@metamask-previews/gator-permissions-controller 5.0.2-preview-4f4c98e → 5.0.2-preview-eb263b0ee

package/dist/GatorPermissionsController.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GatorPermissionsController.js","sourceRoot":"","sources":["../src/GatorPermissionsController.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAY3D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAUrE,OAAO,EAAE,oCAAoC,EAAE,MAAM,sCAAsC,CAAC;AAC5F,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EACL,uCAAuC,EACvC,4BAA4B,EAC5B,uCAAuC,GACxC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAE9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAU3D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,kBAAkB;AAElB,iCAAiC;AACjC,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD,MAAM,yBAAyB,GAAG;IAChC,gCAAgC;IAChC,YAAY;IACZ,gDAAgD;IAChD,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,qBAAqB;CACb,CAAC;AAEX,2DAA2D;AAC3D,MAAM,qCAAqC,GACzC,sCAAgD,CAAC;AAEnD,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,0BAA0B;AAEzF;;;GAGG;AACH,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAuDtD,MAAM,kCAAkC,GACtC;IACE,kBAAkB,EAAE;QAClB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;IACD,0BAA0B,EAAE;QAC1B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;IACD,kBAAkB,EAAE;QAClB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,EAAE;QACnB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,KAAK;KAChB;CACuD,CAAC;AAE7D;;;;;;GAMG;AACH,SAAS,qCAAqC,CAC5C,KAAgD;IAEhD,OAAO;QACL,kBAAkB,EAAE,EAAE;QACtB,kBAAkB,EAAE,EAAE;QACtB,mBAAmB,EAAE,CAAC,CAAC;QACvB,GAAG,KAAK;QACR,8EAA8E;QAC9E,0BAA0B,EAAE,KAAK;KAClC,CAAC;AACJ,CAAC;AAsED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,cAI/C;IAGC;;;;OAIG;IACH,IAAI,8BAA8B;QAChC,OAAO,uBAAA,IAAI,kEAAgC,CAAC;IAC9C,CAAC;IAYD;;;;;;;OAOG;IACH,YAAY,EACV,SAAS,EACT,MAAM,EACN,KAAK,GAKN;QACC,MAAM,YAAY,GAAG,qCAAqC,CAAC,KAAK,CAAC,CAAC;QAElE,KAAK,CAAC;YACJ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,kCAAkC;YAC5C,SAAS;YACT,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;;QA7CI,uEAA8D;QAW9D,6EAAwC;QAExC,gEAA2B;QAEpC;;;WAGG;QACH,4EAA+D,IAAI,EAAC;QA4BlE,uBAAA,IAAI,wDAA6B,MAAM,CAAC,wBAAwB,MAAA,CAAC;QACjE,uBAAA,IAAI,8DACF,MAAM,CAAC,8BAA8B;YACrC,qCAAqC,MAAA,CAAC;QACxC,uBAAA,IAAI,iDACF,MAAM,CAAC,iBAAiB,IAAI,4BAA4B,MAAA,CAAC;QAE3D,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,wBAAwB;QAC1B,OAAO,uBAAA,IAAI,4DAA0B,CAAC;IACxC,CAAC;IAiID;;;;;;;OAOG;IACI,8BAA8B;QACnC,IAAI,uBAAA,IAAI,yEAAuC,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,uBAAA,IAAI,yEAAuC,CAAC;QACrD,CAAC;QAED,MAAM,qBAAqB,GAAG,KAAK,IAAmB,EAAE;YACtD,IAAI,CAAC;gBACH,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,IAAI,CAAC,CAAC;gBAE1C,sEAAsE;gBACtE,sEAAsE;gBACtE,cAAc;gBACd,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gBAEpC,MAAM,eAAe,GAAG,MAAM,cAAc,CAE1C;oBACA,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,uBAAA,IAAI,kEAAgC;oBAC5C,MAAM,EACJ,6BAA6B,CAAC,uCAAuC;oBACvE,MAAM;iBACP,CAAC,CAAC;gBAEH,MAAM,kBAAkB,GACtB,uBAAA,IAAI,wHAA+C,MAAnD,IAAI,EAAgD,eAAe,CAAC,CAAC;gBAEvE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;oBACpB,KAAK,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;oBAC9C,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzC,CAAC,CAAC,CAAC;gBAEH,MAAM,4BAA4B,GAChC,MAAM,uBAAA,IAAI,yGAAgC,MAApC,IAAI,EAAiC,kBAAkB,CAAC,CAAC;gBAEjE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;oBACpB,KAAK,CAAC,kBAAkB,GAAG,4BAA4B,CAAC;gBAC1D,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,aAAa,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;gBAC1D,MAAM,IAAI,0BAA0B,CAAC;oBACnC,OAAO,EAAE,mCAAmC;oBAC5C,KAAK,EAAE,KAAc;iBACtB,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,KAAK,CAAC,CAAC;gBAC3C,uBAAA,IAAI,qEAA0C,IAAI,MAAA,CAAC;YACrD,CAAC;QACH,CAAC,CAAC;QAEF,uBAAA,IAAI,qEAA0C,qBAAqB,EAAE,MAAA,CAAC;QAEtE,OAAO,uBAAA,IAAI,yEAAuC,CAAC;IACrD,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,yBAAyB,GAC7B,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAE/C,8EAA8E;QAC9E,wEAAwE;QACxE,IACE,IAAI,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,CAAC;YACrC,yBAAyB,GAAG,uBAAA,IAAI,qDAAmB,EACnD,CAAC;YACD,MAAM,IAAI,CAAC,8BAA8B,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,8CAA8C,CAAC,EACpD,MAAM,EACN,OAAO,EACP,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EACvD,QAAQ,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,GASrD;QACC,IAAI,MAAM,KAAK,uBAAA,IAAI,kEAAgC,EAAE,CAAC;YACpD,MAAM,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,mBAAmB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,SAAS,GAAG,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;YAEjE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,kBAAkB,GACtB,oCAAoC,CAAC,SAAS,CAAC,CAAC;YAElD,6EAA6E;YAC7E,4EAA4E;YAC5E,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;gBAC/D,SAAS;gBACT,kBAAkB;aACnB,CAAC,CAAC;YAEH,MAAM,EACJ,OAAO,EAAE,EAAE,cAAc,EAAE,EAC3B,MAAM,EACN,IAAI,EACJ,KAAK,GACN,GAAG,uCAAuC,CAAC;gBAC1C,iBAAiB,EAAE,gBAAgB;gBACnC,OAAO;aACR,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,4BAA4B,CAAC;gBAC9C,OAAO;gBACP,cAAc;gBACd,SAAS;gBACT,QAAQ;gBACR,SAAS;gBACT,MAAM;gBACN,IAAI;gBACJ,aAAa;gBACb,KAAK;gBACL,eAAe;aAChB,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,uBAAuB,CAAC;gBAChC,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,gBAAgB,CAC3B,gBAAkC;QAElC,aAAa,CAAC,gCAAgC,EAAE;YAC9C,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;SACtD,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,uBAAA,IAAI,kEAAgC;YAC5C,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,WAAW,CAAC,YAAY;YACjC,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,6BAA6B,CAAC,kCAAkC;gBAClE,MAAM,EAAE,gBAAgB;aACzB;SACF,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACtC,8BAA8B,EAC9B,WAAW,CACZ,CAAC;YAEF,oDAAoD;YACpD,MAAM,IAAI,CAAC,8BAA8B,EAAE,CAAC;YAE5C,aAAa,CAAC,mCAAmC,EAAE;gBACjD,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;gBACrD,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gFAAgF;YAChF,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAChD,aAAa,CACX,0EAA0E,EAC1E;oBACE,KAAK;oBACL,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;iBACtD,CACF,CAAC;gBACF,oEAAoE;gBACpE,MAAM,IAAI,0BAA0B,CAAC;oBACnC,OAAO,EACL,gEAAgE;oBAClE,KAAK,EAAE,KAAc;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,wDAAwD;YACxD,aAAa,CAAC,6BAA6B,EAAE;gBAC3C,KAAK;gBACL,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;aACtD,CAAC,CAAC;YAEH,MAAM,IAAI,6BAA6B,CAAC;gBACtC,MAAM,EACJ,6BAA6B,CAAC,kCAAkC;gBAClE,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,uBAAA,IAAI,8HAAqD,MAAzD,IAAI,EACF,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,KAAK,CAAC,oBAAoB,CAC/B,MAA+B;QAE/B,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;QAE3C,aAAa,CAAC,oCAAoC,EAAE;YAClD,IAAI;YACJ,iBAAiB;SAClB,CAAC,CAAC;QAqBH,yCAAyC;QACzC,MAAM,QAAQ,GAA8B;YAC1C,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,SAAS;SACrB,CAAC;QAEF,+DAA+D;QAC/D,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAQ,EAAE;YACnD,IAAI,CAAC,8BAA8B,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpD,aAAa,CAAC,uCAAuC,OAAO,EAAE,EAAE;oBAC9D,IAAI;oBACJ,iBAAiB;oBACjB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,8EAA8E;QAC9E,MAAM,uBAAuB,GAAG,GAAS,EAAE;YACzC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;gBACF,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;YAChC,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;gBACF,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,YAAoB,EAAE,eAAe,GAAG,IAAI,EAAQ,EAAE;YACrE,uBAAuB,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,4CAA4C,EAC5C,QAAQ,CAAC,SAAS,CACnB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,yCAAyC,EACzC,QAAQ,CAAC,MAAM,CAChB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,0CAA0C,EAC1C,QAAQ,CAAC,OAAO,CACjB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAED,sEAAsE;YACtE,IAAI,eAAe,EAAE,CAAC;gBACpB,uBAAA,IAAI,iHAAwC,MAA5C,IAAI,EAAyC,YAAY,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC;QAEF,iEAAiE;QACjE,QAAQ,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAQ,EAAE;YACpC,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,aAAa,CACX,6DAA6D,EAC7D;oBACE,IAAI;oBACJ,iBAAiB;iBAClB,CACF,CAAC;gBAEF,uBAAA,IAAI,sGAA6B,MAAjC,IAAI,EAA8B,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAE3D,oEAAoE;gBACpE,uBAAuB,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QAEF,gEAAgE;QAChE,QAAQ,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAQ,EAAE;YACpC,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,aAAa,CAAC,qDAAqD,EAAE;oBACnE,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC;QAEF,mDAAmD;QACnD,QAAQ,CAAC,SAAS,GAAG,CAAC,eAAe,EAAQ,EAAE;YAC7C,IAAI,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChC,aAAa,CAAC,8CAA8C,EAAE;oBAC5D,IAAI;oBACJ,iBAAiB;oBACjB,MAAM,EAAE,eAAe,CAAC,IAAI;iBAC7B,CAAC,CAAC;gBAEH,IAAI,eAAe,CAAC,MAAM,KAAK,iBAAiB,CAAC,SAAS,EAAE,CAAC;oBAC3D,aAAa,CAAC,gDAAgD,EAAE;wBAC9D,IAAI;wBACJ,iBAAiB;wBACjB,MAAM,EAAE,eAAe,CAAC,MAAM;qBAC/B,CAAC,CAAC;oBACH,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;oBAC5B,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;oBAChD,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAuB,CAAC;gBAEvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,aAAa,CACX,2EAA2E,EAC3E;wBACE,IAAI;wBACJ,iBAAiB;wBACjB,KAAK,EAAE,IAAI,KAAK,CACd,mDAAmD,CACpD;qBACF,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;qBACjD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,aAAa,CACX,yDAAyD,EACzD;wBACE,IAAI;wBACJ,iBAAiB;wBACjB,KAAK;qBACN,CACF,CAAC;gBACJ,CAAC,CAAC;qBACD,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC;gBAE9D,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QAEF,oEAAoE;QACpE,QAAQ,CAAC,MAAM,GAAG,CAAC,OAAO,EAAQ,EAAE;YAClC,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,aAAa,CAAC,qDAAqD,EAAE;oBACnE,IAAI;oBACJ,iBAAiB;oBACjB,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB,CAAC,CAAC;gBAEH,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAEpC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC;QAEF,qEAAqE;QACrE,QAAQ,CAAC,OAAO,GAAG,CAAC,OAAO,EAAQ,EAAE;YACnC,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,aAAa,CAAC,sDAAsD,EAAE;oBACpE,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAEpC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC;QAEF,8CAA8C;QAC9C,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;QAEF,2CAA2C;QAC3C,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,4CAA4C,EAC5C,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,yCAAyC,EACzC,QAAQ,CAAC,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,0CAA0C,EAC1C,QAAQ,CAAC,OAAO,CACjB,CAAC;QAEF,oDAAoD;QACpD,QAAQ,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,aAAa,CAAC,qDAAqD,EAAE;gBACnE,IAAI;gBACJ,iBAAiB;aAClB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,sBAAsB,CAAC,MAAwB;QAC1D,yEAAyE;QACzE,MAAM,eAAe,GAAG,SAAS,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAE5D,0EAA0E;QAC1E,uBAAA,IAAI,sGAA6B,MAAjC,IAAI,EACF,eAAe,EACf,MAAM,CAAC,iBAAiB,CACzB,CAAC;QAEF,0EAA0E;QAC1E,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACI,mBAAmB,CAAC,iBAAsB;QAC/C,MAAM,mCAAmC,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;QAE5E,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CACvC,CAAC,iBAAiB,EAAE,EAAE,CACpB,iBAAiB,CAAC,iBAAiB,CAAC,WAAW,EAAE;YACjD,mCAAmC,CACtC,CAAC;IACJ,CAAC;CACF;0dA1qBgC,0BAAmC;IAChE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,6HAE4B,IAAY,EAAE,iBAAsB;IAC/D,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG;YACzB,GAAG,KAAK,CAAC,kBAAkB;YAC3B,EAAE,IAAI,EAAE,iBAAiB,EAAE;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,mJAEuC,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACxD,CAAC,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,KAAK,IAAI,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,6KAGC,iBAAsB;IAEtB,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACxD,CAAC,kBAAkB,EAAE,EAAE,CACrB,kBAAkB,CAAC,iBAAiB,CAAC,WAAW,EAAE;YAClD,iBAAiB,CAAC,WAAW,EAAE,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;IASC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAiC,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACjD,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,EAC7C,IAAI,CAAC,MAAM,IAAI,QAAQ,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,sDAED,KAAK,4DACH,OAAY;IAEZ,MAAM,eAAe,GAAoB,IAAI,CAAC,SAAS,CAAC,IAAI,CAC1D,gDAAgD,EAChD,OAAO,CACR,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACtC,wCAAwC,EACxC,eAAe,CAChB,CAAC;IACF,OAAO,QAA2C,CAAC;AACrD,CAAC,+DAED,KAAK,qEACH,kBAAgD;IAEhD,OAAO,8BAA8B,CAAC,kBAAkB,EAAE;QACxD,qBAAqB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAA,IAAI,gGAAuB,MAA3B,IAAI,EAAwB,OAAO,CAAC;KACzE,CAAC,CAAC;AACL,CAAC,uIAWC,qBAA4C,EAC5C,MAA6B;IAE7B,MAAM,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,GAClD,qBAAqB,CAAC;IACxB,MAAM,EACJ,YAAY,EAAE,aAAa,EAC3B,EAAE,EAAE,GAAG,EACP,GAAG,kBAAkB,EACtB,GAAG,sBAAsB,CAAC;IAE3B,OAAO;QACL,GAAG,qBAAqB;QACxB,kBAAkB;QAClB,MAAM;KACP,CAAC;AACJ,CAAC,iKASC,sBAAsD;IAEtD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,uBAAuB,GAAG,uBAAA,IAAI,uGAA8B,MAAlC,IAAI,CAAgC,CAAC;IAErE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE;QACrD,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,CAChD,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,CAC1D,CAAC;QACF,OAAO,uBAAA,IAAI,2GAAkC,MAAtC,IAAI,EACT,gBAAgB,EAChB,cAAc,IAAI,QAAQ,CAC3B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AA+iBH,eAAe,0BAA0B,CAAC","sourcesContent":["import type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type {\n  NetworkControllerFindNetworkClientIdByChainIdAction,\n  NetworkControllerGetNetworkClientByIdAction,\n  NetworkClientId,\n} from '@metamask/network-controller';\nimport type {\n  SnapControllerHandleRequestAction,\n  SnapControllerHasSnapAction,\n} from '@metamask/snaps-controllers';\nimport type { SnapId } from '@metamask/snaps-sdk';\nimport { HandlerType } from '@metamask/snaps-utils';\nimport { TransactionStatus } from '@metamask/transaction-controller';\nimport type {\n  TransactionControllerTransactionApprovedEvent,\n  TransactionControllerTransactionConfirmedEvent,\n  TransactionControllerTransactionDroppedEvent,\n  TransactionControllerTransactionFailedEvent,\n  TransactionControllerTransactionRejectedEvent,\n} from '@metamask/transaction-controller';\nimport type { Hex } from '@metamask/utils';\n\nimport { createPermissionDecodersForContracts } from './decodePermission/decoders/index.js';\nimport {\n  delegationContractsByChainId,\n  toEnforcerAddressesByName,\n} from './decodePermission/enforcerAddresses.js';\nimport type { DecodedPermission } from './decodePermission/index.js';\nimport {\n  findDecodersWithMatchingCaveatAddresses,\n  reconstructDecodedPermission,\n  selectUniqueDecoderAndDecodedPermission,\n} from './decodePermission/index.js';\nimport {\n  GatorPermissionsFetchError,\n  GatorPermissionsProviderError,\n  OriginNotAllowedError,\n  PermissionDecodingError,\n} from './errors.js';\nimport type { GatorPermissionsControllerMethodActions } from './GatorPermissionsController-method-action-types.js';\nimport { controllerLog } from './logger.js';\nimport { updateGrantedPermissionsStatus } from './permissionOnChainStatus.js';\nimport type { PermissionStatusEip1193Provider } from './permissionOnChainStatus.js';\nimport { GatorPermissionsSnapRpcMethod } from './types.js';\nimport type {\n  StoredGatorPermission,\n  PermissionInfoWithMetadata,\n  GatorPermissionStatus,\n  SupportedPermissionType,\n  DelegationDetails,\n  RevocationParams,\n  PendingRevocationParams,\n} from './types.js';\nimport { executeSnapRpc } from './utils.js';\n\n// === GENERAL ===\n\n// Unique name for the controller\nconst controllerName = 'GatorPermissionsController';\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'fetchAndUpdateGatorPermissions',\n  'initialize',\n  'decodePermissionFromPermissionContextForOrigin',\n  'submitRevocation',\n  'addPendingRevocation',\n  'submitDirectRevocation',\n  'isPendingRevocation',\n] as const;\n\n// Default value for the gator permissions provider snap id\nconst defaultGatorPermissionsProviderSnapId =\n  'npm:@metamask/gator-permissions-snap' as SnapId;\n\nconst DEFAULT_MAX_SYNC_INTERVAL_MS = 30 * 24 * 60 * 60 * 1000; // 30 days in milliseconds\n\n/**\n * Timeout duration for pending revocations (2 hours in milliseconds).\n * After this time, event listeners will be cleaned up to prevent memory leaks.\n */\nconst PENDING_REVOCATION_TIMEOUT = 2 * 60 * 60 * 1000;\n\n// === CONFIG ===\n\n/**\n * Configuration for {@link GatorPermissionsController}.\n */\nexport type GatorPermissionsControllerConfig = {\n  /**\n   * Permission types the controller supports (e.g. 'native-token-stream', 'erc20-token-periodic').\n   */\n  supportedPermissionTypes: SupportedPermissionType[];\n  /**\n   * Optional ID of the gator permissions provider Snap. Defaults to npm:@metamask/gator-permissions-snap.\n   */\n  gatorPermissionsProviderSnapId?: SnapId;\n  /**\n   * Optional maximum age of cached permissions (ms) before {@link GatorPermissionsController.initialize}\n   * triggers a sync. Defaults to 30 days.\n   */\n  maxSyncIntervalMs?: number;\n};\n\n// === STATE ===\n\n/**\n * State shape for {@link GatorPermissionsController}.\n */\nexport type GatorPermissionsControllerState = {\n  /**\n   * List of granted permissions with metadata (siteOrigin, status, revocationMetadata).\n   */\n  grantedPermissions: PermissionInfoWithMetadata[];\n\n  /**\n   * Flag that indicates that fetching permissions is in progress\n   * This can be used to show a loading spinner in the UI\n   */\n  isFetchingGatorPermissions: boolean;\n\n  /**\n   * List of gator permissions pending a revocation transaction\n   */\n  pendingRevocations: {\n    txId: string;\n    permissionContext: Hex;\n  }[];\n\n  /**\n   * Timestamp (ms) of the last successful sync of gator permissions from profile sync.\n   * -1 indicates that a sync has never completed successfully.\n   */\n  lastSyncedTimestamp: number;\n};\n\nconst gatorPermissionsControllerMetadata: StateMetadata<GatorPermissionsControllerState> =\n  {\n    grantedPermissions: {\n      includeInStateLogs: true,\n      persist: true,\n      includeInDebugSnapshot: false,\n      usedInUi: true,\n    },\n    isFetchingGatorPermissions: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: true,\n    },\n    pendingRevocations: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: true,\n    },\n    lastSyncedTimestamp: {\n      includeInStateLogs: true,\n      persist: true,\n      includeInDebugSnapshot: false,\n      usedInUi: false,\n    },\n  } satisfies StateMetadata<GatorPermissionsControllerState>;\n\n/**\n * Creates initial controller state, merging defaults with optional partial state.\n * Internal use only (e.g. constructor, tests).\n *\n * @param state - Optional partial state to merge with defaults.\n * @returns Complete {@link GatorPermissionsController} state.\n */\nfunction createGatorPermissionsControllerState(\n  state?: Partial<GatorPermissionsControllerState>,\n): GatorPermissionsControllerState {\n  return {\n    grantedPermissions: [],\n    pendingRevocations: [],\n    lastSyncedTimestamp: -1,\n    ...state,\n    // isFetchingGatorPermissions is _always_ false when the controller is created\n    isFetchingGatorPermissions: false,\n  };\n}\n\n// === MESSENGER ===\n\n/**\n * The action which can be used to retrieve the state of the\n * {@link GatorPermissionsController}.\n */\nexport type GatorPermissionsControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  GatorPermissionsControllerState\n>;\n\n/**\n * All actions that {@link GatorPermissionsController} registers, to be called\n * externally.\n */\nexport type GatorPermissionsControllerActions =\n  | GatorPermissionsControllerGetStateAction\n  | GatorPermissionsControllerMethodActions;\n\n/**\n * All actions that {@link GatorPermissionsController} calls internally.\n *\n * SnapController:handleRequest and SnapController:hasSnap are allowed to be\n * called internally because they are used to fetch gator permissions from the\n * Snap.\n */\ntype AllowedActions =\n  | SnapControllerHandleRequestAction\n  | SnapControllerHasSnapAction\n  | NetworkControllerFindNetworkClientIdByChainIdAction\n  | NetworkControllerGetNetworkClientByIdAction;\n\n/**\n * The event that {@link GatorPermissionsController} publishes when updating state.\n */\nexport type GatorPermissionsControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    GatorPermissionsControllerState\n  >;\n\n/**\n * All events that {@link GatorPermissionsController} publishes, to be subscribed to\n * externally.\n */\nexport type GatorPermissionsControllerEvents =\n  GatorPermissionsControllerStateChangeEvent;\n\n/**\n * Events that {@link GatorPermissionsController} is allowed to subscribe to internally.\n */\ntype AllowedEvents =\n  | GatorPermissionsControllerStateChangeEvent\n  | TransactionControllerTransactionApprovedEvent\n  | TransactionControllerTransactionRejectedEvent\n  | TransactionControllerTransactionConfirmedEvent\n  | TransactionControllerTransactionFailedEvent\n  | TransactionControllerTransactionDroppedEvent;\n\n/**\n * Messenger type for the GatorPermissionsController.\n */\nexport type GatorPermissionsControllerMessenger = Messenger<\n  typeof controllerName,\n  GatorPermissionsControllerActions | AllowedActions,\n  GatorPermissionsControllerEvents | AllowedEvents\n>;\n\n/**\n * Controller that manages gator permissions by reading from the gator permissions provider Snap.\n */\nexport class GatorPermissionsController extends BaseController<\n  typeof controllerName,\n  GatorPermissionsControllerState,\n  GatorPermissionsControllerMessenger\n> {\n  readonly #supportedPermissionTypes: readonly SupportedPermissionType[];\n\n  /**\n   * The Snap ID of the gator permissions provider.\n   *\n   * @returns The Snap ID of the gator permissions provider.\n   */\n  get gatorPermissionsProviderSnapId(): SnapId {\n    return this.#gatorPermissionsProviderSnapId;\n  }\n\n  readonly #gatorPermissionsProviderSnapId: SnapId;\n\n  readonly #maxSyncIntervalMs: number;\n\n  /**\n   * When a sync is in progress, holds the promise for that sync so concurrent\n   * callers receive the same promise. Cleared when the sync completes.\n   */\n  #fetchAndUpdateGatorPermissionsPromise: Promise<void> | null = null;\n\n  /**\n   * Creates a GatorPermissionsController instance.\n   *\n   * @param args - The arguments to this function.\n   * @param args.messenger - Messenger used to communicate with other controllers.\n   * @param args.config - Configuration (supported permission types and optional Snap id).\n   * @param args.state - Optional partial state to merge with defaults.\n   */\n  constructor({\n    messenger,\n    config,\n    state,\n  }: {\n    messenger: GatorPermissionsControllerMessenger;\n    config: GatorPermissionsControllerConfig;\n    state?: Partial<GatorPermissionsControllerState>;\n  }) {\n    const initialState = createGatorPermissionsControllerState(state);\n\n    super({\n      name: controllerName,\n      metadata: gatorPermissionsControllerMetadata,\n      messenger,\n      state: initialState,\n    });\n\n    this.#supportedPermissionTypes = config.supportedPermissionTypes;\n    this.#gatorPermissionsProviderSnapId =\n      config.gatorPermissionsProviderSnapId ??\n      defaultGatorPermissionsProviderSnapId;\n    this.#maxSyncIntervalMs =\n      config.maxSyncIntervalMs ?? DEFAULT_MAX_SYNC_INTERVAL_MS;\n\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Supported permission types this controller was configured with.\n   *\n   * @returns The supported permission types.\n   */\n  get supportedPermissionTypes(): readonly SupportedPermissionType[] {\n    return this.#supportedPermissionTypes;\n  }\n\n  #setIsFetchingGatorPermissions(isFetchingGatorPermissions: boolean): void {\n    this.update((state) => {\n      state.isFetchingGatorPermissions = isFetchingGatorPermissions;\n    });\n  }\n\n  #addPendingRevocationToState(txId: string, permissionContext: Hex): void {\n    this.update((state) => {\n      state.pendingRevocations = [\n        ...state.pendingRevocations,\n        { txId, permissionContext },\n      ];\n    });\n  }\n\n  #removePendingRevocationFromStateByTxId(txId: string): void {\n    this.update((state) => {\n      state.pendingRevocations = state.pendingRevocations.filter(\n        (pendingRevocations) => pendingRevocations.txId !== txId,\n      );\n    });\n  }\n\n  #removePendingRevocationFromStateByPermissionContext(\n    permissionContext: Hex,\n  ): void {\n    this.update((state) => {\n      state.pendingRevocations = state.pendingRevocations.filter(\n        (pendingRevocations) =>\n          pendingRevocations.permissionContext.toLowerCase() !==\n          permissionContext.toLowerCase(),\n      );\n    });\n  }\n\n  /**\n   * Maps permission `context` (lowercase hex) to the last known {@link PermissionStatus}\n   * from the current controller state (used when merging after a snap sync).\n   *\n   * @returns Map from lowercase `permissionResponse.context` to the prior {@link PermissionStatus}.\n   */\n  #buildPreviousStatusByContext(): Map<string, GatorPermissionStatus> {\n    const map = new Map<string, GatorPermissionStatus>();\n    for (const prev of this.state.grantedPermissions) {\n      map.set(\n        prev.permissionResponse.context.toLowerCase(),\n        prev.status ?? 'Active',\n      );\n    }\n    return map;\n  }\n\n  async #getProviderForChainId(\n    chainId: Hex,\n  ): Promise<PermissionStatusEip1193Provider> {\n    const networkClientId: NetworkClientId = this.messenger.call(\n      'NetworkController:findNetworkClientIdByChainId',\n      chainId,\n    );\n    const { provider } = this.messenger.call(\n      'NetworkController:getNetworkClientById',\n      networkClientId,\n    );\n    return provider as PermissionStatusEip1193Provider;\n  }\n\n  async #updateGrantedPermissionsStatus(\n    grantedPermissions: PermissionInfoWithMetadata[],\n  ): Promise<PermissionInfoWithMetadata[]> {\n    return updateGrantedPermissionsStatus(grantedPermissions, {\n      getProviderForChainId: (chainId) => this.#getProviderForChainId(chainId),\n    });\n  }\n\n  /**\n   * Converts a stored gator permission to permission info with metadata.\n   * Strips internal fields (dependencies, to) from the permission response.\n   *\n   * @param storedGatorPermission - The stored gator permission from the Snap.\n   * @param status - The status for this permission.\n   * @returns Permission info with metadata for state/UI.\n   */\n  #storedPermissionToPermissionInfo(\n    storedGatorPermission: StoredGatorPermission,\n    status: GatorPermissionStatus,\n  ): PermissionInfoWithMetadata {\n    const { permissionResponse: fullPermissionResponse } =\n      storedGatorPermission;\n    const {\n      dependencies: _dependencies,\n      to: _to,\n      ...permissionResponse\n    } = fullPermissionResponse;\n\n    return {\n      ...storedGatorPermission,\n      permissionResponse,\n      status,\n    };\n  }\n\n  /**\n   * Converts stored gator permissions from the Snap into permission info with metadata.\n   *\n   * @param storedGatorPermissions - Stored gator permissions returned by the Snap, or null.\n   * @returns Array of permission info with metadata for state.\n   */\n  #storedPermissionsToPermissionInfoWithMetadata(\n    storedGatorPermissions: StoredGatorPermission[] | null,\n  ): PermissionInfoWithMetadata[] {\n    if (!storedGatorPermissions) {\n      return [];\n    }\n\n    const previousStatusByContext = this.#buildPreviousStatusByContext();\n\n    return storedGatorPermissions.map((storedPermission) => {\n      const previousStatus = previousStatusByContext.get(\n        storedPermission.permissionResponse.context.toLowerCase(),\n      );\n      return this.#storedPermissionToPermissionInfo(\n        storedPermission,\n        previousStatus ?? 'Active',\n      );\n    });\n  }\n\n  /**\n   * Fetches granted permissions from the gator permissions provider Snap and updates state.\n   * If a sync is already in progress, returns the same promise. After the sync completes,\n   * the next call will perform a new sync.\n   *\n   * @returns A promise that resolves when the sync completes. All data is available via the controller's state.\n   * @throws {GatorPermissionsFetchError} If the gator permissions fetch fails.\n   */\n  public fetchAndUpdateGatorPermissions(): Promise<void> {\n    if (this.#fetchAndUpdateGatorPermissionsPromise !== null) {\n      return this.#fetchAndUpdateGatorPermissionsPromise;\n    }\n\n    const performFetchAndUpdate = async (): Promise<void> => {\n      try {\n        this.#setIsFetchingGatorPermissions(true);\n\n        // Only ever fetch non-revoked permissions. Revoked permissions may be\n        // left in storage by the gator permissions snap, but we don't need to\n        // fetch them.\n        const params = { isRevoked: false };\n\n        const permissionsData = await executeSnapRpc<\n          StoredGatorPermission[] | null\n        >({\n          messenger: this.messenger,\n          snapId: this.#gatorPermissionsProviderSnapId,\n          method:\n            GatorPermissionsSnapRpcMethod.PermissionProviderGetGrantedPermissions,\n          params,\n        });\n\n        const grantedPermissions =\n          this.#storedPermissionsToPermissionInfoWithMetadata(permissionsData);\n\n        this.update((state) => {\n          state.grantedPermissions = grantedPermissions;\n          state.lastSyncedTimestamp = Date.now();\n        });\n\n        const grantedPermissionsWithStatus =\n          await this.#updateGrantedPermissionsStatus(grantedPermissions);\n\n        this.update((state) => {\n          state.grantedPermissions = grantedPermissionsWithStatus;\n        });\n      } catch (error) {\n        controllerLog('Failed to fetch gator permissions', error);\n        throw new GatorPermissionsFetchError({\n          message: 'Failed to fetch gator permissions',\n          cause: error as Error,\n        });\n      } finally {\n        this.#setIsFetchingGatorPermissions(false);\n        this.#fetchAndUpdateGatorPermissionsPromise = null;\n      }\n    };\n\n    this.#fetchAndUpdateGatorPermissionsPromise = performFetchAndUpdate();\n\n    return this.#fetchAndUpdateGatorPermissionsPromise;\n  }\n\n  /**\n   * Initializes the controller. Call once after construction to ensure the\n   * controller is ready for use.\n   *\n   * @returns A promise that resolves when initialization is complete.\n   */\n  public async initialize(): Promise<void> {\n    const currentTime = Date.now();\n    const millisecondsSinceLastSync =\n      currentTime - this.state.lastSyncedTimestamp;\n\n    // Sync only when we have no data or data is stale, to avoid excessive startup\n    // queries while still avoiding showing stale data while a refresh runs.\n    if (\n      this.state.lastSyncedTimestamp === -1 ||\n      millisecondsSinceLastSync > this.#maxSyncIntervalMs\n    ) {\n      await this.fetchAndUpdateGatorPermissions();\n    }\n  }\n\n  /**\n   * Decodes a permission context into a structured permission for a specific origin.\n   *\n   * This method validates the caller origin, decodes the provided `permissionContext`\n   * into delegations, identifies the permission type from the caveat enforcers,\n   * extracts the permission-specific data and expiry, and reconstructs a\n   * {@link DecodedPermission} containing chainId, account addresses, to, type and data.\n   *\n   * @param args - The arguments to this function.\n   * @param args.origin - The caller's origin; must match the configured permissions provider Snap id.\n   * @param args.chainId - Numeric EIP-155 chain id used for resolving enforcer contracts and encoding.\n   * @param args.delegation - delegation representing the permission.\n   * @param args.metadata - metadata included in the request.\n   * @param args.metadata.justification - the justification as specified in the request metadata.\n   * @param args.metadata.origin - the origin as specified in the request metadata.\n   *\n   * @returns A decoded permission object suitable for UI consumption and follow-up actions.\n   * @throws If the origin is not allowed, the context cannot be decoded into exactly one delegation,\n   * the enforcers do not match any supported permission type, no candidate type validates\n   * the caveat terms, or more than one permission type successfully validates\n   * (ambiguous delegation).\n   */\n  public decodePermissionFromPermissionContextForOrigin({\n    origin,\n    chainId,\n    delegation: { caveats, delegator, delegate, authority },\n    metadata: { justification, origin: specifiedOrigin },\n  }: {\n    origin: string;\n    chainId: number;\n    metadata: {\n      justification: string;\n      origin: string;\n    };\n    delegation: DelegationDetails;\n  }): DecodedPermission {\n    if (origin !== this.#gatorPermissionsProviderSnapId) {\n      throw new OriginNotAllowedError({ origin });\n    }\n\n    const deploymentContracts = delegationContractsByChainId[chainId];\n\n    try {\n      if (!deploymentContracts) {\n        throw new Error(`Contracts not found for chainId: ${chainId}`);\n      }\n\n      const contracts = toEnforcerAddressesByName(deploymentContracts);\n\n      const enforcers = caveats.map((caveat) => caveat.enforcer);\n      const permissionDecoders =\n        createPermissionDecodersForContracts(contracts);\n\n      // Every decoder where enforcer addresses match; multiple types may share the\n      // same caveat pattern and are disambiguated by validateAndDecodePermission.\n      const matchingDecoders = findDecodersWithMatchingCaveatAddresses({\n        enforcers,\n        permissionDecoders,\n      });\n\n      const {\n        decoder: { permissionType },\n        expiry,\n        data,\n        rules,\n      } = selectUniqueDecoderAndDecodedPermission({\n        candidateDecoders: matchingDecoders,\n        caveats,\n      });\n\n      const permission = reconstructDecodedPermission({\n        chainId,\n        permissionType,\n        delegator,\n        delegate,\n        authority,\n        expiry,\n        data,\n        justification,\n        rules,\n        specifiedOrigin,\n      });\n\n      return permission;\n    } catch (error) {\n      throw new PermissionDecodingError({\n        cause: error as Error,\n      });\n    }\n  }\n\n  /**\n   * Submits a revocation to the gator permissions provider snap.\n   *\n   * @param revocationParams - The revocation parameters containing the permission context.\n   * @returns A promise that resolves when the revocation is submitted successfully.\n   * @throws {GatorPermissionsProviderError} If the snap request fails.\n   */\n  public async submitRevocation(\n    revocationParams: RevocationParams,\n  ): Promise<void> {\n    controllerLog('submitRevocation method called', {\n      permissionContext: revocationParams.permissionContext,\n    });\n\n    const snapRequest = {\n      snapId: this.#gatorPermissionsProviderSnapId,\n      origin: 'metamask',\n      handler: HandlerType.OnRpcRequest,\n      request: {\n        jsonrpc: '2.0',\n        method:\n          GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,\n        params: revocationParams,\n      },\n    };\n\n    try {\n      const result = await this.messenger.call(\n        'SnapController:handleRequest',\n        snapRequest,\n      );\n\n      // Refresh list first (permission removed from list)\n      await this.fetchAndUpdateGatorPermissions();\n\n      controllerLog('Successfully submitted revocation', {\n        permissionContext: revocationParams.permissionContext,\n        result,\n      });\n    } catch (error) {\n      // If it's a GatorPermissionsFetchError, revocation succeeded but refresh failed\n      if (error instanceof GatorPermissionsFetchError) {\n        controllerLog(\n          'Revocation submitted successfully but failed to refresh permissions list',\n          {\n            error,\n            permissionContext: revocationParams.permissionContext,\n          },\n        );\n        // Wrap with a more specific message indicating revocation succeeded\n        throw new GatorPermissionsFetchError({\n          message:\n            'Failed to refresh permissions list after successful revocation',\n          cause: error as Error,\n        });\n      }\n\n      // Otherwise, revocation failed - wrap in provider error\n      controllerLog('Failed to submit revocation', {\n        error,\n        permissionContext: revocationParams.permissionContext,\n      });\n\n      throw new GatorPermissionsProviderError({\n        method:\n          GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,\n        cause: error as Error,\n      });\n    } finally {\n      this.#removePendingRevocationFromStateByPermissionContext(\n        revocationParams.permissionContext,\n      );\n    }\n  }\n\n  /**\n   * Adds a pending revocation that will be submitted once the transaction is confirmed.\n   *\n   * This method sets up listeners for the user's approval/rejection decision and\n   * terminal transaction states (confirmed, failed, dropped). The flow is:\n   * 1. Wait for user to approve or reject the transaction\n   * 2. If approved, add to pending revocations state\n   * 3. If rejected, cleanup without adding to state\n   * 4. If confirmed, submit the revocation\n   * 5. If failed or dropped, cleanup\n   *\n   * Includes a timeout safety net to prevent memory leaks if the transaction never\n   * reaches a terminal state.\n   *\n   * @param params - The pending revocation parameters.\n   * @returns A promise that resolves when the listener is set up.\n   */\n  public async addPendingRevocation(\n    params: PendingRevocationParams,\n  ): Promise<void> {\n    const { txId, permissionContext } = params;\n\n    controllerLog('addPendingRevocation method called', {\n      txId,\n      permissionContext,\n    });\n\n    type PendingRevocationHandlers = {\n      approved?: (\n        ...args: TransactionControllerTransactionApprovedEvent['payload']\n      ) => void;\n      rejected?: (\n        ...args: TransactionControllerTransactionRejectedEvent['payload']\n      ) => void;\n      confirmed?: (\n        ...args: TransactionControllerTransactionConfirmedEvent['payload']\n      ) => void;\n      failed?: (\n        ...args: TransactionControllerTransactionFailedEvent['payload']\n      ) => void;\n      dropped?: (\n        ...args: TransactionControllerTransactionDroppedEvent['payload']\n      ) => void;\n      timeoutId?: ReturnType<typeof setTimeout>;\n    };\n\n    // Track handlers and timeout for cleanup\n    const handlers: PendingRevocationHandlers = {\n      approved: undefined,\n      rejected: undefined,\n      confirmed: undefined,\n      failed: undefined,\n      dropped: undefined,\n      timeoutId: undefined,\n    };\n\n    // Helper to refresh permissions after transaction state change\n    const refreshPermissions = (context: string): void => {\n      this.fetchAndUpdateGatorPermissions().catch((error) => {\n        controllerLog(`Failed to refresh permissions after ${context}`, {\n          txId,\n          permissionContext,\n          error,\n        });\n      });\n    };\n\n    // Helper to unsubscribe from approval/rejection events after decision is made\n    const cleanupApprovalHandlers = (): void => {\n      if (handlers.approved) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionApproved',\n          handlers.approved,\n        );\n        handlers.approved = undefined;\n      }\n      if (handlers.rejected) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionRejected',\n          handlers.rejected,\n        );\n        handlers.rejected = undefined;\n      }\n    };\n\n    // Cleanup function to unsubscribe from all events and clear timeout\n    const cleanup = (txIdToRemove: string, removeFromState = true): void => {\n      cleanupApprovalHandlers();\n      if (handlers.confirmed) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionConfirmed',\n          handlers.confirmed,\n        );\n      }\n      if (handlers.failed) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionFailed',\n          handlers.failed,\n        );\n      }\n      if (handlers.dropped) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionDropped',\n          handlers.dropped,\n        );\n      }\n      if (handlers.timeoutId !== undefined) {\n        clearTimeout(handlers.timeoutId);\n      }\n\n      // Remove the pending revocation from the state (only if it was added)\n      if (removeFromState) {\n        this.#removePendingRevocationFromStateByTxId(txIdToRemove);\n      }\n    };\n\n    // Handle approved transaction - add to pending revocations state\n    handlers.approved = (payload): void => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog(\n          'Transaction approved by user, adding to pending revocations',\n          {\n            txId,\n            permissionContext,\n          },\n        );\n\n        this.#addPendingRevocationToState(txId, permissionContext);\n\n        // Unsubscribe from approval/rejection events since decision is made\n        cleanupApprovalHandlers();\n      }\n    };\n\n    // Handle rejected transaction - cleanup without adding to state\n    handlers.rejected = (payload): void => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction rejected by user, cleaning up listeners', {\n          txId,\n          permissionContext,\n        });\n\n        // Don't remove from state since it was never added\n        cleanup(payload.transactionMeta.id, false);\n      }\n    };\n\n    // Handle confirmed transaction - submit revocation\n    handlers.confirmed = (transactionMeta): void => {\n      if (transactionMeta.id === txId) {\n        controllerLog('Transaction confirmed, submitting revocation', {\n          txId,\n          permissionContext,\n          txHash: transactionMeta.hash,\n        });\n\n        if (transactionMeta.status !== TransactionStatus.confirmed) {\n          controllerLog('Transaction not confirmed, skipping revocation', {\n            txId,\n            permissionContext,\n            status: transactionMeta.status,\n          });\n          cleanup(transactionMeta.id);\n          refreshPermissions('transaction not confirmed');\n          return;\n        }\n\n        const txHash = transactionMeta.hash as Hex | undefined;\n\n        if (txHash === undefined) {\n          controllerLog(\n            'Failed to resolve transaction hash after revocation transaction confirmed',\n            {\n              txId,\n              permissionContext,\n              error: new Error(\n                'Confirmed transaction is missing transaction hash',\n              ),\n            },\n          );\n        }\n\n        this.submitRevocation({ permissionContext, txHash })\n          .catch((error) => {\n            controllerLog(\n              'Failed to submit revocation after transaction confirmed',\n              {\n                txId,\n                permissionContext,\n                error,\n              },\n            );\n          })\n          .finally(() => refreshPermissions('transaction confirmed'));\n\n        cleanup(transactionMeta.id);\n      }\n    };\n\n    // Handle failed transaction - cleanup without submitting revocation\n    handlers.failed = (payload): void => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction failed, cleaning up revocation listener', {\n          txId,\n          permissionContext,\n          error: payload.error,\n        });\n\n        cleanup(payload.transactionMeta.id);\n\n        refreshPermissions('transaction failed');\n      }\n    };\n\n    // Handle dropped transaction - cleanup without submitting revocation\n    handlers.dropped = (payload): void => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction dropped, cleaning up revocation listener', {\n          txId,\n          permissionContext,\n        });\n\n        cleanup(payload.transactionMeta.id);\n\n        refreshPermissions('transaction dropped');\n      }\n    };\n\n    // Subscribe to user approval/rejection events\n    this.messenger.subscribe(\n      'TransactionController:transactionApproved',\n      handlers.approved,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionRejected',\n      handlers.rejected,\n    );\n\n    // Subscribe to terminal transaction events\n    this.messenger.subscribe(\n      'TransactionController:transactionConfirmed',\n      handlers.confirmed,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionFailed',\n      handlers.failed,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionDropped',\n      handlers.dropped,\n    );\n\n    // Set timeout as safety net to prevent memory leaks\n    handlers.timeoutId = setTimeout(() => {\n      controllerLog('Pending revocation timed out, cleaning up listeners', {\n        txId,\n        permissionContext,\n      });\n      cleanup(txId);\n    }, PENDING_REVOCATION_TIMEOUT);\n  }\n\n  /**\n   * Submits a revocation directly without requiring an on-chain transaction.\n   * Used for already-disabled delegations that don't require an on-chain transaction.\n   *\n   * This method:\n   * 1. Adds the permission context to pending revocations state (disables UI button)\n   * 2. Immediately calls submitRevocation to remove from snap storage\n   * 3. On success, removes from pending revocations state (re-enables UI button)\n   * 4. On failure, keeps in pending revocations so UI can show error/retry state\n   *\n   * @param params - The revocation parameters containing the permission context.\n   * @returns A promise that resolves when the revocation is submitted successfully.\n   * @throws {GatorPermissionsProviderError} If the snap request fails.\n   */\n  public async submitDirectRevocation(params: RevocationParams): Promise<void> {\n    // Use a placeholder txId that doesn't conflict with real transaction IDs\n    const placeholderTxId = `no-tx-${params.permissionContext}`;\n\n    // Add to pending revocations state first (disables UI button immediately)\n    this.#addPendingRevocationToState(\n      placeholderTxId,\n      params.permissionContext,\n    );\n\n    // Immediately submit the revocation (will remove from pending on success)\n    await this.submitRevocation(params);\n  }\n\n  /**\n   * Checks if a permission context is in the pending revocations list.\n   *\n   * @param permissionContext - The permission context to check.\n   * @returns `true` if the permission context is pending revocation, `false` otherwise.\n   */\n  public isPendingRevocation(permissionContext: Hex): boolean {\n    const requestedPermissionContextLowercase = permissionContext.toLowerCase();\n\n    return this.state.pendingRevocations.some(\n      (pendingRevocation) =>\n        pendingRevocation.permissionContext.toLowerCase() ===\n        requestedPermissionContextLowercase,\n    );\n  }\n}\n\nexport default GatorPermissionsController;\n"]}

package/dist/constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,4BAA4B,UAAU,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,uCAAuC,EAAG,UAAmB,CAAC;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC,EAAG,OAAgB,CAAC;AAErE;;;;;GAKG;AACH,eAAO,MAAM,qCAAqC,EAAG,QAAiB,CAAC"}

package/dist/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAO,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,UAAmB,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,OAAgB,CAAC;AAErE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,QAAiB,CAAC","sourcesContent":["/**\n * Delegation framework version used to select the correct deployed enforcer\n * contract addresses from `@metamask/delegation-deployments`.\n */\nexport const DELEGATION_FRAMEWORK_VERSION = '1.3.0';\n\n/**\n * `Rule.type` / `wallet_getSupportedExecutionPermissions` `ruleTypes` entry for\n * redeemer allowlists (RedeemerEnforcer). Hosts should advertise this for every\n * supported execution permission type.\n */\nexport const EXECUTION_PERMISSION_REDEEMER_RULE_TYPE = 'redeemer' as const;\n\n/**\n * `Rule.type` / `wallet_getSupportedExecutionPermissions` `ruleTypes` entry for\n * payee allowlists (AllowedCalldataEnforcer / AllowedTargetsEnforcer). Hosts\n * should advertise this for every supported execution permission type that supports\n * payee restrictions.\n */\nexport const EXECUTION_PERMISSION_PAYEE_RULE_TYPE = 'payee' as const;\n\n/**\n * `Rule.type` / `wallet_getSupportedExecutionPermissions` `ruleTypes` entry for\n * permission expiry derived from a TimestampEnforcer caveat. The decoded\n * permission additionally hoists the expiry value onto its top-level `expiry`\n * field for convenience.\n */\nexport const EXECUTION_PERMISSION_EXPIRY_RULE_TYPE = 'expiry' as const;\n"]}

package/dist/decodePermission/decodePermission.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"decodePermission.d.ts","sourceRoot":"","sources":["../../src/decodePermission/decodePermission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAC;AAI7D,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uCAAuC,uCAGjD;IACD,SAAS,EAAE,GAAG,EAAE,CAAC;IACjB,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;CACzC,KAAG,iBAAiB,EAIpB,CAAC;AAEF,KAAK,iCAAiC,GAAG,OAAO,CAC9C,uBAAuB,EACvB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAClB,CAAC;AAEF,KAAK,2BAA2B,GAAG;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,EAAE,iCAAiC,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,EAAE,iCAAiC,CAAC,QAAQ,CAAC,CAAC;CACrD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,uCAAuC,oCAGjD;IACD,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;CACxB,KAAG,2BAqDH,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,4BAA4B,sHAWtC;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,GAAG,CAAC;IACf,QAAQ,EAAE,GAAG,CAAC;IACd,SAAS,EAAE,GAAG,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;CACpC,KAAG,iBAoBH,CAAC"}

package/dist/decodePermission/decodePermission.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"decodePermission.js","sourceRoot":"","sources":["../../src/decodePermission/decodePermission.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAS9C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EACtD,SAAS,EACT,kBAAkB,GAInB,EAAuB,EAAE;IACxB,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3C,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CACxC,CAAC;AACJ,CAAC,CAAC;AAcF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EACtD,iBAAiB,EACjB,OAAO,GAIR,EAA+B,EAAE;IAChC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,wBAAwB,GAAkC,EAAE,CAAC;IAEnE,MAAM,cAAc,GAAuD,EAAE,CAAC;IAE9E,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACzB,wBAAwB,CAAC,IAAI,CAAC;gBAC5B,OAAO;gBACP,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,MAAM,EAAE,YAAY,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC;gBAClB,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,KAAK,EAAE,YAAY,CAAC,KAAK;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,wBAAwB;aACnC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;aAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChC,CAAC;IAED,MAAM,OAAO,GAAG,cAAc;SAC3B,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAChE;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,IAAI,KAAK,CACb,uEAAuE,OAAO,EAAE,CACjF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,EAC3C,OAAO,EACP,cAAc,EACd,SAAS,EACT,QAAQ,EACR,SAAS,EACT,MAAM,EACN,IAAI,EACJ,aAAa,EACb,eAAe,EACf,KAAK,GAYN,EAAqB,EAAE;IACtB,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GAAsB;QACpC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC;QAC7B,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,QAAQ;QACZ,UAAU,EAAE;YACV,IAAI,EAAE,cAAc;YACpB,IAAI;YACJ,aAAa;SACd;QACD,MAAM;QACN,MAAM,EAAE,eAAe;QACvB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;IAEF,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC","sourcesContent":["import type { Caveat, Hex } from '@metamask/delegation-core';\nimport { ROOT_AUTHORITY } from '@metamask/delegation-core';\nimport { numberToHex } from '@metamask/utils';\n\nimport type {\n  DecodedPermission,\n  PermissionType,\n  PermissionDecoder,\n  ValidateAndDecodeResult,\n} from './types.js';\n\n/**\n * Returns every permission decoder whose caveat-address pattern matches the\n * given enforcer list for the chain. Used when more than one permission type\n * can share the same enforcer set; the caller must disambiguate by validating\n * caveat terms (see {@link selectUniqueDecoderAndDecodedPermission}).\n *\n * @param args - The arguments to this function.\n * @param args.enforcers - List of enforcer contract addresses (hex strings).\n * @param args.permissionDecoders - The permission decoders for the chain.\n * @returns All decoders that match, possibly empty.\n */\nexport const findDecodersWithMatchingCaveatAddresses = ({\n  enforcers,\n  permissionDecoders,\n}: {\n  enforcers: Hex[];\n  permissionDecoders: PermissionDecoder[];\n}): PermissionDecoder[] => {\n  return permissionDecoders.filter((decoder) =>\n    decoder.caveatAddressesMatch(enforcers),\n  );\n};\n\ntype SuccessfulValidateAndDecodeResult = Extract<\n  ValidateAndDecodeResult,\n  { isValid: true }\n>;\n\ntype DecoderAndDecodedPermission = {\n  decoder: PermissionDecoder;\n  rules: SuccessfulValidateAndDecodeResult['rules'];\n  data: SuccessfulValidateAndDecodeResult['data'];\n  expiry: SuccessfulValidateAndDecodeResult['expiry'];\n};\n\n/**\n * Runs {@link PermissionDecoder.validateAndDecodePermission} on each candidate\n * decoder. Use when several decoders share the same caveat addresses.\n *\n * @param args - The arguments to this function.\n * @param args.candidateDecoders - Decoders whose addresses already match the caveats.\n * @param args.caveats - Caveats from the delegation.\n * @returns The unique decoder and decoded expiry/data when exactly one decoder validates.\n * @throws If `candidateDecoders` is empty, if no decoder validates, or if more than one decoder validates.\n */\nexport const selectUniqueDecoderAndDecodedPermission = ({\n  candidateDecoders,\n  caveats,\n}: {\n  candidateDecoders: PermissionDecoder[];\n  caveats: Caveat<Hex>[];\n}): DecoderAndDecodedPermission => {\n  if (candidateDecoders.length === 0) {\n    throw new Error('Unable to identify permission type');\n  }\n\n  const successfulDecodingResult: DecoderAndDecodedPermission[] = [];\n\n  const failedAttempts: { permissionType: PermissionType; error: Error }[] = [];\n\n  for (const decoder of candidateDecoders) {\n    const decodeResult = decoder.validateAndDecodePermission(caveats);\n    if (decodeResult.isValid) {\n      successfulDecodingResult.push({\n        decoder,\n        rules: decodeResult.rules,\n        data: decodeResult.data,\n        expiry: decodeResult.expiry,\n      });\n    } else {\n      failedAttempts.push({\n        permissionType: decoder.permissionType,\n        error: decodeResult.error,\n      });\n    }\n  }\n\n  if (successfulDecodingResult.length === 1) {\n    return successfulDecodingResult[0];\n  }\n\n  if (successfulDecodingResult.length > 1) {\n    const types = successfulDecodingResult\n      .map((result) => result.decoder.permissionType)\n      .join(', ');\n    throw new Error(\n      `Multiple permission types validate the same delegation caveats: ${types}`,\n    );\n  }\n\n  if (failedAttempts.length === 1) {\n    throw failedAttempts[0].error;\n  }\n\n  const details = failedAttempts\n    .map(\n      (attempt) =>\n        `${String(attempt.permissionType)}: ${attempt.error.message}`,\n    )\n    .join('; ');\n\n  throw new Error(\n    `No permission type could validate the delegation caveats. Attempts: ${details}`,\n  );\n};\n\n/**\n * Reconstructs a {@link DecodedPermission} object from primitive values\n * obtained while decoding a permission context.\n *\n * @param args - The arguments to this function.\n * @param args.chainId - Chain ID.\n * @param args.permissionType - Identified permission type.\n * @param args.delegator - Address of the account delegating permission.\n * @param args.delegate - Address that will act under the granted permission.\n * @param args.authority - Authority identifier; must be ROOT_AUTHORITY.\n * @param args.expiry - Expiry timestamp (unix seconds) or null if unbounded.\n * @param args.data - Permission-specific decoded data payload.\n * @param args.justification - Human-readable justification for the permission.\n * @param args.specifiedOrigin - The origin reported in the request metadata.\n * @param args.rules - Rules recovered from caveats (e.g. redeemer allowlist).\n *\n * @returns The reconstructed {@link DecodedPermission}.\n */\nexport const reconstructDecodedPermission = ({\n  chainId,\n  permissionType,\n  delegator,\n  delegate,\n  authority,\n  expiry,\n  data,\n  justification,\n  specifiedOrigin,\n  rules,\n}: {\n  chainId: number;\n  permissionType: PermissionType;\n  delegator: Hex;\n  delegate: Hex;\n  authority: Hex;\n  expiry: number | null;\n  data: DecodedPermission['permission']['data'];\n  justification: string;\n  specifiedOrigin: string;\n  rules?: DecodedPermission['rules'];\n}): DecodedPermission => {\n  if (authority !== ROOT_AUTHORITY) {\n    throw new Error('Invalid authority');\n  }\n\n  const permission: DecodedPermission = {\n    chainId: numberToHex(chainId),\n    from: delegator,\n    to: delegate,\n    permission: {\n      type: permissionType,\n      data,\n      justification,\n    },\n    expiry,\n    origin: specifiedOrigin,\n    ...(rules === undefined ? {} : { rules }),\n  };\n\n  return permission;\n};\n"]}

package/dist/decodePermission/decoders/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/decodePermission/decoders/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGrD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oCAAoC,cACpC,uBAAuB,KACjC,iBAAiB,EAEnB,CAAC"}

package/dist/decodePermission/decoders/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/decodePermission/decoders/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAI/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAClD,SAAkC,EACb,EAAE;IACvB,OAAO,4BAA4B,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAC5E,CAAC,CAAC","sourcesContent":["import { makePermissionDecoderConfigs } from '@metamask/7715-permission-types';\nimport type { EnforcerAddressesByName } from '@metamask/7715-permission-types';\n\nimport type { PermissionDecoder } from '../types.js';\nimport { makePermissionDecoder } from './makePermissionDecoder.js';\n\n/**\n * Builds the canonical set of permission decoders for a chain.\n *\n * Each decoder specifies the `permissionType`, required/optional enforcers,\n * and provides `caveatAddressesMatch` and `validateAndDecodePermission` so the\n * entire decode flow can be driven by the decoders.\n *\n * `contracts` should already be checksummed (see {@link toEnforcerAddressesByName}).\n * `makePermissionDecoderConfigs` checksums them again, and {@link makePermissionDecoder}\n * normalizes enforcer sets once more — see the module comment in\n * `makePermissionDecoder.ts` for why checksumming is layered this way.\n *\n * @param contracts - The deployed enforcer addresses for the chain.\n * @returns A list of permission decoders used to identify and decode permission types.\n * @throws Propagates any errors from resolving enforcer addresses.\n */\nexport const createPermissionDecodersForContracts = (\n  contracts: EnforcerAddressesByName,\n): PermissionDecoder[] => {\n  return makePermissionDecoderConfigs(contracts).map(makePermissionDecoder);\n};\n"]}

package/dist/decodePermission/decoders/makePermissionDecoder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"makePermissionDecoder.d.ts","sourceRoot":"","sources":["../../../src/decodePermission/decoders/makePermissionDecoder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EAExB,MAAM,iCAAiC,CAAC;AAMzC,OAAO,KAAK,EAAE,iBAAiB,EAA2B,MAAM,aAAa,CAAC;AAG9E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,EACL,qBAAqB,GACtB,EAAE,uBAAuB,GAAG,iBAAiB,CAgF7C"}

package/dist/decodePermission/decoders/makePermissionDecoder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"makePermissionDecoder.js","sourceRoot":"","sources":["../../../src/decodePermission/decoders/makePermissionDecoder.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGxE,OAAO,EAAE,qCAAqC,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,EACL,qBAAqB,GACG;IACxB,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,iBAAiB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAC1C,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3D,kBAAkB,CAAC,QAAe,CAAC;QACnC,KAAK;KACN,CAAC,CACH,CAAC;IAEF,MAAM,oBAAoB,GAAG,CAAC,eAAsB,EAAW,EAAE;QAC/D,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,yBAAyB,CAAC,eAAe,CAAC,CAAC;QAE5E,OAAO,kBAAkB,CACvB,MAAM,EACN,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,CACrB,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,2BAA2B,GAAG,CAClC,OAAsB,EACG,EAAE;QAC3B,MAAM,eAAe,GAAkB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9D,GAAG,MAAM;YACT,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC9C,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM;YACzC,8DAA8D;YAC9D,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAC3D,CAAC;YAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YAED,IAAI,MAAM,GAAkB,IAAI,CAAC;YACjC,MAAM,YAAY,GAAW,EAAE,CAAC;YAEhC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC;oBAClB,iBAAiB;oBACjB,OAAO,EAAE,eAAe;oBACxB,iBAAiB,EAAE,oBAAoB;iBACxC,CAAC,CAAC;gBAEH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,SAAS;gBACX,CAAC;gBAED,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAExB,IAAI,IAAI,CAAC,IAAI,KAAK,qCAAqC,EAAE,CAAC;oBACxD,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAmB,CAAC;gBACzC,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAEvE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,IAAI;gBACJ,KAAK,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;aAC1D,CAAC;QACJ,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAoB,EAAE,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,cAAc;QACd,oBAAoB;QACpB,2BAA2B;QAC3B,iBAAiB,EAAE,oBAAoB;QACvC,iBAAiB,EAAE,oBAAoB;KACxC,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  PermissionDecoderConfig,\n  Rule,\n} from '@metamask/7715-permission-types';\nimport type { Caveat } from '@metamask/delegation-core';\nimport { getChecksumAddress, isStrictHexString } from '@metamask/utils';\nimport type { Hex } from '@metamask/utils';\n\nimport { EXECUTION_PERMISSION_EXPIRY_RULE_TYPE } from '../../constants.js';\nimport type { PermissionDecoder, ValidateAndDecodeResult } from '../types.js';\nimport { buildEnforcerCountsAndSet, enforcersMatchRule } from '../utils.js';\n\n/**\n * Address checksumming in the permission decode flow.\n *\n * Enforcer addresses come from three sources, each of which may use a\n * different hex encoding (EIP-55 checksummed vs lowercase). Comparisons rely\n * on strict equality, so we normalize at function boundaries instead of\n * requiring callers to pass a specific encoding. `getChecksumAddress` is\n * idempotent, so repeated normalization is intentional and cheap.\n *\n * 1. **Canonical contract addresses** (`EnforcerAddressesByName`): normalized\n *    in {@link toEnforcerAddressesByName}, again in\n *    `makePermissionDecoderConfigs` (`checksumEnforcerAddresses` in\n *    `@metamask/7715-permission-types`), and once more below when building\n *    each decoder's required/optional enforcer sets.\n *\n * 2. **Delegation caveat enforcers**: read from the encoded permission\n *    context with unpredictable casing. Normalized in\n *    {@link buildEnforcerCountsAndSet} during address matching and again in\n *    `validateAndDecodePermission` before term decoding (rule decoders and\n *    `getTermsByEnforcer` compare enforcer addresses with `===`).\n *\n * 3. **Decoder required/optional enforcers**: populated from contract\n *    addresses by `makePermissionDecoderConfigs`; normalized at decoder\n *    construction so `caveatAddressesMatch` compares like-for-like with\n *    caveat addresses from source (2).\n */\n\n/**\n * Creates a single {@link PermissionDecoder} with the given type, enforcer\n * sets, rule decoders, and decode/validate callback.\n *\n * @param config - The configuration describing the permission type's\n * enforcers, rule decoders, and data decoder. See\n * {@link PermissionDecoderConfig} for field documentation.\n * @param config.permissionType - The type of permission to decode.\n * @param config.contractAddresses - Checksummed enforcer addresses for the chain.\n * @param config.optionalEnforcers - Optional enforcers for the permission.\n * @param config.requiredEnforcers - Required enforcers for the permission.\n * @param config.rules - Rule decoders for the permission.\n * @param config.validateAndDecodeData - Data decoder for the permission.\n * @returns A {@link PermissionDecoder} with `caveatAddressesMatch` and\n * `validateAndDecodePermission`.\n */\nexport function makePermissionDecoder({\n  permissionType,\n  contractAddresses,\n  optionalEnforcers,\n  requiredEnforcers,\n  rules,\n  validateAndDecodeData,\n}: PermissionDecoderConfig): PermissionDecoder {\n  const optionalEnforcersSet = new Set(\n    optionalEnforcers.map(getChecksumAddress),\n  );\n  const requiredEnforcersMap = new Map(\n    Object.entries(requiredEnforcers).map(([enforcer, count]) => [\n      getChecksumAddress(enforcer as Hex),\n      count,\n    ]),\n  );\n\n  const caveatAddressesMatch = (caveatAddresses: Hex[]): boolean => {\n    const { counts, enforcersSet } = buildEnforcerCountsAndSet(caveatAddresses);\n\n    return enforcersMatchRule(\n      counts,\n      enforcersSet,\n      requiredEnforcersMap,\n      optionalEnforcersSet,\n    );\n  };\n\n  const validateAndDecodePermission = (\n    caveats: Caveat<Hex>[],\n  ): ValidateAndDecodeResult => {\n    const checksumCaveats: Caveat<Hex>[] = caveats.map((caveat) => ({\n      ...caveat,\n      enforcer: getChecksumAddress(caveat.enforcer),\n    }));\n    try {\n      const invalidTerms = checksumCaveats.filter(\n        // isStrictHexString rejects '0x' which is a valid terms value\n        ({ terms }) => terms !== '0x' && !isStrictHexString(terms),\n      );\n\n      if (invalidTerms.length > 0) {\n        throw new Error('Invalid terms: must be a hex string');\n      }\n\n      let expiry: number | null = null;\n      const decodedRules: Rule[] = [];\n\n      for (const decode of rules) {\n        const rule = decode({\n          contractAddresses,\n          caveats: checksumCaveats,\n          requiredEnforcers: requiredEnforcersMap,\n        });\n\n        if (rule === null) {\n          continue;\n        }\n\n        decodedRules.push(rule);\n\n        if (rule.type === EXECUTION_PERMISSION_EXPIRY_RULE_TYPE) {\n          expiry = rule.data.timestamp as number;\n        }\n      }\n\n      const data = validateAndDecodeData(checksumCaveats, contractAddresses);\n\n      return {\n        isValid: true,\n        expiry,\n        data,\n        rules: decodedRules.length > 0 ? decodedRules : undefined,\n      };\n    } catch (caughtError) {\n      return { isValid: false, error: caughtError as Error };\n    }\n  };\n\n  return {\n    permissionType,\n    caveatAddressesMatch,\n    validateAndDecodePermission,\n    optionalEnforcers: optionalEnforcersSet,\n    requiredEnforcers: requiredEnforcersMap,\n  };\n}\n"]}

package/dist/decodePermission/enforcerAddresses.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"enforcerAddresses.d.ts","sourceRoot":"","sources":["../../src/decodePermission/enforcerAddresses.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAM/E,OAAO,KAAK,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAGhF,eAAO,MAAM,4BAA4B,EAEpC,MAAM,CAAC,MAAM,EAAE,4CAA4C,CAAC,CAAC;AAelE;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,cACzB,4CAA4C,KACtD,uBAqCD,CAAC"}

package/dist/decodePermission/enforcerAddresses.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enforcerAddresses.js","sourceRoot":"","sources":["../../src/decodePermission/enforcerAddresses.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAG/D,6GAA6G;AAC7G,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAC7D,4BAA4B,CACmC,CAAC;AAElE,MAAM,0BAA0B,GAAG,CACjC,SAAuD,EACvD,YAAgE,EAC3D,EAAE;IACP,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,SAAuD,EAC9B,EAAE,CAAC,CAAC;IAC7B,uBAAuB,EAAE,0BAA0B,CACjD,SAAS,EACT,yBAAyB,CAC1B;IACD,sBAAsB,EAAE,0BAA0B,CAChD,SAAS,EACT,wBAAwB,CACzB;IACD,gBAAgB,EAAE,0BAA0B,CAAC,SAAS,EAAE,kBAAkB,CAAC;IAC3E,sBAAsB,EAAE,0BAA0B,CAChD,SAAS,EACT,wBAAwB,CACzB;IACD,2BAA2B,EAAE,0BAA0B,CACrD,SAAS,EACT,6BAA6B,CAC9B;IACD,4BAA4B,EAAE,0BAA0B,CACtD,SAAS,EACT,8BAA8B,CAC/B;IACD,iCAAiC,EAAE,0BAA0B,CAC3D,SAAS,EACT,mCAAmC,CACpC;IACD,0BAA0B,EAAE,0BAA0B,CACpD,SAAS,EACT,4BAA4B,CAC7B;IACD,qBAAqB,EAAE,0BAA0B,CAC/C,SAAS,EACT,uBAAuB,CACxB;IACD,gBAAgB,EAAE,0BAA0B,CAAC,SAAS,EAAE,kBAAkB,CAAC;IAC3E,iBAAiB,EAAE,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC;IAC7E,aAAa,EAAE,0BAA0B,CAAC,SAAS,EAAE,eAAe,CAAC;CACtE,CAAC,CAAC","sourcesContent":["import type { EnforcerAddressesByName } from '@metamask/7715-permission-types';\nimport { DELEGATOR_CONTRACTS } from '@metamask/delegation-deployments';\nimport { getChecksumAddress } from '@metamask/utils';\nimport type { Hex } from '@metamask/utils';\n\nimport { DELEGATION_FRAMEWORK_VERSION } from '../constants.js';\nimport type { DelegationDeploymentsEnforcerAddressesByName } from '../types.js';\n\n// @metamask/delegation-deployments exports a very loosely typed object. We assert a more narrow typing here.\nexport const delegationContractsByChainId = DELEGATOR_CONTRACTS[\n  DELEGATION_FRAMEWORK_VERSION\n] as Record<number, DelegationDeploymentsEnforcerAddressesByName>;\n\nconst getChecksumContractAddress = (\n  contracts: DelegationDeploymentsEnforcerAddressesByName,\n  contractName: keyof DelegationDeploymentsEnforcerAddressesByName,\n): Hex => {\n  const address = contracts[contractName];\n\n  if (!address) {\n    throw new Error(`Contract not found: ${contractName}`);\n  }\n\n  return getChecksumAddress(address);\n};\n\n/**\n * Converts delegation-deployments enforcer addresses to the canonical shape\n * expected by `@metamask/7715-permission-types`, checksumming each address.\n *\n * @param contracts - Enforcer addresses keyed by delegation-deployments names.\n * @returns Checksummed enforcer addresses keyed by permission-types names.\n * @throws If an expected enforcer contract is not found.\n */\nexport const toEnforcerAddressesByName = (\n  contracts: DelegationDeploymentsEnforcerAddressesByName,\n): EnforcerAddressesByName => ({\n  allowedCalldataEnforcer: getChecksumContractAddress(\n    contracts,\n    'AllowedCalldataEnforcer',\n  ),\n  allowedTargetsEnforcer: getChecksumContractAddress(\n    contracts,\n    'AllowedTargetsEnforcer',\n  ),\n  redeemerEnforcer: getChecksumContractAddress(contracts, 'RedeemerEnforcer'),\n  erc20StreamingEnforcer: getChecksumContractAddress(\n    contracts,\n    'ERC20StreamingEnforcer',\n  ),\n  erc20PeriodTransferEnforcer: getChecksumContractAddress(\n    contracts,\n    'ERC20PeriodTransferEnforcer',\n  ),\n  nativeTokenStreamingEnforcer: getChecksumContractAddress(\n    contracts,\n    'NativeTokenStreamingEnforcer',\n  ),\n  nativeTokenPeriodTransferEnforcer: getChecksumContractAddress(\n    contracts,\n    'NativeTokenPeriodTransferEnforcer',\n  ),\n  approvalRevocationEnforcer: getChecksumContractAddress(\n    contracts,\n    'ApprovalRevocationEnforcer',\n  ),\n  exactCalldataEnforcer: getChecksumContractAddress(\n    contracts,\n    'ExactCalldataEnforcer',\n  ),\n  valueLteEnforcer: getChecksumContractAddress(contracts, 'ValueLteEnforcer'),\n  timestampEnforcer: getChecksumContractAddress(contracts, 'TimestampEnforcer'),\n  nonceEnforcer: getChecksumContractAddress(contracts, 'NonceEnforcer'),\n});\n"]}

package/dist/decodePermission/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/decodePermission/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uCAAuC,EACvC,4BAA4B,EAC5B,uCAAuC,GACxC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oCAAoC,EAAE,MAAM,qBAAqB,CAAC;AAE3E,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,YAAY,CAAC"}

package/dist/decodePermission/index.js

@@ -1,3 +0,0 @@
-export { findDecodersWithMatchingCaveatAddresses, reconstructDecodedPermission, selectUniqueDecoderAndDecodedPermission, } from './decodePermission.js';
-export { createPermissionDecodersForContracts } from './decoders/index.js';
-//# sourceMappingURL=index.js.map

package/dist/decodePermission/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/decodePermission/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uCAAuC,EACvC,4BAA4B,EAC5B,uCAAuC,GACxC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oCAAoC,EAAE,MAAM,qBAAqB,CAAC","sourcesContent":["export {\n  findDecodersWithMatchingCaveatAddresses,\n  reconstructDecodedPermission,\n  selectUniqueDecoderAndDecodedPermission,\n} from './decodePermission.js';\nexport { createPermissionDecodersForContracts } from './decoders/index.js';\n\nexport type {\n  DecodedPermission,\n  PermissionDecoder,\n  ValidateAndDecodeResult,\n} from './types.js';\n"]}

package/dist/decodePermission/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/decodePermission/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,IAAI,EACL,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAG3C;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,iBAAiB,CAAC,eAAe,CAAC,EAClC,SAAS,GAAG,MAAM,GAAG,IAAI,CAC1B,GAAG;IACF,UAAU,EAAE,IAAI,CACd,iBAAiB,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,EAChD,qBAAqB,GAAG,MAAM,GAAG,MAAM,CACxC,GAAG;QACF,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QAE9B,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF;;OAEG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IACE,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB,GACD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAErC;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,cAAc,CAAC;IAC/B,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,iBAAiB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;IAC1D;;;OAGG;IACH,2BAA2B,EAAE,CAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KACnB,uBAAuB,CAAC;CAC9B,CAAC"}

package/dist/decodePermission/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/decodePermission/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/decodePermission/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  PermissionRequest,\n  PermissionTypes,\n  Rule,\n} from '@metamask/7715-permission-types';\nimport type { Caveat } from '@metamask/delegation-core';\nimport type { Hex } from '@metamask/utils';\n\n// This is a somewhat convoluted type - it includes all of the fields that are decoded from the permission context.\n/**\n * A partially reconstructed permission object decoded from a permission context.\n *\n * This mirrors the shape of {@link PermissionRequest} for fields that can be\n * deterministically recovered from the encoded permission context, and it\n * augments the result with an explicit `expiry` property derived from the\n * `TimestampEnforcer` terms, as well as the `origin` property.\n */\nexport type DecodedPermission = Pick<\n  PermissionRequest<PermissionTypes>,\n  'chainId' | 'from' | 'to'\n> & {\n  permission: Omit<\n    PermissionRequest<PermissionTypes>['permission'],\n    'isAdjustmentAllowed' | 'type' | 'data'\n  > & {\n    type: PermissionTypes['type'];\n    data: PermissionTypes['data'];\n    // PermissionRequest type does not work well without the specific permission type, so we amend it here\n    justification?: string;\n  };\n  /**\n   * @deprecated Use `rules` instead.\n   */\n  expiry: number | null;\n  origin: string;\n  /** Rules recovered from caveats (e.g. redeemer allowlist). */\n  rules?: Rule[];\n};\n\n/**\n * Supported permission type identifiers that can be decoded from a permission context.\n */\nexport type PermissionType = DecodedPermission['permission']['type'];\n\n/**\n * Result of validating and decoding permission terms from caveats.\n * When valid, includes expiry and decoded data; when invalid, includes the error.\n */\nexport type ValidateAndDecodeResult =\n  | {\n      isValid: true;\n      expiry: number | null;\n      data: DecodedPermission['permission']['data'];\n      rules?: Rule[];\n    }\n  | { isValid: false; error: Error };\n\n/**\n * A decoder that defines the required and optional enforcers for a permission\n * type, and provides methods to test whether caveat addresses match the\n * permission and to validate and decode permission terms from caveats.\n */\nexport type PermissionDecoder = {\n  permissionType: PermissionType;\n  requiredEnforcers: Map<Hex, number>;\n  optionalEnforcers: Set<Hex>;\n  /**\n   * Returns true if the given caveat addresses (enforcer addresses) match this\n   * decoder (required enforcers present with correct multiplicity, no\n   * forbidden enforcers).\n   */\n  caveatAddressesMatch: (caveatAddresses: Hex[]) => boolean;\n  /**\n   * Validates and decodes permission terms from the caveats. Returns a result\n   * object with isValid; when valid, includes expiry and data.\n   */\n  validateAndDecodePermission: (\n    caveats: Caveat<Hex>[],\n  ) => ValidateAndDecodeResult;\n};\n"]}

package/dist/decodePermission/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/decodePermission/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,UAAW,GAAG,KAAG,MAiBzD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG;IACjE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;CACxB,CAMA;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,EACxB,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,EACtB,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,EACnC,iBAAiB,EAAE,GAAG,CAAC,GAAG,CAAC,GAC1B,OAAO,CAgBT;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,gBAAgB,SAAS,OAAO,GAAG,IAAI,EAAE,EAC1E,OAAO,EACP,QAAQ,EACR,eAAe,GAChB,EAAE;IACD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACvB,QAAQ,EAAE,GAAG,CAAC;IACd,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,GAAG,gBAAgB,SAAS,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,CAiBnD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,CAU7D"}

package/dist/decodePermission/utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/decodePermission/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGlE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,KAAU,EAAU,EAAE;IACjE,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,qFAAqF,KAAK,CAAC,MAAM,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,eAAsB;IAI9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAe,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAwB,EACxB,YAAsB,EACtB,iBAAmC,EACnC,iBAA2B;IAE3B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAM;QACpC,GAAG,iBAAiB;QACpB,GAAG,iBAAiB,CAAC,IAAI,EAAE;KAC5B,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAA0C,EAC1E,OAAO,EACP,QAAQ,EACR,eAAe,GAKhB;IACC,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CACpC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CACzC,CAAC;IAEF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAwD,CAAC;IAClE,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAU,EAAE,OAAiB;IACpD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,UAAU,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,cAAc,CAAC,CAAC;QACxD,KAAK,IAAI,cAAc,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAW,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import type { Caveat } from '@metamask/delegation-core';\nimport { getChecksumAddress, hexToNumber } from '@metamask/utils';\nimport type { Hex } from '@metamask/utils';\n\n/**\n * Extracts the expiry timestamp from TimestampEnforcer caveat terms.\n * Terms are 32 bytes: first 16 bytes timestampAfterThreshold (must be 0),\n * last 16 bytes timestampBeforeThreshold (expiry).\n *\n * @param terms - The hex-encoded terms from a TimestampEnforcer caveat.\n * @returns The expiry timestamp in seconds.\n * @throws If terms are invalid.\n */\nexport const extractExpiryFromCaveatTerms = (terms: Hex): number => {\n  if (terms.length !== 66) {\n    throw new Error(\n      `Invalid TimestampEnforcer terms length: expected 66 characters (0x + 64 hex), got ${terms.length}`,\n    );\n  }\n  const [after, before] = splitHex(terms, [16, 16]);\n  if (hexToNumber(after) !== 0) {\n    throw new Error('Invalid expiry: timestampAfterThreshold must be 0');\n  }\n  const expiry = hexToNumber(before);\n  if (expiry === 0) {\n    throw new Error(\n      'Invalid expiry: timestampBeforeThreshold must be greater than 0',\n    );\n  }\n  return expiry;\n};\n\n/**\n * Builds enforcer counts and set from caveat addresses (checksummed).\n * Used by caveatAddressesMatch.\n *\n * @param caveatAddresses - List of enforcer contract addresses (hex).\n * @returns Counts per enforcer and set of unique enforcers.\n */\nexport function buildEnforcerCountsAndSet(caveatAddresses: Hex[]): {\n  counts: Map<Hex, number>;\n  enforcersSet: Set<Hex>;\n} {\n  const counts = new Map<Hex, number>();\n  for (const addr of caveatAddresses.map(getChecksumAddress)) {\n    counts.set(addr, (counts.get(addr) ?? 0) + 1);\n  }\n  return { counts, enforcersSet: new Set(counts.keys()) };\n}\n\n/**\n * Returns true if the given counts/set match the rule (required counts exact,\n * no enforcer outside required + optional).\n *\n * @param counts - Map of enforcer address to occurrence count.\n * @param enforcersSet - Set of unique enforcer addresses present.\n * @param requiredEnforcers - Map of required enforcer to required count.\n * @param optionalEnforcers - Set of optional enforcer addresses.\n * @returns True if the counts match the rule.\n */\nexport function enforcersMatchRule(\n  counts: Map<Hex, number>,\n  enforcersSet: Set<Hex>,\n  requiredEnforcers: Map<Hex, number>,\n  optionalEnforcers: Set<Hex>,\n): boolean {\n  const allowedEnforcers = new Set<Hex>([\n    ...optionalEnforcers,\n    ...requiredEnforcers.keys(),\n  ]);\n  for (const addr of enforcersSet) {\n    if (!allowedEnforcers.has(addr)) {\n      return false;\n    }\n  }\n  for (const [addr, requiredCount] of requiredEnforcers.entries()) {\n    if ((counts.get(addr) ?? 0) !== requiredCount) {\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * Gets the terms for a given enforcer from a list of caveats.\n *\n * @param args - The arguments to this function.\n * @param  args.throwIfNotFound - Whether to throw an error if no matching enforcer is found. Default is true.\n * @param args.caveats - The list of caveats to search.\n * @param args.enforcer - The enforcer to search for.\n * @returns The terms for the given enforcer.\n */\nexport function getTermsByEnforcer<TThrowIfNotFound extends boolean = true>({\n  caveats,\n  enforcer,\n  throwIfNotFound,\n}: {\n  caveats: Caveat<Hex>[];\n  enforcer: Hex;\n  throwIfNotFound?: TThrowIfNotFound;\n}): TThrowIfNotFound extends true ? Hex : Hex | null {\n  const matchingCaveats = caveats.filter(\n    (caveat) => caveat.enforcer === enforcer,\n  );\n\n  if (matchingCaveats.length === 0) {\n    if (throwIfNotFound ?? true) {\n      throw new Error('Invalid caveats');\n    }\n    return null as TThrowIfNotFound extends true ? Hex : Hex | null;\n  }\n\n  if (matchingCaveats.length > 1) {\n    throw new Error('Invalid caveats');\n  }\n\n  return matchingCaveats[0].terms;\n}\n\n/**\n * Splits a 0x-prefixed hex string into parts according to the provided byte lengths.\n *\n * Each entry in `lengths` represents a part length in bytes; internally this is\n * multiplied by 2 to derive the number of hexadecimal characters to slice. The\n * returned substrings do not include the `0x` prefix and preserve leading zeros.\n *\n * Note: This function does not perform input validation (e.g., verifying the\n * payload length equals the sum of requested lengths). Callers are expected to\n * provide well-formed inputs.\n *\n * Example:\n * splitHex('0x12345678', [1, 3]) => ['0x12', '0x345678']\n *\n * @param value - The 0x-prefixed hex string to split.\n * @param lengths - The lengths of each part, in bytes.\n * @returns An array of hex substrings (each with `0x` prefix), one for each part.\n */\nexport function splitHex(value: Hex, lengths: number[]): Hex[] {\n  let start = 2;\n  const parts: Hex[] = [];\n  for (const partLength of lengths) {\n    const partCharLength = partLength * 2;\n    const part = value.slice(start, start + partCharLength);\n    start += partCharLength;\n    parts.push(`0x${part}` as const);\n  }\n  return parts;\n}\n"]}

package/dist/errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE;;GAEG;AACH,KAAK,2BAA2B,GAAG;IACjC,IAAI,EAAE,mCAAmC,CAAC;IAC1C,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,IAAI,EAAE,mCAAmC,CAAC;IAE1C,KAAK,EAAE,KAAK,CAAC;IAEb,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,2BAA2B,EAKhE;CACF;AAED,qBAAa,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAMhE;CACF;AAED,qBAAa,6BAA8B,SAAQ,+BAA+B;IAChF,YAAY,EACV,KAAK,EACL,MAAM,GACP,EAAE;QACD,KAAK,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,6BAA6B,CAAC;KACvC,EAMA;CACF;AAED,qBAAa,qBAAsB,SAAQ,+BAA+B;IACxE,YAAY,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,EAQzC;CACF;AAED,qBAAa,uBAAwB,SAAQ,+BAA+B;IAC1E,YAAY,EAAE,KAAK,EAAE,EAAE;QAAE,KAAK,EAAE,KAAK,CAAA;KAAE,EAMtC;CACF"}

package/dist/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAWjE,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAKxD,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAA+B;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,EAAE,KAAK,EAAE,OAAO,EAAqC;QAC/D,KAAK,CAAC;YACJ,KAAK;YACL,OAAO;YACP,IAAI,EAAE,mCAAmC,CAAC,0BAA0B;SACrE,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,6BAA8B,SAAQ,+BAA+B;IAChF,YAAY,EACV,KAAK,EACL,MAAM,GAIP;QACC,KAAK,CAAC;YACJ,KAAK;YACL,OAAO,EAAE,0EAA0E,MAAM,EAAE;YAC3F,IAAI,EAAE,mCAAmC,CAAC,6BAA6B;SACxE,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,+BAA+B;IACxE,YAAY,EAAE,MAAM,EAAsB;QACxC,MAAM,OAAO,GAAG,UAAU,MAAM,cAAc,CAAC;QAE/C,KAAK,CAAC;YACJ,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC;YACzB,OAAO;YACP,IAAI,EAAE,mCAAmC,CAAC,qBAAqB;SAChE,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,+BAA+B;IAC1E,YAAY,EAAE,KAAK,EAAoB;QACrC,KAAK,CAAC;YACJ,KAAK;YACL,OAAO,EAAE,6BAA6B;YACtC,IAAI,EAAE,mCAAmC,CAAC,uBAAuB;SAClE,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type { GatorPermissionsSnapRpcMethod } from './types.js';\nimport { GatorPermissionsControllerErrorCode } from './types.js';\n\n/**\n * Represents a base gator permissions error.\n */\ntype GatorPermissionsErrorParams = {\n  code: GatorPermissionsControllerErrorCode;\n  cause: Error;\n  message: string;\n};\n\nexport class GatorPermissionsControllerError extends Error {\n  code: GatorPermissionsControllerErrorCode;\n\n  cause: Error;\n\n  constructor({ cause, message, code }: GatorPermissionsErrorParams) {\n    super(message);\n\n    this.cause = cause;\n    this.code = code;\n  }\n}\n\nexport class GatorPermissionsFetchError extends GatorPermissionsControllerError {\n  constructor({ cause, message }: { cause: Error; message: string }) {\n    super({\n      cause,\n      message,\n      code: GatorPermissionsControllerErrorCode.GatorPermissionsFetchError,\n    });\n  }\n}\n\nexport class GatorPermissionsProviderError extends GatorPermissionsControllerError {\n  constructor({\n    cause,\n    method,\n  }: {\n    cause: Error;\n    method: GatorPermissionsSnapRpcMethod;\n  }) {\n    super({\n      cause,\n      message: `Failed to handle snap request to gator permissions provider for method ${method}`,\n      code: GatorPermissionsControllerErrorCode.GatorPermissionsProviderError,\n    });\n  }\n}\n\nexport class OriginNotAllowedError extends GatorPermissionsControllerError {\n  constructor({ origin }: { origin: string }) {\n    const message = `Origin ${origin} not allowed`;\n\n    super({\n      cause: new Error(message),\n      message,\n      code: GatorPermissionsControllerErrorCode.OriginNotAllowedError,\n    });\n  }\n}\n\nexport class PermissionDecodingError extends GatorPermissionsControllerError {\n  constructor({ cause }: { cause: Error }) {\n    super({\n      cause,\n      message: `Failed to decode permission`,\n      code: GatorPermissionsControllerErrorCode.PermissionDecodingError,\n    });\n  }\n}\n"]}

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AACxF,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,oCAAoC,EACpC,uCAAuC,GACxC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,8DAA8D,EAC9D,oDAAoD,EACpD,8EAA8E,EAC9E,0CAA0C,EAC1C,mDAAmD,EACnD,sDAAsD,EACtD,gDAAgD,GACjD,MAAM,qDAAqD,CAAC;AAC7D,YAAY,EACV,+BAA+B,EAC/B,gCAAgC,EAChC,mCAAmC,EACnC,wCAAwC,EACxC,iCAAiC,EACjC,gCAAgC,EAChC,0CAA0C,GAC3C,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,YAAY,EACV,mCAAmC,EACnC,6BAA6B,EAC7B,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC"}

package/dist/index.js

@@ -1,3 +0,0 @@
-export { default as GatorPermissionsController } from './GatorPermissionsController.js';
-export { DELEGATION_FRAMEWORK_VERSION, EXECUTION_PERMISSION_EXPIRY_RULE_TYPE, EXECUTION_PERMISSION_PAYEE_RULE_TYPE, EXECUTION_PERMISSION_REDEEMER_RULE_TYPE, } from './constants.js';
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AACxF,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,oCAAoC,EACpC,uCAAuC,GACxC,MAAM,gBAAgB,CAAC","sourcesContent":["export { default as GatorPermissionsController } from './GatorPermissionsController.js';\nexport {\n  DELEGATION_FRAMEWORK_VERSION,\n  EXECUTION_PERMISSION_EXPIRY_RULE_TYPE,\n  EXECUTION_PERMISSION_PAYEE_RULE_TYPE,\n  EXECUTION_PERMISSION_REDEEMER_RULE_TYPE,\n} from './constants.js';\nexport type {\n  GatorPermissionsControllerFetchAndUpdateGatorPermissionsAction,\n  GatorPermissionsControllerAddPendingRevocationAction,\n  GatorPermissionsControllerDecodePermissionFromPermissionContextForOriginAction,\n  GatorPermissionsControllerInitializeAction,\n  GatorPermissionsControllerIsPendingRevocationAction,\n  GatorPermissionsControllerSubmitDirectRevocationAction,\n  GatorPermissionsControllerSubmitRevocationAction,\n} from './GatorPermissionsController-method-action-types.js';\nexport type {\n  GatorPermissionsControllerState,\n  GatorPermissionsControllerConfig,\n  GatorPermissionsControllerMessenger,\n  GatorPermissionsControllerGetStateAction,\n  GatorPermissionsControllerActions,\n  GatorPermissionsControllerEvents,\n  GatorPermissionsControllerStateChangeEvent,\n} from './GatorPermissionsController.js';\nexport type { DecodedPermission } from './decodePermission/index.js';\nexport type {\n  GatorPermissionsControllerErrorCode,\n  GatorPermissionsSnapRpcMethod,\n  PermissionRequest,\n  PermissionResponse,\n  PermissionInfo,\n  StoredGatorPermission,\n  PermissionInfoWithMetadata,\n  GatorPermissionStatus,\n  DelegationDetails,\n  RevocationParams,\n  RevocationMetadata,\n  SupportedPermissionType,\n} from './types.js';\n\nexport type { PayeeRule } from './payeeRule.js';\nexport type { RedeemerRule } from './redeemerRule.js';\nexport type {\n  NativeTokenStreamPermission,\n  NativeTokenPeriodicPermission,\n  Erc20TokenStreamPermission,\n  Erc20TokenPeriodicPermission,\n  MetaMaskBasePermissionData,\n} from '@metamask/7715-permission-types';\n"]}

package/dist/logger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,eAAO,MAAM,aAAa,0BAEzB,CAAC;AAEF,eAAO,MAAM,aAAa,0BAGzB,CAAC;AAEF,eAAO,MAAM,QAAQ,0BAA6C,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/logger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAE1B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAC9C,8BAA8B,CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAC7C,aAAa,EACb,4BAA4B,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,CAAC","sourcesContent":["/* istanbul ignore file */\n\nimport { createProjectLogger, createModuleLogger } from '@metamask/utils';\n\nexport const projectLogger = createProjectLogger(\n  'gator-permissions-controller',\n);\n\nexport const controllerLog = createModuleLogger(\n  projectLogger,\n  'GatorPermissionsController',\n);\n\nexport const utilsLog = createModuleLogger(projectLogger, 'utils');\n\nexport { createModuleLogger };\n"]}

package/dist/payeeRule.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payeeRule.d.ts","sourceRoot":"","sources":["../src/payeeRule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE;QACJ,SAAS,EAAE,GAAG,EAAE,CAAC;KAClB,CAAC;CACH,CAAC"}

package/dist/payeeRule.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=payeeRule.js.map

package/dist/payeeRule.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payeeRule.js","sourceRoot":"","sources":["../src/payeeRule.ts"],"names":[],"mappings":"","sourcesContent":["import type { Hex } from '@metamask/utils';\n\n/**\n * Execution permission rule restricting which addresses may receive payments\n * (on-chain AllowedCalldataEnforcer / AllowedTargetsEnforcer caveat).\n */\nexport type PayeeRule = {\n  type: 'payee';\n  data: {\n    addresses: Hex[];\n  };\n};\n"]}

package/dist/permissionOnChainStatus.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionOnChainStatus.d.ts","sourceRoot":"","sources":["../src/permissionOnChainStatus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAG/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAQ3C,OAAO,KAAK,EACV,0BAA0B,EAE3B,MAAM,YAAY,CAAC;AAKpB;;GAEG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,GAAG,KACT,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAE9C,MAAM,MAAM,8BAA8B,GAAG;IAC3C,qBAAqB,EAAE,qBAAqB,CAAC;CAC9C,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,cAAc,EAAE,GAAG,GAAG,GAAG,CAG1E;AAED;;;;;;;;GAQG;AACH,wBAAsB,6BAA6B,CAAC,EAClD,QAAQ,EACR,iBAAiB,EACjB,cAAc,GACf,EAAE;IACD,QAAQ,EAAE,+BAA+B,CAAC;IAC1C,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,EAAE,GAAG,CAAC;CACrB,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnB;AAED;;;;;GAKG;AACH,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,+BAA+B,GACxC,OAAO,CAAC,MAAM,CAAC,CASjB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EACrB,SAAS,EAAE,uBAAuB,GACjC,MAAM,GAAG,IAAI,CAaf;AAED;;;;;;GAMG;AACH,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,0BAA0B,EACjC,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,0BAA0B,CAAC,CAmDrC;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,kBAAkB,EAAE,0BAA0B,EAAE,EAChD,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAMvC"}

package/dist/permissionOnChainStatus.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionOnChainStatus.js","sourceRoot":"","sources":["../src/permissionOnChainStatus.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE9E,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9E,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAM5C,8EAA8E;AAC9E,MAAM,6BAA6B,GAAG,YAAY,CAAC;AAoBnD;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAAC,cAAmB;IACnE,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACxE,OAAO,GAAG,6BAA6B,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,EAClD,QAAQ,EACR,iBAAiB,EACjB,cAAc,GAKf;IACC,MAAM,IAAI,GAAG,iCAAiC,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;KACpD,CAAC,CAAQ,CAAC;IACX,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,QAAyC;IAEzC,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,sBAAsB;QAC9B,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;KAC1B,CAAC,CAAwB,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAqB,EACrB,SAAkC;IAElC,MAAM,cAAc,GAAG,kBAAkB,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACvE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACvC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,cAAc,CACnE,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,4BAA4B,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,KAAiC,EACjC,OAAuC;IAEvC,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,cAAc,GAA0B,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAExE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAClD,KAAK,CAAC,kBAAkB,CAAC,OAAO,CACjC,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC;YACrD,QAAQ;YACR,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,CAAC,iBAAiB;YAC7D,cAAc;SACf,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,mBAAmB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACxC,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,+BAA+B,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,kBAAgD,EAChD,OAAuC;IAEvC,OAAO,OAAO,CAAC,GAAG,CAChB,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,qCAAqC,CAAC,GAAG,EAAE,OAAO,CAAC,CACpD,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { EnforcerAddressesByName } from '@metamask/7715-permission-types';\nimport { encodeSingle, decodeSingle } from '@metamask/abi-utils';\nimport { decodeDelegations, hashDelegation } from '@metamask/delegation-core';\nimport type { Delegation } from '@metamask/delegation-core';\nimport { bytesToHex, getChecksumAddress, hexToNumber } from '@metamask/utils';\nimport type { Hex } from '@metamask/utils';\n\nimport {\n  delegationContractsByChainId,\n  toEnforcerAddressesByName,\n} from './decodePermission/enforcerAddresses.js';\nimport { extractExpiryFromCaveatTerms } from './decodePermission/utils.js';\nimport { controllerLog } from './logger.js';\nimport type {\n  PermissionInfoWithMetadata,\n  GatorPermissionStatus,\n} from './types.js';\n\n/** Function selector for `DelegationManager.disabledDelegations(bytes32)`. */\nconst DISABLED_DELEGATIONS_SELECTOR = '0x2d40d052';\n\n/**\n * Minimal EIP-1193 provider used for permission status RPCs.\n */\nexport type PermissionStatusEip1193Provider = {\n  request(args: { method: string; params?: unknown[] }): Promise<unknown>;\n};\n\n/**\n * Resolves an RPC provider for the given EIP-155 `chainId` (hex).\n */\nexport type GetProviderForChainId = (\n  chainId: Hex,\n) => Promise<PermissionStatusEip1193Provider>;\n\nexport type PermissionOnChainStatusOptions = {\n  getProviderForChainId: GetProviderForChainId;\n};\n\n/**\n * ABI-encodes a call to `DelegationManager.disabledDelegations(bytes32)`.\n *\n * @param delegationHash - Delegation struct hash (bytes32).\n * @returns Calldata hex string (selector + encoded argument).\n */\nexport function encodeDisabledDelegationsCalldata(delegationHash: Hex): Hex {\n  const encodedArgs = bytesToHex(encodeSingle('bytes32', delegationHash));\n  return `${DISABLED_DELEGATIONS_SELECTOR}${encodedArgs.slice(2)}`;\n}\n\n/**\n * Reads `disabledDelegations(delegationHash)` from the delegation manager.\n *\n * @param args - Arguments.\n * @param args.provider - JSON-RPC provider for the permission's chain.\n * @param args.delegationManager - DelegationManager contract address.\n * @param args.delegationHash - Hash of the leaf delegation.\n * @returns Whether the delegation is disabled on-chain.\n */\nexport async function readDelegationDisabledOnChain({\n  provider,\n  delegationManager,\n  delegationHash,\n}: {\n  provider: PermissionStatusEip1193Provider;\n  delegationManager: Hex;\n  delegationHash: Hex;\n}): Promise<boolean> {\n  const data = encodeDisabledDelegationsCalldata(delegationHash);\n  const raw = (await provider.request({\n    method: 'eth_call',\n    params: [{ to: delegationManager, data }, 'latest'],\n  })) as Hex;\n  return decodeSingle('bool', raw);\n}\n\n/**\n * Returns the latest block's timestamp in seconds.\n *\n * @param provider - JSON-RPC provider for the chain.\n * @returns Unix timestamp in seconds.\n */\nexport async function readLatestBlockTimestampSeconds(\n  provider: PermissionStatusEip1193Provider,\n): Promise<number> {\n  const block = (await provider.request({\n    method: 'eth_getBlockByNumber',\n    params: ['latest', false],\n  })) as { timestamp?: Hex };\n  if (!block?.timestamp) {\n    throw new Error('Latest block missing timestamp');\n  }\n  return hexToNumber(block.timestamp);\n}\n\n/**\n * Reads TimestampEnforcer expiry (unix seconds) from the leaf delegation's caveats.\n *\n * @param leaf - Leaf delegation (index 0 when decoded from permission context).\n * @param contracts - enforcer addresses for the chain.\n * @returns Expiry timestamp in seconds, or `null` if no valid timestamp caveat.\n */\nexport function getExpiryFromDelegation(\n  leaf: Delegation<Hex>,\n  contracts: EnforcerAddressesByName,\n): number | null {\n  const targetEnforcer = getChecksumAddress(contracts.timestampEnforcer);\n  const timestampCaveat = leaf.caveats.find(\n    (caveat) => getChecksumAddress(caveat.enforcer) === targetEnforcer,\n  );\n  if (!timestampCaveat?.terms) {\n    return null;\n  }\n  try {\n    return extractExpiryFromCaveatTerms(timestampCaveat.terms);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Recomputes {@link PermissionStatus} for one granted permission using chain state.\n *\n * @param entry - Granted permission row (including merged `status` from the prior sync).\n * @param options - `getProviderForChainId` and deployment map for the framework version.\n * @returns The same entry with an updated `status`.\n */\nexport async function resolveGrantedPermissionOnChainStatus(\n  entry: PermissionInfoWithMetadata,\n  options: PermissionOnChainStatusOptions,\n): Promise<PermissionInfoWithMetadata> {\n  if (entry.revocationMetadata) {\n    return { ...entry, status: 'Revoked' };\n  }\n\n  const originalStatus: GatorPermissionStatus = entry.status ?? 'Active';\n\n  try {\n    const delegations = decodeDelegations(entry.permissionResponse.context);\n\n    if (delegations.length !== 1) {\n      throw new Error(\n        'Unexpected delegations length in decoded permission context',\n      );\n    }\n    const delegation = delegations[0];\n    const delegationHash = hashDelegation(delegation);\n\n    const provider = await options.getProviderForChainId(\n      entry.permissionResponse.chainId,\n    );\n\n    const isDisabled = await readDelegationDisabledOnChain({\n      provider,\n      delegationManager: entry.permissionResponse.delegationManager,\n      delegationHash,\n    });\n\n    if (isDisabled) {\n      return { ...entry, status: 'Revoked' };\n    }\n\n    const chainId = hexToNumber(entry.permissionResponse.chainId);\n    const deploymentContracts = delegationContractsByChainId[chainId];\n    if (!deploymentContracts) {\n      return { ...entry, status: originalStatus };\n    }\n    const contracts = toEnforcerAddressesByName(deploymentContracts);\n    const expiry = getExpiryFromDelegation(delegation, contracts);\n    if (expiry === null) {\n      return { ...entry, status: 'Active' };\n    }\n    const blockTimestamp = await readLatestBlockTimestampSeconds(provider);\n    if (blockTimestamp >= expiry) {\n      return { ...entry, status: 'Expired' };\n    }\n    return { ...entry, status: 'Active' };\n  } catch (error) {\n    controllerLog('Failed to resolve permission status', error);\n    return { ...entry, status: originalStatus };\n  }\n}\n\n/**\n * Recomputes status for all granted permissions in parallel.\n *\n * @param grantedPermissions - Rows returned from the permissions provider snap.\n * @param options - Provider factory and deployment map.\n * @returns Same rows with updated `status` fields.\n */\nexport async function updateGrantedPermissionsStatus(\n  grantedPermissions: PermissionInfoWithMetadata[],\n  options: PermissionOnChainStatusOptions,\n): Promise<PermissionInfoWithMetadata[]> {\n  return Promise.all(\n    grantedPermissions.map((row) =>\n      resolveGrantedPermissionOnChainStatus(row, options),\n    ),\n  );\n}\n"]}

package/dist/redeemerRule.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"redeemerRule.d.ts","sourceRoot":"","sources":["../src/redeemerRule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE;QACJ,SAAS,EAAE,GAAG,EAAE,CAAC;KAClB,CAAC;CACH,CAAC"}

package/dist/redeemerRule.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=redeemerRule.js.map

package/dist/redeemerRule.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redeemerRule.js","sourceRoot":"","sources":["../src/redeemerRule.ts"],"names":[],"mappings":"","sourcesContent":["import type { Hex } from '@metamask/utils';\n\n/**\n * Execution permission rule restricting which addresses may redeem the delegation\n * (on-chain RedeemerEnforcer caveat).\n */\nexport type RedeemerRule = {\n  type: 'redeemer';\n  data: {\n    addresses: Hex[];\n  };\n};\n"]}

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;GAEG;AACH,oBAAY,mCAAmC;IAC7C,0BAA0B,kCAAkC;IAC5D,6BAA6B,qCAAqC;IAClE,uBAAuB,8BAA8B;IACrD,qBAAqB,6BAA6B;CACnD;AAED;;GAEG;AACH,oBAAY,6BAA6B;IACvC;;OAEG;IACH,uCAAuC,8CAA8C;IACrF;;OAEG;IACH,kCAAkC,yCAAyC;CAC5E;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,CAAC,WAAW,SAAS,eAAe,IAAI;IACnE;;OAEG;IACH,OAAO,EAAE,GAAG,CAAC;IAEb;;;;OAIG;IACH,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX;;OAEG;IACH,EAAE,EAAE,GAAG,CAAC;IAER;;OAEG;IACH,UAAU,EAAE,WAAW,CAAC;IAExB,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,CAAC,WAAW,SAAS,eAAe,IAChE,iBAAiB,CAAC,WAAW,CAAC,GAAG;IAC/B;;;OAGG;IACH,OAAO,EAAE,GAAG,CAAC;IAEb;;;;;;OAMG;IACH,YAAY,EAAE;QACZ,OAAO,EAAE,GAAG,CAAC;QACb,WAAW,EAAE,GAAG,CAAC;KAClB,EAAE,CAAC;IAEJ;;OAEG;IACH,iBAAiB,EAAE,GAAG,CAAC;CACxB,CAAC;AAEJ;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,CAC/B,WAAW,SAAS,eAAe,GAAG,eAAe,IACnD;IACF,kBAAkB,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,cAAc,CAAC,WAAW,SAAS,eAAe,IAAI,IAAI,CACpE,kBAAkB,CAAC,WAAW,CAAC,EAC/B,cAAc,GAAG,IAAI,CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAErE;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,CACpC,WAAW,SAAS,eAAe,GAAG,eAAe,IACnD;IACF,kBAAkB,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,MAAM,EAAE,qBAAqB,CAAC;IAC9B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,UAAU,CAAC,GAAG,CAAC,EACf,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,CACnD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,GAAG,GAAG,SAAS,CAAC;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;OAEG;IACH,iBAAiB,EAAE,GAAG,CAAC;IAEvB;;OAEG;IACH,MAAM,EAAE,GAAG,GAAG,SAAS,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,iBAAiB,EAAE,GAAG,CAAC;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,4CAA4C,GAAG,MAAM,CAC7D,wBAAwB,GACxB,6BAA6B,GAC7B,8BAA8B,GAC9B,mCAAmC,GACnC,4BAA4B,GAC5B,uBAAuB,GACvB,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,yBAAyB,GACzB,wBAAwB,GACxB,kBAAkB,EACpB,GAAG,CACJ,CAAC"}

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,MAAM,CAAN,IAAY,mCAKX;AALD,WAAY,mCAAmC;IAC7C,mGAA4D,CAAA;IAC5D,yGAAkE,CAAA;IAClE,4FAAqD,CAAA;IACrD,yFAAkD,CAAA;AACpD,CAAC,EALW,mCAAmC,KAAnC,mCAAmC,QAK9C;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,6BASX;AATD,WAAY,6BAA6B;IACvC;;OAEG;IACH,sHAAqF,CAAA;IACrF;;OAEG;IACH,4GAA2E,CAAA;AAC7E,CAAC,EATW,6BAA6B,KAA7B,6BAA6B,QASxC","sourcesContent":["import type { PermissionTypes, Rule } from '@metamask/7715-permission-types';\nimport type { Delegation } from '@metamask/delegation-core';\nimport type { Hex } from '@metamask/utils';\n\n/**\n * Enum for the error codes of the gator permissions controller.\n */\nexport enum GatorPermissionsControllerErrorCode {\n  GatorPermissionsFetchError = 'gator-permissions-fetch-error',\n  GatorPermissionsProviderError = 'gator-permissions-provider-error',\n  PermissionDecodingError = 'permission-decoding-error',\n  OriginNotAllowedError = 'origin-not-allowed-error',\n}\n\n/**\n * Enum for the RPC methods of the gator permissions provider snap.\n */\nexport enum GatorPermissionsSnapRpcMethod {\n  /**\n   * This method is used by the metamask to request a permissions provider to get granted permissions for all sites.\n   */\n  PermissionProviderGetGrantedPermissions = 'permissionsProvider_getGrantedPermissions',\n  /**\n   * This method is used by the metamask to submit a revocation to the permissions provider.\n   */\n  PermissionProviderSubmitRevocation = 'permissionsProvider_submitRevocation',\n}\n\n/**\n * Represents an ERC-7715 permission request.\n *\n * @template TPermission - The type of the permission provided.\n */\nexport type PermissionRequest<TPermission extends PermissionTypes> = {\n  /**\n   * hex-encoding of uint256 defined the chain with EIP-155\n   */\n  chainId: Hex;\n\n  /**\n   *\n   * The account being targeted for this permission request.\n   * It is optional to let the user choose which account to grant permission from.\n   */\n  from?: Hex;\n\n  /**\n   * A field that identifies the DApp session account associated with the permission\n   */\n  to: Hex;\n\n  /**\n   * Defines the allowed behavior the `to` account can do on behalf of the `from` account.\n   */\n  permission: TPermission;\n\n  rules?: Rule[] | null;\n};\n\n/**\n * Represents an ERC-7715 permission response.\n *\n * @template TPermission - The type of the permission provided.\n */\nexport type PermissionResponse<TPermission extends PermissionTypes> =\n  PermissionRequest<TPermission> & {\n    /**\n     * Is a catch-all to identify a permission for revoking permissions or submitting\n     * Defined in ERC-7710.\n     */\n    context: Hex;\n\n    /**\n     * The dependencyInfo field is required and contains information needed to deploy accounts.\n     * Each entry specifies a factory contract and its associated deployment data.\n     * If no account deployment is needed when redeeming the permission, this array must be empty.\n     * When non-empty, DApps MUST deploy the accounts by calling the factory contract with factoryData as the calldata.\n     * Defined in ERC-4337.\n     */\n    dependencies: {\n      factory: Hex;\n      factoryData: Hex;\n    }[];\n\n    /**\n     * Is required as defined in ERC-7710.\n     */\n    delegationManager: Hex;\n  };\n\n/**\n * Represents a gator ERC-7715 permission entry retrieved from gator permissions snap.\n *\n * @template TPermission - The type of the permission provided.\n */\nexport type StoredGatorPermission<\n  TPermission extends PermissionTypes = PermissionTypes,\n> = {\n  permissionResponse: PermissionResponse<TPermission>;\n  siteOrigin: string;\n  revocationMetadata?: RevocationMetadata;\n};\n\n/**\n * Permission response with internal fields (dependencies, to) removed.\n * Used when exposing permission data to the client/UI.\n *\n * @template TPermission - The type of the permission provided.\n */\nexport type PermissionInfo<TPermission extends PermissionTypes> = Omit<\n  PermissionResponse<TPermission>,\n  'dependencies' | 'to'\n>;\n\n/**\n * Lifecycle status of a granted permission for UI and sync.\n */\nexport type GatorPermissionStatus = 'Active' | 'Revoked' | 'Expired';\n\n/**\n * Granted permission with metadata (siteOrigin, optional revocationMetadata).\n *\n * @template TPermission - The type of the permission provided.\n */\nexport type PermissionInfoWithMetadata<\n  TPermission extends PermissionTypes = PermissionTypes,\n> = {\n  permissionResponse: PermissionInfo<TPermission>;\n  siteOrigin: string;\n  /**\n   * Whether the permission is active, revoked (off-chain and/or on-chain), or expired by time rule.\n   */\n  status: GatorPermissionStatus;\n  revocationMetadata?: RevocationMetadata;\n};\n\n/**\n * Delegation fields required to decode a permission (caveats, delegator, delegate, authority).\n */\nexport type DelegationDetails = Pick<\n  Delegation<Hex>,\n  'caveats' | 'delegator' | 'delegate' | 'authority'\n>;\n\n/**\n * Metadata for a confirmed revocation (e.g. when and how it was recorded).\n */\nexport type RevocationMetadata = {\n  /** Timestamp when the revocation was recorded in storage. */\n  recordedAt: number;\n  /** Hash of the revocation transaction, if we submitted it. */\n  txHash?: Hex | undefined;\n};\n\n/**\n * Parameters for the permissions provider Snap's submitRevocation RPC.\n */\nexport type RevocationParams = {\n  /**\n   * The permission context as a hex string that identifies the permission to revoke.\n   */\n  permissionContext: Hex;\n\n  /**\n   * The hash of the transaction that was used to revoke the permission. Optional because we might not have submitted the transaction ourselves.\n   */\n  txHash: Hex | undefined;\n};\n\n/**\n * Parameters for adding a pending revocation (tracked until the revocation tx is confirmed).\n */\nexport type PendingRevocationParams = {\n  /**\n   * The transaction metadata ID to monitor.\n   */\n  txId: string;\n  /**\n   * The permission context as a hex string that identifies the permission to revoke.\n   */\n  permissionContext: Hex;\n};\n\n/**\n * Permission type identifier: the `type` field of standard ERC-7715 permissions.\n */\nexport type SupportedPermissionType = PermissionTypes['type'];\n\n/**\n * Narrower typing for the delegator contract address mapping exported from @metamask/delegation-deployments.\n */\nexport type DelegationDeploymentsEnforcerAddressesByName = Record<\n  | 'ERC20StreamingEnforcer'\n  | 'ERC20PeriodTransferEnforcer'\n  | 'NativeTokenStreamingEnforcer'\n  | 'NativeTokenPeriodTransferEnforcer'\n  | 'ApprovalRevocationEnforcer'\n  | 'ExactCalldataEnforcer'\n  | 'ValueLteEnforcer'\n  | 'TimestampEnforcer'\n  | 'NonceEnforcer'\n  | 'AllowedCalldataEnforcer'\n  | 'AllowedTargetsEnforcer'\n  | 'RedeemerEnforcer',\n  Hex\n>;\n"]}

package/dist/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,OAAO,GAAG,OAAO,EAAE,EACtD,SAAS,EACT,MAAM,EACN,MAAM,EACN,MAAM,GACP,EAAE;IACD,SAAS,EAAE,mCAAmC,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,6BAA6B,GAAG,MAAM,CAAC;IAC/C,MAAM,CAAC,EAAE,IAAI,CAAC;CACf,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBnB"}

package/dist/utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAoB,EACtD,SAAS,EACT,MAAM,EACN,MAAM,EACN,MAAM,GAMP;IACC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,8BAA8B,EAAE;YACpE,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,WAAW,CAAC,YAAY;YACjC,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;aACxC;SACF,CAAC,CAAC;QACH,OAAO,QAAmB,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,6BAA6B,CAAC;YACtC,MAAM,EAAE,MAAuC;YAC/C,KAAK,EAAE,KAAc;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["import type { SnapId } from '@metamask/snaps-sdk';\nimport { HandlerType } from '@metamask/snaps-utils';\nimport type { Json } from '@metamask/utils';\n\nimport { GatorPermissionsProviderError } from './errors.js';\nimport { GatorPermissionsControllerMessenger } from './GatorPermissionsController.js';\nimport { utilsLog } from './logger.js';\nimport type { GatorPermissionsSnapRpcMethod } from './types.js';\n\n/**\n * Executes an RPC request against a Snap and returns the typed response.\n *\n * @param params - The parameters for the request.\n * @param params.messenger - Messenger that supports SnapController:handleRequest.\n * @param params.snapId - The Snap ID to target.\n * @param params.method - The RPC method name (e.g. permissionsProvider_getGrantedPermissions).\n * @param params.params - Optional JSON-serializable params for the method.\n * @returns A promise that resolves with the Snap's response (typed by caller).\n * @throws {GatorPermissionsProviderError} If the Snap request fails.\n */\nexport async function executeSnapRpc<TReturn = unknown>({\n  messenger,\n  snapId,\n  method,\n  params,\n}: {\n  messenger: GatorPermissionsControllerMessenger;\n  snapId: SnapId;\n  method: GatorPermissionsSnapRpcMethod | string;\n  params?: Json;\n}): Promise<TReturn> {\n  try {\n    const response = await messenger.call('SnapController:handleRequest', {\n      snapId,\n      origin: 'metamask',\n      handler: HandlerType.OnRpcRequest,\n      request: {\n        jsonrpc: '2.0',\n        method,\n        ...(params !== undefined && { params }),\n      },\n    });\n    return response as TReturn;\n  } catch (error) {\n    utilsLog('Snap RPC request failed', { method, error });\n    throw new GatorPermissionsProviderError({\n      method: method as GatorPermissionsSnapRpcMethod,\n      cause: error as Error,\n    });\n  }\n}\n"]}