip25EquivalentPermissions = Object.keys(caip25EquivalentPermissions).length > 0;
+    if (hasCaip25EquivalentPermissions) {
+        const caip25Permission = getCaip25PermissionFromLegacyPermissionsForOrigin(caip25EquivalentPermissions);
+        requestedPermissions = { ...requestedPermissions, ...caip25Permission };
+    }
+    let grantedPermissions = {};
+    const [frozenGrantedPermissions] = await requestPermissionsForOrigin(requestedPermissions);
+    grantedPermissions = { ...frozenGrantedPermissions };
+    if (hasCaip25EquivalentPermissions) {
+        const caip25Endowment = grantedPermissions[chain_agnostic_permission_1.Caip25EndowmentPermissionName];
+        if (!caip25Endowment) {
+            throw new Error(`could not find ${chain_agnostic_permission_1.Caip25EndowmentPermissionName} permission.`);
+        }
+        const caip25CaveatValue = caip25Endowment.caveats?.find(({ type }) => type === chain_agnostic_permission_1.Caip25CaveatType)?.value;
+        if (!caip25CaveatValue) {
+            throw new Error(`could not find ${chain_agnostic_permission_1.Caip25CaveatType} in granted ${chain_agnostic_permission_1.Caip25EndowmentPermissionName} permission.`);
+        }
+        delete grantedPermissions[chain_agnostic_permission_1.Caip25EndowmentPermissionName];
+        // We cannot derive correct eth_accounts value directly from the CAIP-25 permission
+        // because the accounts will not be in order of lastSelected
+        const ethAccounts = getAccounts();
+        grantedPermissions[types_1.RestrictedMethods.EthAccounts] = {
+            ...caip25Endowment,
+            parentCapability: types_1.RestrictedMethods.EthAccounts,
+            caveats: [
+                {
+                    type: types_1.CaveatTypes.RestrictReturnedAccounts,
+                    value: ethAccounts,
+                },
+            ],
+        };
+        const ethChainIds = (0, chain_agnostic_permission_1.getPermittedEthChainIds)(caip25CaveatValue);
+        if (ethChainIds.length > 0) {
+            grantedPermissions[types_1.EndowmentTypes.PermittedChains] = {
+                ...caip25Endowment,
+                parentCapability: types_1.EndowmentTypes.PermittedChains,
+                caveats: [
+                    {
+                        type: types_1.CaveatTypes.RestrictNetworkSwitching,
+                        value: ethChainIds,
+                    },
+                ],
+            };
+        }
+    }
+    res.result = Object.values(grantedPermissions).filter((permission) => permission !== undefined);
+    return end();
+}
+//# sourceMappingURL=wallet-requestPermissions.cjs.map

package/dist/wallet-requestPermissions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-requestPermissions.cjs","sourceRoot":"","sources":["../src/wallet-requestPermissions.ts"],"names":[],"mappings":";;;AACA,mFAI6C;AAC7C,iEAA2D;AAK3D,2EASyC;AAMzC,mCAA8B;AAE9B,uCAAyE;AAE5D,QAAA,yBAAyB,GAAG;IACvC,WAAW,EAAE,CAAC,mCAAW,CAAC,kBAAkB,CAAC;IAC7C,cAAc,EAAE,gCAAgC;IAChD,SAAS,EAAE;QACT,WAAW,EAAE,IAAI;QACjB,2BAA2B,EAAE,IAAI;QACjC,iDAAiD,EAAE,IAAI;KACxD;CACF,CAAC;AAWF;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,gCAAgC,CAC7C,GAAgE,EAChE,GAAiC,EACjC,KAAqC,EACrC,GAA6B,EAC7B,EACE,WAAW,EACX,2BAA2B,EAC3B,iDAAiD,GASlD;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,gCAAa,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACvD,OAAO,GAAG,CAAC,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;KACvD;IAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,MAAM,CAAC;IACpC,OAAO,oBAAoB,CAAC,yDAA6B,CAAC,CAAC;IAE3D,MAAM,2BAA2B,GAE7B,IAAA,aAAI,EAAC,oBAAoB,EAAE;QAC7B,yBAAiB,CAAC,WAAW;QAC7B,sBAAc,CAAC,eAAe;KAC/B,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC,yBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3D,OAAO,oBAAoB,CAAC,sBAAc,CAAC,eAAe,CAAC,CAAC;IAE5D,MAAM,8BAA8B,GAClC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAEtD,IAAI,8BAA8B,EAAE;QAClC,MAAM,gBAAgB,GAAG,iDAAiD,CACxE,2BAA2B,CAC5B,CAAC;QACF,oBAAoB,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,gBAAgB,EAAE,CAAC;KACzE;IAED,IAAI,kBAAkB,GAAuB,EAAE,CAAC;IAEhD,MAAM,CAAC,wBAAwB,CAAC,GAC9B,MAAM,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;IAE1D,kBAAkB,GAAG,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAErD,IAAI,8BAA8B,EAAE;QAClC,MAAM,eAAe,GAAG,kBAAkB,CAAC,yDAA6B,CAAC,CAAC;QAE1E,IAAI,CAAC,eAAe,EAAE;YACpB,MAAM,IAAI,KAAK,CACb,kBAAkB,yDAA6B,cAAc,CAC9D,CAAC;SACH;QAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CACrD,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,4CAAgB,CACxC,EAAE,KAAsC,CAAC;QAC1C,IAAI,CAAC,iBAAiB,EAAE;YACtB,MAAM,IAAI,KAAK,CACb,kBAAkB,4CAAgB,eAAe,yDAA6B,cAAc,CAC7F,CAAC;SACH;QAED,OAAO,kBAAkB,CAAC,yDAA6B,CAAC,CAAC;QACzD,mFAAmF;QACnF,4DAA4D;QAC5D,MAAM,WAAW,GAAG,WAAW,EAAE,CAAC;QAElC,kBAAkB,CAAC,yBAAiB,CAAC,WAAW,CAAC,GAAG;YAClD,GAAG,eAAe;YAClB,gBAAgB,EAAE,yBAAiB,CAAC,WAAW;YAC/C,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,mBAAW,CAAC,wBAAwB;oBAC1C,KAAK,EAAE,WAAW;iBACnB;aACF;SACF,CAAC;QAEF,MAAM,WAAW,GAAG,IAAA,mDAAuB,EAAC,iBAAiB,CAAC,CAAC;QAE/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1B,kBAAkB,CAAC,sBAAc,CAAC,eAAe,CAAC,GAAG;gBACnD,GAAG,eAAe;gBAClB,gBAAgB,EAAE,sBAAc,CAAC,eAAe;gBAChD,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,mBAAW,CAAC,wBAAwB;wBAC1C,KAAK,EAAE,WAAW;qBACnB;iBACF;aACF,CAAC;SACH;KACF;IAED,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CACnD,CACE,UAAqE,EACR,EAAE,CAC/D,UAAU,KAAK,SAAS,CAC3B,CAAC;IACF,OAAO,GAAG,EAAE,CAAC;AACf,CAAC","sourcesContent":["import type { Caip25CaveatValue } from '@metamask/chain-agnostic-permission';\nimport {\n  Caip25CaveatType,\n  Caip25EndowmentPermissionName,\n  getPermittedEthChainIds,\n} from '@metamask/chain-agnostic-permission';\nimport { isPlainObject } from '@metamask/controller-utils';\nimport type {\n  AsyncJsonRpcEngineNextCallback,\n  JsonRpcEngineEndCallback,\n} from '@metamask/json-rpc-engine';\nimport {\n  type Caveat,\n  type CaveatSpecificationConstraint,\n  invalidParams,\n  MethodNames,\n  type PermissionController,\n  type PermissionSpecificationConstraint,\n  type RequestedPermissions,\n  type ValidPermission,\n} from '@metamask/permission-controller';\nimport type {\n  Json,\n  JsonRpcRequest,\n  PendingJsonRpcResponse,\n} from '@metamask/utils';\nimport { pick } from 'lodash';\n\nimport { CaveatTypes, EndowmentTypes, RestrictedMethods } from './types';\n\nexport const requestPermissionsHandler = {\n  methodNames: [MethodNames.RequestPermissions],\n  implementation: requestPermissionsImplementation,\n  hookNames: {\n    getAccounts: true,\n    requestPermissionsForOrigin: true,\n    getCaip25PermissionFromLegacyPermissionsForOrigin: true,\n  },\n};\n\ntype AbstractPermissionController = PermissionController<\n  PermissionSpecificationConstraint,\n  CaveatSpecificationConstraint\n>;\n\ntype GrantedPermissions = Awaited<\n  ReturnType<AbstractPermissionController['requestPermissions']>\n>[0];\n\n/**\n * Request Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_requestPermissions` RPC method.\n * The request object is expected to contain a CAIP-25 endowment permission.\n *\n * @param req - The JsonRpcEngine request\n * @param res - The JsonRpcEngine result object\n * @param _next - JsonRpcEngine next() callback - unused\n * @param end - JsonRpcEngine end() callback\n * @param options - Method hooks passed to the method implementation\n * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.\n * @param options.getCaip25PermissionFromLegacyPermissionsForOrigin - A hook that returns a CAIP-25 permission from a legacy `eth_accounts` and `endowment:permitted-chains` permission.\n * @param options.requestPermissionsForOrigin - A hook that requests CAIP-25 permissions for the origin.\n * @returns Nothing.\n */\nasync function requestPermissionsImplementation(\n  req: JsonRpcRequest<[RequestedPermissions]> & { origin: string },\n  res: PendingJsonRpcResponse<Json>,\n  _next: AsyncJsonRpcEngineNextCallback,\n  end: JsonRpcEngineEndCallback,\n  {\n    getAccounts,\n    requestPermissionsForOrigin,\n    getCaip25PermissionFromLegacyPermissionsForOrigin,\n  }: {\n    getAccounts: () => string[];\n    requestPermissionsForOrigin: (\n      requestedPermissions: RequestedPermissions,\n    ) => Promise<[GrantedPermissions]>;\n    getCaip25PermissionFromLegacyPermissionsForOrigin: (\n      requestedPermissions?: RequestedPermissions,\n    ) => RequestedPermissions;\n  },\n) {\n  const { params } = req;\n\n  if (!Array.isArray(params) || !isPlainObject(params[0])) {\n    return end(invalidParams({ data: { request: req } }));\n  }\n\n  let [requestedPermissions] = params;\n  delete requestedPermissions[Caip25EndowmentPermissionName];\n\n  const caip25EquivalentPermissions: Partial<\n    Pick<RequestedPermissions, 'eth_accounts' | 'endowment:permitted-chains'>\n  > = pick(requestedPermissions, [\n    RestrictedMethods.EthAccounts,\n    EndowmentTypes.PermittedChains,\n  ]);\n  delete requestedPermissions[RestrictedMethods.EthAccounts];\n  delete requestedPermissions[EndowmentTypes.PermittedChains];\n\n  const hasCaip25EquivalentPermissions =\n    Object.keys(caip25EquivalentPermissions).length > 0;\n\n  if (hasCaip25EquivalentPermissions) {\n    const caip25Permission = getCaip25PermissionFromLegacyPermissionsForOrigin(\n      caip25EquivalentPermissions,\n    );\n    requestedPermissions = { ...requestedPermissions, ...caip25Permission };\n  }\n\n  let grantedPermissions: GrantedPermissions = {};\n\n  const [frozenGrantedPermissions] =\n    await requestPermissionsForOrigin(requestedPermissions);\n\n  grantedPermissions = { ...frozenGrantedPermissions };\n\n  if (hasCaip25EquivalentPermissions) {\n    const caip25Endowment = grantedPermissions[Caip25EndowmentPermissionName];\n\n    if (!caip25Endowment) {\n      throw new Error(\n        `could not find ${Caip25EndowmentPermissionName} permission.`,\n      );\n    }\n\n    const caip25CaveatValue = caip25Endowment.caveats?.find(\n      ({ type }) => type === Caip25CaveatType,\n    )?.value as Caip25CaveatValue | undefined;\n    if (!caip25CaveatValue) {\n      throw new Error(\n        `could not find ${Caip25CaveatType} in granted ${Caip25EndowmentPermissionName} permission.`,\n      );\n    }\n\n    delete grantedPermissions[Caip25EndowmentPermissionName];\n    // We cannot derive correct eth_accounts value directly from the CAIP-25 permission\n    // because the accounts will not be in order of lastSelected\n    const ethAccounts = getAccounts();\n\n    grantedPermissions[RestrictedMethods.EthAccounts] = {\n      ...caip25Endowment,\n      parentCapability: RestrictedMethods.EthAccounts,\n      caveats: [\n        {\n          type: CaveatTypes.RestrictReturnedAccounts,\n          value: ethAccounts,\n        },\n      ],\n    };\n\n    const ethChainIds = getPermittedEthChainIds(caip25CaveatValue);\n\n    if (ethChainIds.length > 0) {\n      grantedPermissions[EndowmentTypes.PermittedChains] = {\n        ...caip25Endowment,\n        parentCapability: EndowmentTypes.PermittedChains,\n        caveats: [\n          {\n            type: CaveatTypes.RestrictNetworkSwitching,\n            value: ethChainIds,\n          },\n        ],\n      };\n    }\n  }\n\n  res.result = Object.values(grantedPermissions).filter(\n    (\n      permission: ValidPermission<string, Caveat<string, Json>> | undefined,\n    ): permission is ValidPermission<string, Caveat<string, Json>> =>\n      permission !== undefined,\n  );\n  return end();\n}\n"]}

package/dist/wallet-requestPermissions.d.cts

@@ -0,0 +1,37 @@
+import type { AsyncJsonRpcEngineNextCallback, JsonRpcEngineEndCallback } from "@metamask/json-rpc-engine";
+import { type CaveatSpecificationConstraint, MethodNames, type PermissionController, type PermissionSpecificationConstraint, type RequestedPermissions } from "@metamask/permission-controller";
+import type { Json, JsonRpcRequest, PendingJsonRpcResponse } from "@metamask/utils";
+export declare const requestPermissionsHandler: {
+    methodNames: MethodNames[];
+    implementation: typeof requestPermissionsImplementation;
+    hookNames: {
+        getAccounts: boolean;
+        requestPermissionsForOrigin: boolean;
+        getCaip25PermissionFromLegacyPermissionsForOrigin: boolean;
+    };
+};
+type AbstractPermissionController = PermissionController<PermissionSpecificationConstraint, CaveatSpecificationConstraint>;
+type GrantedPermissions = Awaited<ReturnType<AbstractPermissionController['requestPermissions']>>[0];
+/**
+ * Request Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_requestPermissions` RPC method.
+ * The request object is expected to contain a CAIP-25 endowment permission.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @param options.getCaip25PermissionFromLegacyPermissionsForOrigin - A hook that returns a CAIP-25 permission from a legacy `eth_accounts` and `endowment:permitted-chains` permission.
+ * @param options.requestPermissionsForOrigin - A hook that requests CAIP-25 permissions for the origin.
+ * @returns Nothing.
+ */
+declare function requestPermissionsImplementation(req: JsonRpcRequest<[RequestedPermissions]> & {
+    origin: string;
+}, res: PendingJsonRpcResponse<Json>, _next: AsyncJsonRpcEngineNextCallback, end: JsonRpcEngineEndCallback, { getAccounts, requestPermissionsForOrigin, getCaip25PermissionFromLegacyPermissionsForOrigin, }: {
+    getAccounts: () => string[];
+    requestPermissionsForOrigin: (requestedPermissions: RequestedPermissions) => Promise<[GrantedPermissions]>;
+    getCaip25PermissionFromLegacyPermissionsForOrigin: (requestedPermissions?: RequestedPermissions) => RequestedPermissions;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=wallet-requestPermissions.d.cts.map

package/dist/wallet-requestPermissions.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-requestPermissions.d.cts","sourceRoot":"","sources":["../src/wallet-requestPermissions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,kCAAkC;AACnC,OAAO,EAEL,KAAK,6BAA6B,EAElC,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,iCAAiC,EACtC,KAAK,oBAAoB,EAE1B,wCAAwC;AACzC,OAAO,KAAK,EACV,IAAI,EACJ,cAAc,EACd,sBAAsB,EACvB,wBAAwB;AAKzB,eAAO,MAAM,yBAAyB;;;;;;;;CAQrC,CAAC;AAEF,KAAK,4BAA4B,GAAG,oBAAoB,CACtD,iCAAiC,EACjC,6BAA6B,CAC9B,CAAC;AAEF,KAAK,kBAAkB,GAAG,OAAO,CAC/B,UAAU,CAAC,4BAA4B,CAAC,oBAAoB,CAAC,CAAC,CAC/D,CAAC,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;;;GAaG;AACH,iBAAe,gCAAgC,CAC7C,GAAG,EAAE,cAAc,CAAC,CAAC,oBAAoB,CAAC,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAChE,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,EACjC,KAAK,EAAE,8BAA8B,EACrC,GAAG,EAAE,wBAAwB,EAC7B,EACE,WAAW,EACX,2BAA2B,EAC3B,iDAAiD,GAClD,EAAE;IACD,WAAW,EAAE,MAAM,MAAM,EAAE,CAAC;IAC5B,2BAA2B,EAAE,CAC3B,oBAAoB,EAAE,oBAAoB,KACvC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnC,iDAAiD,EAAE,CACjD,oBAAoB,CAAC,EAAE,oBAAoB,KACxC,oBAAoB,CAAC;CAC3B,iBA8FF"}

package/dist/wallet-requestPermissions.d.mts

@@ -0,0 +1,37 @@
+import type { AsyncJsonRpcEngineNextCallback, JsonRpcEngineEndCallback } from "@metamask/json-rpc-engine";
+import { type CaveatSpecificationConstraint, MethodNames, type PermissionController, type PermissionSpecificationConstraint, type RequestedPermissions } from "@metamask/permission-controller";
+import type { Json, JsonRpcRequest, PendingJsonRpcResponse } from "@metamask/utils";
+export declare const requestPermissionsHandler: {
+    methodNames: MethodNames[];
+    implementation: typeof requestPermissionsImplementation;
+    hookNames: {
+        getAccounts: boolean;
+        requestPermissionsForOrigin: boolean;
+        getCaip25PermissionFromLegacyPermissionsForOrigin: boolean;
+    };
+};
+type AbstractPermissionController = PermissionController<PermissionSpecificationConstraint, CaveatSpecificationConstraint>;
+type GrantedPermissions = Awaited<ReturnType<AbstractPermissionController['requestPermissions']>>[0];
+/**
+ * Request Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_requestPermissions` RPC method.
+ * The request object is expected to contain a CAIP-25 endowment permission.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @param options.getCaip25PermissionFromLegacyPermissionsForOrigin - A hook that returns a CAIP-25 permission from a legacy `eth_accounts` and `endowment:permitted-chains` permission.
+ * @param options.requestPermissionsForOrigin - A hook that requests CAIP-25 permissions for the origin.
+ * @returns Nothing.
+ */
+declare function requestPermissionsImplementation(req: JsonRpcRequest<[RequestedPermissions]> & {
+    origin: string;
+}, res: PendingJsonRpcResponse<Json>, _next: AsyncJsonRpcEngineNextCallback, end: JsonRpcEngineEndCallback, { getAccounts, requestPermissionsForOrigin, getCaip25PermissionFromLegacyPermissionsForOrigin, }: {
+    getAccounts: () => string[];
+    requestPermissionsForOrigin: (requestedPermissions: RequestedPermissions) => Promise<[GrantedPermissions]>;
+    getCaip25PermissionFromLegacyPermissionsForOrigin: (requestedPermissions?: RequestedPermissions) => RequestedPermissions;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=wallet-requestPermissions.d.mts.map

package/dist/wallet-requestPermissions.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-requestPermissions.d.mts","sourceRoot":"","sources":["../src/wallet-requestPermissions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,kCAAkC;AACnC,OAAO,EAEL,KAAK,6BAA6B,EAElC,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,iCAAiC,EACtC,KAAK,oBAAoB,EAE1B,wCAAwC;AACzC,OAAO,KAAK,EACV,IAAI,EACJ,cAAc,EACd,sBAAsB,EACvB,wBAAwB;AAKzB,eAAO,MAAM,yBAAyB;;;;;;;;CAQrC,CAAC;AAEF,KAAK,4BAA4B,GAAG,oBAAoB,CACtD,iCAAiC,EACjC,6BAA6B,CAC9B,CAAC;AAEF,KAAK,kBAAkB,GAAG,OAAO,CAC/B,UAAU,CAAC,4BAA4B,CAAC,oBAAoB,CAAC,CAAC,CAC/D,CAAC,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;;;GAaG;AACH,iBAAe,gCAAgC,CAC7C,GAAG,EAAE,cAAc,CAAC,CAAC,oBAAoB,CAAC,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAChE,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,EACjC,KAAK,EAAE,8BAA8B,EACrC,GAAG,EAAE,wBAAwB,EAC7B,EACE,WAAW,EACX,2BAA2B,EAC3B,iDAAiD,GAClD,EAAE;IACD,WAAW,EAAE,MAAM,MAAM,EAAE,CAAC;IAC5B,2BAA2B,EAAE,CAC3B,oBAAoB,EAAE,oBAAoB,KACvC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnC,iDAAiD,EAAE,CACjD,oBAAoB,CAAC,EAAE,oBAAoB,KACxC,oBAAoB,CAAC;CAC3B,iBA8FF"}

package/dist/wallet-requestPermissions.mjs

@@ -0,0 +1,91 @@
+import { Caip25CaveatType, Caip25EndowmentPermissionName, getPermittedEthChainIds } from "@metamask/chain-agnostic-permission";
+import { isPlainObject } from "@metamask/controller-utils";
+import { invalidParams, MethodNames } from "@metamask/permission-controller";
+import $lodash from "lodash";
+const { pick } = $lodash;
+import { CaveatTypes, EndowmentTypes, RestrictedMethods } from "./types.mjs";
+export const requestPermissionsHandler = {
+    methodNames: [MethodNames.RequestPermissions],
+    implementation: requestPermissionsImplementation,
+    hookNames: {
+        getAccounts: true,
+        requestPermissionsForOrigin: true,
+        getCaip25PermissionFromLegacyPermissionsForOrigin: true,
+    },
+};
+/**
+ * Request Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_requestPermissions` RPC method.
+ * The request object is expected to contain a CAIP-25 endowment permission.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.
+ * @param options.getCaip25PermissionFromLegacyPermissionsForOrigin - A hook that returns a CAIP-25 permission from a legacy `eth_accounts` and `endowment:permitted-chains` permission.
+ * @param options.requestPermissionsForOrigin - A hook that requests CAIP-25 permissions for the origin.
+ * @returns Nothing.
+ */
+async function requestPermissionsImplementation(req, res, _next, end, { getAccounts, requestPermissionsForOrigin, getCaip25PermissionFromLegacyPermissionsForOrigin, }) {
+    const { params } = req;
+    if (!Array.isArray(params) || !isPlainObject(params[0])) {
+        return end(invalidParams({ data: { request: req } }));
+    }
+    let [requestedPermissions] = params;
+    delete requestedPermissions[Caip25EndowmentPermissionName];
+    const caip25EquivalentPermissions = pick(requestedPermissions, [
+        RestrictedMethods.EthAccounts,
+        EndowmentTypes.PermittedChains,
+    ]);
+    delete requestedPermissions[RestrictedMethods.EthAccounts];
+    delete requestedPermissions[EndowmentTypes.PermittedChains];
+    const hasCaip25EquivalentPermissions = Object.keys(caip25EquivalentPermissions).length > 0;
+    if (hasCaip25EquivalentPermissions) {
+        const caip25Permission = getCaip25PermissionFromLegacyPermissionsForOrigin(caip25EquivalentPermissions);
+        requestedPermissions = { ...requestedPermissions, ...caip25Permission };
+    }
+    let grantedPermissions = {};
+    const [frozenGrantedPermissions] = await requestPermissionsForOrigin(requestedPermissions);
+    grantedPermissions = { ...frozenGrantedPermissions };
+    if (hasCaip25EquivalentPermissions) {
+        const caip25Endowment = grantedPermissions[Caip25EndowmentPermissionName];
+        if (!caip25Endowment) {
+            throw new Error(`could not find ${Caip25EndowmentPermissionName} permission.`);
+        }
+        const caip25CaveatValue = caip25Endowment.caveats?.find(({ type }) => type === Caip25CaveatType)?.value;
+        if (!caip25CaveatValue) {
+            throw new Error(`could not find ${Caip25CaveatType} in granted ${Caip25EndowmentPermissionName} permission.`);
+        }
+        delete grantedPermissions[Caip25EndowmentPermissionName];
+        // We cannot derive correct eth_accounts value directly from the CAIP-25 permission
+        // because the accounts will not be in order of lastSelected
+        const ethAccounts = getAccounts();
+        grantedPermissions[RestrictedMethods.EthAccounts] = {
+            ...caip25Endowment,
+            parentCapability: RestrictedMethods.EthAccounts,
+            caveats: [
+                {
+                    type: CaveatTypes.RestrictReturnedAccounts,
+                    value: ethAccounts,
+                },
+            ],
+        };
+        const ethChainIds = getPermittedEthChainIds(caip25CaveatValue);
+        if (ethChainIds.length > 0) {
+            grantedPermissions[EndowmentTypes.PermittedChains] = {
+                ...caip25Endowment,
+                parentCapability: EndowmentTypes.PermittedChains,
+                caveats: [
+                    {
+                        type: CaveatTypes.RestrictNetworkSwitching,
+                        value: ethChainIds,
+                    },
+                ],
+            };
+        }
+    }
+    res.result = Object.values(grantedPermissions).filter((permission) => permission !== undefined);
+    return end();
+}
+//# sourceMappingURL=wallet-requestPermissions.mjs.map

package/dist/wallet-requestPermissions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-requestPermissions.mjs","sourceRoot":"","sources":["../src/wallet-requestPermissions.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,uBAAuB,EACxB,4CAA4C;AAC7C,OAAO,EAAE,aAAa,EAAE,mCAAmC;AAK3D,OAAO,EAGL,aAAa,EACb,WAAW,EAKZ,wCAAwC;;;AAQzC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAgB;AAEzE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,WAAW,EAAE,CAAC,WAAW,CAAC,kBAAkB,CAAC;IAC7C,cAAc,EAAE,gCAAgC;IAChD,SAAS,EAAE;QACT,WAAW,EAAE,IAAI;QACjB,2BAA2B,EAAE,IAAI;QACjC,iDAAiD,EAAE,IAAI;KACxD;CACF,CAAC;AAWF;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,gCAAgC,CAC7C,GAAgE,EAChE,GAAiC,EACjC,KAAqC,EACrC,GAA6B,EAC7B,EACE,WAAW,EACX,2BAA2B,EAC3B,iDAAiD,GASlD;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACvD,OAAO,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;KACvD;IAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,MAAM,CAAC;IACpC,OAAO,oBAAoB,CAAC,6BAA6B,CAAC,CAAC;IAE3D,MAAM,2BAA2B,GAE7B,IAAI,CAAC,oBAAoB,EAAE;QAC7B,iBAAiB,CAAC,WAAW;QAC7B,cAAc,CAAC,eAAe;KAC/B,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3D,OAAO,oBAAoB,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAE5D,MAAM,8BAA8B,GAClC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAEtD,IAAI,8BAA8B,EAAE;QAClC,MAAM,gBAAgB,GAAG,iDAAiD,CACxE,2BAA2B,CAC5B,CAAC;QACF,oBAAoB,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,gBAAgB,EAAE,CAAC;KACzE;IAED,IAAI,kBAAkB,GAAuB,EAAE,CAAC;IAEhD,MAAM,CAAC,wBAAwB,CAAC,GAC9B,MAAM,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;IAE1D,kBAAkB,GAAG,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAErD,IAAI,8BAA8B,EAAE;QAClC,MAAM,eAAe,GAAG,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;QAE1E,IAAI,CAAC,eAAe,EAAE;YACpB,MAAM,IAAI,KAAK,CACb,kBAAkB,6BAA6B,cAAc,CAC9D,CAAC;SACH;QAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CACrD,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,gBAAgB,CACxC,EAAE,KAAsC,CAAC;QAC1C,IAAI,CAAC,iBAAiB,EAAE;YACtB,MAAM,IAAI,KAAK,CACb,kBAAkB,gBAAgB,eAAe,6BAA6B,cAAc,CAC7F,CAAC;SACH;QAED,OAAO,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;QACzD,mFAAmF;QACnF,4DAA4D;QAC5D,MAAM,WAAW,GAAG,WAAW,EAAE,CAAC;QAElC,kBAAkB,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAG;YAClD,GAAG,eAAe;YAClB,gBAAgB,EAAE,iBAAiB,CAAC,WAAW;YAC/C,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,WAAW,CAAC,wBAAwB;oBAC1C,KAAK,EAAE,WAAW;iBACnB;aACF;SACF,CAAC;QAEF,MAAM,WAAW,GAAG,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAE/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1B,kBAAkB,CAAC,cAAc,CAAC,eAAe,CAAC,GAAG;gBACnD,GAAG,eAAe;gBAClB,gBAAgB,EAAE,cAAc,CAAC,eAAe;gBAChD,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,WAAW,CAAC,wBAAwB;wBAC1C,KAAK,EAAE,WAAW;qBACnB;iBACF;aACF,CAAC;SACH;KACF;IAED,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CACnD,CACE,UAAqE,EACR,EAAE,CAC/D,UAAU,KAAK,SAAS,CAC3B,CAAC;IACF,OAAO,GAAG,EAAE,CAAC;AACf,CAAC","sourcesContent":["import type { Caip25CaveatValue } from '@metamask/chain-agnostic-permission';\nimport {\n  Caip25CaveatType,\n  Caip25EndowmentPermissionName,\n  getPermittedEthChainIds,\n} from '@metamask/chain-agnostic-permission';\nimport { isPlainObject } from '@metamask/controller-utils';\nimport type {\n  AsyncJsonRpcEngineNextCallback,\n  JsonRpcEngineEndCallback,\n} from '@metamask/json-rpc-engine';\nimport {\n  type Caveat,\n  type CaveatSpecificationConstraint,\n  invalidParams,\n  MethodNames,\n  type PermissionController,\n  type PermissionSpecificationConstraint,\n  type RequestedPermissions,\n  type ValidPermission,\n} from '@metamask/permission-controller';\nimport type {\n  Json,\n  JsonRpcRequest,\n  PendingJsonRpcResponse,\n} from '@metamask/utils';\nimport { pick } from 'lodash';\n\nimport { CaveatTypes, EndowmentTypes, RestrictedMethods } from './types';\n\nexport const requestPermissionsHandler = {\n  methodNames: [MethodNames.RequestPermissions],\n  implementation: requestPermissionsImplementation,\n  hookNames: {\n    getAccounts: true,\n    requestPermissionsForOrigin: true,\n    getCaip25PermissionFromLegacyPermissionsForOrigin: true,\n  },\n};\n\ntype AbstractPermissionController = PermissionController<\n  PermissionSpecificationConstraint,\n  CaveatSpecificationConstraint\n>;\n\ntype GrantedPermissions = Awaited<\n  ReturnType<AbstractPermissionController['requestPermissions']>\n>[0];\n\n/**\n * Request Permissions implementation to be used in JsonRpcEngine middleware, specifically for `wallet_requestPermissions` RPC method.\n * The request object is expected to contain a CAIP-25 endowment permission.\n *\n * @param req - The JsonRpcEngine request\n * @param res - The JsonRpcEngine result object\n * @param _next - JsonRpcEngine next() callback - unused\n * @param end - JsonRpcEngine end() callback\n * @param options - Method hooks passed to the method implementation\n * @param options.getAccounts - A hook that returns the permitted eth accounts for the origin sorted by lastSelected.\n * @param options.getCaip25PermissionFromLegacyPermissionsForOrigin - A hook that returns a CAIP-25 permission from a legacy `eth_accounts` and `endowment:permitted-chains` permission.\n * @param options.requestPermissionsForOrigin - A hook that requests CAIP-25 permissions for the origin.\n * @returns Nothing.\n */\nasync function requestPermissionsImplementation(\n  req: JsonRpcRequest<[RequestedPermissions]> & { origin: string },\n  res: PendingJsonRpcResponse<Json>,\n  _next: AsyncJsonRpcEngineNextCallback,\n  end: JsonRpcEngineEndCallback,\n  {\n    getAccounts,\n    requestPermissionsForOrigin,\n    getCaip25PermissionFromLegacyPermissionsForOrigin,\n  }: {\n    getAccounts: () => string[];\n    requestPermissionsForOrigin: (\n      requestedPermissions: RequestedPermissions,\n    ) => Promise<[GrantedPermissions]>;\n    getCaip25PermissionFromLegacyPermissionsForOrigin: (\n      requestedPermissions?: RequestedPermissions,\n    ) => RequestedPermissions;\n  },\n) {\n  const { params } = req;\n\n  if (!Array.isArray(params) || !isPlainObject(params[0])) {\n    return end(invalidParams({ data: { request: req } }));\n  }\n\n  let [requestedPermissions] = params;\n  delete requestedPermissions[Caip25EndowmentPermissionName];\n\n  const caip25EquivalentPermissions: Partial<\n    Pick<RequestedPermissions, 'eth_accounts' | 'endowment:permitted-chains'>\n  > = pick(requestedPermissions, [\n    RestrictedMethods.EthAccounts,\n    EndowmentTypes.PermittedChains,\n  ]);\n  delete requestedPermissions[RestrictedMethods.EthAccounts];\n  delete requestedPermissions[EndowmentTypes.PermittedChains];\n\n  const hasCaip25EquivalentPermissions =\n    Object.keys(caip25EquivalentPermissions).length > 0;\n\n  if (hasCaip25EquivalentPermissions) {\n    const caip25Permission = getCaip25PermissionFromLegacyPermissionsForOrigin(\n      caip25EquivalentPermissions,\n    );\n    requestedPermissions = { ...requestedPermissions, ...caip25Permission };\n  }\n\n  let grantedPermissions: GrantedPermissions = {};\n\n  const [frozenGrantedPermissions] =\n    await requestPermissionsForOrigin(requestedPermissions);\n\n  grantedPermissions = { ...frozenGrantedPermissions };\n\n  if (hasCaip25EquivalentPermissions) {\n    const caip25Endowment = grantedPermissions[Caip25EndowmentPermissionName];\n\n    if (!caip25Endowment) {\n      throw new Error(\n        `could not find ${Caip25EndowmentPermissionName} permission.`,\n      );\n    }\n\n    const caip25CaveatValue = caip25Endowment.caveats?.find(\n      ({ type }) => type === Caip25CaveatType,\n    )?.value as Caip25CaveatValue | undefined;\n    if (!caip25CaveatValue) {\n      throw new Error(\n        `could not find ${Caip25CaveatType} in granted ${Caip25EndowmentPermissionName} permission.`,\n      );\n    }\n\n    delete grantedPermissions[Caip25EndowmentPermissionName];\n    // We cannot derive correct eth_accounts value directly from the CAIP-25 permission\n    // because the accounts will not be in order of lastSelected\n    const ethAccounts = getAccounts();\n\n    grantedPermissions[RestrictedMethods.EthAccounts] = {\n      ...caip25Endowment,\n      parentCapability: RestrictedMethods.EthAccounts,\n      caveats: [\n        {\n          type: CaveatTypes.RestrictReturnedAccounts,\n          value: ethAccounts,\n        },\n      ],\n    };\n\n    const ethChainIds = getPermittedEthChainIds(caip25CaveatValue);\n\n    if (ethChainIds.length > 0) {\n      grantedPermissions[EndowmentTypes.PermittedChains] = {\n        ...caip25Endowment,\n        parentCapability: EndowmentTypes.PermittedChains,\n        caveats: [\n          {\n            type: CaveatTypes.RestrictNetworkSwitching,\n            value: ethChainIds,\n          },\n        ],\n      };\n    }\n  }\n\n  res.result = Object.values(grantedPermissions).filter(\n    (\n      permission: ValidPermission<string, Caveat<string, Json>> | undefined,\n    ): permission is ValidPermission<string, Caveat<string, Json>> =>\n      permission !== undefined,\n  );\n  return end();\n}\n"]}

package/dist/wallet-revokePermissions.cjs

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.revokePermissionsHandler = void 0;
+const chain_agnostic_permission_1 = require("@metamask/chain-agnostic-permission");
+const permission_controller_1 = require("@metamask/permission-controller");
+const utils_1 = require("@metamask/utils");
+const types_1 = require("./types.cjs");
+exports.revokePermissionsHandler = {
+    methodNames: [permission_controller_1.MethodNames.RevokePermissions],
+    implementation: revokePermissionsImplementation,
+    hookNames: {
+        revokePermissionsForOrigin: true,
+        updateCaveat: true,
+    },
+};
+/**
+ * Revoke Permissions implementation to be used in JsonRpcEngine middleware.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.revokePermissionsForOrigin - A hook that revokes given permission keys for an origin
+ * @returns Nothing.
+ */
+function revokePermissionsImplementation(req, res, _next, end, { revokePermissionsForOrigin, }) {
+    const { params } = req;
+    const param = params?.[0];
+    if (!param) {
+        return end((0, permission_controller_1.invalidParams)({ data: { request: req } }));
+    }
+    // For now, this API revokes the entire permission key
+    // even if caveats are specified.
+    const permissionKeys = Object.keys(param).filter((name) => name !== chain_agnostic_permission_1.Caip25EndowmentPermissionName);
+    if (!(0, utils_1.isNonEmptyArray)(permissionKeys)) {
+        return end((0, permission_controller_1.invalidParams)({ data: { request: req } }));
+    }
+    const caip25EquivalentPermissions = [
+        types_1.RestrictedMethods.EthAccounts,
+        types_1.EndowmentTypes.PermittedChains,
+    ];
+    const relevantPermissionKeys = permissionKeys.filter((name) => !caip25EquivalentPermissions.includes(name));
+    const shouldRevokeLegacyPermission = relevantPermissionKeys.length !== permissionKeys.length;
+    if (shouldRevokeLegacyPermission) {
+        relevantPermissionKeys.push(chain_agnostic_permission_1.Caip25EndowmentPermissionName);
+    }
+    revokePermissionsForOrigin(relevantPermissionKeys);
+    res.result = null;
+    return end();
+}
+//# sourceMappingURL=wallet-revokePermissions.cjs.map

package/dist/wallet-revokePermissions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-revokePermissions.cjs","sourceRoot":"","sources":["../src/wallet-revokePermissions.ts"],"names":[],"mappings":";;;AAAA,mFAAoF;AAKpF,2EAA6E;AAC7E,2CAKyB;AAEzB,uCAA4D;AAE/C,QAAA,wBAAwB,GAAG;IACtC,WAAW,EAAE,CAAC,mCAAW,CAAC,iBAAiB,CAAC;IAC5C,cAAc,EAAE,+BAA+B;IAC/C,SAAS,EAAE;QACT,0BAA0B,EAAE,IAAI;QAChC,YAAY,EAAE,IAAI;KACnB;CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,SAAS,+BAA+B,CACtC,GAA2B,EAC3B,GAAiC,EACjC,KAAqC,EACrC,GAA6B,EAC7B,EACE,0BAA0B,GAG3B;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEvB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE;QACV,OAAO,GAAG,CAAC,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;KACvD;IAED,sDAAsD;IACtD,iCAAiC;IACjC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,yDAA6B,CACjD,CAAC;IAEF,IAAI,CAAC,IAAA,uBAAe,EAAC,cAAc,CAAC,EAAE;QACpC,OAAO,GAAG,CAAC,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;KACvD;IAED,MAAM,2BAA2B,GAAa;QAC5C,yBAAiB,CAAC,WAAW;QAC7B,sBAAc,CAAC,eAAe;KAC/B,CAAC;IACF,MAAM,sBAAsB,GAAG,cAAc,CAAC,MAAM,CAClD,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC9D,CAAC;IAEF,MAAM,4BAA4B,GAChC,sBAAsB,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,CAAC;IAE1D,IAAI,4BAA4B,EAAE;QAChC,sBAAsB,CAAC,IAAI,CAAC,yDAA6B,CAAC,CAAC;KAC5D;IAED,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;IAEnD,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;IAElB,OAAO,GAAG,EAAE,CAAC;AACf,CAAC","sourcesContent":["import { Caip25EndowmentPermissionName } from '@metamask/chain-agnostic-permission';\nimport type {\n  AsyncJsonRpcEngineNextCallback,\n  JsonRpcEngineEndCallback,\n} from '@metamask/json-rpc-engine';\nimport { invalidParams, MethodNames } from '@metamask/permission-controller';\nimport {\n  isNonEmptyArray,\n  type Json,\n  type JsonRpcRequest,\n  type PendingJsonRpcResponse,\n} from '@metamask/utils';\n\nimport { EndowmentTypes, RestrictedMethods } from './types';\n\nexport const revokePermissionsHandler = {\n  methodNames: [MethodNames.RevokePermissions],\n  implementation: revokePermissionsImplementation,\n  hookNames: {\n    revokePermissionsForOrigin: true,\n    updateCaveat: true,\n  },\n};\n\n/**\n * Revoke Permissions implementation to be used in JsonRpcEngine middleware.\n *\n * @param req - The JsonRpcEngine request\n * @param res - The JsonRpcEngine result object\n * @param _next - JsonRpcEngine next() callback - unused\n * @param end - JsonRpcEngine end() callback\n * @param options - Method hooks passed to the method implementation\n * @param options.revokePermissionsForOrigin - A hook that revokes given permission keys for an origin\n * @returns Nothing.\n */\nfunction revokePermissionsImplementation(\n  req: JsonRpcRequest<Json[]>,\n  res: PendingJsonRpcResponse<Json>,\n  _next: AsyncJsonRpcEngineNextCallback,\n  end: JsonRpcEngineEndCallback,\n  {\n    revokePermissionsForOrigin,\n  }: {\n    revokePermissionsForOrigin: (permissionKeys: string[]) => void;\n  },\n) {\n  const { params } = req;\n\n  const param = params?.[0];\n\n  if (!param) {\n    return end(invalidParams({ data: { request: req } }));\n  }\n\n  // For now, this API revokes the entire permission key\n  // even if caveats are specified.\n  const permissionKeys = Object.keys(param).filter(\n    (name) => name !== Caip25EndowmentPermissionName,\n  );\n\n  if (!isNonEmptyArray(permissionKeys)) {\n    return end(invalidParams({ data: { request: req } }));\n  }\n\n  const caip25EquivalentPermissions: string[] = [\n    RestrictedMethods.EthAccounts,\n    EndowmentTypes.PermittedChains,\n  ];\n  const relevantPermissionKeys = permissionKeys.filter(\n    (name: string) => !caip25EquivalentPermissions.includes(name),\n  );\n\n  const shouldRevokeLegacyPermission =\n    relevantPermissionKeys.length !== permissionKeys.length;\n\n  if (shouldRevokeLegacyPermission) {\n    relevantPermissionKeys.push(Caip25EndowmentPermissionName);\n  }\n\n  revokePermissionsForOrigin(relevantPermissionKeys);\n\n  res.result = null;\n\n  return end();\n}\n"]}

package/dist/wallet-revokePermissions.d.cts

@@ -0,0 +1,27 @@
+import type { AsyncJsonRpcEngineNextCallback, JsonRpcEngineEndCallback } from "@metamask/json-rpc-engine";
+import { MethodNames } from "@metamask/permission-controller";
+import { type Json, type JsonRpcRequest, type PendingJsonRpcResponse } from "@metamask/utils";
+export declare const revokePermissionsHandler: {
+    methodNames: MethodNames[];
+    implementation: typeof revokePermissionsImplementation;
+    hookNames: {
+        revokePermissionsForOrigin: boolean;
+        updateCaveat: boolean;
+    };
+};
+/**
+ * Revoke Permissions implementation to be used in JsonRpcEngine middleware.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.revokePermissionsForOrigin - A hook that revokes given permission keys for an origin
+ * @returns Nothing.
+ */
+declare function revokePermissionsImplementation(req: JsonRpcRequest<Json[]>, res: PendingJsonRpcResponse<Json>, _next: AsyncJsonRpcEngineNextCallback, end: JsonRpcEngineEndCallback, { revokePermissionsForOrigin, }: {
+    revokePermissionsForOrigin: (permissionKeys: string[]) => void;
+}): void;
+export {};
+//# sourceMappingURL=wallet-revokePermissions.d.cts.map

package/dist/wallet-revokePermissions.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-revokePermissions.d.cts","sourceRoot":"","sources":["../src/wallet-revokePermissions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,kCAAkC;AACnC,OAAO,EAAiB,WAAW,EAAE,wCAAwC;AAC7E,OAAO,EAEL,KAAK,IAAI,EACT,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC5B,wBAAwB;AAIzB,eAAO,MAAM,wBAAwB;;;;;;;CAOpC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,iBAAS,+BAA+B,CACtC,GAAG,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,EAC3B,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,EACjC,KAAK,EAAE,8BAA8B,EACrC,GAAG,EAAE,wBAAwB,EAC7B,EACE,0BAA0B,GAC3B,EAAE;IACD,0BAA0B,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CAChE,QAwCF"}

package/dist/wallet-revokePermissions.d.mts

@@ -0,0 +1,27 @@
+import type { AsyncJsonRpcEngineNextCallback, JsonRpcEngineEndCallback } from "@metamask/json-rpc-engine";
+import { MethodNames } from "@metamask/permission-controller";
+import { type Json, type JsonRpcRequest, type PendingJsonRpcResponse } from "@metamask/utils";
+export declare const revokePermissionsHandler: {
+    methodNames: MethodNames[];
+    implementation: typeof revokePermissionsImplementation;
+    hookNames: {
+        revokePermissionsForOrigin: boolean;
+        updateCaveat: boolean;
+    };
+};
+/**
+ * Revoke Permissions implementation to be used in JsonRpcEngine middleware.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.revokePermissionsForOrigin - A hook that revokes given permission keys for an origin
+ * @returns Nothing.
+ */
+declare function revokePermissionsImplementation(req: JsonRpcRequest<Json[]>, res: PendingJsonRpcResponse<Json>, _next: AsyncJsonRpcEngineNextCallback, end: JsonRpcEngineEndCallback, { revokePermissionsForOrigin, }: {
+    revokePermissionsForOrigin: (permissionKeys: string[]) => void;
+}): void;
+export {};
+//# sourceMappingURL=wallet-revokePermissions.d.mts.map

package/dist/wallet-revokePermissions.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-revokePermissions.d.mts","sourceRoot":"","sources":["../src/wallet-revokePermissions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,kCAAkC;AACnC,OAAO,EAAiB,WAAW,EAAE,wCAAwC;AAC7E,OAAO,EAEL,KAAK,IAAI,EACT,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC5B,wBAAwB;AAIzB,eAAO,MAAM,wBAAwB;;;;;;;CAOpC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,iBAAS,+BAA+B,CACtC,GAAG,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,EAC3B,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,EACjC,KAAK,EAAE,8BAA8B,EACrC,GAAG,EAAE,wBAAwB,EAC7B,EACE,0BAA0B,GAC3B,EAAE;IACD,0BAA0B,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CAChE,QAwCF"}

package/dist/wallet-revokePermissions.mjs

@@ -0,0 +1,49 @@
+import { Caip25EndowmentPermissionName } from "@metamask/chain-agnostic-permission";
+import { invalidParams, MethodNames } from "@metamask/permission-controller";
+import { isNonEmptyArray } from "@metamask/utils";
+import { EndowmentTypes, RestrictedMethods } from "./types.mjs";
+export const revokePermissionsHandler = {
+    methodNames: [MethodNames.RevokePermissions],
+    implementation: revokePermissionsImplementation,
+    hookNames: {
+        revokePermissionsForOrigin: true,
+        updateCaveat: true,
+    },
+};
+/**
+ * Revoke Permissions implementation to be used in JsonRpcEngine middleware.
+ *
+ * @param req - The JsonRpcEngine request
+ * @param res - The JsonRpcEngine result object
+ * @param _next - JsonRpcEngine next() callback - unused
+ * @param end - JsonRpcEngine end() callback
+ * @param options - Method hooks passed to the method implementation
+ * @param options.revokePermissionsForOrigin - A hook that revokes given permission keys for an origin
+ * @returns Nothing.
+ */
+function revokePermissionsImplementation(req, res, _next, end, { revokePermissionsForOrigin, }) {
+    const { params } = req;
+    const param = params?.[0];
+    if (!param) {
+        return end(invalidParams({ data: { request: req } }));
+    }
+    // For now, this API revokes the entire permission key
+    // even if caveats are specified.
+    const permissionKeys = Object.keys(param).filter((name) => name !== Caip25EndowmentPermissionName);
+    if (!isNonEmptyArray(permissionKeys)) {
+        return end(invalidParams({ data: { request: req } }));
+    }
+    const caip25EquivalentPermissions = [
+        RestrictedMethods.EthAccounts,
+        EndowmentTypes.PermittedChains,
+    ];
+    const relevantPermissionKeys = permissionKeys.filter((name) => !caip25EquivalentPermissions.includes(name));
+    const shouldRevokeLegacyPermission = relevantPermissionKeys.length !== permissionKeys.length;
+    if (shouldRevokeLegacyPermission) {
+        relevantPermissionKeys.push(Caip25EndowmentPermissionName);
+    }
+    revokePermissionsForOrigin(relevantPermissionKeys);
+    res.result = null;
+    return end();
+}
+//# sourceMappingURL=wallet-revokePermissions.mjs.map

package/dist/wallet-revokePermissions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-revokePermissions.mjs","sourceRoot":"","sources":["../src/wallet-revokePermissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,4CAA4C;AAKpF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,wCAAwC;AAC7E,OAAO,EACL,eAAe,EAIhB,wBAAwB;AAEzB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAgB;AAE5D,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,WAAW,EAAE,CAAC,WAAW,CAAC,iBAAiB,CAAC;IAC5C,cAAc,EAAE,+BAA+B;IAC/C,SAAS,EAAE;QACT,0BAA0B,EAAE,IAAI;QAChC,YAAY,EAAE,IAAI;KACnB;CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,SAAS,+BAA+B,CACtC,GAA2B,EAC3B,GAAiC,EACjC,KAAqC,EACrC,GAA6B,EAC7B,EACE,0BAA0B,GAG3B;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEvB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE;QACV,OAAO,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;KACvD;IAED,sDAAsD;IACtD,iCAAiC;IACjC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,6BAA6B,CACjD,CAAC;IAEF,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE;QACpC,OAAO,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;KACvD;IAED,MAAM,2BAA2B,GAAa;QAC5C,iBAAiB,CAAC,WAAW;QAC7B,cAAc,CAAC,eAAe;KAC/B,CAAC;IACF,MAAM,sBAAsB,GAAG,cAAc,CAAC,MAAM,CAClD,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC9D,CAAC;IAEF,MAAM,4BAA4B,GAChC,sBAAsB,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,CAAC;IAE1D,IAAI,4BAA4B,EAAE;QAChC,sBAAsB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;KAC5D;IAED,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;IAEnD,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;IAElB,OAAO,GAAG,EAAE,CAAC;AACf,CAAC","sourcesContent":["import { Caip25EndowmentPermissionName } from '@metamask/chain-agnostic-permission';\nimport type {\n  AsyncJsonRpcEngineNextCallback,\n  JsonRpcEngineEndCallback,\n} from '@metamask/json-rpc-engine';\nimport { invalidParams, MethodNames } from '@metamask/permission-controller';\nimport {\n  isNonEmptyArray,\n  type Json,\n  type JsonRpcRequest,\n  type PendingJsonRpcResponse,\n} from '@metamask/utils';\n\nimport { EndowmentTypes, RestrictedMethods } from './types';\n\nexport const revokePermissionsHandler = {\n  methodNames: [MethodNames.RevokePermissions],\n  implementation: revokePermissionsImplementation,\n  hookNames: {\n    revokePermissionsForOrigin: true,\n    updateCaveat: true,\n  },\n};\n\n/**\n * Revoke Permissions implementation to be used in JsonRpcEngine middleware.\n *\n * @param req - The JsonRpcEngine request\n * @param res - The JsonRpcEngine result object\n * @param _next - JsonRpcEngine next() callback - unused\n * @param end - JsonRpcEngine end() callback\n * @param options - Method hooks passed to the method implementation\n * @param options.revokePermissionsForOrigin - A hook that revokes given permission keys for an origin\n * @returns Nothing.\n */\nfunction revokePermissionsImplementation(\n  req: JsonRpcRequest<Json[]>,\n  res: PendingJsonRpcResponse<Json>,\n  _next: AsyncJsonRpcEngineNextCallback,\n  end: JsonRpcEngineEndCallback,\n  {\n    revokePermissionsForOrigin,\n  }: {\n    revokePermissionsForOrigin: (permissionKeys: string[]) => void;\n  },\n) {\n  const { params } = req;\n\n  const param = params?.[0];\n\n  if (!param) {\n    return end(invalidParams({ data: { request: req } }));\n  }\n\n  // For now, this API revokes the entire permission key\n  // even if caveats are specified.\n  const permissionKeys = Object.keys(param).filter(\n    (name) => name !== Caip25EndowmentPermissionName,\n  );\n\n  if (!isNonEmptyArray(permissionKeys)) {\n    return end(invalidParams({ data: { request: req } }));\n  }\n\n  const caip25EquivalentPermissions: string[] = [\n    RestrictedMethods.EthAccounts,\n    EndowmentTypes.PermittedChains,\n  ];\n  const relevantPermissionKeys = permissionKeys.filter(\n    (name: string) => !caip25EquivalentPermissions.includes(name),\n  );\n\n  const shouldRevokeLegacyPermission =\n    relevantPermissionKeys.length !== permissionKeys.length;\n\n  if (shouldRevokeLegacyPermission) {\n    relevantPermissionKeys.push(Caip25EndowmentPermissionName);\n  }\n\n  revokePermissionsForOrigin(relevantPermissionKeys);\n\n  res.result = null;\n\n  return end();\n}\n"]}

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "@metamask-previews/eip1193-permission-middleware",
+  "version": "0.1.0-preview-b69c669",
+  "description": "Implements the JSON-RPC methods for managing permissions as referenced in EIP-2255 and MIP-2 and inspired by MIP-5, but supporting chain-agnostic permission caveats in alignment with @metamask/multichain-api-middleware",
+  "keywords": [
+    "MetaMask",
+    "Ethereum"
+  ],
+  "homepage": "https://github.com/MetaMask/core/tree/main/packages/eip1193-permission-middleware#readme",
+  "bugs": {
+    "url": "https://github.com/MetaMask/core/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/MetaMask/core.git"
+  },
+  "license": "MIT",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "./dist/index.cjs",
+  "types": "./dist/index.d.cts",
+  "files": [
+    "dist/"
+  ],
+  "scripts": {
+    "build": "ts-bridge --project tsconfig.build.json --verbose --clean --no-references",
+    "build:docs": "typedoc",
+    "changelog:update": "../../scripts/update-changelog.sh @metamask/eip1193-permission-middleware",
+    "changelog:validate": "../../scripts/validate-changelog.sh @metamask/eip1193-permission-middleware",
+    "publish:preview": "yarn npm publish --tag preview",
+    "since-latest-release": "../../scripts/since-latest-release.sh",
+    "test": "NODE_OPTIONS=--experimental-vm-modules jest --reporters=jest-silent-reporter",
+    "test:clean": "NODE_OPTIONS=--experimental-vm-modules jest --clearCache",
+    "test:verbose": "NODE_OPTIONS=--experimental-vm-modules jest --verbose",
+    "test:watch": "NODE_OPTIONS=--experimental-vm-modules jest --watch"
+  },
+  "dependencies": {
+    "@metamask/chain-agnostic-permission": "^0.1.0",
+    "@metamask/controller-utils": "^11.6.0",
+    "@metamask/json-rpc-engine": "^10.0.3",
+    "@metamask/permission-controller": "^11.0.6",
+    "@metamask/utils": "^11.2.0",
+    "lodash": "^4.17.21"
+  },
+  "devDependencies": {
+    "@metamask/auto-changelog": "^3.4.4",
+    "@metamask/rpc-errors": "^7.0.2",
+    "@types/jest": "^27.4.1",
+    "deepmerge": "^4.2.2",
+    "jest": "^27.5.1",
+    "ts-jest": "^27.1.4",
+    "typedoc": "^0.24.8",
+    "typedoc-plugin-missing-exports": "^2.0.0",
+    "typescript": "~5.2.2"
+  },
+  "engines": {
+    "node": "^18.18 || >=20"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}