@metamask/gator-permissions-controller 0.6.0 → 0.8.0

package/CHANGELOG.md

@@ -7,6 +7,37 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.0]
+
+### Added
+
+- Export `DELEGATION_FRAMEWORK_VERSION` constant to indicate the supported Delegation Framework version ([#7195](https://github.com/MetaMask/core/pull/7195))
+
+### Changed
+
+- **BREAKING:** Permission decoding now rejects `TimestampEnforcer` caveats with zero `timestampBeforeThreshold` values ([#7195](https://github.com/MetaMask/core/pull/7195))
+- `PermissionResponseSanitized` now includes `rules` property for stronger typing support ([#7195](https://github.com/MetaMask/core/pull/7195))
+- Permission decoding now resolves `erc20-token-revocation` permission type ([#7299](https://github.com/MetaMask/core/pull/7299))
+- Differentiate `erc20-token-revocation` permissions from `other` in controller state ([#7318](https://github.com/MetaMask/core/pull/7318))
+- Bump `@metamask/transaction-controller` from `^62.3.1` to `^62.5.0` ([#7289](https://github.com/MetaMask/core/pull/7289), [#7325](https://github.com/MetaMask/core/pull/7325))
+
+## [0.7.0]
+
+### Added
+
+- Refresh gator permissions map after revocation state change ([#7235](https://github.com/MetaMask/core/pull/7235))
+- New `submitDirectRevocation` method for already-disabled delegations that don't require an on-chain transaction ([#7244](https://github.com/MetaMask/core/pull/7244))
+
+### Changed
+
+- Move peer dependencies for controller and service packages to direct dependencies ([#7209](https://github.com/MetaMask/core/pull/7209), [#7220](https://github.com/MetaMask/core/pull/7220), [#7236](https://github.com/MetaMask/core/pull/7236), [#7257](https://github.com/MetaMask/core/pull/7257))
+  - The dependencies moved are:
+    - `@metamask/snaps-controllers` (^14.0.1)
+    - `@metamask/transaction-controller` (^62.3.1)
+  - In clients, it is now possible for multiple versions of these packages to exist in the dependency tree.
+    - For example, this scenario would be valid: a client relies on `@metamask/controller-a` 1.0.0 and `@metamask/controller-b` 1.0.0, and `@metamask/controller-b` depends on `@metamask/controller-a` 1.1.0.
+  - Note, however, that the versions specified in the client's `package.json` always "win", and you are expected to keep them up to date so as not to break controller and service intercommunication.
+
 ## [0.6.0]
 
 ### Changed
@@ -80,7 +111,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Initial release ([#6033](https://github.com/MetaMask/core/pull/6033))
 
-[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/gator-permissions-controller@0.6.0...HEAD
+[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/gator-permissions-controller@0.8.0...HEAD
+[0.8.0]: https://github.com/MetaMask/core/compare/@metamask/gator-permissions-controller@0.7.0...@metamask/gator-permissions-controller@0.8.0
+[0.7.0]: https://github.com/MetaMask/core/compare/@metamask/gator-permissions-controller@0.6.0...@metamask/gator-permissions-controller@0.7.0
 [0.6.0]: https://github.com/MetaMask/core/compare/@metamask/gator-permissions-controller@0.5.0...@metamask/gator-permissions-controller@0.6.0
 [0.5.0]: https://github.com/MetaMask/core/compare/@metamask/gator-permissions-controller@0.4.0...@metamask/gator-permissions-controller@0.5.0
 [0.4.0]: https://github.com/MetaMask/core/compare/@metamask/gator-permissions-controller@0.3.0...@metamask/gator-permissions-controller@0.4.0

package/dist/GatorPermissionsController.cjs

@@ -6,10 +6,11 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 };
 var _GatorPermissionsController_instances, _GatorPermissionsController_setIsFetchingGatorPermissions, _GatorPermissionsController_setIsGatorPermissionsEnabled, _GatorPermissionsController_addPendingRevocationToState, _GatorPermissionsController_removePendingRevocationFromStateByTxId, _GatorPermissionsController_removePendingRevocationFromStateByPermissionContext, _GatorPermissionsController_registerMessageHandlers, _GatorPermissionsController_assertGatorPermissionsEnabled, _GatorPermissionsController_handleSnapRequestToGatorPermissionsProvider, _GatorPermissionsController_sanitizeStoredGatorPermission, _GatorPermissionsController_categorizePermissionsDataByTypeAndChainId;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getDefaultGatorPermissionsControllerState = exports.DELEGATION_FRAMEWORK_VERSION = void 0;
+exports.getDefaultGatorPermissionsControllerState = void 0;
 const base_controller_1 = require("@metamask/base-controller");
 const delegation_deployments_1 = require("@metamask/delegation-deployments");
 const snaps_utils_1 = require("@metamask/snaps-utils");
+const constants_1 = require("./constants.cjs");
 const decodePermission_1 = require("./decodePermission/index.cjs");
 const errors_1 = require("./errors.cjs");
 const logger_1 = require("./logger.cjs");
@@ -20,24 +21,22 @@ const utils_1 = require("./utils.cjs");
 const controllerName = 'GatorPermissionsController';
 // Default value for the gator permissions provider snap id
 const defaultGatorPermissionsProviderSnapId = 'npm:@metamask/gator-permissions-snap';
-const defaultGatorPermissionsMap = {
-    'native-token-stream': {},
-    'native-token-periodic': {},
-    'erc20-token-stream': {},
-    'erc20-token-periodic': {},
-    other: {},
+const createEmptyGatorPermissionsMap = () => {
+    return {
+        'erc20-token-revocation': {},
+        'native-token-stream': {},
+        'native-token-periodic': {},
+        'erc20-token-stream': {},
+        'erc20-token-periodic': {},
+        other: {},
+    };
 };
-/**
- * Delegation framework version used to select the correct deployed enforcer
- * contract addresses from `@metamask/delegation-deployments`.
- */
-exports.DELEGATION_FRAMEWORK_VERSION = '1.3.0';
 /**
  * Timeout duration for pending revocations (2 hours in milliseconds).
  * After this time, event listeners will be cleaned up to prevent memory leaks.
  */
 const PENDING_REVOCATION_TIMEOUT = 2 * 60 * 60 * 1000;
-const contractsByChainId = delegation_deployments_1.DELEGATOR_CONTRACTS[exports.DELEGATION_FRAMEWORK_VERSION];
+const contractsByChainId = delegation_deployments_1.DELEGATOR_CONTRACTS[constants_1.DELEGATION_FRAMEWORK_VERSION];
 const gatorPermissionsControllerMetadata = {
     isGatorPermissionsEnabled: {
         includeInStateLogs: true,
@@ -81,7 +80,7 @@ const gatorPermissionsControllerMetadata = {
 function getDefaultGatorPermissionsControllerState() {
     return {
         isGatorPermissionsEnabled: false,
-        gatorPermissionsMapSerialized: (0, utils_1.serializeGatorPermissionsMap)(defaultGatorPermissionsMap),
+        gatorPermissionsMapSerialized: (0, utils_1.serializeGatorPermissionsMap)(createEmptyGatorPermissionsMap()),
         isFetchingGatorPermissions: false,
         gatorPermissionsProviderSnapId: defaultGatorPermissionsProviderSnapId,
         pendingRevocations: [],
@@ -141,7 +140,7 @@ class GatorPermissionsController extends base_controller_1.BaseController {
     async disableGatorPermissions() {
         this.update((state) => {
             state.isGatorPermissionsEnabled = false;
-            state.gatorPermissionsMapSerialized = (0, utils_1.serializeGatorPermissionsMap)(defaultGatorPermissionsMap);
+            state.gatorPermissionsMapSerialized = (0, utils_1.serializeGatorPermissionsMap)(createEmptyGatorPermissionsMap());
         });
     }
     /**
@@ -256,25 +255,39 @@ class GatorPermissionsController extends base_controller_1.BaseController {
             permissionContext: revocationParams.permissionContext,
         });
         __classPrivateFieldGet(this, _GatorPermissionsController_instances, "m", _GatorPermissionsController_assertGatorPermissionsEnabled).call(this);
+        const snapRequest = {
+            snapId: this.state.gatorPermissionsProviderSnapId,
+            origin: 'metamask',
+            handler: snaps_utils_1.HandlerType.OnRpcRequest,
+            request: {
+                jsonrpc: '2.0',
+                method: types_1.GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,
+                params: revocationParams,
+            },
+        };
         try {
-            const snapRequest = {
-                snapId: this.state.gatorPermissionsProviderSnapId,
-                origin: 'metamask',
-                handler: snaps_utils_1.HandlerType.OnRpcRequest,
-                request: {
-                    jsonrpc: '2.0',
-                    method: types_1.GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,
-                    params: revocationParams,
-                },
-            };
             const result = await this.messenger.call('SnapController:handleRequest', snapRequest);
-            __classPrivateFieldGet(this, _GatorPermissionsController_instances, "m", _GatorPermissionsController_removePendingRevocationFromStateByPermissionContext).call(this, revocationParams.permissionContext);
+            // Refresh list first (permission removed from list)
+            await this.fetchAndUpdateGatorPermissions({ isRevoked: false });
             (0, logger_1.controllerLog)('Successfully submitted revocation', {
                 permissionContext: revocationParams.permissionContext,
                 result,
             });
         }
         catch (error) {
+            // If it's a GatorPermissionsFetchError, revocation succeeded but refresh failed
+            if (error instanceof errors_1.GatorPermissionsFetchError) {
+                (0, logger_1.controllerLog)('Revocation submitted successfully but failed to refresh permissions list', {
+                    error,
+                    permissionContext: revocationParams.permissionContext,
+                });
+                // Wrap with a more specific message indicating revocation succeeded
+                throw new errors_1.GatorPermissionsFetchError({
+                    message: 'Failed to refresh permissions list after successful revocation',
+                    cause: error,
+                });
+            }
+            // Otherwise, revocation failed - wrap in provider error
             (0, logger_1.controllerLog)('Failed to submit revocation', {
                 error,
                 permissionContext: revocationParams.permissionContext,
@@ -284,6 +297,9 @@ class GatorPermissionsController extends base_controller_1.BaseController {
                 cause: error,
             });
         }
+        finally {
+            __classPrivateFieldGet(this, _GatorPermissionsController_instances, "m", _GatorPermissionsController_removePendingRevocationFromStateByPermissionContext).call(this, revocationParams.permissionContext);
+        }
     }
     /**
      * Adds a pending revocation that will be submitted once the transaction is confirmed.
@@ -318,6 +334,16 @@ class GatorPermissionsController extends base_controller_1.BaseController {
             dropped: undefined,
             timeoutId: undefined,
         };
+        // Helper to refresh permissions after transaction state change
+        const refreshPermissions = (context) => {
+            this.fetchAndUpdateGatorPermissions({ isRevoked: false }).catch((error) => {
+                (0, logger_1.controllerLog)(`Failed to refresh permissions after ${context}`, {
+                    txId,
+                    permissionContext,
+                    error,
+                });
+            });
+        };
         // Helper to unsubscribe from approval/rejection events after decision is made
         const cleanupApprovalHandlers = () => {
             if (handlers.approved) {
@@ -379,13 +405,15 @@ class GatorPermissionsController extends base_controller_1.BaseController {
                     txId,
                     permissionContext,
                 });
-                this.submitRevocation({ permissionContext }).catch((error) => {
+                this.submitRevocation({ permissionContext })
+                    .catch((error) => {
                     (0, logger_1.controllerLog)('Failed to submit revocation after transaction confirmed', {
                         txId,
                         permissionContext,
                         error,
                     });
-                });
+                })
+                    .finally(() => refreshPermissions('transaction confirmed'));
                 cleanup(transactionMeta.id);
             }
         };
@@ -398,6 +426,7 @@ class GatorPermissionsController extends base_controller_1.BaseController {
                     error: payload.error,
                 });
                 cleanup(payload.transactionMeta.id);
+                refreshPermissions('transaction failed');
             }
         };
         // Handle dropped transaction - cleanup without submitting revocation
@@ -408,6 +437,7 @@ class GatorPermissionsController extends base_controller_1.BaseController {
                     permissionContext,
                 });
                 cleanup(payload.transactionMeta.id);
+                refreshPermissions('transaction dropped');
             }
         };
         // Subscribe to user approval/rejection events
@@ -426,6 +456,40 @@ class GatorPermissionsController extends base_controller_1.BaseController {
             cleanup(txId);
         }, PENDING_REVOCATION_TIMEOUT);
     }
+    /**
+     * Submits a revocation directly without requiring an on-chain transaction.
+     * Used for already-disabled delegations that don't require an on-chain transaction.
+     *
+     * This method:
+     * 1. Adds the permission context to pending revocations state (disables UI button)
+     * 2. Immediately calls submitRevocation to remove from snap storage
+     * 3. On success, removes from pending revocations state (re-enables UI button)
+     * 4. On failure, keeps in pending revocations so UI can show error/retry state
+     *
+     * @param params - The revocation parameters containing the permission context.
+     * @returns A promise that resolves when the revocation is submitted successfully.
+     * @throws {GatorPermissionsNotEnabledError} If the gator permissions are not enabled.
+     * @throws {GatorPermissionsProviderError} If the snap request fails.
+     */
+    async submitDirectRevocation(params) {
+        __classPrivateFieldGet(this, _GatorPermissionsController_instances, "m", _GatorPermissionsController_assertGatorPermissionsEnabled).call(this);
+        // Use a placeholder txId that doesn't conflict with real transaction IDs
+        const placeholderTxId = `no-tx-${params.permissionContext}`;
+        // Add to pending revocations state first (disables UI button immediately)
+        __classPrivateFieldGet(this, _GatorPermissionsController_instances, "m", _GatorPermissionsController_addPendingRevocationToState).call(this, placeholderTxId, params.permissionContext);
+        // Immediately submit the revocation (will remove from pending on success)
+        await this.submitRevocation(params);
+    }
+    /**
+     * Checks if a permission context is in the pending revocations list.
+     *
+     * @param permissionContext - The permission context to check.
+     * @returns `true` if the permission context is pending revocation, `false` otherwise.
+     */
+    isPendingRevocation(permissionContext) {
+        return this.state.pendingRevocations.some((pendingRevocation) => pendingRevocation.permissionContext.toLowerCase() ===
+            permissionContext.toLowerCase());
+    }
 }
 _GatorPermissionsController_instances = new WeakSet(), _GatorPermissionsController_setIsFetchingGatorPermissions = function _GatorPermissionsController_setIsFetchingGatorPermissions(isFetchingGatorPermissions) {
     this.update((state) => {
@@ -448,7 +512,8 @@ _GatorPermissionsController_instances = new WeakSet(), _GatorPermissionsControll
     });
 }, _GatorPermissionsController_removePendingRevocationFromStateByPermissionContext = function _GatorPermissionsController_removePendingRevocationFromStateByPermissionContext(permissionContext) {
     this.update((state) => {
-        state.pendingRevocations = state.pendingRevocations.filter((pendingRevocations) => pendingRevocations.permissionContext !== permissionContext);
+        state.pendingRevocations = state.pendingRevocations.filter((pendingRevocations) => pendingRevocations.permissionContext.toLowerCase() !==
+            permissionContext.toLowerCase());
     });
 }, _GatorPermissionsController_registerMessageHandlers = function _GatorPermissionsController_registerMessageHandlers() {
     this.messenger.registerActionHandler(`${controllerName}:fetchAndUpdateGatorPermissions`, this.fetchAndUpdateGatorPermissions.bind(this));
@@ -458,6 +523,8 @@ _GatorPermissionsController_instances = new WeakSet(), _GatorPermissionsControll
     const submitRevocationAction = `${controllerName}:submitRevocation`;
     this.messenger.registerActionHandler(submitRevocationAction, this.submitRevocation.bind(this));
     this.messenger.registerActionHandler(`${controllerName}:addPendingRevocation`, this.addPendingRevocation.bind(this));
+    this.messenger.registerActionHandler(`${controllerName}:submitDirectRevocation`, this.submitDirectRevocation.bind(this));
+    this.messenger.registerActionHandler(`${controllerName}:isPendingRevocation`, this.isPendingRevocation.bind(this));
 }, _GatorPermissionsController_assertGatorPermissionsEnabled = function _GatorPermissionsController_assertGatorPermissionsEnabled() {
     if (!this.state.isGatorPermissionsEnabled) {
         throw new errors_1.GatorPermissionsNotEnabledError();
@@ -494,7 +561,7 @@ async function _GatorPermissionsController_handleSnapRequestToGatorPermissionsPr
     }
 }, _GatorPermissionsController_sanitizeStoredGatorPermission = function _GatorPermissionsController_sanitizeStoredGatorPermission(storedGatorPermission) {
     const { permissionResponse } = storedGatorPermission;
-    const { rules, dependencyInfo, signer, ...rest } = permissionResponse;
+    const { dependencyInfo, signer, ...rest } = permissionResponse;
     return {
         ...storedGatorPermission,
         permissionResponse: {
@@ -502,39 +569,22 @@ async function _GatorPermissionsController_handleSnapRequestToGatorPermissionsPr
         },
     };
 }, _GatorPermissionsController_categorizePermissionsDataByTypeAndChainId = function _GatorPermissionsController_categorizePermissionsDataByTypeAndChainId(storedGatorPermissions) {
+    const gatorPermissionsMap = createEmptyGatorPermissionsMap();
     if (!storedGatorPermissions) {
-        return defaultGatorPermissionsMap;
-    }
-    return storedGatorPermissions.reduce((gatorPermissionsMap, storedGatorPermission) => {
-        const { permissionResponse } = storedGatorPermission;
-        const permissionType = permissionResponse.permission.type;
-        const { chainId } = permissionResponse;
-        const sanitizedStoredGatorPermission = __classPrivateFieldGet(this, _GatorPermissionsController_instances, "m", _GatorPermissionsController_sanitizeStoredGatorPermission).call(this, storedGatorPermission);
-        switch (permissionType) {
-            case 'native-token-stream':
-            case 'native-token-periodic':
-            case 'erc20-token-stream':
-            case 'erc20-token-periodic':
-                if (!gatorPermissionsMap[permissionType][chainId]) {
-                    gatorPermissionsMap[permissionType][chainId] = [];
-                }
-                gatorPermissionsMap[permissionType][chainId].push(sanitizedStoredGatorPermission);
-                break;
-            default:
-                if (!gatorPermissionsMap.other[chainId]) {
-                    gatorPermissionsMap.other[chainId] = [];
-                }
-                gatorPermissionsMap.other[chainId].push(sanitizedStoredGatorPermission);
-                break;
-        }
         return gatorPermissionsMap;
-    }, {
-        'native-token-stream': {},
-        'native-token-periodic': {},
-        'erc20-token-stream': {},
-        'erc20-token-periodic': {},
-        other: {},
-    });
+    }
+    for (const storedGatorPermission of storedGatorPermissions) {
+        const { permissionResponse: { permission: { type: permissionType }, chainId, }, } = storedGatorPermission;
+        const isPermissionTypeKnown = Object.prototype.hasOwnProperty.call(gatorPermissionsMap, permissionType);
+        const permissionTypeKey = isPermissionTypeKnown
+            ? permissionType
+            : 'other';
+        gatorPermissionsMap[permissionTypeKey][chainId] = [
+            ...(gatorPermissionsMap[permissionTypeKey][chainId] || []),
+            __classPrivateFieldGet(this, _GatorPermissionsController_instances, "m", _GatorPermissionsController_sanitizeStoredGatorPermission).call(this, storedGatorPermission),
+        ];
+    }
+    return gatorPermissionsMap;
 };
 exports.default = GatorPermissionsController;
 //# sourceMappingURL=GatorPermissionsController.cjs.map

package/dist/GatorPermissionsController.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GatorPermissionsController.cjs","sourceRoot":"","sources":["../src/GatorPermissionsController.ts"],"names":[],"mappings":";;;;;;;;;AAMA,+DAA2D;AAC3D,6EAAuE;AAIvE,uDAAoD;AAWpD,mEAI4B;AAC5B,yCAMkB;AAClB,yCAAyC;AAEzC,uCAQiB;AACjB,uCAGiB;AAEjB,kBAAkB;AAElB,iCAAiC;AACjC,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD,2DAA2D;AAC3D,MAAM,qCAAqC,GACzC,sCAAgD,CAAC;AAEnD,MAAM,0BAA0B,GAAwB;IACtD,qBAAqB,EAAE,EAAE;IACzB,uBAAuB,EAAE,EAAE;IAC3B,oBAAoB,EAAE,EAAE;IACxB,sBAAsB,EAAE,EAAE;IAC1B,KAAK,EAAE,EAAE;CACV,CAAC;AAEF;;;GAGG;AACU,QAAA,4BAA4B,GAAG,OAAO,CAAC;AAEpD;;;GAGG;AACH,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,MAAM,kBAAkB,GAAG,4CAAmB,CAAC,oCAA4B,CAAC,CAAC;AAuC7E,MAAM,kCAAkC,GACtC;IACE,yBAAyB,EAAE;QACzB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,KAAK;KAChB;IACD,6BAA6B,EAAE;QAC7B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;IACD,0BAA0B,EAAE;QAC1B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,KAAK;KAChB;IACD,8BAA8B,EAAE;QAC9B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,KAAK;KAChB;IACD,kBAAkB,EAAE;QAClB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;CACuD,CAAC;AAE7D;;;;;;;GAOG;AACH,SAAgB,yCAAyC;IACvD,OAAO;QACL,yBAAyB,EAAE,KAAK;QAChC,6BAA6B,EAAE,IAAA,oCAA4B,EACzD,0BAA0B,CAC3B;QACD,0BAA0B,EAAE,KAAK;QACjC,8BAA8B,EAAE,qCAAqC;QACrE,kBAAkB,EAAE,EAAE;KACvB,CAAC;AACJ,CAAC;AAVD,8FAUC;AAoHD;;GAEG;AACH,MAAqB,0BAA2B,SAAQ,gCAIvD;IACC;;;;;;OAMG;IACH,YAAY,EACV,SAAS,EACT,KAAK,GAIN;QACC,KAAK,CAAC;YACJ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,kCAAkC;YAC5C,SAAS;YACT,KAAK,EAAE;gBACL,GAAG,yCAAyC,EAAE;gBAC9C,GAAG,KAAK;gBACR,0BAA0B,EAAE,KAAK;aAClC;SACF,CAAC,CAAC;;QAEH,uBAAA,IAAI,kGAAyB,MAA7B,IAAI,CAA2B,CAAC;IAClC,CAAC;IAgOD;;;;OAIG;IACH,IAAI,mBAAmB;QACrB,OAAO,IAAA,sCAA8B,EACnC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CACzC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,yBAAyB;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACnD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,sBAAsB;QACjC,uBAAA,IAAI,uGAA8B,MAAlC,IAAI,EAA+B,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,uBAAuB;QAClC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,yBAAyB,GAAG,KAAK,CAAC;YACxC,KAAK,CAAC,6BAA6B,GAAG,IAAA,oCAA4B,EAChE,0BAA0B,CAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,8BAA8B,CACzC,MAAa;QAEb,IAAI,CAAC;YACH,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,IAAI,CAAC,CAAC;YAC1C,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,CAAiC,CAAC;YAEtC,MAAM,eAAe,GACnB,MAAM,uBAAA,IAAI,sHAA6C,MAAjD,IAAI,EAA8C;gBACtD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,8BAA8B;gBACjD,MAAM;aACP,CAAC,CAAC;YAEL,MAAM,mBAAmB,GACvB,uBAAA,IAAI,oHAA2C,MAA/C,IAAI,EAA4C,eAAe,CAAC,CAAC;YAEnE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,6BAA6B;oBACjC,IAAA,oCAA4B,EAAC,mBAAmB,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YAEH,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAA,sBAAa,EAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAA0B,CAAC;gBACnC,OAAO,EAAE,mCAAmC;gBAC5C,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACI,8CAA8C,CAAC,EACpD,MAAM,EACN,OAAO,EACP,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EACvD,QAAQ,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,GASrD;QACC,IAAI,MAAM,KAAK,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC9C,MAAM,IAAI,8BAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE3D,MAAM,cAAc,GAAG,IAAA,gDAA6B,EAAC;gBACnD,SAAS;gBACT,SAAS;aACV,CAAC,CAAC;YAEH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,6CAA0B,EAAC;gBAClD,SAAS;gBACT,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAA,+CAA4B,EAAC;gBAC9C,OAAO;gBACP,cAAc;gBACd,SAAS;gBACT,QAAQ;gBACR,SAAS;gBACT,MAAM;gBACN,IAAI;gBACJ,aAAa;gBACb,eAAe;aAChB,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gCAAuB,CAAC;gBAChC,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,gBAAgB,CAC3B,gBAAkC;QAElC,IAAA,sBAAa,EAAC,gCAAgC,EAAE;YAC9C,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;SACtD,CAAC,CAAC;QAEH,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,CAAiC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG;gBAClB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,8BAA8B;gBACjD,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,yBAAW,CAAC,YAAY;gBACjC,OAAO,EAAE;oBACP,OAAO,EAAE,KAAK;oBACd,MAAM,EACJ,qCAA6B,CAAC,kCAAkC;oBAClE,MAAM,EAAE,gBAAgB;iBACzB;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACtC,8BAA8B,EAC9B,WAAW,CACZ,CAAC;YAEF,uBAAA,IAAI,8HAAqD,MAAzD,IAAI,EACF,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;YAEF,IAAA,sBAAa,EAAC,mCAAmC,EAAE;gBACjD,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;gBACrD,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAA,sBAAa,EAAC,6BAA6B,EAAE;gBAC3C,KAAK;gBACL,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;aACtD,CAAC,CAAC;YAEH,MAAM,IAAI,sCAA6B,CAAC;gBACtC,MAAM,EACJ,qCAA6B,CAAC,kCAAkC;gBAClE,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,KAAK,CAAC,oBAAoB,CAC/B,MAA+B;QAE/B,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;QAE3C,IAAA,sBAAa,EAAC,oCAAoC,EAAE;YAClD,IAAI;YACJ,iBAAiB;SAClB,CAAC,CAAC;QAEH,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,CAAiC,CAAC;QAqBtC,yCAAyC;QACzC,MAAM,QAAQ,GAA8B;YAC1C,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,SAAS;SACrB,CAAC;QAEF,8EAA8E;QAC9E,MAAM,uBAAuB,GAAG,GAAG,EAAE;YACnC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;gBACF,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;YAChC,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;gBACF,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,YAAoB,EAAE,eAAe,GAAG,IAAI,EAAE,EAAE;YAC/D,uBAAuB,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,4CAA4C,EAC5C,QAAQ,CAAC,SAAS,CACnB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,yCAAyC,EACzC,QAAQ,CAAC,MAAM,CAChB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,0CAA0C,EAC1C,QAAQ,CAAC,OAAO,CACjB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAED,sEAAsE;YACtE,IAAI,eAAe,EAAE,CAAC;gBACpB,uBAAA,IAAI,iHAAwC,MAA5C,IAAI,EAAyC,YAAY,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC;QAEF,iEAAiE;QACjE,QAAQ,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EACX,6DAA6D,EAC7D;oBACE,IAAI;oBACJ,iBAAiB;iBAClB,CACF,CAAC;gBAEF,uBAAA,IAAI,sGAA6B,MAAjC,IAAI,EAA8B,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAE3D,oEAAoE;gBACpE,uBAAuB,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QAEF,gEAAgE;QAChE,QAAQ,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,qDAAqD,EAAE;oBACnE,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC;QAEF,mDAAmD;QACnD,QAAQ,CAAC,SAAS,GAAG,CAAC,eAAe,EAAE,EAAE;YACvC,IAAI,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChC,IAAA,sBAAa,EAAC,8CAA8C,EAAE;oBAC5D,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC3D,IAAA,sBAAa,EACX,yDAAyD,EACzD;wBACE,IAAI;wBACJ,iBAAiB;wBACjB,KAAK;qBACN,CACF,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAEH,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QAEF,oEAAoE;QACpE,QAAQ,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,qDAAqD,EAAE;oBACnE,IAAI;oBACJ,iBAAiB;oBACjB,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB,CAAC,CAAC;gBAEH,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC;QAEF,qEAAqE;QACrE,QAAQ,CAAC,OAAO,GAAG,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,sDAAsD,EAAE;oBACpE,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC;QAEF,8CAA8C;QAC9C,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;QAEF,2CAA2C;QAC3C,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,4CAA4C,EAC5C,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,yCAAyC,EACzC,QAAQ,CAAC,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,0CAA0C,EAC1C,QAAQ,CAAC,OAAO,CACjB,CAAC;QAEF,oDAAoD;QACpD,QAAQ,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAA,sBAAa,EAAC,qDAAqD,EAAE;gBACnE,IAAI;gBACJ,iBAAiB;aAClB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACjC,CAAC;CACF;sLAxpBgC,0BAAmC;IAChE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,+HAE6B,yBAAkC;IAC9D,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,6HAE4B,IAAY,EAAE,iBAAsB;IAC/D,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG;YACzB,GAAG,KAAK,CAAC,kBAAkB;YAC3B,EAAE,IAAI,EAAE,iBAAiB,EAAE;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,mJAEuC,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACxD,CAAC,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,KAAK,IAAI,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,6KAEoD,iBAAsB;IACzE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACxD,CAAC,kBAAkB,EAAE,EAAE,CACrB,kBAAkB,CAAC,iBAAiB,KAAK,iBAAiB,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;IAGC,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,iCAAiC,EAClD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/C,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,yBAAyB,EAC1C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CACvC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,0BAA0B,EAC3C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CACxC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,iDAAiD,EAClE,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/D,CAAC;IAEF,MAAM,sBAAsB,GAAG,GAAG,cAAc,mBAAmB,CAAC;IAEpE,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,sBAAsB,EACtB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CACjC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,uBAAuB,EACxC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CACrC,CAAC;AACJ,CAAC;IAQC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC;QAC1C,MAAM,IAAI,wCAA+B,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,kFAA8C,EACjD,MAAM,EACN,MAAM,GAIP;IAGC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACzC,8BAA8B,EAC9B;YACE,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,yBAAW,CAAC,YAAY;YACjC,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,qCAA6B,CAAC,uCAAuC;gBACvE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;aACxC;SACF,CACF,CAAsE,CAAC;QAExE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,sBAAa,EACX,6DAA6D,EAC7D,KAAK,CACN,CAAC;QACF,MAAM,IAAI,sCAA6B,CAAC;YACtC,MAAM,EACJ,qCAA6B,CAAC,uCAAuC;YACvE,KAAK,EAAE,KAAc;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,iIASC,qBAGC;IAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,qBAAqB,CAAC;IACrD,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,kBAAkB,CAAC;IACtE,OAAO;QACL,GAAG,qBAAqB;QACxB,kBAAkB,EAAE;YAClB,GAAG,IAAI;SACR;KACF,CAAC;AACJ,CAAC,yJASC,sBAEQ;IAER,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,OAAO,0BAA0B,CAAC;IACpC,CAAC;IAED,OAAO,sBAAsB,CAAC,MAAM,CAClC,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,EAAE;QAC7C,MAAM,EAAE,kBAAkB,EAAE,GAAG,qBAAqB,CAAC;QACrD,MAAM,cAAc,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC;QAEvC,MAAM,8BAA8B,GAClC,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,qBAAqB,CAAC,CAAC;QAE7D,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,qBAAqB,CAAC;YAC3B,KAAK,uBAAuB,CAAC;YAC7B,KAAK,oBAAoB,CAAC;YAC1B,KAAK,sBAAsB;gBACzB,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClD,mBAAmB,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACpD,CAAC;gBAGC,mBAAmB,CAAC,cAAc,CAAC,CACjC,OAAO,CAKV,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBACvC,MAAM;YACR;gBACE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC1C,CAAC;gBAGC,mBAAmB,CAAC,KAAK,CACvB,OAAO,CAKV,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBACvC,MAAM;QACV,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC,EACD;QACE,qBAAqB,EAAE,EAAE;QACzB,uBAAuB,EAAE,EAAE;QAC3B,oBAAoB,EAAE,EAAE;QACxB,sBAAsB,EAAE,EAAE;QAC1B,KAAK,EAAE,EAAE;KACa,CACzB,CAAC;AACJ,CAAC;kBA7PkB,0BAA0B","sourcesContent":["import type { Signer } from '@metamask/7715-permission-types';\nimport type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport { DELEGATOR_CONTRACTS } from '@metamask/delegation-deployments';\nimport type { Messenger } from '@metamask/messenger';\nimport type { HandleSnapRequest, HasSnap } from '@metamask/snaps-controllers';\nimport type { SnapId } from '@metamask/snaps-sdk';\nimport { HandlerType } from '@metamask/snaps-utils';\nimport type {\n  TransactionControllerTransactionApprovedEvent,\n  TransactionControllerTransactionConfirmedEvent,\n  TransactionControllerTransactionDroppedEvent,\n  TransactionControllerTransactionFailedEvent,\n  TransactionControllerTransactionRejectedEvent,\n} from '@metamask/transaction-controller';\nimport type { Hex, Json } from '@metamask/utils';\n\nimport type { DecodedPermission } from './decodePermission';\nimport {\n  getPermissionDataAndExpiry,\n  identifyPermissionByEnforcers,\n  reconstructDecodedPermission,\n} from './decodePermission';\nimport {\n  GatorPermissionsFetchError,\n  GatorPermissionsNotEnabledError,\n  GatorPermissionsProviderError,\n  OriginNotAllowedError,\n  PermissionDecodingError,\n} from './errors';\nimport { controllerLog } from './logger';\nimport type { StoredGatorPermissionSanitized } from './types';\nimport {\n  GatorPermissionsSnapRpcMethod,\n  type GatorPermissionsMap,\n  type PermissionTypesWithCustom,\n  type StoredGatorPermission,\n  type DelegationDetails,\n  type RevocationParams,\n  type PendingRevocationParams,\n} from './types';\nimport {\n  deserializeGatorPermissionsMap,\n  serializeGatorPermissionsMap,\n} from './utils';\n\n// === GENERAL ===\n\n// Unique name for the controller\nconst controllerName = 'GatorPermissionsController';\n\n// Default value for the gator permissions provider snap id\nconst defaultGatorPermissionsProviderSnapId =\n  'npm:@metamask/gator-permissions-snap' as SnapId;\n\nconst defaultGatorPermissionsMap: GatorPermissionsMap = {\n  'native-token-stream': {},\n  'native-token-periodic': {},\n  'erc20-token-stream': {},\n  'erc20-token-periodic': {},\n  other: {},\n};\n\n/**\n * Delegation framework version used to select the correct deployed enforcer\n * contract addresses from `@metamask/delegation-deployments`.\n */\nexport const DELEGATION_FRAMEWORK_VERSION = '1.3.0';\n\n/**\n * Timeout duration for pending revocations (2 hours in milliseconds).\n * After this time, event listeners will be cleaned up to prevent memory leaks.\n */\nconst PENDING_REVOCATION_TIMEOUT = 2 * 60 * 60 * 1000;\n\nconst contractsByChainId = DELEGATOR_CONTRACTS[DELEGATION_FRAMEWORK_VERSION];\n\n// === STATE ===\n\n/**\n * State shape for GatorPermissionsController\n */\nexport type GatorPermissionsControllerState = {\n  /**\n   * Flag that indicates if the gator permissions feature is enabled\n   */\n  isGatorPermissionsEnabled: boolean;\n\n  /**\n   * JSON serialized object containing gator permissions fetched from profile sync\n   */\n  gatorPermissionsMapSerialized: string;\n\n  /**\n   * Flag that indicates that fetching permissions is in progress\n   * This is used to show a loading spinner in the UI\n   */\n  isFetchingGatorPermissions: boolean;\n\n  /**\n   * The ID of the Snap of the gator permissions provider snap\n   * Default value is `@metamask/gator-permissions-snap`\n   */\n  gatorPermissionsProviderSnapId: SnapId;\n\n  /**\n   * List of gator permission pending a revocation transaction\n   */\n  pendingRevocations: {\n    txId: string;\n    permissionContext: Hex;\n  }[];\n};\n\nconst gatorPermissionsControllerMetadata: StateMetadata<GatorPermissionsControllerState> =\n  {\n    isGatorPermissionsEnabled: {\n      includeInStateLogs: true,\n      persist: true,\n      includeInDebugSnapshot: false,\n      usedInUi: false,\n    },\n    gatorPermissionsMapSerialized: {\n      includeInStateLogs: true,\n      persist: true,\n      includeInDebugSnapshot: false,\n      usedInUi: true,\n    },\n    isFetchingGatorPermissions: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: false,\n    },\n    gatorPermissionsProviderSnapId: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: false,\n    },\n    pendingRevocations: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: true,\n    },\n  } satisfies StateMetadata<GatorPermissionsControllerState>;\n\n/**\n * Constructs the default {@link GatorPermissionsController} state. This allows\n * consumers to provide a partial state object when initializing the controller\n * and also helps in constructing complete state objects for this controller in\n * tests.\n *\n * @returns The default {@link GatorPermissionsController} state.\n */\nexport function getDefaultGatorPermissionsControllerState(): GatorPermissionsControllerState {\n  return {\n    isGatorPermissionsEnabled: false,\n    gatorPermissionsMapSerialized: serializeGatorPermissionsMap(\n      defaultGatorPermissionsMap,\n    ),\n    isFetchingGatorPermissions: false,\n    gatorPermissionsProviderSnapId: defaultGatorPermissionsProviderSnapId,\n    pendingRevocations: [],\n  };\n}\n\n// === MESSENGER ===\n\n/**\n * The action which can be used to retrieve the state of the\n * {@link GatorPermissionsController}.\n */\nexport type GatorPermissionsControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  GatorPermissionsControllerState\n>;\n\n/**\n * The action which can be used to fetch and update gator permissions.\n */\nexport type GatorPermissionsControllerFetchAndUpdateGatorPermissionsAction = {\n  type: `${typeof controllerName}:fetchAndUpdateGatorPermissions`;\n  handler: GatorPermissionsController['fetchAndUpdateGatorPermissions'];\n};\n\n/**\n * The action which can be used to enable gator permissions.\n */\nexport type GatorPermissionsControllerEnableGatorPermissionsAction = {\n  type: `${typeof controllerName}:enableGatorPermissions`;\n  handler: GatorPermissionsController['enableGatorPermissions'];\n};\n\n/**\n * The action which can be used to disable gator permissions.\n */\nexport type GatorPermissionsControllerDisableGatorPermissionsAction = {\n  type: `${typeof controllerName}:disableGatorPermissions`;\n  handler: GatorPermissionsController['disableGatorPermissions'];\n};\n\nexport type GatorPermissionsControllerDecodePermissionFromPermissionContextForOriginAction =\n  {\n    type: `${typeof controllerName}:decodePermissionFromPermissionContextForOrigin`;\n    handler: GatorPermissionsController['decodePermissionFromPermissionContextForOrigin'];\n  };\n\n/**\n * The action which can be used to submit a revocation.\n */\nexport type GatorPermissionsControllerSubmitRevocationAction = {\n  type: `${typeof controllerName}:submitRevocation`;\n  handler: GatorPermissionsController['submitRevocation'];\n};\n\n/**\n * The action which can be used to add a pending revocation.\n */\nexport type GatorPermissionsControllerAddPendingRevocationAction = {\n  type: `${typeof controllerName}:addPendingRevocation`;\n  handler: GatorPermissionsController['addPendingRevocation'];\n};\n\n/**\n * All actions that {@link GatorPermissionsController} registers, to be called\n * externally.\n */\nexport type GatorPermissionsControllerActions =\n  | GatorPermissionsControllerGetStateAction\n  | GatorPermissionsControllerFetchAndUpdateGatorPermissionsAction\n  | GatorPermissionsControllerEnableGatorPermissionsAction\n  | GatorPermissionsControllerDisableGatorPermissionsAction\n  | GatorPermissionsControllerDecodePermissionFromPermissionContextForOriginAction\n  | GatorPermissionsControllerSubmitRevocationAction\n  | GatorPermissionsControllerAddPendingRevocationAction;\n\n/**\n * All actions that {@link GatorPermissionsController} calls internally.\n *\n * SnapsController:handleRequest and SnapsController:has are allowed to be called\n * internally because they are used to fetch gator permissions from the Snap.\n */\ntype AllowedActions = HandleSnapRequest | HasSnap;\n\n/**\n * The event that {@link GatorPermissionsController} publishes when updating state.\n */\nexport type GatorPermissionsControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    GatorPermissionsControllerState\n  >;\n\n/**\n * All events that {@link GatorPermissionsController} publishes, to be subscribed to\n * externally.\n */\nexport type GatorPermissionsControllerEvents =\n  GatorPermissionsControllerStateChangeEvent;\n\n/**\n * Events that {@link GatorPermissionsController} is allowed to subscribe to internally.\n */\ntype AllowedEvents =\n  | GatorPermissionsControllerStateChangeEvent\n  | TransactionControllerTransactionApprovedEvent\n  | TransactionControllerTransactionRejectedEvent\n  | TransactionControllerTransactionConfirmedEvent\n  | TransactionControllerTransactionFailedEvent\n  | TransactionControllerTransactionDroppedEvent;\n\n/**\n * Messenger type for the GatorPermissionsController.\n */\nexport type GatorPermissionsControllerMessenger = Messenger<\n  typeof controllerName,\n  GatorPermissionsControllerActions | AllowedActions,\n  GatorPermissionsControllerEvents | AllowedEvents\n>;\n\n/**\n * Controller that manages gator permissions by reading from profile sync\n */\nexport default class GatorPermissionsController extends BaseController<\n  typeof controllerName,\n  GatorPermissionsControllerState,\n  GatorPermissionsControllerMessenger\n> {\n  /**\n   * Creates a GatorPermissionsController instance.\n   *\n   * @param args - The arguments to this function.\n   * @param args.messenger - Messenger used to communicate with BaseV2 controller.\n   * @param args.state - Initial state to set on this controller.\n   */\n  constructor({\n    messenger,\n    state,\n  }: {\n    messenger: GatorPermissionsControllerMessenger;\n    state?: Partial<GatorPermissionsControllerState>;\n  }) {\n    super({\n      name: controllerName,\n      metadata: gatorPermissionsControllerMetadata,\n      messenger,\n      state: {\n        ...getDefaultGatorPermissionsControllerState(),\n        ...state,\n        isFetchingGatorPermissions: false,\n      },\n    });\n\n    this.#registerMessageHandlers();\n  }\n\n  #setIsFetchingGatorPermissions(isFetchingGatorPermissions: boolean) {\n    this.update((state) => {\n      state.isFetchingGatorPermissions = isFetchingGatorPermissions;\n    });\n  }\n\n  #setIsGatorPermissionsEnabled(isGatorPermissionsEnabled: boolean) {\n    this.update((state) => {\n      state.isGatorPermissionsEnabled = isGatorPermissionsEnabled;\n    });\n  }\n\n  #addPendingRevocationToState(txId: string, permissionContext: Hex) {\n    this.update((state) => {\n      state.pendingRevocations = [\n        ...state.pendingRevocations,\n        { txId, permissionContext },\n      ];\n    });\n  }\n\n  #removePendingRevocationFromStateByTxId(txId: string) {\n    this.update((state) => {\n      state.pendingRevocations = state.pendingRevocations.filter(\n        (pendingRevocations) => pendingRevocations.txId !== txId,\n      );\n    });\n  }\n\n  #removePendingRevocationFromStateByPermissionContext(permissionContext: Hex) {\n    this.update((state) => {\n      state.pendingRevocations = state.pendingRevocations.filter(\n        (pendingRevocations) =>\n          pendingRevocations.permissionContext !== permissionContext,\n      );\n    });\n  }\n\n  #registerMessageHandlers(): void {\n    this.messenger.registerActionHandler(\n      `${controllerName}:fetchAndUpdateGatorPermissions`,\n      this.fetchAndUpdateGatorPermissions.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:enableGatorPermissions`,\n      this.enableGatorPermissions.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:disableGatorPermissions`,\n      this.disableGatorPermissions.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:decodePermissionFromPermissionContextForOrigin`,\n      this.decodePermissionFromPermissionContextForOrigin.bind(this),\n    );\n\n    const submitRevocationAction = `${controllerName}:submitRevocation`;\n\n    this.messenger.registerActionHandler(\n      submitRevocationAction,\n      this.submitRevocation.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:addPendingRevocation`,\n      this.addPendingRevocation.bind(this),\n    );\n  }\n\n  /**\n   * Asserts that the gator permissions are enabled.\n   *\n   * @throws {GatorPermissionsNotEnabledError} If the gator permissions are not enabled.\n   */\n  #assertGatorPermissionsEnabled() {\n    if (!this.state.isGatorPermissionsEnabled) {\n      throw new GatorPermissionsNotEnabledError();\n    }\n  }\n\n  /**\n   * Forwards a Snap request to the SnapController.\n   *\n   * @param args - The request parameters.\n   * @param args.snapId - The ID of the Snap of the gator permissions provider snap.\n   * @param args.params - Optional parameters to pass to the snap method.\n   * @returns A promise that resolves with the gator permissions.\n   */\n  async #handleSnapRequestToGatorPermissionsProvider({\n    snapId,\n    params,\n  }: {\n    snapId: SnapId;\n    params?: Json;\n  }): Promise<\n    StoredGatorPermission<Signer, PermissionTypesWithCustom>[] | null\n  > {\n    try {\n      const response = (await this.messenger.call(\n        'SnapController:handleRequest',\n        {\n          snapId,\n          origin: 'metamask',\n          handler: HandlerType.OnRpcRequest,\n          request: {\n            jsonrpc: '2.0',\n            method:\n              GatorPermissionsSnapRpcMethod.PermissionProviderGetGrantedPermissions,\n            ...(params !== undefined && { params }),\n          },\n        },\n      )) as StoredGatorPermission<Signer, PermissionTypesWithCustom>[] | null;\n\n      return response;\n    } catch (error) {\n      controllerLog(\n        'Failed to handle snap request to gator permissions provider',\n        error,\n      );\n      throw new GatorPermissionsProviderError({\n        method:\n          GatorPermissionsSnapRpcMethod.PermissionProviderGetGrantedPermissions,\n        cause: error as Error,\n      });\n    }\n  }\n\n  /**\n   * Sanitizes a stored gator permission by removing the fields that are not expose to MetaMask client.\n   *\n   * @param storedGatorPermission - The stored gator permission to sanitize.\n   * @returns The sanitized stored gator permission.\n   */\n  #sanitizeStoredGatorPermission(\n    storedGatorPermission: StoredGatorPermission<\n      Signer,\n      PermissionTypesWithCustom\n    >,\n  ): StoredGatorPermissionSanitized<Signer, PermissionTypesWithCustom> {\n    const { permissionResponse } = storedGatorPermission;\n    const { rules, dependencyInfo, signer, ...rest } = permissionResponse;\n    return {\n      ...storedGatorPermission,\n      permissionResponse: {\n        ...rest,\n      },\n    };\n  }\n\n  /**\n   * Categorizes stored gator permissions by type and chainId.\n   *\n   * @param storedGatorPermissions - An array of stored gator permissions.\n   * @returns The gator permissions map.\n   */\n  #categorizePermissionsDataByTypeAndChainId(\n    storedGatorPermissions:\n      | StoredGatorPermission<Signer, PermissionTypesWithCustom>[]\n      | null,\n  ): GatorPermissionsMap {\n    if (!storedGatorPermissions) {\n      return defaultGatorPermissionsMap;\n    }\n\n    return storedGatorPermissions.reduce(\n      (gatorPermissionsMap, storedGatorPermission) => {\n        const { permissionResponse } = storedGatorPermission;\n        const permissionType = permissionResponse.permission.type;\n        const { chainId } = permissionResponse;\n\n        const sanitizedStoredGatorPermission =\n          this.#sanitizeStoredGatorPermission(storedGatorPermission);\n\n        switch (permissionType) {\n          case 'native-token-stream':\n          case 'native-token-periodic':\n          case 'erc20-token-stream':\n          case 'erc20-token-periodic':\n            if (!gatorPermissionsMap[permissionType][chainId]) {\n              gatorPermissionsMap[permissionType][chainId] = [];\n            }\n\n            (\n              gatorPermissionsMap[permissionType][\n                chainId\n              ] as StoredGatorPermissionSanitized<\n                Signer,\n                PermissionTypesWithCustom\n              >[]\n            ).push(sanitizedStoredGatorPermission);\n            break;\n          default:\n            if (!gatorPermissionsMap.other[chainId]) {\n              gatorPermissionsMap.other[chainId] = [];\n            }\n\n            (\n              gatorPermissionsMap.other[\n                chainId\n              ] as StoredGatorPermissionSanitized<\n                Signer,\n                PermissionTypesWithCustom\n              >[]\n            ).push(sanitizedStoredGatorPermission);\n            break;\n        }\n\n        return gatorPermissionsMap;\n      },\n      {\n        'native-token-stream': {},\n        'native-token-periodic': {},\n        'erc20-token-stream': {},\n        'erc20-token-periodic': {},\n        other: {},\n      } as GatorPermissionsMap,\n    );\n  }\n\n  /**\n   * Gets the gator permissions map from the state.\n   *\n   * @returns The gator permissions map.\n   */\n  get gatorPermissionsMap(): GatorPermissionsMap {\n    return deserializeGatorPermissionsMap(\n      this.state.gatorPermissionsMapSerialized,\n    );\n  }\n\n  /**\n   * Gets the gator permissions provider snap id that is used to fetch gator permissions.\n   *\n   * @returns The gator permissions provider snap id.\n   */\n  get permissionsProviderSnapId(): SnapId {\n    return this.state.gatorPermissionsProviderSnapId;\n  }\n\n  /**\n   * Enables gator permissions for the user.\n   */\n  public async enableGatorPermissions() {\n    this.#setIsGatorPermissionsEnabled(true);\n  }\n\n  /**\n   * Clears the gator permissions map and disables the feature.\n   */\n  public async disableGatorPermissions() {\n    this.update((state) => {\n      state.isGatorPermissionsEnabled = false;\n      state.gatorPermissionsMapSerialized = serializeGatorPermissionsMap(\n        defaultGatorPermissionsMap,\n      );\n    });\n  }\n\n  /**\n   * Gets the pending revocations list.\n   *\n   * @returns The pending revocations list.\n   */\n  get pendingRevocations(): { txId: string; permissionContext: Hex }[] {\n    return this.state.pendingRevocations;\n  }\n\n  /**\n   * Fetches the gator permissions from profile sync and updates the state.\n   *\n   * @param params - Optional parameters to pass to the snap's getGrantedPermissions method.\n   * @returns A promise that resolves to the gator permissions map.\n   * @throws {GatorPermissionsFetchError} If the gator permissions fetch fails.\n   */\n  public async fetchAndUpdateGatorPermissions(\n    params?: Json,\n  ): Promise<GatorPermissionsMap> {\n    try {\n      this.#setIsFetchingGatorPermissions(true);\n      this.#assertGatorPermissionsEnabled();\n\n      const permissionsData =\n        await this.#handleSnapRequestToGatorPermissionsProvider({\n          snapId: this.state.gatorPermissionsProviderSnapId,\n          params,\n        });\n\n      const gatorPermissionsMap =\n        this.#categorizePermissionsDataByTypeAndChainId(permissionsData);\n\n      this.update((state) => {\n        state.gatorPermissionsMapSerialized =\n          serializeGatorPermissionsMap(gatorPermissionsMap);\n      });\n\n      return gatorPermissionsMap;\n    } catch (error) {\n      controllerLog('Failed to fetch gator permissions', error);\n      throw new GatorPermissionsFetchError({\n        message: 'Failed to fetch gator permissions',\n        cause: error as Error,\n      });\n    } finally {\n      this.#setIsFetchingGatorPermissions(false);\n    }\n  }\n\n  /**\n   * Decodes a permission context into a structured permission for a specific origin.\n   *\n   * This method validates the caller origin, decodes the provided `permissionContext`\n   * into delegations, identifies the permission type from the caveat enforcers,\n   * extracts the permission-specific data and expiry, and reconstructs a\n   * {@link DecodedPermission} containing chainId, account addresses, signer, type and data.\n   *\n   * @param args - The arguments to this function.\n   * @param args.origin - The caller's origin; must match the configured permissions provider Snap id.\n   * @param args.chainId - Numeric EIP-155 chain id used for resolving enforcer contracts and encoding.\n   * @param args.delegation - delegation representing the permission.\n   * @param args.metadata - metadata included in the request.\n   * @param args.metadata.justification - the justification as specified in the request metadata.\n   * @param args.metadata.origin - the origin as specified in the request metadata.\n   *\n   * @returns A decoded permission object suitable for UI consumption and follow-up actions.\n   * @throws If the origin is not allowed, the context cannot be decoded into exactly one delegation,\n   * or the enforcers/terms do not match a supported permission type.\n   */\n  public decodePermissionFromPermissionContextForOrigin({\n    origin,\n    chainId,\n    delegation: { caveats, delegator, delegate, authority },\n    metadata: { justification, origin: specifiedOrigin },\n  }: {\n    origin: string;\n    chainId: number;\n    metadata: {\n      justification: string;\n      origin: string;\n    };\n    delegation: DelegationDetails;\n  }): DecodedPermission {\n    if (origin !== this.permissionsProviderSnapId) {\n      throw new OriginNotAllowedError({ origin });\n    }\n\n    const contracts = contractsByChainId[chainId];\n\n    if (!contracts) {\n      throw new Error(`Contracts not found for chainId: ${chainId}`);\n    }\n\n    try {\n      const enforcers = caveats.map((caveat) => caveat.enforcer);\n\n      const permissionType = identifyPermissionByEnforcers({\n        enforcers,\n        contracts,\n      });\n\n      const { expiry, data } = getPermissionDataAndExpiry({\n        contracts,\n        caveats,\n        permissionType,\n      });\n\n      const permission = reconstructDecodedPermission({\n        chainId,\n        permissionType,\n        delegator,\n        delegate,\n        authority,\n        expiry,\n        data,\n        justification,\n        specifiedOrigin,\n      });\n\n      return permission;\n    } catch (error) {\n      throw new PermissionDecodingError({\n        cause: error as Error,\n      });\n    }\n  }\n\n  /**\n   * Submits a revocation to the gator permissions provider snap.\n   *\n   * @param revocationParams - The revocation parameters containing the permission context.\n   * @returns A promise that resolves when the revocation is submitted successfully.\n   * @throws {GatorPermissionsNotEnabledError} If the gator permissions are not enabled.\n   * @throws {GatorPermissionsProviderError} If the snap request fails.\n   */\n  public async submitRevocation(\n    revocationParams: RevocationParams,\n  ): Promise<void> {\n    controllerLog('submitRevocation method called', {\n      permissionContext: revocationParams.permissionContext,\n    });\n\n    this.#assertGatorPermissionsEnabled();\n\n    try {\n      const snapRequest = {\n        snapId: this.state.gatorPermissionsProviderSnapId,\n        origin: 'metamask',\n        handler: HandlerType.OnRpcRequest,\n        request: {\n          jsonrpc: '2.0',\n          method:\n            GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,\n          params: revocationParams,\n        },\n      };\n\n      const result = await this.messenger.call(\n        'SnapController:handleRequest',\n        snapRequest,\n      );\n\n      this.#removePendingRevocationFromStateByPermissionContext(\n        revocationParams.permissionContext,\n      );\n\n      controllerLog('Successfully submitted revocation', {\n        permissionContext: revocationParams.permissionContext,\n        result,\n      });\n    } catch (error) {\n      controllerLog('Failed to submit revocation', {\n        error,\n        permissionContext: revocationParams.permissionContext,\n      });\n\n      throw new GatorPermissionsProviderError({\n        method:\n          GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,\n        cause: error as Error,\n      });\n    }\n  }\n\n  /**\n   * Adds a pending revocation that will be submitted once the transaction is confirmed.\n   *\n   * This method sets up listeners for the user's approval/rejection decision and\n   * terminal transaction states (confirmed, failed, dropped). The flow is:\n   * 1. Wait for user to approve or reject the transaction\n   * 2. If approved, add to pending revocations state\n   * 3. If rejected, cleanup without adding to state\n   * 4. If confirmed, submit the revocation\n   * 5. If failed or dropped, cleanup\n   *\n   * Includes a timeout safety net to prevent memory leaks if the transaction never\n   * reaches a terminal state.\n   *\n   * @param params - The pending revocation parameters.\n   * @returns A promise that resolves when the listener is set up.\n   */\n  public async addPendingRevocation(\n    params: PendingRevocationParams,\n  ): Promise<void> {\n    const { txId, permissionContext } = params;\n\n    controllerLog('addPendingRevocation method called', {\n      txId,\n      permissionContext,\n    });\n\n    this.#assertGatorPermissionsEnabled();\n\n    type PendingRevocationHandlers = {\n      approved?: (\n        ...args: TransactionControllerTransactionApprovedEvent['payload']\n      ) => void;\n      rejected?: (\n        ...args: TransactionControllerTransactionRejectedEvent['payload']\n      ) => void;\n      confirmed?: (\n        ...args: TransactionControllerTransactionConfirmedEvent['payload']\n      ) => void;\n      failed?: (\n        ...args: TransactionControllerTransactionFailedEvent['payload']\n      ) => void;\n      dropped?: (\n        ...args: TransactionControllerTransactionDroppedEvent['payload']\n      ) => void;\n      timeoutId?: ReturnType<typeof setTimeout>;\n    };\n\n    // Track handlers and timeout for cleanup\n    const handlers: PendingRevocationHandlers = {\n      approved: undefined,\n      rejected: undefined,\n      confirmed: undefined,\n      failed: undefined,\n      dropped: undefined,\n      timeoutId: undefined,\n    };\n\n    // Helper to unsubscribe from approval/rejection events after decision is made\n    const cleanupApprovalHandlers = () => {\n      if (handlers.approved) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionApproved',\n          handlers.approved,\n        );\n        handlers.approved = undefined;\n      }\n      if (handlers.rejected) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionRejected',\n          handlers.rejected,\n        );\n        handlers.rejected = undefined;\n      }\n    };\n\n    // Cleanup function to unsubscribe from all events and clear timeout\n    const cleanup = (txIdToRemove: string, removeFromState = true) => {\n      cleanupApprovalHandlers();\n      if (handlers.confirmed) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionConfirmed',\n          handlers.confirmed,\n        );\n      }\n      if (handlers.failed) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionFailed',\n          handlers.failed,\n        );\n      }\n      if (handlers.dropped) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionDropped',\n          handlers.dropped,\n        );\n      }\n      if (handlers.timeoutId !== undefined) {\n        clearTimeout(handlers.timeoutId);\n      }\n\n      // Remove the pending revocation from the state (only if it was added)\n      if (removeFromState) {\n        this.#removePendingRevocationFromStateByTxId(txIdToRemove);\n      }\n    };\n\n    // Handle approved transaction - add to pending revocations state\n    handlers.approved = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog(\n          'Transaction approved by user, adding to pending revocations',\n          {\n            txId,\n            permissionContext,\n          },\n        );\n\n        this.#addPendingRevocationToState(txId, permissionContext);\n\n        // Unsubscribe from approval/rejection events since decision is made\n        cleanupApprovalHandlers();\n      }\n    };\n\n    // Handle rejected transaction - cleanup without adding to state\n    handlers.rejected = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction rejected by user, cleaning up listeners', {\n          txId,\n          permissionContext,\n        });\n\n        // Don't remove from state since it was never added\n        cleanup(payload.transactionMeta.id, false);\n      }\n    };\n\n    // Handle confirmed transaction - submit revocation\n    handlers.confirmed = (transactionMeta) => {\n      if (transactionMeta.id === txId) {\n        controllerLog('Transaction confirmed, submitting revocation', {\n          txId,\n          permissionContext,\n        });\n\n        this.submitRevocation({ permissionContext }).catch((error) => {\n          controllerLog(\n            'Failed to submit revocation after transaction confirmed',\n            {\n              txId,\n              permissionContext,\n              error,\n            },\n          );\n        });\n\n        cleanup(transactionMeta.id);\n      }\n    };\n\n    // Handle failed transaction - cleanup without submitting revocation\n    handlers.failed = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction failed, cleaning up revocation listener', {\n          txId,\n          permissionContext,\n          error: payload.error,\n        });\n\n        cleanup(payload.transactionMeta.id);\n      }\n    };\n\n    // Handle dropped transaction - cleanup without submitting revocation\n    handlers.dropped = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction dropped, cleaning up revocation listener', {\n          txId,\n          permissionContext,\n        });\n\n        cleanup(payload.transactionMeta.id);\n      }\n    };\n\n    // Subscribe to user approval/rejection events\n    this.messenger.subscribe(\n      'TransactionController:transactionApproved',\n      handlers.approved,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionRejected',\n      handlers.rejected,\n    );\n\n    // Subscribe to terminal transaction events\n    this.messenger.subscribe(\n      'TransactionController:transactionConfirmed',\n      handlers.confirmed,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionFailed',\n      handlers.failed,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionDropped',\n      handlers.dropped,\n    );\n\n    // Set timeout as safety net to prevent memory leaks\n    handlers.timeoutId = setTimeout(() => {\n      controllerLog('Pending revocation timed out, cleaning up listeners', {\n        txId,\n        permissionContext,\n      });\n      cleanup(txId);\n    }, PENDING_REVOCATION_TIMEOUT);\n  }\n}\n"]}
+{"version":3,"file":"GatorPermissionsController.cjs","sourceRoot":"","sources":["../src/GatorPermissionsController.ts"],"names":[],"mappings":";;;;;;;;;AAMA,+DAA2D;AAC3D,6EAAuE;AAIvE,uDAAoD;AAUpD,+CAA2D;AAE3D,mEAI4B;AAC5B,yCAMkB;AAClB,yCAAyC;AACzC,uCAAwD;AAUxD,uCAGiB;AAEjB,kBAAkB;AAElB,iCAAiC;AACjC,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD,2DAA2D;AAC3D,MAAM,qCAAqC,GACzC,sCAAgD,CAAC;AAEnD,MAAM,8BAA8B,GAA8B,GAAG,EAAE;IACrE,OAAO;QACL,wBAAwB,EAAE,EAAE;QAC5B,qBAAqB,EAAE,EAAE;QACzB,uBAAuB,EAAE,EAAE;QAC3B,oBAAoB,EAAE,EAAE;QACxB,sBAAsB,EAAE,EAAE;QAC1B,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,MAAM,kBAAkB,GAAG,4CAAmB,CAAC,wCAA4B,CAAC,CAAC;AAuC7E,MAAM,kCAAkC,GACtC;IACE,yBAAyB,EAAE;QACzB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,KAAK;KAChB;IACD,6BAA6B,EAAE;QAC7B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;IACD,0BAA0B,EAAE;QAC1B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,KAAK;KAChB;IACD,8BAA8B,EAAE;QAC9B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,KAAK;KAChB;IACD,kBAAkB,EAAE;QAClB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;CACuD,CAAC;AAE7D;;;;;;;GAOG;AACH,SAAgB,yCAAyC;IACvD,OAAO;QACL,yBAAyB,EAAE,KAAK;QAChC,6BAA6B,EAAE,IAAA,oCAA4B,EACzD,8BAA8B,EAAE,CACjC;QACD,0BAA0B,EAAE,KAAK;QACjC,8BAA8B,EAAE,qCAAqC;QACrE,kBAAkB,EAAE,EAAE;KACvB,CAAC;AACJ,CAAC;AAVD,8FAUC;AAuID;;GAEG;AACH,MAAqB,0BAA2B,SAAQ,gCAIvD;IACC;;;;;;OAMG;IACH,YAAY,EACV,SAAS,EACT,KAAK,GAIN;QACC,KAAK,CAAC;YACJ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,kCAAkC;YAC5C,SAAS;YACT,KAAK,EAAE;gBACL,GAAG,yCAAyC,EAAE;gBAC9C,GAAG,KAAK;gBACR,0BAA0B,EAAE,KAAK;aAClC;SACF,CAAC,CAAC;;QAEH,uBAAA,IAAI,kGAAyB,MAA7B,IAAI,CAA2B,CAAC;IAClC,CAAC;IAoND;;;;OAIG;IACH,IAAI,mBAAmB;QACrB,OAAO,IAAA,sCAA8B,EACnC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CACzC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,yBAAyB;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACnD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,sBAAsB;QACjC,uBAAA,IAAI,uGAA8B,MAAlC,IAAI,EAA+B,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,uBAAuB;QAClC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,yBAAyB,GAAG,KAAK,CAAC;YACxC,KAAK,CAAC,6BAA6B,GAAG,IAAA,oCAA4B,EAChE,8BAA8B,EAAE,CACjC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,8BAA8B,CACzC,MAAa;QAEb,IAAI,CAAC;YACH,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,IAAI,CAAC,CAAC;YAC1C,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,CAAiC,CAAC;YAEtC,MAAM,eAAe,GACnB,MAAM,uBAAA,IAAI,sHAA6C,MAAjD,IAAI,EAA8C;gBACtD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,8BAA8B;gBACjD,MAAM;aACP,CAAC,CAAC;YAEL,MAAM,mBAAmB,GACvB,uBAAA,IAAI,oHAA2C,MAA/C,IAAI,EAA4C,eAAe,CAAC,CAAC;YAEnE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,6BAA6B;oBACjC,IAAA,oCAA4B,EAAC,mBAAmB,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YAEH,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAA,sBAAa,EAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAA0B,CAAC;gBACnC,OAAO,EAAE,mCAAmC;gBAC5C,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACI,8CAA8C,CAAC,EACpD,MAAM,EACN,OAAO,EACP,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EACvD,QAAQ,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,GASrD;QACC,IAAI,MAAM,KAAK,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC9C,MAAM,IAAI,8BAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE3D,MAAM,cAAc,GAAG,IAAA,gDAA6B,EAAC;gBACnD,SAAS;gBACT,SAAS;aACV,CAAC,CAAC;YAEH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,6CAA0B,EAAC;gBAClD,SAAS;gBACT,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAA,+CAA4B,EAAC;gBAC9C,OAAO;gBACP,cAAc;gBACd,SAAS;gBACT,QAAQ;gBACR,SAAS;gBACT,MAAM;gBACN,IAAI;gBACJ,aAAa;gBACb,eAAe;aAChB,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gCAAuB,CAAC;gBAChC,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,gBAAgB,CAC3B,gBAAkC;QAElC,IAAA,sBAAa,EAAC,gCAAgC,EAAE;YAC9C,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;SACtD,CAAC,CAAC;QAEH,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,CAAiC,CAAC;QAEtC,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,8BAA8B;YACjD,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,yBAAW,CAAC,YAAY;YACjC,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,qCAA6B,CAAC,kCAAkC;gBAClE,MAAM,EAAE,gBAAgB;aACzB;SACF,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACtC,8BAA8B,EAC9B,WAAW,CACZ,CAAC;YAEF,oDAAoD;YACpD,MAAM,IAAI,CAAC,8BAA8B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAEhE,IAAA,sBAAa,EAAC,mCAAmC,EAAE;gBACjD,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;gBACrD,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gFAAgF;YAChF,IAAI,KAAK,YAAY,mCAA0B,EAAE,CAAC;gBAChD,IAAA,sBAAa,EACX,0EAA0E,EAC1E;oBACE,KAAK;oBACL,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;iBACtD,CACF,CAAC;gBACF,oEAAoE;gBACpE,MAAM,IAAI,mCAA0B,CAAC;oBACnC,OAAO,EACL,gEAAgE;oBAClE,KAAK,EAAE,KAAc;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,wDAAwD;YACxD,IAAA,sBAAa,EAAC,6BAA6B,EAAE;gBAC3C,KAAK;gBACL,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB;aACtD,CAAC,CAAC;YAEH,MAAM,IAAI,sCAA6B,CAAC;gBACtC,MAAM,EACJ,qCAA6B,CAAC,kCAAkC;gBAClE,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,uBAAA,IAAI,8HAAqD,MAAzD,IAAI,EACF,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,KAAK,CAAC,oBAAoB,CAC/B,MAA+B;QAE/B,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;QAE3C,IAAA,sBAAa,EAAC,oCAAoC,EAAE;YAClD,IAAI;YACJ,iBAAiB;SAClB,CAAC,CAAC;QAEH,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,CAAiC,CAAC;QAqBtC,yCAAyC;QACzC,MAAM,QAAQ,GAA8B;YAC1C,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,SAAS;SACrB,CAAC;QAEF,+DAA+D;QAC/D,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,EAAE;YAC7C,IAAI,CAAC,8BAA8B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAC7D,CAAC,KAAK,EAAE,EAAE;gBACR,IAAA,sBAAa,EAAC,uCAAuC,OAAO,EAAE,EAAE;oBAC9D,IAAI;oBACJ,iBAAiB;oBACjB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC,CACF,CAAC;QACJ,CAAC,CAAC;QAEF,8EAA8E;QAC9E,MAAM,uBAAuB,GAAG,GAAG,EAAE;YACnC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;gBACF,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;YAChC,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;gBACF,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,YAAoB,EAAE,eAAe,GAAG,IAAI,EAAE,EAAE;YAC/D,uBAAuB,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,4CAA4C,EAC5C,QAAQ,CAAC,SAAS,CACnB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,yCAAyC,EACzC,QAAQ,CAAC,MAAM,CAChB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,WAAW,CACxB,0CAA0C,EAC1C,QAAQ,CAAC,OAAO,CACjB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAED,sEAAsE;YACtE,IAAI,eAAe,EAAE,CAAC;gBACpB,uBAAA,IAAI,iHAAwC,MAA5C,IAAI,EAAyC,YAAY,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC;QAEF,iEAAiE;QACjE,QAAQ,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EACX,6DAA6D,EAC7D;oBACE,IAAI;oBACJ,iBAAiB;iBAClB,CACF,CAAC;gBAEF,uBAAA,IAAI,sGAA6B,MAAjC,IAAI,EAA8B,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAE3D,oEAAoE;gBACpE,uBAAuB,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QAEF,gEAAgE;QAChE,QAAQ,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,qDAAqD,EAAE;oBACnE,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC;QAEF,mDAAmD;QACnD,QAAQ,CAAC,SAAS,GAAG,CAAC,eAAe,EAAE,EAAE;YACvC,IAAI,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChC,IAAA,sBAAa,EAAC,8CAA8C,EAAE;oBAC5D,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,CAAC;qBACzC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,IAAA,sBAAa,EACX,yDAAyD,EACzD;wBACE,IAAI;wBACJ,iBAAiB;wBACjB,KAAK;qBACN,CACF,CAAC;gBACJ,CAAC,CAAC;qBACD,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC;gBAE9D,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QAEF,oEAAoE;QACpE,QAAQ,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,qDAAqD,EAAE;oBACnE,IAAI;oBACJ,iBAAiB;oBACjB,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB,CAAC,CAAC;gBAEH,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAEpC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC;QAEF,qEAAqE;QACrE,QAAQ,CAAC,OAAO,GAAG,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,sDAAsD,EAAE;oBACpE,IAAI;oBACJ,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAEpC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC;QAEF,8CAA8C;QAC9C,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,2CAA2C,EAC3C,QAAQ,CAAC,QAAQ,CAClB,CAAC;QAEF,2CAA2C;QAC3C,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,4CAA4C,EAC5C,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,yCAAyC,EACzC,QAAQ,CAAC,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,SAAS,CACtB,0CAA0C,EAC1C,QAAQ,CAAC,OAAO,CACjB,CAAC;QAEF,oDAAoD;QACpD,QAAQ,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAA,sBAAa,EAAC,qDAAqD,EAAE;gBACnE,IAAI;gBACJ,iBAAiB;aAClB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACI,KAAK,CAAC,sBAAsB,CAAC,MAAwB;QAC1D,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,CAAiC,CAAC;QAEtC,yEAAyE;QACzE,MAAM,eAAe,GAAG,SAAS,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAE5D,0EAA0E;QAC1E,uBAAA,IAAI,sGAA6B,MAAjC,IAAI,EACF,eAAe,EACf,MAAM,CAAC,iBAAiB,CACzB,CAAC;QAEF,0EAA0E;QAC1E,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACI,mBAAmB,CAAC,iBAAsB;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CACvC,CAAC,iBAAiB,EAAE,EAAE,CACpB,iBAAiB,CAAC,iBAAiB,CAAC,WAAW,EAAE;YACjD,iBAAiB,CAAC,WAAW,EAAE,CAClC,CAAC;IACJ,CAAC;CACF;sLAjuBgC,0BAAmC;IAChE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,+HAE6B,yBAAkC;IAC9D,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,6HAE4B,IAAY,EAAE,iBAAsB;IAC/D,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG;YACzB,GAAG,KAAK,CAAC,kBAAkB;YAC3B,EAAE,IAAI,EAAE,iBAAiB,EAAE;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,mJAEuC,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACxD,CAAC,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,KAAK,IAAI,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,6KAEoD,iBAAsB;IACzE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACxD,CAAC,kBAAkB,EAAE,EAAE,CACrB,kBAAkB,CAAC,iBAAiB,CAAC,WAAW,EAAE;YAClD,iBAAiB,CAAC,WAAW,EAAE,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;IAGC,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,iCAAiC,EAClD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/C,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,yBAAyB,EAC1C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CACvC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,0BAA0B,EAC3C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CACxC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,iDAAiD,EAClE,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/D,CAAC;IAEF,MAAM,sBAAsB,GAAG,GAAG,cAAc,mBAAmB,CAAC;IAEpE,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,sBAAsB,EACtB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CACjC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,uBAAuB,EACxC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CACrC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,yBAAyB,EAC1C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CACvC,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAClC,GAAG,cAAc,sBAAsB,EACvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CACpC,CAAC;AACJ,CAAC;IAQC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC;QAC1C,MAAM,IAAI,wCAA+B,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,kFAA8C,EACjD,MAAM,EACN,MAAM,GAIP;IAGC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACzC,8BAA8B,EAC9B;YACE,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,yBAAW,CAAC,YAAY;YACjC,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,qCAA6B,CAAC,uCAAuC;gBACvE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;aACxC;SACF,CACF,CAAsE,CAAC;QAExE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,sBAAa,EACX,6DAA6D,EAC7D,KAAK,CACN,CAAC;QACF,MAAM,IAAI,sCAA6B,CAAC;YACtC,MAAM,EACJ,qCAA6B,CAAC,uCAAuC;YACvE,KAAK,EAAE,KAAc;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,iIAUC,qBAGC;IAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,qBAAqB,CAAC;IACrD,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,kBAAkB,CAAC;IAC/D,OAAO;QACL,GAAG,qBAAqB;QACxB,kBAAkB,EAAE;YAClB,GAAG,IAAI;SACR;KACF,CAAC;AACJ,CAAC,yJASC,sBAEQ;IAER,MAAM,mBAAmB,GAAG,8BAA8B,EAAE,CAAC;IAE7D,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE,CAAC;QAC3D,MAAM,EACJ,kBAAkB,EAAE,EAClB,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EACpC,OAAO,GACR,GACF,GAAG,qBAAqB,CAAC;QAE1B,MAAM,qBAAqB,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAChE,mBAAmB,EACnB,cAAc,CACf,CAAC;QAEF,MAAM,iBAAiB,GAAG,qBAAqB;YAC7C,CAAC,CAAE,cAA4C;YAC/C,CAAC,CAAC,OAAO,CAAC;QAKZ,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,GAAG;YAChD,GAAG,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC1D,uBAAA,IAAI,wGAA+B,MAAnC,IAAI,EAAgC,qBAAqB,CAAC;SAC7B,CAAC;IAClC,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC;kBAjPkB,0BAA0B","sourcesContent":["import type { Signer } from '@metamask/7715-permission-types';\nimport type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport { DELEGATOR_CONTRACTS } from '@metamask/delegation-deployments';\nimport type { Messenger } from '@metamask/messenger';\nimport type { HandleSnapRequest, HasSnap } from '@metamask/snaps-controllers';\nimport type { SnapId } from '@metamask/snaps-sdk';\nimport { HandlerType } from '@metamask/snaps-utils';\nimport type {\n  TransactionControllerTransactionApprovedEvent,\n  TransactionControllerTransactionConfirmedEvent,\n  TransactionControllerTransactionDroppedEvent,\n  TransactionControllerTransactionFailedEvent,\n  TransactionControllerTransactionRejectedEvent,\n} from '@metamask/transaction-controller';\nimport type { Hex, Json } from '@metamask/utils';\n\nimport { DELEGATION_FRAMEWORK_VERSION } from './constants';\nimport type { DecodedPermission } from './decodePermission';\nimport {\n  getPermissionDataAndExpiry,\n  identifyPermissionByEnforcers,\n  reconstructDecodedPermission,\n} from './decodePermission';\nimport {\n  GatorPermissionsFetchError,\n  GatorPermissionsNotEnabledError,\n  GatorPermissionsProviderError,\n  OriginNotAllowedError,\n  PermissionDecodingError,\n} from './errors';\nimport { controllerLog } from './logger';\nimport { GatorPermissionsSnapRpcMethod } from './types';\nimport type { StoredGatorPermissionSanitized } from './types';\nimport type {\n  GatorPermissionsMap,\n  PermissionTypesWithCustom,\n  StoredGatorPermission,\n  DelegationDetails,\n  RevocationParams,\n  PendingRevocationParams,\n} from './types';\nimport {\n  deserializeGatorPermissionsMap,\n  serializeGatorPermissionsMap,\n} from './utils';\n\n// === GENERAL ===\n\n// Unique name for the controller\nconst controllerName = 'GatorPermissionsController';\n\n// Default value for the gator permissions provider snap id\nconst defaultGatorPermissionsProviderSnapId =\n  'npm:@metamask/gator-permissions-snap' as SnapId;\n\nconst createEmptyGatorPermissionsMap: () => GatorPermissionsMap = () => {\n  return {\n    'erc20-token-revocation': {},\n    'native-token-stream': {},\n    'native-token-periodic': {},\n    'erc20-token-stream': {},\n    'erc20-token-periodic': {},\n    other: {},\n  };\n};\n\n/**\n * Timeout duration for pending revocations (2 hours in milliseconds).\n * After this time, event listeners will be cleaned up to prevent memory leaks.\n */\nconst PENDING_REVOCATION_TIMEOUT = 2 * 60 * 60 * 1000;\n\nconst contractsByChainId = DELEGATOR_CONTRACTS[DELEGATION_FRAMEWORK_VERSION];\n\n// === STATE ===\n\n/**\n * State shape for GatorPermissionsController\n */\nexport type GatorPermissionsControllerState = {\n  /**\n   * Flag that indicates if the gator permissions feature is enabled\n   */\n  isGatorPermissionsEnabled: boolean;\n\n  /**\n   * JSON serialized object containing gator permissions fetched from profile sync\n   */\n  gatorPermissionsMapSerialized: string;\n\n  /**\n   * Flag that indicates that fetching permissions is in progress\n   * This is used to show a loading spinner in the UI\n   */\n  isFetchingGatorPermissions: boolean;\n\n  /**\n   * The ID of the Snap of the gator permissions provider snap\n   * Default value is `@metamask/gator-permissions-snap`\n   */\n  gatorPermissionsProviderSnapId: SnapId;\n\n  /**\n   * List of gator permission pending a revocation transaction\n   */\n  pendingRevocations: {\n    txId: string;\n    permissionContext: Hex;\n  }[];\n};\n\nconst gatorPermissionsControllerMetadata: StateMetadata<GatorPermissionsControllerState> =\n  {\n    isGatorPermissionsEnabled: {\n      includeInStateLogs: true,\n      persist: true,\n      includeInDebugSnapshot: false,\n      usedInUi: false,\n    },\n    gatorPermissionsMapSerialized: {\n      includeInStateLogs: true,\n      persist: true,\n      includeInDebugSnapshot: false,\n      usedInUi: true,\n    },\n    isFetchingGatorPermissions: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: false,\n    },\n    gatorPermissionsProviderSnapId: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: false,\n    },\n    pendingRevocations: {\n      includeInStateLogs: true,\n      persist: false,\n      includeInDebugSnapshot: false,\n      usedInUi: true,\n    },\n  } satisfies StateMetadata<GatorPermissionsControllerState>;\n\n/**\n * Constructs the default {@link GatorPermissionsController} state. This allows\n * consumers to provide a partial state object when initializing the controller\n * and also helps in constructing complete state objects for this controller in\n * tests.\n *\n * @returns The default {@link GatorPermissionsController} state.\n */\nexport function getDefaultGatorPermissionsControllerState(): GatorPermissionsControllerState {\n  return {\n    isGatorPermissionsEnabled: false,\n    gatorPermissionsMapSerialized: serializeGatorPermissionsMap(\n      createEmptyGatorPermissionsMap(),\n    ),\n    isFetchingGatorPermissions: false,\n    gatorPermissionsProviderSnapId: defaultGatorPermissionsProviderSnapId,\n    pendingRevocations: [],\n  };\n}\n\n// === MESSENGER ===\n\n/**\n * The action which can be used to retrieve the state of the\n * {@link GatorPermissionsController}.\n */\nexport type GatorPermissionsControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  GatorPermissionsControllerState\n>;\n\n/**\n * The action which can be used to fetch and update gator permissions.\n */\nexport type GatorPermissionsControllerFetchAndUpdateGatorPermissionsAction = {\n  type: `${typeof controllerName}:fetchAndUpdateGatorPermissions`;\n  handler: GatorPermissionsController['fetchAndUpdateGatorPermissions'];\n};\n\n/**\n * The action which can be used to enable gator permissions.\n */\nexport type GatorPermissionsControllerEnableGatorPermissionsAction = {\n  type: `${typeof controllerName}:enableGatorPermissions`;\n  handler: GatorPermissionsController['enableGatorPermissions'];\n};\n\n/**\n * The action which can be used to disable gator permissions.\n */\nexport type GatorPermissionsControllerDisableGatorPermissionsAction = {\n  type: `${typeof controllerName}:disableGatorPermissions`;\n  handler: GatorPermissionsController['disableGatorPermissions'];\n};\n\nexport type GatorPermissionsControllerDecodePermissionFromPermissionContextForOriginAction =\n  {\n    type: `${typeof controllerName}:decodePermissionFromPermissionContextForOrigin`;\n    handler: GatorPermissionsController['decodePermissionFromPermissionContextForOrigin'];\n  };\n\n/**\n * The action which can be used to submit a revocation.\n */\nexport type GatorPermissionsControllerSubmitRevocationAction = {\n  type: `${typeof controllerName}:submitRevocation`;\n  handler: GatorPermissionsController['submitRevocation'];\n};\n\n/**\n * The action which can be used to add a pending revocation.\n */\nexport type GatorPermissionsControllerAddPendingRevocationAction = {\n  type: `${typeof controllerName}:addPendingRevocation`;\n  handler: GatorPermissionsController['addPendingRevocation'];\n};\n\n/**\n * The action which can be used to submit a revocation directly without requiring\n * an on-chain transaction (for already-disabled delegations).\n */\nexport type GatorPermissionsControllerSubmitDirectRevocationAction = {\n  type: `${typeof controllerName}:submitDirectRevocation`;\n  handler: GatorPermissionsController['submitDirectRevocation'];\n};\n\n/**\n * The action which can be used to check if a permission context is pending revocation.\n */\nexport type GatorPermissionsControllerIsPendingRevocationAction = {\n  type: `${typeof controllerName}:isPendingRevocation`;\n  handler: GatorPermissionsController['isPendingRevocation'];\n};\n\n/**\n * All actions that {@link GatorPermissionsController} registers, to be called\n * externally.\n */\nexport type GatorPermissionsControllerActions =\n  | GatorPermissionsControllerGetStateAction\n  | GatorPermissionsControllerFetchAndUpdateGatorPermissionsAction\n  | GatorPermissionsControllerEnableGatorPermissionsAction\n  | GatorPermissionsControllerDisableGatorPermissionsAction\n  | GatorPermissionsControllerDecodePermissionFromPermissionContextForOriginAction\n  | GatorPermissionsControllerSubmitRevocationAction\n  | GatorPermissionsControllerAddPendingRevocationAction\n  | GatorPermissionsControllerSubmitDirectRevocationAction\n  | GatorPermissionsControllerIsPendingRevocationAction;\n\n/**\n * All actions that {@link GatorPermissionsController} calls internally.\n *\n * SnapsController:handleRequest and SnapsController:has are allowed to be called\n * internally because they are used to fetch gator permissions from the Snap.\n */\ntype AllowedActions = HandleSnapRequest | HasSnap;\n\n/**\n * The event that {@link GatorPermissionsController} publishes when updating state.\n */\nexport type GatorPermissionsControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    GatorPermissionsControllerState\n  >;\n\n/**\n * All events that {@link GatorPermissionsController} publishes, to be subscribed to\n * externally.\n */\nexport type GatorPermissionsControllerEvents =\n  GatorPermissionsControllerStateChangeEvent;\n\n/**\n * Events that {@link GatorPermissionsController} is allowed to subscribe to internally.\n */\ntype AllowedEvents =\n  | GatorPermissionsControllerStateChangeEvent\n  | TransactionControllerTransactionApprovedEvent\n  | TransactionControllerTransactionRejectedEvent\n  | TransactionControllerTransactionConfirmedEvent\n  | TransactionControllerTransactionFailedEvent\n  | TransactionControllerTransactionDroppedEvent;\n\n/**\n * Messenger type for the GatorPermissionsController.\n */\nexport type GatorPermissionsControllerMessenger = Messenger<\n  typeof controllerName,\n  GatorPermissionsControllerActions | AllowedActions,\n  GatorPermissionsControllerEvents | AllowedEvents\n>;\n\n/**\n * Controller that manages gator permissions by reading from profile sync\n */\nexport default class GatorPermissionsController extends BaseController<\n  typeof controllerName,\n  GatorPermissionsControllerState,\n  GatorPermissionsControllerMessenger\n> {\n  /**\n   * Creates a GatorPermissionsController instance.\n   *\n   * @param args - The arguments to this function.\n   * @param args.messenger - Messenger used to communicate with BaseV2 controller.\n   * @param args.state - Initial state to set on this controller.\n   */\n  constructor({\n    messenger,\n    state,\n  }: {\n    messenger: GatorPermissionsControllerMessenger;\n    state?: Partial<GatorPermissionsControllerState>;\n  }) {\n    super({\n      name: controllerName,\n      metadata: gatorPermissionsControllerMetadata,\n      messenger,\n      state: {\n        ...getDefaultGatorPermissionsControllerState(),\n        ...state,\n        isFetchingGatorPermissions: false,\n      },\n    });\n\n    this.#registerMessageHandlers();\n  }\n\n  #setIsFetchingGatorPermissions(isFetchingGatorPermissions: boolean) {\n    this.update((state) => {\n      state.isFetchingGatorPermissions = isFetchingGatorPermissions;\n    });\n  }\n\n  #setIsGatorPermissionsEnabled(isGatorPermissionsEnabled: boolean) {\n    this.update((state) => {\n      state.isGatorPermissionsEnabled = isGatorPermissionsEnabled;\n    });\n  }\n\n  #addPendingRevocationToState(txId: string, permissionContext: Hex) {\n    this.update((state) => {\n      state.pendingRevocations = [\n        ...state.pendingRevocations,\n        { txId, permissionContext },\n      ];\n    });\n  }\n\n  #removePendingRevocationFromStateByTxId(txId: string) {\n    this.update((state) => {\n      state.pendingRevocations = state.pendingRevocations.filter(\n        (pendingRevocations) => pendingRevocations.txId !== txId,\n      );\n    });\n  }\n\n  #removePendingRevocationFromStateByPermissionContext(permissionContext: Hex) {\n    this.update((state) => {\n      state.pendingRevocations = state.pendingRevocations.filter(\n        (pendingRevocations) =>\n          pendingRevocations.permissionContext.toLowerCase() !==\n          permissionContext.toLowerCase(),\n      );\n    });\n  }\n\n  #registerMessageHandlers(): void {\n    this.messenger.registerActionHandler(\n      `${controllerName}:fetchAndUpdateGatorPermissions`,\n      this.fetchAndUpdateGatorPermissions.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:enableGatorPermissions`,\n      this.enableGatorPermissions.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:disableGatorPermissions`,\n      this.disableGatorPermissions.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:decodePermissionFromPermissionContextForOrigin`,\n      this.decodePermissionFromPermissionContextForOrigin.bind(this),\n    );\n\n    const submitRevocationAction = `${controllerName}:submitRevocation`;\n\n    this.messenger.registerActionHandler(\n      submitRevocationAction,\n      this.submitRevocation.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:addPendingRevocation`,\n      this.addPendingRevocation.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:submitDirectRevocation`,\n      this.submitDirectRevocation.bind(this),\n    );\n\n    this.messenger.registerActionHandler(\n      `${controllerName}:isPendingRevocation`,\n      this.isPendingRevocation.bind(this),\n    );\n  }\n\n  /**\n   * Asserts that the gator permissions are enabled.\n   *\n   * @throws {GatorPermissionsNotEnabledError} If the gator permissions are not enabled.\n   */\n  #assertGatorPermissionsEnabled() {\n    if (!this.state.isGatorPermissionsEnabled) {\n      throw new GatorPermissionsNotEnabledError();\n    }\n  }\n\n  /**\n   * Forwards a Snap request to the SnapController.\n   *\n   * @param args - The request parameters.\n   * @param args.snapId - The ID of the Snap of the gator permissions provider snap.\n   * @param args.params - Optional parameters to pass to the snap method.\n   * @returns A promise that resolves with the gator permissions.\n   */\n  async #handleSnapRequestToGatorPermissionsProvider({\n    snapId,\n    params,\n  }: {\n    snapId: SnapId;\n    params?: Json;\n  }): Promise<\n    StoredGatorPermission<Signer, PermissionTypesWithCustom>[] | null\n  > {\n    try {\n      const response = (await this.messenger.call(\n        'SnapController:handleRequest',\n        {\n          snapId,\n          origin: 'metamask',\n          handler: HandlerType.OnRpcRequest,\n          request: {\n            jsonrpc: '2.0',\n            method:\n              GatorPermissionsSnapRpcMethod.PermissionProviderGetGrantedPermissions,\n            ...(params !== undefined && { params }),\n          },\n        },\n      )) as StoredGatorPermission<Signer, PermissionTypesWithCustom>[] | null;\n\n      return response;\n    } catch (error) {\n      controllerLog(\n        'Failed to handle snap request to gator permissions provider',\n        error,\n      );\n      throw new GatorPermissionsProviderError({\n        method:\n          GatorPermissionsSnapRpcMethod.PermissionProviderGetGrantedPermissions,\n        cause: error as Error,\n      });\n    }\n  }\n\n  /**\n   * Sanitizes a stored gator permission for client exposure.\n   * Removes internal fields (dependencyInfo, signer)\n   *\n   * @param storedGatorPermission - The stored gator permission to sanitize.\n   * @returns The sanitized stored gator permission.\n   */\n  #sanitizeStoredGatorPermission(\n    storedGatorPermission: StoredGatorPermission<\n      Signer,\n      PermissionTypesWithCustom\n    >,\n  ): StoredGatorPermissionSanitized<Signer, PermissionTypesWithCustom> {\n    const { permissionResponse } = storedGatorPermission;\n    const { dependencyInfo, signer, ...rest } = permissionResponse;\n    return {\n      ...storedGatorPermission,\n      permissionResponse: {\n        ...rest,\n      },\n    };\n  }\n\n  /**\n   * Categorizes stored gator permissions by type and chainId.\n   *\n   * @param storedGatorPermissions - An array of stored gator permissions.\n   * @returns The gator permissions map.\n   */\n  #categorizePermissionsDataByTypeAndChainId(\n    storedGatorPermissions:\n      | StoredGatorPermission<Signer, PermissionTypesWithCustom>[]\n      | null,\n  ): GatorPermissionsMap {\n    const gatorPermissionsMap = createEmptyGatorPermissionsMap();\n\n    if (!storedGatorPermissions) {\n      return gatorPermissionsMap;\n    }\n\n    for (const storedGatorPermission of storedGatorPermissions) {\n      const {\n        permissionResponse: {\n          permission: { type: permissionType },\n          chainId,\n        },\n      } = storedGatorPermission;\n\n      const isPermissionTypeKnown = Object.prototype.hasOwnProperty.call(\n        gatorPermissionsMap,\n        permissionType,\n      );\n\n      const permissionTypeKey = isPermissionTypeKnown\n        ? (permissionType as keyof GatorPermissionsMap)\n        : 'other';\n\n      type PermissionsMapElementArray =\n        GatorPermissionsMap[typeof permissionTypeKey][typeof chainId];\n\n      gatorPermissionsMap[permissionTypeKey][chainId] = [\n        ...(gatorPermissionsMap[permissionTypeKey][chainId] || []),\n        this.#sanitizeStoredGatorPermission(storedGatorPermission),\n      ] as PermissionsMapElementArray;\n    }\n\n    return gatorPermissionsMap;\n  }\n\n  /**\n   * Gets the gator permissions map from the state.\n   *\n   * @returns The gator permissions map.\n   */\n  get gatorPermissionsMap(): GatorPermissionsMap {\n    return deserializeGatorPermissionsMap(\n      this.state.gatorPermissionsMapSerialized,\n    );\n  }\n\n  /**\n   * Gets the gator permissions provider snap id that is used to fetch gator permissions.\n   *\n   * @returns The gator permissions provider snap id.\n   */\n  get permissionsProviderSnapId(): SnapId {\n    return this.state.gatorPermissionsProviderSnapId;\n  }\n\n  /**\n   * Enables gator permissions for the user.\n   */\n  public async enableGatorPermissions() {\n    this.#setIsGatorPermissionsEnabled(true);\n  }\n\n  /**\n   * Clears the gator permissions map and disables the feature.\n   */\n  public async disableGatorPermissions() {\n    this.update((state) => {\n      state.isGatorPermissionsEnabled = false;\n      state.gatorPermissionsMapSerialized = serializeGatorPermissionsMap(\n        createEmptyGatorPermissionsMap(),\n      );\n    });\n  }\n\n  /**\n   * Gets the pending revocations list.\n   *\n   * @returns The pending revocations list.\n   */\n  get pendingRevocations(): { txId: string; permissionContext: Hex }[] {\n    return this.state.pendingRevocations;\n  }\n\n  /**\n   * Fetches the gator permissions from profile sync and updates the state.\n   *\n   * @param params - Optional parameters to pass to the snap's getGrantedPermissions method.\n   * @returns A promise that resolves to the gator permissions map.\n   * @throws {GatorPermissionsFetchError} If the gator permissions fetch fails.\n   */\n  public async fetchAndUpdateGatorPermissions(\n    params?: Json,\n  ): Promise<GatorPermissionsMap> {\n    try {\n      this.#setIsFetchingGatorPermissions(true);\n      this.#assertGatorPermissionsEnabled();\n\n      const permissionsData =\n        await this.#handleSnapRequestToGatorPermissionsProvider({\n          snapId: this.state.gatorPermissionsProviderSnapId,\n          params,\n        });\n\n      const gatorPermissionsMap =\n        this.#categorizePermissionsDataByTypeAndChainId(permissionsData);\n\n      this.update((state) => {\n        state.gatorPermissionsMapSerialized =\n          serializeGatorPermissionsMap(gatorPermissionsMap);\n      });\n\n      return gatorPermissionsMap;\n    } catch (error) {\n      controllerLog('Failed to fetch gator permissions', error);\n      throw new GatorPermissionsFetchError({\n        message: 'Failed to fetch gator permissions',\n        cause: error as Error,\n      });\n    } finally {\n      this.#setIsFetchingGatorPermissions(false);\n    }\n  }\n\n  /**\n   * Decodes a permission context into a structured permission for a specific origin.\n   *\n   * This method validates the caller origin, decodes the provided `permissionContext`\n   * into delegations, identifies the permission type from the caveat enforcers,\n   * extracts the permission-specific data and expiry, and reconstructs a\n   * {@link DecodedPermission} containing chainId, account addresses, signer, type and data.\n   *\n   * @param args - The arguments to this function.\n   * @param args.origin - The caller's origin; must match the configured permissions provider Snap id.\n   * @param args.chainId - Numeric EIP-155 chain id used for resolving enforcer contracts and encoding.\n   * @param args.delegation - delegation representing the permission.\n   * @param args.metadata - metadata included in the request.\n   * @param args.metadata.justification - the justification as specified in the request metadata.\n   * @param args.metadata.origin - the origin as specified in the request metadata.\n   *\n   * @returns A decoded permission object suitable for UI consumption and follow-up actions.\n   * @throws If the origin is not allowed, the context cannot be decoded into exactly one delegation,\n   * or the enforcers/terms do not match a supported permission type.\n   */\n  public decodePermissionFromPermissionContextForOrigin({\n    origin,\n    chainId,\n    delegation: { caveats, delegator, delegate, authority },\n    metadata: { justification, origin: specifiedOrigin },\n  }: {\n    origin: string;\n    chainId: number;\n    metadata: {\n      justification: string;\n      origin: string;\n    };\n    delegation: DelegationDetails;\n  }): DecodedPermission {\n    if (origin !== this.permissionsProviderSnapId) {\n      throw new OriginNotAllowedError({ origin });\n    }\n\n    const contracts = contractsByChainId[chainId];\n\n    if (!contracts) {\n      throw new Error(`Contracts not found for chainId: ${chainId}`);\n    }\n\n    try {\n      const enforcers = caveats.map((caveat) => caveat.enforcer);\n\n      const permissionType = identifyPermissionByEnforcers({\n        enforcers,\n        contracts,\n      });\n\n      const { expiry, data } = getPermissionDataAndExpiry({\n        contracts,\n        caveats,\n        permissionType,\n      });\n\n      const permission = reconstructDecodedPermission({\n        chainId,\n        permissionType,\n        delegator,\n        delegate,\n        authority,\n        expiry,\n        data,\n        justification,\n        specifiedOrigin,\n      });\n\n      return permission;\n    } catch (error) {\n      throw new PermissionDecodingError({\n        cause: error as Error,\n      });\n    }\n  }\n\n  /**\n   * Submits a revocation to the gator permissions provider snap.\n   *\n   * @param revocationParams - The revocation parameters containing the permission context.\n   * @returns A promise that resolves when the revocation is submitted successfully.\n   * @throws {GatorPermissionsNotEnabledError} If the gator permissions are not enabled.\n   * @throws {GatorPermissionsProviderError} If the snap request fails.\n   */\n  public async submitRevocation(\n    revocationParams: RevocationParams,\n  ): Promise<void> {\n    controllerLog('submitRevocation method called', {\n      permissionContext: revocationParams.permissionContext,\n    });\n\n    this.#assertGatorPermissionsEnabled();\n\n    const snapRequest = {\n      snapId: this.state.gatorPermissionsProviderSnapId,\n      origin: 'metamask',\n      handler: HandlerType.OnRpcRequest,\n      request: {\n        jsonrpc: '2.0',\n        method:\n          GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,\n        params: revocationParams,\n      },\n    };\n\n    try {\n      const result = await this.messenger.call(\n        'SnapController:handleRequest',\n        snapRequest,\n      );\n\n      // Refresh list first (permission removed from list)\n      await this.fetchAndUpdateGatorPermissions({ isRevoked: false });\n\n      controllerLog('Successfully submitted revocation', {\n        permissionContext: revocationParams.permissionContext,\n        result,\n      });\n    } catch (error) {\n      // If it's a GatorPermissionsFetchError, revocation succeeded but refresh failed\n      if (error instanceof GatorPermissionsFetchError) {\n        controllerLog(\n          'Revocation submitted successfully but failed to refresh permissions list',\n          {\n            error,\n            permissionContext: revocationParams.permissionContext,\n          },\n        );\n        // Wrap with a more specific message indicating revocation succeeded\n        throw new GatorPermissionsFetchError({\n          message:\n            'Failed to refresh permissions list after successful revocation',\n          cause: error as Error,\n        });\n      }\n\n      // Otherwise, revocation failed - wrap in provider error\n      controllerLog('Failed to submit revocation', {\n        error,\n        permissionContext: revocationParams.permissionContext,\n      });\n\n      throw new GatorPermissionsProviderError({\n        method:\n          GatorPermissionsSnapRpcMethod.PermissionProviderSubmitRevocation,\n        cause: error as Error,\n      });\n    } finally {\n      this.#removePendingRevocationFromStateByPermissionContext(\n        revocationParams.permissionContext,\n      );\n    }\n  }\n\n  /**\n   * Adds a pending revocation that will be submitted once the transaction is confirmed.\n   *\n   * This method sets up listeners for the user's approval/rejection decision and\n   * terminal transaction states (confirmed, failed, dropped). The flow is:\n   * 1. Wait for user to approve or reject the transaction\n   * 2. If approved, add to pending revocations state\n   * 3. If rejected, cleanup without adding to state\n   * 4. If confirmed, submit the revocation\n   * 5. If failed or dropped, cleanup\n   *\n   * Includes a timeout safety net to prevent memory leaks if the transaction never\n   * reaches a terminal state.\n   *\n   * @param params - The pending revocation parameters.\n   * @returns A promise that resolves when the listener is set up.\n   */\n  public async addPendingRevocation(\n    params: PendingRevocationParams,\n  ): Promise<void> {\n    const { txId, permissionContext } = params;\n\n    controllerLog('addPendingRevocation method called', {\n      txId,\n      permissionContext,\n    });\n\n    this.#assertGatorPermissionsEnabled();\n\n    type PendingRevocationHandlers = {\n      approved?: (\n        ...args: TransactionControllerTransactionApprovedEvent['payload']\n      ) => void;\n      rejected?: (\n        ...args: TransactionControllerTransactionRejectedEvent['payload']\n      ) => void;\n      confirmed?: (\n        ...args: TransactionControllerTransactionConfirmedEvent['payload']\n      ) => void;\n      failed?: (\n        ...args: TransactionControllerTransactionFailedEvent['payload']\n      ) => void;\n      dropped?: (\n        ...args: TransactionControllerTransactionDroppedEvent['payload']\n      ) => void;\n      timeoutId?: ReturnType<typeof setTimeout>;\n    };\n\n    // Track handlers and timeout for cleanup\n    const handlers: PendingRevocationHandlers = {\n      approved: undefined,\n      rejected: undefined,\n      confirmed: undefined,\n      failed: undefined,\n      dropped: undefined,\n      timeoutId: undefined,\n    };\n\n    // Helper to refresh permissions after transaction state change\n    const refreshPermissions = (context: string) => {\n      this.fetchAndUpdateGatorPermissions({ isRevoked: false }).catch(\n        (error) => {\n          controllerLog(`Failed to refresh permissions after ${context}`, {\n            txId,\n            permissionContext,\n            error,\n          });\n        },\n      );\n    };\n\n    // Helper to unsubscribe from approval/rejection events after decision is made\n    const cleanupApprovalHandlers = () => {\n      if (handlers.approved) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionApproved',\n          handlers.approved,\n        );\n        handlers.approved = undefined;\n      }\n      if (handlers.rejected) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionRejected',\n          handlers.rejected,\n        );\n        handlers.rejected = undefined;\n      }\n    };\n\n    // Cleanup function to unsubscribe from all events and clear timeout\n    const cleanup = (txIdToRemove: string, removeFromState = true) => {\n      cleanupApprovalHandlers();\n      if (handlers.confirmed) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionConfirmed',\n          handlers.confirmed,\n        );\n      }\n      if (handlers.failed) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionFailed',\n          handlers.failed,\n        );\n      }\n      if (handlers.dropped) {\n        this.messenger.unsubscribe(\n          'TransactionController:transactionDropped',\n          handlers.dropped,\n        );\n      }\n      if (handlers.timeoutId !== undefined) {\n        clearTimeout(handlers.timeoutId);\n      }\n\n      // Remove the pending revocation from the state (only if it was added)\n      if (removeFromState) {\n        this.#removePendingRevocationFromStateByTxId(txIdToRemove);\n      }\n    };\n\n    // Handle approved transaction - add to pending revocations state\n    handlers.approved = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog(\n          'Transaction approved by user, adding to pending revocations',\n          {\n            txId,\n            permissionContext,\n          },\n        );\n\n        this.#addPendingRevocationToState(txId, permissionContext);\n\n        // Unsubscribe from approval/rejection events since decision is made\n        cleanupApprovalHandlers();\n      }\n    };\n\n    // Handle rejected transaction - cleanup without adding to state\n    handlers.rejected = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction rejected by user, cleaning up listeners', {\n          txId,\n          permissionContext,\n        });\n\n        // Don't remove from state since it was never added\n        cleanup(payload.transactionMeta.id, false);\n      }\n    };\n\n    // Handle confirmed transaction - submit revocation\n    handlers.confirmed = (transactionMeta) => {\n      if (transactionMeta.id === txId) {\n        controllerLog('Transaction confirmed, submitting revocation', {\n          txId,\n          permissionContext,\n        });\n\n        this.submitRevocation({ permissionContext })\n          .catch((error) => {\n            controllerLog(\n              'Failed to submit revocation after transaction confirmed',\n              {\n                txId,\n                permissionContext,\n                error,\n              },\n            );\n          })\n          .finally(() => refreshPermissions('transaction confirmed'));\n\n        cleanup(transactionMeta.id);\n      }\n    };\n\n    // Handle failed transaction - cleanup without submitting revocation\n    handlers.failed = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction failed, cleaning up revocation listener', {\n          txId,\n          permissionContext,\n          error: payload.error,\n        });\n\n        cleanup(payload.transactionMeta.id);\n\n        refreshPermissions('transaction failed');\n      }\n    };\n\n    // Handle dropped transaction - cleanup without submitting revocation\n    handlers.dropped = (payload) => {\n      if (payload.transactionMeta.id === txId) {\n        controllerLog('Transaction dropped, cleaning up revocation listener', {\n          txId,\n          permissionContext,\n        });\n\n        cleanup(payload.transactionMeta.id);\n\n        refreshPermissions('transaction dropped');\n      }\n    };\n\n    // Subscribe to user approval/rejection events\n    this.messenger.subscribe(\n      'TransactionController:transactionApproved',\n      handlers.approved,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionRejected',\n      handlers.rejected,\n    );\n\n    // Subscribe to terminal transaction events\n    this.messenger.subscribe(\n      'TransactionController:transactionConfirmed',\n      handlers.confirmed,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionFailed',\n      handlers.failed,\n    );\n    this.messenger.subscribe(\n      'TransactionController:transactionDropped',\n      handlers.dropped,\n    );\n\n    // Set timeout as safety net to prevent memory leaks\n    handlers.timeoutId = setTimeout(() => {\n      controllerLog('Pending revocation timed out, cleaning up listeners', {\n        txId,\n        permissionContext,\n      });\n      cleanup(txId);\n    }, PENDING_REVOCATION_TIMEOUT);\n  }\n\n  /**\n   * Submits a revocation directly without requiring an on-chain transaction.\n   * Used for already-disabled delegations that don't require an on-chain transaction.\n   *\n   * This method:\n   * 1. Adds the permission context to pending revocations state (disables UI button)\n   * 2. Immediately calls submitRevocation to remove from snap storage\n   * 3. On success, removes from pending revocations state (re-enables UI button)\n   * 4. On failure, keeps in pending revocations so UI can show error/retry state\n   *\n   * @param params - The revocation parameters containing the permission context.\n   * @returns A promise that resolves when the revocation is submitted successfully.\n   * @throws {GatorPermissionsNotEnabledError} If the gator permissions are not enabled.\n   * @throws {GatorPermissionsProviderError} If the snap request fails.\n   */\n  public async submitDirectRevocation(params: RevocationParams): Promise<void> {\n    this.#assertGatorPermissionsEnabled();\n\n    // Use a placeholder txId that doesn't conflict with real transaction IDs\n    const placeholderTxId = `no-tx-${params.permissionContext}`;\n\n    // Add to pending revocations state first (disables UI button immediately)\n    this.#addPendingRevocationToState(\n      placeholderTxId,\n      params.permissionContext,\n    );\n\n    // Immediately submit the revocation (will remove from pending on success)\n    await this.submitRevocation(params);\n  }\n\n  /**\n   * Checks if a permission context is in the pending revocations list.\n   *\n   * @param permissionContext - The permission context to check.\n   * @returns `true` if the permission context is pending revocation, `false` otherwise.\n   */\n  public isPendingRevocation(permissionContext: Hex): boolean {\n    return this.state.pendingRevocations.some(\n      (pendingRevocation) =>\n        pendingRevocation.permissionContext.toLowerCase() ===\n        permissionContext.toLowerCase(),\n    );\n  }\n}\n"]}