@metamask/smart-accounts-kit 1.6.0 → 1.7.0

package/dist/experimental/index.cjs

@@ -1,11 +1,11 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 var _chunkIQT6XFDTcjs = require('../chunk-IQT6XFDT.cjs');
-require('../chunk-DCI2AN4N.cjs');
+require('../chunk-KIXYMA7J.cjs');
 
 
 var _chunk2OS36DVVcjs = require('../chunk-2OS36DVV.cjs');
-require('../chunk-JKVSTPEC.cjs');
+require('../chunk-32RDDE5N.cjs');
 
 
 
@@ -14,7 +14,7 @@ require('../chunk-JKVSTPEC.cjs');
 
 
 
-var _chunkW6HPAK4Mcjs = require('../chunk-W6HPAK4M.cjs');
+var _chunkGHGCGV3Ccjs = require('../chunk-GHGCGV3C.cjs');
 
 // src/experimental/delegationStorage.ts
 var _viem = require('viem');
@@ -35,7 +35,7 @@ var DelegationStorageClient = class {
   #apiUrl;
   constructor(config) {
     const { apiUrl } = config.environment;
-    _chunkW6HPAK4Mcjs.trackSmartAccountsKitFunctionCall.call(void 0, 
+    _chunkGHGCGV3Ccjs.trackSmartAccountsKitFunctionCall.call(void 0, 
       "experimental.DelegationStorageClient.constructor",
       {
         environment: getDelegationStorageEnvironment(apiUrl)
@@ -81,13 +81,13 @@ var DelegationStorageClient = class {
    * is not found.
    */
   async getDelegationChain(leafDelegationOrDelegationHash) {
-    _chunkW6HPAK4Mcjs.trackSmartAccountsKitFunctionCall.call(void 0, 
+    _chunkGHGCGV3Ccjs.trackSmartAccountsKitFunctionCall.call(void 0, 
       "experimental.DelegationStorageClient.getDelegationChain",
       {
         inputKind: typeof leafDelegationOrDelegationHash === "string" ? "hash" : "delegation"
       }
     );
-    const leafDelegationHash = typeof leafDelegationOrDelegationHash === "string" ? leafDelegationOrDelegationHash : _chunkW6HPAK4Mcjs.hashDelegation.call(void 0, leafDelegationOrDelegationHash);
+    const leafDelegationHash = typeof leafDelegationOrDelegationHash === "string" ? leafDelegationOrDelegationHash : _chunkGHGCGV3Ccjs.hashDelegation.call(void 0, leafDelegationOrDelegationHash);
     const response = await this.#fetcher(
       `${this.#apiUrl}/delegation/chain/${leafDelegationHash}`,
       {
@@ -117,7 +117,7 @@ var DelegationStorageClient = class {
    * empty array if the delegations are not found.
    */
   async fetchDelegations(deleGatorAddress, filterMode = "RECEIVED" /* Received */) {
-    _chunkW6HPAK4Mcjs.trackSmartAccountsKitFunctionCall.call(void 0, 
+    _chunkGHGCGV3Ccjs.trackSmartAccountsKitFunctionCall.call(void 0, 
       "experimental.DelegationStorageClient.fetchDelegations",
       { filterMode }
     );
@@ -144,14 +144,14 @@ var DelegationStorageClient = class {
    * @returns A promise that resolves to the delegation hash indicating successful storage.
    */
   async storeDelegation(delegation) {
-    _chunkW6HPAK4Mcjs.trackSmartAccountsKitFunctionCall.call(void 0, 
+    _chunkGHGCGV3Ccjs.trackSmartAccountsKitFunctionCall.call(void 0, 
       "experimental.DelegationStorageClient.storeDelegation",
       { caveatCount: delegation.caveats.length }
     );
     if (!delegation.signature || delegation.signature === "0x") {
       throw new Error("Delegation must be signed to be stored");
     }
-    const delegationHash = _chunkW6HPAK4Mcjs.hashDelegation.call(void 0, delegation);
+    const delegationHash = _chunkGHGCGV3Ccjs.hashDelegation.call(void 0, delegation);
     const body = JSON.stringify(
       {
         ...delegation,
@@ -266,22 +266,45 @@ var ensureExpirySufficientlyConstrained = ({
   };
   return [...caveats, timestampCaveat];
 };
-var ensureRedeemerSufficientlyConstrained = ({
-  redeemerEnforcer,
-  caveats,
-  existingDelegations,
-  redeemerAddresses,
-  requireRedeemers
+var resolveRedeemerAddresses = ({
+  facilitatorAddresses,
+  redeemerAddresses
 }) => {
-  const redeemerAddressNormalized = normalizeAddress(redeemerEnforcer);
-  if (redeemerAddresses.length === 0) {
-    if (!requireRedeemers) {
+  if (!facilitatorAddresses) {
+    if (!redeemerAddresses) {
+      return void 0;
+    }
+    return redeemerAddresses;
+  }
+  if (!redeemerAddresses) {
+    return facilitatorAddresses;
+  }
+  const normalizedFacilitatorAddresses = facilitatorAddresses.map(normalizeAddress);
+  const normalizedRedeemerAddressSet = new Set(
+    redeemerAddresses.map(normalizeAddress)
+  );
+  const redeemerAddressesIntersection = normalizedFacilitatorAddresses.filter(
+    (address) => normalizedRedeemerAddressSet.has(address)
+  );
+  return redeemerAddressesIntersection;
+};
+var ensureRedeemerSufficientlyConstrained = (config) => {
+  const redeemerAddresses = resolveRedeemerAddresses(config);
+  if (_optionalChain([redeemerAddresses, 'optionalAccess', _3 => _3.length]) === 0) {
+    throw new Error(
+      "No valid redeemer addresses were resolved. If both `redeemers.addresses` and `extra.facilitatorAddresses` are provided, they must overlap. If only one is provided, it must include at least one address."
+    );
+  }
+  const { caveats, existingDelegations, redeemerEnforcer } = config;
+  const redeemerEnforcerNormalized = normalizeAddress(redeemerEnforcer);
+  if (!redeemerAddresses) {
+    if (!config.requireRedeemers) {
       return caveats;
     }
     const hasExistingRedeemerCaveat = hasMatchingCaveats(
       caveats,
       existingDelegations,
-      ({ enforcer }) => normalizeAddress(enforcer) === redeemerAddressNormalized
+      ({ enforcer }) => normalizeAddress(enforcer) === redeemerEnforcerNormalized
     );
     if (!hasExistingRedeemerCaveat) {
       throw new Error(
@@ -290,13 +313,12 @@ var ensureRedeemerSufficientlyConstrained = ({
     }
     return caveats;
   }
-  const redeemerAddressesNormalized = redeemerAddresses.map(normalizeAddress);
-  const redeemerAddressesSet = new Set(redeemerAddressesNormalized);
+  const redeemerAddressesSet = new Set(redeemerAddresses.map(normalizeAddress));
   const hasSupersedingRedeemerCaveat = hasMatchingCaveats(
     caveats,
     existingDelegations,
     (caveat) => {
-      if (normalizeAddress(caveat.enforcer) !== redeemerAddressNormalized) {
+      if (normalizeAddress(caveat.enforcer) !== redeemerEnforcerNormalized) {
         return false;
       }
       const allowedRedeemerAddresses = _delegationcore.decodeRedeemerTerms.call(void 0, 
@@ -372,23 +394,19 @@ var resolvex402DelegationCaveats = ({
   if (!timestampEnforcer) {
     throw new Error("TimestampEnforcer not found in environment");
   }
-  const initialCaveats = _chunkW6HPAK4Mcjs.resolveCaveats.call(void 0, {
+  const initialCaveats = _chunkGHGCGV3Ccjs.resolveCaveats.call(void 0, {
     environment,
     caveats: caveatsConfig,
     // Resolve caveats first so downstream constraint checks can append as needed.
     // Scope is still attached later during delegation creation.
     isScopeOptional: true
   });
-  const allRedeemerAddresses = new Set(
-    [..._nullishCoalesce(facilitatorAddresses, () => ( [])), ..._nullishCoalesce(redeemerAddresses, () => ( []))].map(
-      normalizeAddress
-    )
-  );
   const caveatsWithRedeemer = ensureRedeemerSufficientlyConstrained({
     redeemerEnforcer,
+    facilitatorAddresses,
+    redeemerAddresses,
     caveats: initialCaveats,
     existingDelegations,
-    redeemerAddresses: Array.from(allRedeemerAddresses),
     requireRedeemers
   });
   const caveatsWithPayee = ensurePayeeSufficientlyConstrained({
@@ -413,9 +431,9 @@ var resolveDelegationCreationContext = async (config, requirements) => {
     config.redeemers,
     requirements
   );
-  const requireRedeemers = _nullishCoalesce(_optionalChain([redeemersConfig, 'optionalAccess', _3 => _3.requireRedeemers]), () => ( false));
+  const requireRedeemers = _nullishCoalesce(_optionalChain([redeemersConfig, 'optionalAccess', _4 => _4.requireRedeemers]), () => ( false));
   const redeemerAddresses = await resolveMaybeDeferred(
-    _optionalChain([redeemersConfig, 'optionalAccess', _4 => _4.addresses]),
+    _optionalChain([redeemersConfig, 'optionalAccess', _5 => _5.addresses]),
     requirements
   );
   const specifiedEnvironment = await resolveMaybeDeferred(
@@ -439,8 +457,8 @@ var resolveDelegationCreationContext = async (config, requirements) => {
     tokenAddress: requirements.asset,
     maxAmount: BigInt(requirements.amount)
   };
-  const facilitatorAddresses = _optionalChain([requirements, 'access', _5 => _5.extra, 'optionalAccess', _6 => _6.facilitatorAddresses]);
-  const existingDelegations = parentPermissionContext ? _chunkW6HPAK4Mcjs.decodeDelegations.call(void 0, parentPermissionContext) : [];
+  const facilitatorAddresses = _optionalChain([requirements, 'access', _6 => _6.extra, 'optionalAccess', _7 => _7.facilitatorAddresses]);
+  const existingDelegations = parentPermissionContext ? _chunkGHGCGV3Ccjs.decodeDelegations.call(void 0, parentPermissionContext) : [];
   const { DelegationManager: delegationManager } = environment;
   const caveats = resolvex402DelegationCaveats({
     environment,
@@ -475,7 +493,7 @@ var resolveDelegationCreationContext = async (config, requirements) => {
       scope
     };
   }
-  const rootDelegator = _nullishCoalesce(_optionalChain([existingDelegations, 'access', _7 => _7[existingDelegations.length - 1], 'optionalAccess', _8 => _8.delegator]), () => ( from));
+  const rootDelegator = _nullishCoalesce(_optionalChain([existingDelegations, 'access', _8 => _8[existingDelegations.length - 1], 'optionalAccess', _9 => _9.delegator]), () => ( from));
   return {
     account,
     createDelegationConfig,
@@ -486,6 +504,14 @@ var resolveDelegationCreationContext = async (config, requirements) => {
 };
 
 // src/experimental/x402DelegationProvider.ts
+var METAMASK_FACILITATOR_ADDRESSES = [
+  "0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E",
+  "0xC066ac5D385419B1A8c43A0E146fA439837a8B8c",
+  "0xB42F812A44c22cc6b861478900401ee759EbEAD6"
+];
+var METAMASK_FACILITATOR_ADDRESSES_DEV = [
+  "0xb4827A2a066CD2Ef88560EFdf063dD05C6c41cC7"
+];
 function createx402DelegationProvider(config) {
   return async (requirements) => {
     const {
@@ -495,9 +521,9 @@ function createx402DelegationProvider(config) {
       existingDelegations,
       rootDelegator
     } = await resolveDelegationCreationContext(config, requirements);
-    const delegation = _chunkW6HPAK4Mcjs.createOpenDelegation.call(void 0, createDelegationConfig);
+    const delegation = _chunkGHGCGV3Ccjs.createOpenDelegation.call(void 0, createDelegationConfig);
     const chainId = parseEip155ChainId(requirements.network);
-    const typedData = _chunkW6HPAK4Mcjs.prepareSignDelegationTypedData.call(void 0, {
+    const typedData = _chunkGHGCGV3Ccjs.prepareSignDelegationTypedData.call(void 0, {
       delegationManager,
       chainId,
       delegation
@@ -510,7 +536,7 @@ function createx402DelegationProvider(config) {
       ...delegation,
       signature
     };
-    const permissionContext = _chunkW6HPAK4Mcjs.encodeDelegations.call(void 0, [
+    const permissionContext = _chunkGHGCGV3Ccjs.encodeDelegations.call(void 0, [
       signedDelegation,
       ...existingDelegations
     ]);
@@ -526,5 +552,7 @@ function createx402DelegationProvider(config) {
 
 
 
-exports.DelegationStorageClient = DelegationStorageClient; exports.DelegationStorageEnvironment = DelegationStorageEnvironment; exports.createx402DelegationProvider = createx402DelegationProvider; exports.parseEip155ChainId = parseEip155ChainId;
+
+
+exports.DelegationStorageClient = DelegationStorageClient; exports.DelegationStorageEnvironment = DelegationStorageEnvironment; exports.METAMASK_FACILITATOR_ADDRESSES = METAMASK_FACILITATOR_ADDRESSES; exports.METAMASK_FACILITATOR_ADDRESSES_DEV = METAMASK_FACILITATOR_ADDRESSES_DEV; exports.createx402DelegationProvider = createx402DelegationProvider; exports.parseEip155ChainId = parseEip155ChainId;
 //# sourceMappingURL=index.cjs.map

package/dist/experimental/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/home/runner/work/smart-accounts-kit/smart-accounts-kit/packages/smart-accounts-kit/dist/experimental/index.cjs","../../src/experimental/delegationStorage.ts","../../src/experimental/x402DelegationProviderUtils.ts","../../src/experimental/x402DelegationProvider.ts"],"names":[],"mappings":"AAAA;AACE;AACF,yDAA8B;AAC9B,iCAA8B;AAC9B;AACE;AACF,yDAA8B;AAC9B,iCAA8B;AAC9B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,yDAA8B;AAC9B;AACA;AClBA,4BAAgC;AA4BzB,IAAM,6BAAA,EAET;AAAA,EACF,GAAA,EAAK,EAAE,MAAA,EAAQ,0CAA0C,CAAA;AAAA,EACzD,IAAA,EAAM,EAAE,MAAA,EAAQ,sCAAsC;AACxD,CAAA;AASA,SAAS,+BAAA,CACP,MAAA,EAC2B;AAC3B,EAAA,MAAM,oBAAA,EAAsB,MAAA,CAAO,OAAA,CAAQ,4BAA4B,CAAA,CAAE,IAAA;AAAA,IACvE,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA,EAAA,GAAM,GAAA,CAAI,OAAA,IAAW;AAAA,EAC/B,CAAA;AAEA,EAAA,OAAO,oBAAA,EAAsB,mBAAA,CAAoB,CAAC,EAAA,EAAI,QAAA;AACxD;AAaO,IAAM,wBAAA,EAAN,MAA8B;AAAA,EAC1B,CAAA,iBAAA,EAAoB,QAAA;AAAA,EAEpB,CAAA,MAAA;AAAA,EAEA,CAAA,OAAA;AAAA,EAEA,CAAA,MAAA;AAAA,EAET,WAAA,CAAY,MAAA,EAAiC;AAC3C,IAAA,MAAM,EAAE,OAAO,EAAA,EAAI,MAAA,CAAO,WAAA;AAE1B,IAAA,iEAAA;AAAA,MACE,kDAAA;AAAA,MACA;AAAA,QACE,WAAA,EAAa,+BAAA,CAAgC,MAAM;AAAA,MACrD;AAAA,IACF,CAAA;AAEA,IAAA,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,CAAA,gBAAiB,CAAA,EAAG;AAC3C,MAAA,IAAA,CAAK,CAAA,OAAA,EAAU,MAAA;AAAA,IACjB,EAAA,KAAO;AACL,MAAA,MAAM,UAAA,EAAY,MAAA,CAAO,QAAA,CAAS,GAAG,EAAA,EAAI,GAAA,EAAK,GAAA;AAC9C,MAAA,IAAA,CAAK,CAAA,OAAA,EAAU,CAAA,EAAA;AACjB,IAAA;AACgB,IAAA;AACD,IAAA;AACjB,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAamB,EAAA;AACN,IAAA;AACK,MAAA;AACE,IAAA;AACT,MAAA;AACT,IAAA;AACU,IAAA;AACR,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWM,EAAA;AAGJ,IAAA;AACE,MAAA;AACA,MAAA;AAEI,QAAA;AAGJ,MAAA;AACF,IAAA;AACM,IAAA;AAKW,IAAA;AACA,MAAA;AACf,MAAA;AACU,QAAA;AACC,QAAA;AACP,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AACF,IAAA;AAEM,IAAA;AAES,IAAA;AACH,MAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AAEO,IAAA;AACT,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYM,EAAA;AAIJ,IAAA;AACE,MAAA;AACa,MAAA;AACf,IAAA;AACiB,IAAA;AACA,MAAA;AACf,MAAA;AACU,QAAA;AACC,QAAA;AACP,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AACF,IAAA;AAEM,IAAA;AAES,IAAA;AACG,MAAA;AAClB,IAAA;AAEO,IAAA;AACT,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQM,EAAA;AACJ,IAAA;AACE,MAAA;AACe,MAAA;AACjB,IAAA;AACgB,IAAA;AACE,MAAA;AAClB,IAAA;AAEM,IAAA;AAEY,IAAA;AAChB,MAAA;AACK,QAAA;AACQ,QAAA;AACb,MAAA;AAEE,MAAA;AAGF,MAAA;AACF,IAAA;AAEiB,IAAA;AACP,MAAA;AACC,MAAA;AACP,QAAA;AACA,QAAA;AACA,QAAA;AACF,MAAA;AACA,MAAA;AACD,IAAA;AAEK,IAAA;AAGS,IAAA;AACG,MAAA;AAClB,IAAA;AAEiB,IAAA;AACL,MAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AAEO,IAAA;AACT,EAAA;AACF;ADvEsB;AACA;AExLtB;AACE;AACA;AACA;AACA;AACA;AACK;AACE;AACiD;AAoF3C;AAIF,EAAA;AACQ,IAAA;AAIJ,IAAA;AACf,EAAA;AAEO,EAAA;AACT;AASgB;AAGK,EAAA;AACjB,IAAA;AACF,EAAA;AAEkB,EAAA;AACA,IAAA;AAClB,EAAA;AAEM,EAAA;AAEI,EAAA;AACQ,IAAA;AAClB,EAAA;AAEO,EAAA;AACT;AAKM;AAQA;AAWA;AAKO,EAAA;AACO,IAAA;AACP,MAAA;AACT,IAAA;AACF,EAAA;AAEW,EAAA;AACE,IAAA;AACO,MAAA;AACP,QAAA;AACT,MAAA;AACF,IAAA;AACF,EAAA;AAEO,EAAA;AACT;AAgBa;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACyD;AACrC,EAAA;AACF,IAAA;AAClB,EAAA;AACM,EAAA;AACA,EAAA;AAEA,EAAA;AACJ,IAAA;AACA,IAAA;AACY,IAAA;AACN,MAAA;AACK,QAAA;AACT,MAAA;AAEQ,MAAA;AACC,QAAA;AACT,MAAA;AAEE,MAAA;AAGJ,IAAA;AACF,EAAA;AAEI,EAAA;AACK,IAAA;AACT,EAAA;AAEM,EAAA;AACM,IAAA;AACH,IAAA;AACW,MAAA;AAChB,MAAA;AACD,IAAA;AACK,IAAA;AACR,EAAA;AAEoB,EAAA;AACtB;AAiBa;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AAC2D;AACrD,EAAA;AAEF,EAAA;AACG,IAAA;AACI,MAAA;AACT,IAAA;AAEM,IAAA;AACJ,MAAA;AACA,MAAA;AACY,MAAA;AAEd,IAAA;AAEK,IAAA;AACO,MAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AAEO,IAAA;AACT,EAAA;AAEM,EAAA;AACA,EAAA;AAEA,EAAA;AACJ,IAAA;AACA,IAAA;AACY,IAAA;AACN,MAAA;AACK,QAAA;AACT,MAAA;AAEM,MAAA;AACG,QAAA;AACO,MAAA;AAGT,MAAA;AACL,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEI,EAAA;AACK,IAAA;AACT,EAAA;AAEM,EAAA;AACM,IAAA;AACH,IAAA;AACD,IAAA;AACR,EAAA;AAEoB,EAAA;AACtB;AAgBa;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACwD;AAClD,EAAA;AACQ,IAAA;AACM,IAAA;AACnB,EAAA;AAEK,EAAA;AACJ,IAAA;AACF,EAAA;AAEM,EAAA;AAEA,EAAA;AACJ,IAAA;AACA,IAAA;AACa,IAAA;AAGf,EAAA;AAEI,EAAA;AACK,IAAA;AACT,EAAA;AAE4B,EAAA;AAChB,IAAA;AACH,IAAA;AACD,IAAA;AACR,EAAA;AAEoB,EAAA;AACtB;AAgBa;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACkD;AAC5C,EAAA;AACa,IAAA;AACf,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACE,EAAA;AAEC,EAAA;AACa,IAAA;AAClB,EAAA;AAEK,EAAA;AACa,IAAA;AAClB,EAAA;AAEK,EAAA;AACa,IAAA;AAClB,EAAA;AAEM,EAAA;AACJ,IAAA;AACS,IAAA;AAAA;AAAA;AAGQ,IAAA;AAClB,EAAA;AAEK,EAAA;AACC,IAAA;AACH,MAAA;AACF,IAAA;AACF,EAAA;AAEM,EAAA;AACJ,IAAA;AACS,IAAA;AACT,IAAA;AACA,IAAA;AACA,IAAA;AACD,EAAA;AAEK,EAAA;AACJ,IAAA;AACS,IAAA;AACT,IAAA;AACA,IAAA;AACD,EAAA;AAEG,EAAA;AACK,IAAA;AACT,EAAA;AAEO,EAAA;AACL,IAAA;AACS,IAAA;AACT,IAAA;AACA,IAAA;AACD,EAAA;AACH;AASa;AAIK,EAAA;AACV,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AAEM,EAAA;AACA,EAAA;AACa,oBAAA;AACjB,IAAA;AACF,EAAA;AAEM,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AAEE,EAAA;AAGI,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AACM,EAAA;AAEA,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AAGS,EAAA;AAEA,EAAA;AAEK,EAAA;AACZ,IAAA;AACc,IAAA;AACI,IAAA;AACpB,EAAA;AAEM,EAAA;AAIA,EAAA;AAIE,EAAA;AACQ,EAAA;AACd,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACO,IAAA;AACP,IAAA;AACA,IAAA;AACA,IAAA;AACD,EAAA;AAEG,EAAA;AAEA,EAAA;AACI,IAAA;AAED,IAAA;AACa,MAAA;AAClB,IAAA;AAEA,IAAA;AACE,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACK,EAAA;AACL,IAAA;AACE,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAEM,EAAA;AAGC,EAAA;AACL,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACF,EAAA;AACF;AF/EsB;AACA;AGncN;AAIZ,EAAA;AAEM,IAAA;AACJ,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACQ,IAAA;AAEJ,IAAA;AAEU,IAAA;AAEE,IAAA;AAChB,MAAA;AACA,MAAA;AACA,MAAA;AACD,IAAA;AAEY,IAAA;AACK,MAAA;AAClB,IAAA;AAEkB,IAAA;AAEZ,IAAA;AACD,MAAA;AACH,MAAA;AACF,IAAA;AAEM,IAAA;AACJ,MAAA;AACG,MAAA;AACJ,IAAA;AAEM,IAAA;AACL,MAAA;AACA,MAAA;AACW,MAAA;AACb,IAAA;AACF,EAAA;AACF;AHybsB;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/smart-accounts-kit/smart-accounts-kit/packages/smart-accounts-kit/dist/experimental/index.cjs","sourcesContent":[null,"import { type Hex, toHex } from 'viem';\n\nimport { trackSmartAccountsKitFunctionCall } from '../analytics';\nimport { hashDelegation } from '../delegation';\nimport type { Delegation } from '../types';\n\ntype ErrorResponse = {\n  error: string;\n  data?: any;\n};\n\nexport type APIStoreDelegationResponse = {\n  delegationHash: Hex;\n};\n\n/**\n * Represents the allowed filters when querying the data store for delegations.\n */\nexport enum DelegationStoreFilter {\n  Given = 'GIVEN',\n  Received = 'RECEIVED',\n  All = 'ALL',\n}\n\n/**\n * Public Delegation Storage Service environments. To be used in the\n * DeleGationStorageService config.\n */\nexport const DelegationStorageEnvironment: {\n  [K in 'dev' | 'prod']: Environment;\n} = {\n  dev: { apiUrl: 'https://passkeys.dev-api.cx.metamask.io' },\n  prod: { apiUrl: 'https://passkeys.api.cx.metamask.io' },\n};\n\n/**\n * Returns the DelegationStorageEnvironment ('dev' or 'prod') for a given apiUrl,\n * or 'custom' if the apiUrl does not match a known environment.\n *\n * @param apiUrl - The API URL to check.\n * @returns The environment key ('dev' or 'prod'), or 'custom'.\n */\nfunction getDelegationStorageEnvironment(\n  apiUrl: string,\n): 'dev' | 'prod' | 'custom' {\n  const matchingEnvironment = Object.entries(DelegationStorageEnvironment).find(\n    ([_, env]) => env.apiUrl === apiUrl,\n  ) as [keyof typeof DelegationStorageEnvironment, Environment] | undefined;\n\n  return matchingEnvironment ? matchingEnvironment[0] : 'custom';\n}\n\nexport type Environment = {\n  apiUrl: string;\n};\n\nexport type DelegationStorageConfig = {\n  apiKey: string;\n  apiKeyId: string;\n  environment: Environment;\n  fetcher?: typeof fetch;\n};\n\nexport class DelegationStorageClient {\n  readonly #apiVersionPrefix = 'api/v0';\n\n  readonly #config: DelegationStorageConfig;\n\n  readonly #fetcher: typeof fetch;\n\n  readonly #apiUrl: string;\n\n  constructor(config: DelegationStorageConfig) {\n    const { apiUrl } = config.environment;\n\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.constructor',\n      {\n        environment: getDelegationStorageEnvironment(apiUrl),\n      },\n    );\n\n    if (apiUrl.endsWith(this.#apiVersionPrefix)) {\n      this.#apiUrl = apiUrl;\n    } else {\n      const separator = apiUrl.endsWith('/') ? '' : '/';\n      this.#apiUrl = `${apiUrl}${separator}${this.#apiVersionPrefix}`;\n    }\n    this.#fetcher = this.#initializeFetcher(config);\n    this.#config = config;\n  }\n\n  /**\n   * Initializes the fetch function for HTTP requests.\n   *\n   * - Uses `config.fetcher` if provided.\n   * - Falls back to global `fetch` if available.\n   * - Throws an error if no fetch function is available.\n   *\n   * @param config - Configuration object that may include a custom fetch function.\n   * @returns The fetch function to be used for HTTP requests.\n   * @throws Error if no fetch function is available in the environment.\n   */\n  #initializeFetcher(config: DelegationStorageConfig): typeof fetch {\n    if (config.fetcher) {\n      return config.fetcher;\n    } else if (typeof globalThis?.fetch === 'function') {\n      return globalThis.fetch.bind(globalThis);\n    }\n    throw new Error(\n      'Fetch API is not available in this environment. Please provide a fetch function in the config.',\n    );\n  }\n\n  /**\n   * Fetches the delegation chain from the Delegation Storage Service, ending with\n   * the specified leaf delegation.\n   *\n   * @param leafDelegationOrDelegationHash - The leaf delegation, or the hash\n   * of the leaf delegation.\n   * @returns A promise that resolves to the delegation chain - empty array if the delegation\n   * is not found.\n   */\n  async getDelegationChain(\n    leafDelegationOrDelegationHash: Hex | Delegation,\n  ): Promise<Delegation[]> {\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.getDelegationChain',\n      {\n        inputKind:\n          typeof leafDelegationOrDelegationHash === 'string'\n            ? 'hash'\n            : 'delegation',\n      },\n    );\n    const leafDelegationHash =\n      typeof leafDelegationOrDelegationHash === 'string'\n        ? leafDelegationOrDelegationHash\n        : hashDelegation(leafDelegationOrDelegationHash);\n\n    const response = await this.#fetcher(\n      `${this.#apiUrl}/delegation/chain/${leafDelegationHash}`,\n      {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.#config.apiKey}`,\n          'x-api-key-id': this.#config.apiKeyId,\n        },\n      },\n    );\n\n    const responseData: Delegation[] | ErrorResponse = await response.json();\n\n    if ('error' in responseData) {\n      throw new Error(\n        `Failed to fetch delegation chain: ${responseData.error}`,\n      );\n    }\n\n    return responseData;\n  }\n\n  /**\n   * Fetches the delegations from the Delegation Storage Service, either `Received`\n   * by, or `Given` by, (or both: `All`) the specified deleGatorAddress. Defaults\n   * to `Received`.\n   *\n   * @param deleGatorAddress - The deleGatorAddress to retrieve the delegations for.\n   * @param filterMode - The DelegationStoreFilter mode - defaults to Received.\n   * @returns A promise that resolves to the list of delegations received by the deleGatorAddress,\n   * empty array if the delegations are not found.\n   */\n  async fetchDelegations(\n    deleGatorAddress: Hex,\n    filterMode = DelegationStoreFilter.Received,\n  ): Promise<Delegation[]> {\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.fetchDelegations',\n      { filterMode },\n    );\n    const response = await this.#fetcher(\n      `${this.#apiUrl}/delegation/accounts/${deleGatorAddress}?filter=${filterMode}`,\n      {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.#config.apiKey}`,\n          'x-api-key-id': this.#config.apiKeyId,\n        },\n      },\n    );\n\n    const responseData: Delegation[] | ErrorResponse = await response.json();\n\n    if ('error' in responseData) {\n      throw new Error(`Failed to fetch delegations: ${responseData.error}`);\n    }\n\n    return responseData;\n  }\n\n  /**\n   * Stores the specified delegation in the Delegation Storage Service.\n   *\n   * @param delegation - The delegation to store.\n   * @returns A promise that resolves to the delegation hash indicating successful storage.\n   */\n  async storeDelegation(delegation: Delegation): Promise<Hex> {\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.storeDelegation',\n      { caveatCount: delegation.caveats.length },\n    );\n    if (!delegation.signature || delegation.signature === '0x') {\n      throw new Error('Delegation must be signed to be stored');\n    }\n\n    const delegationHash = hashDelegation(delegation);\n\n    const body = JSON.stringify(\n      {\n        ...delegation,\n        metadata: [],\n      },\n      (_, value: any) =>\n        typeof value === 'bigint' || typeof value === 'number'\n          ? toHex(value)\n          : value,\n      2,\n    );\n\n    const response = await this.#fetcher(`${this.#apiUrl}/delegation/store`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${this.#config.apiKey}`,\n        'x-api-key-id': this.#config.apiKeyId,\n        'Content-Type': 'application/json',\n      },\n      body,\n    });\n\n    const responseData: APIStoreDelegationResponse | ErrorResponse =\n      await response.json();\n\n    if ('error' in responseData) {\n      throw new Error(responseData.error);\n    }\n\n    if (responseData.delegationHash !== delegationHash) {\n      throw new Error(\n        'Failed to store the Delegation, the hash returned from the MM delegation storage API does not match the hash of the delegation',\n      );\n    }\n\n    return responseData.delegationHash;\n  }\n}\n","import {\n  createAllowedCalldataTerms,\n  createRedeemerTerms,\n  createTimestampTerms,\n  decodeRedeemerTerms,\n  decodeTimestampTerms,\n} from '@metamask/delegation-core';\nimport { parseCaipChainId } from '@metamask/utils';\nimport { pad, type Account, type Address, type Hex } from 'viem';\n\nimport type { Caveats } from '../caveatBuilder';\nimport { resolveCaveats } from '../caveatBuilder';\nimport { ScopeType } from '../constants';\nimport type { createOpenDelegation } from '../delegation';\nimport { decodeDelegations } from '../delegation';\nimport { getSmartAccountsEnvironment } from '../smartAccountsEnvironment';\nimport type {\n  Caveat,\n  Delegation,\n  PermissionContext,\n  SmartAccountsEnvironment,\n} from '../types';\nimport type {\n  MaybeDeferred,\n  PaymentRequirements,\n  x402DelegationProviderConfig,\n} from './x402DelegationProviderTypes';\nimport { generateSalt } from '../utils/';\n\n/**\n * Inputs for redeemer constraint enforcement.\n */\ntype EnsureRedeemerSufficientlyConstrainedParams = {\n  redeemerEnforcer: Hex;\n  caveats: Caveat[];\n  existingDelegations: Delegation[];\n  redeemerAddresses: Hex[];\n  requireRedeemers: boolean;\n};\n\n/**\n * Inputs for payee constraint enforcement.\n */\ntype EnsurePayeeSufficientlyConstrainedParams = {\n  allowedCalldataEnforcer: Hex;\n  caveats: Caveat[];\n  existingDelegations: Delegation[];\n  payee: Hex;\n};\n\n/**\n * Inputs for expiry constraint enforcement.\n */\ntype EnsureExpirySufficientlyConstrainedParams = {\n  timestampEnforcer: Hex;\n  caveats: Caveat[];\n  existingDelegations: Delegation[];\n  expirySeconds: number;\n};\n\n/**\n * Resolved context required to build and sign an x402 delegation.\n */\nexport type DelegationCreationContext = {\n  account: Account;\n  createDelegationConfig: Parameters<typeof createOpenDelegation>[0];\n  delegationManager: Address;\n  existingDelegations: Delegation[];\n  rootDelegator: Address;\n};\n\n/**\n * Inputs for resolving delegation caveats with x402-specific constraints.\n */\nexport type Resolvex402DelegationCaveatsParams = {\n  environment: SmartAccountsEnvironment;\n  caveatsConfig: Caveats | undefined;\n  existingDelegations: Delegation[];\n  facilitatorAddresses: Hex[] | undefined;\n  payee: Hex;\n  expirySeconds?: number;\n  requireRedeemers: boolean;\n  redeemerAddresses: Address[] | undefined;\n};\n\n/**\n * Resolves eager or deferred values against payment requirements.\n *\n * @param maybeDeferred - Value or async resolver function.\n * @param requirements - Payment requirements passed to deferred resolvers.\n * @returns The resolved value, or undefined when no value is provided.\n */\nasync function resolveMaybeDeferred<TResult>(\n  maybeDeferred: MaybeDeferred<TResult>,\n  requirements: PaymentRequirements,\n): Promise<TResult> {\n  if (typeof maybeDeferred === 'function') {\n    const deferred = maybeDeferred as (\n      deferredRequirements: PaymentRequirements,\n    ) => Promise<TResult> | TResult;\n\n    return await deferred(requirements);\n  }\n\n  return maybeDeferred;\n}\n\n/**\n * Parses an EIP-155 CAIP network identifier into a numeric chain ID.\n *\n * @param network - CAIP network identifier (for example, `eip155:1`).\n * @returns Parsed numeric chain ID.\n * @throws If the CAIP namespace is not `eip155`.\n */\nexport function parseEip155ChainId(\n  network: PaymentRequirements['network'],\n): number {\n  const { namespace, reference } = parseCaipChainId(\n    network as `${string}:${string}`,\n  );\n\n  if (namespace !== 'eip155') {\n    throw new Error('Unsupported chain namespace');\n  }\n\n  const parsedChainId = Number(reference);\n\n  if (isNaN(parsedChainId)) {\n    throw new Error('Invalid chain id');\n  }\n\n  return parsedChainId;\n}\n\n/**\n * ERC-20 `transfer(address to, uint256 value)` calldata index for `to`.\n */\nconst TRANSFER_PAYEE_INDEX = 4;\n\n/**\n * Normalizes an address-like hex string for case-insensitive comparisons.\n *\n * @param address - Address value to normalize.\n * @returns Lowercased hex string.\n */\nconst normalizeAddress = (address: Address): Address =>\n  address.toLowerCase() as Address;\n\n/**\n * Returns whether any caveat in local or inherited delegations matches a predicate.\n *\n * @param caveats - Current caveat list.\n * @param delegations - Existing delegations whose caveats should also be searched.\n * @param match - Predicate used to match caveats.\n * @returns True when at least one caveat satisfies `match`.\n */\nconst hasMatchingCaveats = (\n  caveats: Caveat[],\n  delegations: Delegation[],\n  match: (caveat: Caveat) => boolean,\n): boolean => {\n  for (const caveat of caveats) {\n    if (match(caveat)) {\n      return true;\n    }\n  }\n\n  for (const delegation of delegations) {\n    for (const caveat of delegation.caveats) {\n      if (match(caveat)) {\n        return true;\n      }\n    }\n  }\n\n  return false;\n};\n\n/**\n * Ensures caveats include an expiry timestamp constraint when requested.\n *\n * If an existing timestamp caveat already enforces a tighter (earlier) or equal\n * `validBefore` threshold than requested, caveats are returned unchanged.\n * Otherwise a new timestamp caveat is appended with `afterThreshold = 0`.\n *\n * @param options0 - Expiry constraint evaluation inputs.\n * @param options0.timestampEnforcer - Address of the TimestampEnforcer caveat contract.\n * @param options0.caveats - Currently resolved caveats for the delegation being created.\n * @param options0.existingDelegations - Existing parent-chain delegations to inspect for inherited constraints.\n * @param options0.expirySeconds - Relative expiry from \"now\" in seconds.\n * @returns The original caveats when sufficiently constrained, otherwise caveats with a timestamp caveat appended.\n */\nexport const ensureExpirySufficientlyConstrained = ({\n  timestampEnforcer,\n  caveats,\n  existingDelegations,\n  expirySeconds,\n}: EnsureExpirySufficientlyConstrainedParams): Caveat[] => {\n  if (expirySeconds < 0) {\n    throw new Error('Expiry seconds must be a positive number');\n  }\n  const beforeThreshold = Math.floor(Date.now() / 1000) + expirySeconds;\n  const timestampEnforcerNormalized = normalizeAddress(timestampEnforcer);\n\n  const hasSupersedingTimestampConstraint = hasMatchingCaveats(\n    caveats,\n    existingDelegations,\n    (caveat) => {\n      if (normalizeAddress(caveat.enforcer) !== timestampEnforcerNormalized) {\n        return false;\n      }\n\n      const { beforeThreshold: existingBeforeThreshold } = decodeTimestampTerms(\n        caveat.terms,\n      );\n      return (\n        existingBeforeThreshold !== 0 &&\n        existingBeforeThreshold <= beforeThreshold\n      );\n    },\n  );\n\n  if (hasSupersedingTimestampConstraint) {\n    return caveats;\n  }\n\n  const timestampCaveat: Caveat = {\n    enforcer: timestampEnforcer,\n    terms: createTimestampTerms({\n      afterThreshold: 0,\n      beforeThreshold,\n    }),\n    args: '0x',\n  };\n\n  return [...caveats, timestampCaveat];\n};\n\n/**\n * Ensures caveats include a sufficiently strict redeemer constraint.\n *\n * Returns the caveat list unchanged when an existing redeemer caveat is already\n * strict enough, or appends a new redeemer caveat scoped to facilitator addresses.\n *\n * @param options0 - Redeemer constraint evaluation inputs.\n * @param options0.redeemerEnforcer - Address of the redeemer enforcer caveat contract.\n * @param options0.caveats - Currently resolved caveats for the delegation being created.\n * @param options0.existingDelegations - Existing parent-chain delegations to inspect for inherited constraints.\n * @param options0.redeemerAddresses - Optional addresses to which redemption should be constrained.\n * @param options0.requireRedeemers - Whether at least one redeemer constraint must exist when no redeemer addresses are supplied.\n * @returns The original caveats when sufficiently constrained, otherwise caveats with a redeemer caveat appended.\n * @throws If no facilitator addresses are provided and no redeemer constraint exists.\n */\nexport const ensureRedeemerSufficientlyConstrained = ({\n  redeemerEnforcer,\n  caveats,\n  existingDelegations,\n  redeemerAddresses,\n  requireRedeemers,\n}: EnsureRedeemerSufficientlyConstrainedParams): Caveat[] => {\n  const redeemerAddressNormalized = normalizeAddress(redeemerEnforcer);\n\n  if (redeemerAddresses.length === 0) {\n    if (!requireRedeemers) {\n      return caveats;\n    }\n\n    const hasExistingRedeemerCaveat = hasMatchingCaveats(\n      caveats,\n      existingDelegations,\n      ({ enforcer }) =>\n        normalizeAddress(enforcer) === redeemerAddressNormalized,\n    );\n\n    if (!hasExistingRedeemerCaveat) {\n      throw new Error(\n        'Redeemer must be constrained, either in the specified `caveats`, `parentPermissionContext`, or the `PaymentRequirements` as `extra.facilitatorAddresses`.',\n      );\n    }\n\n    return caveats;\n  }\n\n  const redeemerAddressesNormalized = redeemerAddresses.map(normalizeAddress);\n  const redeemerAddressesSet = new Set(redeemerAddressesNormalized);\n\n  const hasSupersedingRedeemerCaveat = hasMatchingCaveats(\n    caveats,\n    existingDelegations,\n    (caveat) => {\n      if (normalizeAddress(caveat.enforcer) !== redeemerAddressNormalized) {\n        return false;\n      }\n\n      const allowedRedeemerAddresses = decodeRedeemerTerms(\n        caveat.terms,\n      ).redeemers.map(normalizeAddress);\n\n      // If this redeemer caveat only allows facilitator addresses, it is sufficiently constrained.\n      return allowedRedeemerAddresses.every((item) =>\n        redeemerAddressesSet.has(item),\n      );\n    },\n  );\n\n  if (hasSupersedingRedeemerCaveat) {\n    return caveats;\n  }\n\n  const redeemerCaveat: Caveat = {\n    enforcer: redeemerEnforcer,\n    terms: createRedeemerTerms({ redeemers: redeemerAddresses }),\n    args: '0x',\n  };\n\n  return [...caveats, redeemerCaveat];\n};\n\n/**\n * Ensures caveats include an allowed-calldata constraint for the payment payee.\n *\n * Scans both the in-progress caveat list and parent delegation caveats for an\n * `AllowedCalldataEnforcer` caveat whose terms match the encoded payee calldata\n * constraint. If found, returns caveats unchanged; otherwise appends a payee caveat.\n *\n * @param options0 - Payee constraint evaluation inputs.\n * @param options0.allowedCalldataEnforcer - Address of the AllowedCalldataEnforcer caveat contract.\n * @param options0.caveats - Currently resolved caveats for the delegation being created.\n * @param options0.existingDelegations - Existing parent-chain delegations to inspect for inherited constraints.\n * @param options0.payee - Expected ERC-20 transfer recipient to enforce in calldata.\n * @returns The original caveats when an equivalent payee constraint exists, otherwise caveats with a payee caveat appended.\n */\nexport const ensurePayeeSufficientlyConstrained = ({\n  allowedCalldataEnforcer,\n  caveats,\n  existingDelegations,\n  payee,\n}: EnsurePayeeSufficientlyConstrainedParams): Caveat[] => {\n  const allowedCalldataTerms = createAllowedCalldataTerms({\n    startIndex: TRANSFER_PAYEE_INDEX,\n    value: pad(payee, { size: 32 }),\n  });\n\n  const allowedCalldataEnforcerNormalized = normalizeAddress(\n    allowedCalldataEnforcer,\n  );\n\n  const lowercaseCalldataTerms = allowedCalldataTerms.toLowerCase();\n\n  const hasSupersedingAllowedCalldataConstraint = hasMatchingCaveats(\n    caveats,\n    existingDelegations,\n    ({ enforcer, terms }) =>\n      normalizeAddress(enforcer) === allowedCalldataEnforcerNormalized &&\n      terms.toLowerCase() === lowercaseCalldataTerms,\n  );\n\n  if (hasSupersedingAllowedCalldataConstraint) {\n    return caveats;\n  }\n\n  const payeeCaveat: Caveat = {\n    enforcer: allowedCalldataEnforcer,\n    terms: allowedCalldataTerms,\n    args: '0x',\n  };\n\n  return [...caveats, payeeCaveat];\n};\n\n/**\n * Resolves caveats and applies x402-specific redeemer and payee constraints.\n *\n * @param options0 - Caveat resolution inputs.\n * @param options0.environment - Environment containing caveat enforcer addresses.\n * @param options0.caveatsConfig - Optional caveat builder config.\n * @param options0.existingDelegations - Existing parent-chain delegations.\n * @param options0.facilitatorAddresses - Optional facilitator addresses used for redeemer constraints.\n * @param options0.payee - Payee address used for allowed calldata constraints.\n * @param options0.expirySeconds - Optional relative expiry in seconds for adding timestamp constraints.\n * @param options0.requireRedeemers - Whether redeemer constraints are mandatory when no facilitator or configured redeemer addresses are present.\n * @param options0.redeemerAddresses - Optional redeemer addresses from provider config to merge with facilitator addresses.\n * @returns Caveats after redeemer and payee constraints are enforced.\n */\nexport const resolvex402DelegationCaveats = ({\n  environment,\n  caveatsConfig,\n  existingDelegations,\n  facilitatorAddresses,\n  payee,\n  expirySeconds,\n  requireRedeemers,\n  redeemerAddresses,\n}: Resolvex402DelegationCaveatsParams): Caveat[] => {\n  const {\n    caveatEnforcers: {\n      RedeemerEnforcer: redeemerEnforcer,\n      AllowedCalldataEnforcer: allowedCalldataEnforcer,\n      TimestampEnforcer: timestampEnforcer,\n    },\n  } = environment;\n\n  if (!redeemerEnforcer) {\n    throw new Error('RedeemerEnforcer not found in environment');\n  }\n\n  if (!allowedCalldataEnforcer) {\n    throw new Error('AllowedCalldataEnforcer not found in environment');\n  }\n\n  if (!timestampEnforcer) {\n    throw new Error('TimestampEnforcer not found in environment');\n  }\n\n  const initialCaveats = resolveCaveats({\n    environment,\n    caveats: caveatsConfig,\n    // Resolve caveats first so downstream constraint checks can append as needed.\n    // Scope is still attached later during delegation creation.\n    isScopeOptional: true,\n  });\n\n  const allRedeemerAddresses = new Set(\n    [...(facilitatorAddresses ?? []), ...(redeemerAddresses ?? [])].map(\n      normalizeAddress,\n    ),\n  );\n\n  const caveatsWithRedeemer = ensureRedeemerSufficientlyConstrained({\n    redeemerEnforcer,\n    caveats: initialCaveats,\n    existingDelegations,\n    redeemerAddresses: Array.from(allRedeemerAddresses),\n    requireRedeemers,\n  });\n\n  const caveatsWithPayee = ensurePayeeSufficientlyConstrained({\n    allowedCalldataEnforcer,\n    caveats: caveatsWithRedeemer,\n    existingDelegations,\n    payee,\n  });\n\n  if (expirySeconds === undefined) {\n    return caveatsWithPayee;\n  }\n\n  return ensureExpirySufficientlyConstrained({\n    timestampEnforcer,\n    caveats: caveatsWithPayee,\n    existingDelegations,\n    expirySeconds,\n  });\n};\n\n/**\n * Builds the delegation creation context from provider config and requirements.\n *\n * @param config - Delegation provider config for context construction.\n * @param requirements - Payment requirements used to scope caveats.\n * @returns The resolved context used to create and sign a delegation.\n */\nexport const resolveDelegationCreationContext = async (\n  config: x402DelegationProviderConfig,\n  requirements: PaymentRequirements,\n): Promise<DelegationCreationContext> => {\n  const account = await resolveMaybeDeferred(config.account, requirements);\n  const redeemersConfig = await resolveMaybeDeferred(\n    config.redeemers,\n    requirements,\n  );\n\n  const requireRedeemers = redeemersConfig?.requireRedeemers ?? false;\n  const redeemerAddresses = await resolveMaybeDeferred(\n    redeemersConfig?.addresses,\n    requirements,\n  );\n\n  const specifiedEnvironment = await resolveMaybeDeferred(\n    config.environment,\n    requirements,\n  );\n  const environment =\n    specifiedEnvironment ??\n    getSmartAccountsEnvironment(parseEip155ChainId(requirements.network));\n\n  const caveatsConfig: Caveats | undefined = await resolveMaybeDeferred(\n    config.caveats,\n    requirements,\n  );\n  const parentPermissionContext: PermissionContext | undefined =\n    await resolveMaybeDeferred(config.parentPermissionContext, requirements);\n  const expirySeconds = await resolveMaybeDeferred(\n    config.expirySeconds,\n    requirements,\n  );\n\n  const from =\n    (await resolveMaybeDeferred(config.from, requirements)) ?? account.address;\n  const salt =\n    (await resolveMaybeDeferred(config.salt, requirements)) ?? generateSalt();\n\n  const scope = {\n    type: ScopeType.Erc20TransferAmount,\n    tokenAddress: requirements.asset as Hex,\n    maxAmount: BigInt(requirements.amount),\n  } as const;\n\n  const facilitatorAddresses = requirements.extra?.facilitatorAddresses as\n    | Hex[]\n    | undefined;\n\n  const existingDelegations = parentPermissionContext\n    ? decodeDelegations(parentPermissionContext)\n    : [];\n\n  const { DelegationManager: delegationManager } = environment;\n  const caveats = resolvex402DelegationCaveats({\n    environment,\n    caveatsConfig,\n    existingDelegations,\n    facilitatorAddresses,\n    payee: requirements.payTo as Hex,\n    expirySeconds,\n    requireRedeemers,\n    redeemerAddresses,\n  });\n\n  let createDelegationConfig: Parameters<typeof createOpenDelegation>[0];\n\n  if (parentPermissionContext) {\n    const parentDelegation = existingDelegations[0];\n\n    if (!parentDelegation) {\n      throw new Error('Parent permission context is not a valid delegation');\n    }\n\n    createDelegationConfig = {\n      environment,\n      from,\n      caveats,\n      salt,\n      scope,\n      parentDelegation,\n    };\n  } else {\n    createDelegationConfig = {\n      environment,\n      from,\n      caveats,\n      salt,\n      scope,\n    };\n  }\n\n  const rootDelegator =\n    existingDelegations[existingDelegations.length - 1]?.delegator ?? from;\n\n  return {\n    account,\n    createDelegationConfig,\n    delegationManager,\n    existingDelegations,\n    rootDelegator,\n  };\n};\n","import {\n  createOpenDelegation,\n  encodeDelegations,\n  prepareSignDelegationTypedData,\n} from '../delegation';\nimport type {\n  PaymentRequirements,\n  x402DelegationProvider,\n  x402DelegationProviderConfig,\n  x402DelegationProviderPaymentPayload,\n} from './x402DelegationProviderTypes';\nimport {\n  parseEip155ChainId,\n  resolveDelegationCreationContext,\n} from './x402DelegationProviderUtils';\n\nexport type {\n  MaybeDeferred,\n  PaymentRequirements,\n  x402DelegationProvider,\n  x402DelegationProviderConfig,\n  x402DelegationProviderPaymentPayload,\n} from './x402DelegationProviderTypes';\n\nexport { parseEip155ChainId } from './x402DelegationProviderUtils';\n\n/**\n * Creates a delegation provider function for x402 payment requirements.\n *\n * The returned provider resolves deferred config values using incoming payment\n * requirements, creates an open delegation, signs it, and returns an encoded\n * permission context payload.\n *\n * @param config - Delegation creation and signing configuration.\n * @returns A provider that maps payment requirements to a signed delegation payload.\n */\nexport function createx402DelegationProvider(\n  config: x402DelegationProviderConfig,\n): x402DelegationProvider {\n  return async (\n    requirements: PaymentRequirements,\n  ): Promise<x402DelegationProviderPaymentPayload> => {\n    const {\n      account,\n      createDelegationConfig,\n      delegationManager,\n      existingDelegations,\n      rootDelegator,\n    } = await resolveDelegationCreationContext(config, requirements);\n\n    const delegation = createOpenDelegation(createDelegationConfig);\n\n    const chainId = parseEip155ChainId(requirements.network);\n\n    const typedData = prepareSignDelegationTypedData({\n      delegationManager,\n      chainId,\n      delegation,\n    });\n\n    if (!account.signTypedData) {\n      throw new Error('Account does not support signTypedData');\n    }\n\n    const signature = await account.signTypedData(typedData);\n\n    const signedDelegation = {\n      ...delegation,\n      signature,\n    };\n\n    const permissionContext = encodeDelegations([\n      signedDelegation,\n      ...existingDelegations,\n    ]);\n\n    return {\n      delegationManager,\n      permissionContext,\n      delegator: rootDelegator,\n    };\n  };\n}\n"]}
+{"version":3,"sources":["/home/runner/work/smart-accounts-kit/smart-accounts-kit/packages/smart-accounts-kit/dist/experimental/index.cjs","../../src/experimental/delegationStorage.ts","../../src/experimental/x402DelegationProviderUtils.ts","../../src/experimental/x402DelegationProvider.ts"],"names":[],"mappings":"AAAA;AACE;AACF,yDAA8B;AAC9B,iCAA8B;AAC9B;AACE;AACF,yDAA8B;AAC9B,iCAA8B;AAC9B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,yDAA8B;AAC9B;AACA;AClBA,4BAAgC;AA4BzB,IAAM,6BAAA,EAET;AAAA,EACF,GAAA,EAAK,EAAE,MAAA,EAAQ,0CAA0C,CAAA;AAAA,EACzD,IAAA,EAAM,EAAE,MAAA,EAAQ,sCAAsC;AACxD,CAAA;AASA,SAAS,+BAAA,CACP,MAAA,EAC2B;AAC3B,EAAA,MAAM,oBAAA,EAAsB,MAAA,CAAO,OAAA,CAAQ,4BAA4B,CAAA,CAAE,IAAA;AAAA,IACvE,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA,EAAA,GAAM,GAAA,CAAI,OAAA,IAAW;AAAA,EAC/B,CAAA;AAEA,EAAA,OAAO,oBAAA,EAAsB,mBAAA,CAAoB,CAAC,EAAA,EAAI,QAAA;AACxD;AAaO,IAAM,wBAAA,EAAN,MAA8B;AAAA,EAC1B,CAAA,iBAAA,EAAoB,QAAA;AAAA,EAEpB,CAAA,MAAA;AAAA,EAEA,CAAA,OAAA;AAAA,EAEA,CAAA,MAAA;AAAA,EAET,WAAA,CAAY,MAAA,EAAiC;AAC3C,IAAA,MAAM,EAAE,OAAO,EAAA,EAAI,MAAA,CAAO,WAAA;AAE1B,IAAA,iEAAA;AAAA,MACE,kDAAA;AAAA,MACA;AAAA,QACE,WAAA,EAAa,+BAAA,CAAgC,MAAM;AAAA,MACrD;AAAA,IACF,CAAA;AAEA,IAAA,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,CAAA,gBAAiB,CAAA,EAAG;AAC3C,MAAA,IAAA,CAAK,CAAA,OAAA,EAAU,MAAA;AAAA,IACjB,EAAA,KAAO;AACL,MAAA,MAAM,UAAA,EAAY,MAAA,CAAO,QAAA,CAAS,GAAG,EAAA,EAAI,GAAA,EAAK,GAAA;AAC9C,MAAA,IAAA,CAAK,CAAA,OAAA,EAAU,CAAA,EAAA;AACjB,IAAA;AACgB,IAAA;AACD,IAAA;AACjB,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAamB,EAAA;AACN,IAAA;AACK,MAAA;AACE,IAAA;AACT,MAAA;AACT,IAAA;AACU,IAAA;AACR,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWM,EAAA;AAGJ,IAAA;AACE,MAAA;AACA,MAAA;AAEI,QAAA;AAGJ,MAAA;AACF,IAAA;AACM,IAAA;AAKW,IAAA;AACA,MAAA;AACf,MAAA;AACU,QAAA;AACC,QAAA;AACP,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AACF,IAAA;AAEM,IAAA;AAES,IAAA;AACH,MAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AAEO,IAAA;AACT,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYM,EAAA;AAIJ,IAAA;AACE,MAAA;AACa,MAAA;AACf,IAAA;AACiB,IAAA;AACA,MAAA;AACf,MAAA;AACU,QAAA;AACC,QAAA;AACP,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AACF,IAAA;AAEM,IAAA;AAES,IAAA;AACG,MAAA;AAClB,IAAA;AAEO,IAAA;AACT,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQM,EAAA;AACJ,IAAA;AACE,MAAA;AACe,MAAA;AACjB,IAAA;AACgB,IAAA;AACE,MAAA;AAClB,IAAA;AAEM,IAAA;AAEY,IAAA;AAChB,MAAA;AACK,QAAA;AACQ,QAAA;AACb,MAAA;AAEE,MAAA;AAGF,MAAA;AACF,IAAA;AAEiB,IAAA;AACP,MAAA;AACC,MAAA;AACP,QAAA;AACA,QAAA;AACA,QAAA;AACF,MAAA;AACA,MAAA;AACD,IAAA;AAEK,IAAA;AAGS,IAAA;AACG,MAAA;AAClB,IAAA;AAEiB,IAAA;AACL,MAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AAEO,IAAA;AACT,EAAA;AACF;ADvEsB;AACA;AExLtB;AACE;AACA;AACA;AACA;AACA;AACK;AACE;AACiD;AA6F3C;AAIF,EAAA;AACQ,IAAA;AAIJ,IAAA;AACf,EAAA;AAEO,EAAA;AACT;AASgB;AAGK,EAAA;AACjB,IAAA;AACF,EAAA;AAEkB,EAAA;AACA,IAAA;AAClB,EAAA;AAEM,EAAA;AAEI,EAAA;AACQ,IAAA;AAClB,EAAA;AAEO,EAAA;AACT;AAKM;AAQA;AAWA;AAKO,EAAA;AACO,IAAA;AACP,MAAA;AACT,IAAA;AACF,EAAA;AAEW,EAAA;AACE,IAAA;AACO,MAAA;AACP,QAAA;AACT,MAAA;AACF,IAAA;AACF,EAAA;AAEO,EAAA;AACT;AAgBa;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACyD;AACrC,EAAA;AACF,IAAA;AAClB,EAAA;AACM,EAAA;AACA,EAAA;AAEA,EAAA;AACJ,IAAA;AACA,IAAA;AACY,IAAA;AACN,MAAA;AACK,QAAA;AACT,MAAA;AAEQ,MAAA;AACC,QAAA;AACT,MAAA;AAEE,MAAA;AAGJ,IAAA;AACF,EAAA;AAEI,EAAA;AACK,IAAA;AACT,EAAA;AAEM,EAAA;AACM,IAAA;AACH,IAAA;AACW,MAAA;AAChB,MAAA;AACD,IAAA;AACK,IAAA;AACR,EAAA;AAEoB,EAAA;AACtB;AAcM;AACJ,EAAA;AACA,EAAA;AAC2D;AACtD,EAAA;AACE,IAAA;AACI,MAAA;AACT,IAAA;AACO,IAAA;AACT,EAAA;AAEK,EAAA;AACI,IAAA;AACT,EAAA;AAEM,EAAA;AAGA,EAAA;AACc,IAAA;AACpB,EAAA;AAEM,EAAA;AACS,IAAA;AACf,EAAA;AAEO,EAAA;AACT;AAkBa;AAML,EAAA;AAGF,EAAA;AACQ,IAAA;AACR,MAAA;AACF,IAAA;AACF,EAAA;AAEiB,EAAA;AAEX,EAAA;AAED,EAAA;AACS,IAAA;AACH,MAAA;AACT,IAAA;AAEM,IAAA;AACJ,MAAA;AACA,MAAA;AACY,MAAA;AAEd,IAAA;AAEK,IAAA;AACO,MAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AAEO,IAAA;AACT,EAAA;AAEM,EAAA;AAEA,EAAA;AACJ,IAAA;AACA,IAAA;AACY,IAAA;AACN,MAAA;AACK,QAAA;AACT,MAAA;AAEM,MAAA;AACG,QAAA;AACO,MAAA;AAGT,MAAA;AACL,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEI,EAAA;AACK,IAAA;AACT,EAAA;AAEM,EAAA;AACM,IAAA;AACH,IAAA;AACD,IAAA;AACR,EAAA;AAEoB,EAAA;AACtB;AAgBa;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACwD;AAClD,EAAA;AACQ,IAAA;AACM,IAAA;AACnB,EAAA;AAEK,EAAA;AACJ,IAAA;AACF,EAAA;AAEM,EAAA;AAEA,EAAA;AACJ,IAAA;AACA,IAAA;AACa,IAAA;AAGf,EAAA;AAEI,EAAA;AACK,IAAA;AACT,EAAA;AAE4B,EAAA;AAChB,IAAA;AACH,IAAA;AACD,IAAA;AACR,EAAA;AAEoB,EAAA;AACtB;AAgBa;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACkD;AAC5C,EAAA;AACa,IAAA;AACf,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACE,EAAA;AAEC,EAAA;AACa,IAAA;AAClB,EAAA;AAEK,EAAA;AACa,IAAA;AAClB,EAAA;AAEK,EAAA;AACa,IAAA;AAClB,EAAA;AAEM,EAAA;AACJ,IAAA;AACS,IAAA;AAAA;AAAA;AAGQ,IAAA;AAClB,EAAA;AAEK,EAAA;AACJ,IAAA;AACA,IAAA;AACA,IAAA;AACS,IAAA;AACT,IAAA;AACA,IAAA;AACD,EAAA;AAEK,EAAA;AACJ,IAAA;AACS,IAAA;AACT,IAAA;AACA,IAAA;AACD,EAAA;AAEG,EAAA;AACK,IAAA;AACT,EAAA;AAEO,EAAA;AACL,IAAA;AACS,IAAA;AACT,IAAA;AACA,IAAA;AACD,EAAA;AACH;AASa;AAIK,EAAA;AACV,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AAEM,EAAA;AACA,EAAA;AACa,oBAAA;AACjB,IAAA;AACF,EAAA;AAEM,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AAEE,EAAA;AAGI,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AACM,EAAA;AAEA,EAAA;AACG,IAAA;AACP,IAAA;AACF,EAAA;AAGS,EAAA;AAEA,EAAA;AAEK,EAAA;AACZ,IAAA;AACc,IAAA;AACI,IAAA;AACpB,EAAA;AAEM,EAAA;AAIA,EAAA;AAIE,EAAA;AACQ,EAAA;AACd,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACO,IAAA;AACP,IAAA;AACA,IAAA;AACA,IAAA;AACD,EAAA;AAEG,EAAA;AAEA,EAAA;AACI,IAAA;AAED,IAAA;AACa,MAAA;AAClB,IAAA;AAEA,IAAA;AACE,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACK,EAAA;AACL,IAAA;AACE,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAEM,EAAA;AAGC,EAAA;AACL,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACF,EAAA;AACF;AFpHsB;AACA;AG7dT;AACX,EAAA;AACA,EAAA;AACA,EAAA;AACF;AACa;AACX,EAAA;AACF;AAYgB;AAIZ,EAAA;AAEM,IAAA;AACJ,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACQ,IAAA;AAEJ,IAAA;AAEU,IAAA;AAEE,IAAA;AAChB,MAAA;AACA,MAAA;AACA,MAAA;AACD,IAAA;AAEY,IAAA;AACK,MAAA;AAClB,IAAA;AAEkB,IAAA;AAEZ,IAAA;AACD,MAAA;AACH,MAAA;AACF,IAAA;AAEM,IAAA;AACJ,MAAA;AACG,MAAA;AACJ,IAAA;AAEM,IAAA;AACL,MAAA;AACA,MAAA;AACW,MAAA;AACb,IAAA;AACF,EAAA;AACF;AHwcsB;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/smart-accounts-kit/smart-accounts-kit/packages/smart-accounts-kit/dist/experimental/index.cjs","sourcesContent":[null,"import { type Hex, toHex } from 'viem';\n\nimport { trackSmartAccountsKitFunctionCall } from '../analytics';\nimport { hashDelegation } from '../delegation';\nimport type { Delegation } from '../types';\n\ntype ErrorResponse = {\n  error: string;\n  data?: any;\n};\n\nexport type APIStoreDelegationResponse = {\n  delegationHash: Hex;\n};\n\n/**\n * Represents the allowed filters when querying the data store for delegations.\n */\nexport enum DelegationStoreFilter {\n  Given = 'GIVEN',\n  Received = 'RECEIVED',\n  All = 'ALL',\n}\n\n/**\n * Public Delegation Storage Service environments. To be used in the\n * DeleGationStorageService config.\n */\nexport const DelegationStorageEnvironment: {\n  [K in 'dev' | 'prod']: Environment;\n} = {\n  dev: { apiUrl: 'https://passkeys.dev-api.cx.metamask.io' },\n  prod: { apiUrl: 'https://passkeys.api.cx.metamask.io' },\n};\n\n/**\n * Returns the DelegationStorageEnvironment ('dev' or 'prod') for a given apiUrl,\n * or 'custom' if the apiUrl does not match a known environment.\n *\n * @param apiUrl - The API URL to check.\n * @returns The environment key ('dev' or 'prod'), or 'custom'.\n */\nfunction getDelegationStorageEnvironment(\n  apiUrl: string,\n): 'dev' | 'prod' | 'custom' {\n  const matchingEnvironment = Object.entries(DelegationStorageEnvironment).find(\n    ([_, env]) => env.apiUrl === apiUrl,\n  ) as [keyof typeof DelegationStorageEnvironment, Environment] | undefined;\n\n  return matchingEnvironment ? matchingEnvironment[0] : 'custom';\n}\n\nexport type Environment = {\n  apiUrl: string;\n};\n\nexport type DelegationStorageConfig = {\n  apiKey: string;\n  apiKeyId: string;\n  environment: Environment;\n  fetcher?: typeof fetch;\n};\n\nexport class DelegationStorageClient {\n  readonly #apiVersionPrefix = 'api/v0';\n\n  readonly #config: DelegationStorageConfig;\n\n  readonly #fetcher: typeof fetch;\n\n  readonly #apiUrl: string;\n\n  constructor(config: DelegationStorageConfig) {\n    const { apiUrl } = config.environment;\n\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.constructor',\n      {\n        environment: getDelegationStorageEnvironment(apiUrl),\n      },\n    );\n\n    if (apiUrl.endsWith(this.#apiVersionPrefix)) {\n      this.#apiUrl = apiUrl;\n    } else {\n      const separator = apiUrl.endsWith('/') ? '' : '/';\n      this.#apiUrl = `${apiUrl}${separator}${this.#apiVersionPrefix}`;\n    }\n    this.#fetcher = this.#initializeFetcher(config);\n    this.#config = config;\n  }\n\n  /**\n   * Initializes the fetch function for HTTP requests.\n   *\n   * - Uses `config.fetcher` if provided.\n   * - Falls back to global `fetch` if available.\n   * - Throws an error if no fetch function is available.\n   *\n   * @param config - Configuration object that may include a custom fetch function.\n   * @returns The fetch function to be used for HTTP requests.\n   * @throws Error if no fetch function is available in the environment.\n   */\n  #initializeFetcher(config: DelegationStorageConfig): typeof fetch {\n    if (config.fetcher) {\n      return config.fetcher;\n    } else if (typeof globalThis?.fetch === 'function') {\n      return globalThis.fetch.bind(globalThis);\n    }\n    throw new Error(\n      'Fetch API is not available in this environment. Please provide a fetch function in the config.',\n    );\n  }\n\n  /**\n   * Fetches the delegation chain from the Delegation Storage Service, ending with\n   * the specified leaf delegation.\n   *\n   * @param leafDelegationOrDelegationHash - The leaf delegation, or the hash\n   * of the leaf delegation.\n   * @returns A promise that resolves to the delegation chain - empty array if the delegation\n   * is not found.\n   */\n  async getDelegationChain(\n    leafDelegationOrDelegationHash: Hex | Delegation,\n  ): Promise<Delegation[]> {\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.getDelegationChain',\n      {\n        inputKind:\n          typeof leafDelegationOrDelegationHash === 'string'\n            ? 'hash'\n            : 'delegation',\n      },\n    );\n    const leafDelegationHash =\n      typeof leafDelegationOrDelegationHash === 'string'\n        ? leafDelegationOrDelegationHash\n        : hashDelegation(leafDelegationOrDelegationHash);\n\n    const response = await this.#fetcher(\n      `${this.#apiUrl}/delegation/chain/${leafDelegationHash}`,\n      {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.#config.apiKey}`,\n          'x-api-key-id': this.#config.apiKeyId,\n        },\n      },\n    );\n\n    const responseData: Delegation[] | ErrorResponse = await response.json();\n\n    if ('error' in responseData) {\n      throw new Error(\n        `Failed to fetch delegation chain: ${responseData.error}`,\n      );\n    }\n\n    return responseData;\n  }\n\n  /**\n   * Fetches the delegations from the Delegation Storage Service, either `Received`\n   * by, or `Given` by, (or both: `All`) the specified deleGatorAddress. Defaults\n   * to `Received`.\n   *\n   * @param deleGatorAddress - The deleGatorAddress to retrieve the delegations for.\n   * @param filterMode - The DelegationStoreFilter mode - defaults to Received.\n   * @returns A promise that resolves to the list of delegations received by the deleGatorAddress,\n   * empty array if the delegations are not found.\n   */\n  async fetchDelegations(\n    deleGatorAddress: Hex,\n    filterMode = DelegationStoreFilter.Received,\n  ): Promise<Delegation[]> {\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.fetchDelegations',\n      { filterMode },\n    );\n    const response = await this.#fetcher(\n      `${this.#apiUrl}/delegation/accounts/${deleGatorAddress}?filter=${filterMode}`,\n      {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.#config.apiKey}`,\n          'x-api-key-id': this.#config.apiKeyId,\n        },\n      },\n    );\n\n    const responseData: Delegation[] | ErrorResponse = await response.json();\n\n    if ('error' in responseData) {\n      throw new Error(`Failed to fetch delegations: ${responseData.error}`);\n    }\n\n    return responseData;\n  }\n\n  /**\n   * Stores the specified delegation in the Delegation Storage Service.\n   *\n   * @param delegation - The delegation to store.\n   * @returns A promise that resolves to the delegation hash indicating successful storage.\n   */\n  async storeDelegation(delegation: Delegation): Promise<Hex> {\n    trackSmartAccountsKitFunctionCall(\n      'experimental.DelegationStorageClient.storeDelegation',\n      { caveatCount: delegation.caveats.length },\n    );\n    if (!delegation.signature || delegation.signature === '0x') {\n      throw new Error('Delegation must be signed to be stored');\n    }\n\n    const delegationHash = hashDelegation(delegation);\n\n    const body = JSON.stringify(\n      {\n        ...delegation,\n        metadata: [],\n      },\n      (_, value: any) =>\n        typeof value === 'bigint' || typeof value === 'number'\n          ? toHex(value)\n          : value,\n      2,\n    );\n\n    const response = await this.#fetcher(`${this.#apiUrl}/delegation/store`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${this.#config.apiKey}`,\n        'x-api-key-id': this.#config.apiKeyId,\n        'Content-Type': 'application/json',\n      },\n      body,\n    });\n\n    const responseData: APIStoreDelegationResponse | ErrorResponse =\n      await response.json();\n\n    if ('error' in responseData) {\n      throw new Error(responseData.error);\n    }\n\n    if (responseData.delegationHash !== delegationHash) {\n      throw new Error(\n        'Failed to store the Delegation, the hash returned from the MM delegation storage API does not match the hash of the delegation',\n      );\n    }\n\n    return responseData.delegationHash;\n  }\n}\n","import {\n  createAllowedCalldataTerms,\n  createRedeemerTerms,\n  createTimestampTerms,\n  decodeRedeemerTerms,\n  decodeTimestampTerms,\n} from '@metamask/delegation-core';\nimport { parseCaipChainId } from '@metamask/utils';\nimport { pad, type Account, type Address, type Hex } from 'viem';\n\nimport type { Caveats } from '../caveatBuilder';\nimport { resolveCaveats } from '../caveatBuilder';\nimport { ScopeType } from '../constants';\nimport type { createOpenDelegation } from '../delegation';\nimport { decodeDelegations } from '../delegation';\nimport { getSmartAccountsEnvironment } from '../smartAccountsEnvironment';\nimport type {\n  Caveat,\n  Delegation,\n  PermissionContext,\n  SmartAccountsEnvironment,\n} from '../types';\nimport type {\n  MaybeDeferred,\n  PaymentRequirements,\n  x402DelegationProviderConfig,\n} from './x402DelegationProviderTypes';\nimport { generateSalt } from '../utils/';\n\n/**\n * Inputs for redeemer constraint enforcement.\n */\ntype EnsureRedeemerSufficientlyConstrainedParams = {\n  redeemerEnforcer: Hex;\n  caveats: Caveat[];\n  existingDelegations: Delegation[];\n  facilitatorAddresses: Address[] | undefined;\n  redeemerAddresses: Address[] | undefined;\n  requireRedeemers: boolean;\n};\n\n/**\n * Inputs for payee constraint enforcement.\n */\ntype EnsurePayeeSufficientlyConstrainedParams = {\n  allowedCalldataEnforcer: Hex;\n  caveats: Caveat[];\n  existingDelegations: Delegation[];\n  payee: Hex;\n};\n\n/**\n * Inputs for expiry constraint enforcement.\n */\ntype EnsureExpirySufficientlyConstrainedParams = {\n  timestampEnforcer: Hex;\n  caveats: Caveat[];\n  existingDelegations: Delegation[];\n  expirySeconds: number;\n};\n\n/**\n * Inputs for resolving allowed redeemer addresses.\n */\ntype ResolveRedeemerAddressesParams = Pick<\n  EnsureRedeemerSufficientlyConstrainedParams,\n  'facilitatorAddresses' | 'redeemerAddresses'\n>;\n\n/**\n * Resolved context required to build and sign an x402 delegation.\n */\nexport type DelegationCreationContext = {\n  account: Account;\n  createDelegationConfig: Parameters<typeof createOpenDelegation>[0];\n  delegationManager: Address;\n  existingDelegations: Delegation[];\n  rootDelegator: Address;\n};\n\n/**\n * Inputs for resolving delegation caveats with x402-specific constraints.\n */\nexport type Resolvex402DelegationCaveatsParams = {\n  environment: SmartAccountsEnvironment;\n  caveatsConfig: Caveats | undefined;\n  existingDelegations: Delegation[];\n  facilitatorAddresses: Hex[] | undefined;\n  payee: Hex;\n  expirySeconds?: number;\n  requireRedeemers: boolean;\n  redeemerAddresses: Address[] | undefined;\n};\n\n/**\n * Resolves eager or deferred values against payment requirements.\n *\n * @param maybeDeferred - Value or async resolver function.\n * @param requirements - Payment requirements passed to deferred resolvers.\n * @returns The resolved value, or undefined when no value is provided.\n */\nasync function resolveMaybeDeferred<TResult>(\n  maybeDeferred: MaybeDeferred<TResult>,\n  requirements: PaymentRequirements,\n): Promise<TResult> {\n  if (typeof maybeDeferred === 'function') {\n    const deferred = maybeDeferred as (\n      deferredRequirements: PaymentRequirements,\n    ) => Promise<TResult> | TResult;\n\n    return await deferred(requirements);\n  }\n\n  return maybeDeferred;\n}\n\n/**\n * Parses an EIP-155 CAIP network identifier into a numeric chain ID.\n *\n * @param network - CAIP network identifier (for example, `eip155:1`).\n * @returns Parsed numeric chain ID.\n * @throws If the CAIP namespace is not `eip155`.\n */\nexport function parseEip155ChainId(\n  network: PaymentRequirements['network'],\n): number {\n  const { namespace, reference } = parseCaipChainId(\n    network as `${string}:${string}`,\n  );\n\n  if (namespace !== 'eip155') {\n    throw new Error('Unsupported chain namespace');\n  }\n\n  const parsedChainId = Number(reference);\n\n  if (isNaN(parsedChainId)) {\n    throw new Error('Invalid chain id');\n  }\n\n  return parsedChainId;\n}\n\n/**\n * ERC-20 `transfer(address to, uint256 value)` calldata index for `to`.\n */\nconst TRANSFER_PAYEE_INDEX = 4;\n\n/**\n * Normalizes an address-like hex string for case-insensitive comparisons.\n *\n * @param address - Address value to normalize.\n * @returns Lowercased hex string.\n */\nconst normalizeAddress = (address: Address): Address =>\n  address.toLowerCase() as Address;\n\n/**\n * Returns whether any caveat in local or inherited delegations matches a predicate.\n *\n * @param caveats - Current caveat list.\n * @param delegations - Existing delegations whose caveats should also be searched.\n * @param match - Predicate used to match caveats.\n * @returns True when at least one caveat satisfies `match`.\n */\nconst hasMatchingCaveats = (\n  caveats: Caveat[],\n  delegations: Delegation[],\n  match: (caveat: Caveat) => boolean,\n): boolean => {\n  for (const caveat of caveats) {\n    if (match(caveat)) {\n      return true;\n    }\n  }\n\n  for (const delegation of delegations) {\n    for (const caveat of delegation.caveats) {\n      if (match(caveat)) {\n        return true;\n      }\n    }\n  }\n\n  return false;\n};\n\n/**\n * Ensures caveats include an expiry timestamp constraint when requested.\n *\n * If an existing timestamp caveat already enforces a tighter (earlier) or equal\n * `validBefore` threshold than requested, caveats are returned unchanged.\n * Otherwise a new timestamp caveat is appended with `afterThreshold = 0`.\n *\n * @param options0 - Expiry constraint evaluation inputs.\n * @param options0.timestampEnforcer - Address of the TimestampEnforcer caveat contract.\n * @param options0.caveats - Currently resolved caveats for the delegation being created.\n * @param options0.existingDelegations - Existing parent-chain delegations to inspect for inherited constraints.\n * @param options0.expirySeconds - Relative expiry from \"now\" in seconds.\n * @returns The original caveats when sufficiently constrained, otherwise caveats with a timestamp caveat appended.\n */\nexport const ensureExpirySufficientlyConstrained = ({\n  timestampEnforcer,\n  caveats,\n  existingDelegations,\n  expirySeconds,\n}: EnsureExpirySufficientlyConstrainedParams): Caveat[] => {\n  if (expirySeconds < 0) {\n    throw new Error('Expiry seconds must be a positive number');\n  }\n  const beforeThreshold = Math.floor(Date.now() / 1000) + expirySeconds;\n  const timestampEnforcerNormalized = normalizeAddress(timestampEnforcer);\n\n  const hasSupersedingTimestampConstraint = hasMatchingCaveats(\n    caveats,\n    existingDelegations,\n    (caveat) => {\n      if (normalizeAddress(caveat.enforcer) !== timestampEnforcerNormalized) {\n        return false;\n      }\n\n      const { beforeThreshold: existingBeforeThreshold } = decodeTimestampTerms(\n        caveat.terms,\n      );\n      return (\n        existingBeforeThreshold !== 0 &&\n        existingBeforeThreshold <= beforeThreshold\n      );\n    },\n  );\n\n  if (hasSupersedingTimestampConstraint) {\n    return caveats;\n  }\n\n  const timestampCaveat: Caveat = {\n    enforcer: timestampEnforcer,\n    terms: createTimestampTerms({\n      afterThreshold: 0,\n      beforeThreshold,\n    }),\n    args: '0x',\n  };\n\n  return [...caveats, timestampCaveat];\n};\n\n/**\n * Resolves allowed redeemer addresses from facilitator and configured redeemer inputs.\n *\n * If both inputs are provided, returns their intersection.\n * If only one input is provided, returns that input.\n * If neither input is provided, returns undefined.\n *\n * @param options - Redeemer address inputs.\n * @param options.facilitatorAddresses - Optional facilitator addresses from the PaymentRequirements.\n * @param options.redeemerAddresses - Optional redeemer addresses from the RedeemersConfig.\n * @returns Resolved allowed redeemer addresses, or undefined when no input is provided.\n */\nconst resolveRedeemerAddresses = ({\n  facilitatorAddresses,\n  redeemerAddresses,\n}: ResolveRedeemerAddressesParams): Address[] | undefined => {\n  if (!facilitatorAddresses) {\n    if (!redeemerAddresses) {\n      return undefined;\n    }\n    return redeemerAddresses;\n  }\n\n  if (!redeemerAddresses) {\n    return facilitatorAddresses;\n  }\n\n  const normalizedFacilitatorAddresses =\n    facilitatorAddresses.map(normalizeAddress);\n\n  const normalizedRedeemerAddressSet = new Set(\n    redeemerAddresses.map(normalizeAddress),\n  );\n\n  const redeemerAddressesIntersection = normalizedFacilitatorAddresses.filter(\n    (address) => normalizedRedeemerAddressSet.has(address),\n  );\n\n  return redeemerAddressesIntersection;\n};\n\n/**\n * Ensures caveats include a sufficiently strict redeemer constraint.\n *\n * Returns the caveat list unchanged when an existing redeemer caveat is already\n * strict enough, or appends a new redeemer caveat scoped to facilitator addresses.\n *\n * @param config - Redeemer constraint evaluation inputs.\n * @param config.redeemerEnforcer - Address of the redeemer enforcer caveat contract.\n * @param config.caveats - Currently resolved caveats for the delegation being created.\n * @param config.existingDelegations - Existing parent-chain delegations to inspect for inherited constraints.\n * @param config.redeemerAddresses - Optional addresses to which redemption should be constrained.\n * @param config.requireRedeemers - Whether at least one redeemer constraint must exist.\n * @returns The original caveats when sufficiently constrained, otherwise caveats with a redeemer caveat appended.\n * @throws If either facilitatorAddresses and/or redeemerAddresses are provided, but the intersection is empty.\n * @throws If requireRedeemers is true, but no valid redeemer addresses are provided, and no existing redeemer caveat is found in the existingDelegations.\n */\nexport const ensureRedeemerSufficientlyConstrained = (\n  config: EnsureRedeemerSufficientlyConstrainedParams,\n): Caveat[] => {\n  // `redeemerAddresses` is the intersection of `facilitatorAddresses` and `redeemerAddresses`.\n  // If either is undefined, it implies no constraint is specified by that value, and the other is returned.\n  // If both are undefined, it implies that no constraint is specified overall.\n  const redeemerAddresses = resolveRedeemerAddresses(config);\n\n  // If the result is defined, but zero-length, it implies no redeemers are allowed, which is a non-satisfiable constraint, so an error is thrown.\n  if (redeemerAddresses?.length === 0) {\n    throw new Error(\n      'No valid redeemer addresses were resolved. If both `redeemers.addresses` and `extra.facilitatorAddresses` are provided, they must overlap. If only one is provided, it must include at least one address.',\n    );\n  }\n\n  const { caveats, existingDelegations, redeemerEnforcer } = config;\n\n  const redeemerEnforcerNormalized = normalizeAddress(redeemerEnforcer);\n\n  if (!redeemerAddresses) {\n    if (!config.requireRedeemers) {\n      return caveats;\n    }\n\n    const hasExistingRedeemerCaveat = hasMatchingCaveats(\n      caveats,\n      existingDelegations,\n      ({ enforcer }) =>\n        normalizeAddress(enforcer) === redeemerEnforcerNormalized,\n    );\n\n    if (!hasExistingRedeemerCaveat) {\n      throw new Error(\n        'Redeemer must be constrained, either in the specified `caveats`, `parentPermissionContext`, or the `PaymentRequirements` as `extra.facilitatorAddresses`.',\n      );\n    }\n\n    return caveats;\n  }\n\n  const redeemerAddressesSet = new Set(redeemerAddresses.map(normalizeAddress));\n\n  const hasSupersedingRedeemerCaveat = hasMatchingCaveats(\n    caveats,\n    existingDelegations,\n    (caveat) => {\n      if (normalizeAddress(caveat.enforcer) !== redeemerEnforcerNormalized) {\n        return false;\n      }\n\n      const allowedRedeemerAddresses = decodeRedeemerTerms(\n        caveat.terms,\n      ).redeemers.map(normalizeAddress);\n\n      // If this redeemer caveat only allows redeemer addresses, it is sufficiently constrained.\n      return allowedRedeemerAddresses.every((item) =>\n        redeemerAddressesSet.has(item),\n      );\n    },\n  );\n\n  if (hasSupersedingRedeemerCaveat) {\n    return caveats;\n  }\n\n  const redeemerCaveat: Caveat = {\n    enforcer: redeemerEnforcer,\n    terms: createRedeemerTerms({ redeemers: redeemerAddresses }),\n    args: '0x',\n  };\n\n  return [...caveats, redeemerCaveat];\n};\n\n/**\n * Ensures caveats include an allowed-calldata constraint for the payment payee.\n *\n * Scans both the in-progress caveat list and parent delegation caveats for an\n * `AllowedCalldataEnforcer` caveat whose terms match the encoded payee calldata\n * constraint. If found, returns caveats unchanged; otherwise appends a payee caveat.\n *\n * @param options0 - Payee constraint evaluation inputs.\n * @param options0.allowedCalldataEnforcer - Address of the AllowedCalldataEnforcer caveat contract.\n * @param options0.caveats - Currently resolved caveats for the delegation being created.\n * @param options0.existingDelegations - Existing parent-chain delegations to inspect for inherited constraints.\n * @param options0.payee - Expected ERC-20 transfer recipient to enforce in calldata.\n * @returns The original caveats when an equivalent payee constraint exists, otherwise caveats with a payee caveat appended.\n */\nexport const ensurePayeeSufficientlyConstrained = ({\n  allowedCalldataEnforcer,\n  caveats,\n  existingDelegations,\n  payee,\n}: EnsurePayeeSufficientlyConstrainedParams): Caveat[] => {\n  const allowedCalldataTerms = createAllowedCalldataTerms({\n    startIndex: TRANSFER_PAYEE_INDEX,\n    value: pad(payee, { size: 32 }),\n  });\n\n  const allowedCalldataEnforcerNormalized = normalizeAddress(\n    allowedCalldataEnforcer,\n  );\n\n  const lowercaseCalldataTerms = allowedCalldataTerms.toLowerCase();\n\n  const hasSupersedingAllowedCalldataConstraint = hasMatchingCaveats(\n    caveats,\n    existingDelegations,\n    ({ enforcer, terms }) =>\n      normalizeAddress(enforcer) === allowedCalldataEnforcerNormalized &&\n      terms.toLowerCase() === lowercaseCalldataTerms,\n  );\n\n  if (hasSupersedingAllowedCalldataConstraint) {\n    return caveats;\n  }\n\n  const payeeCaveat: Caveat = {\n    enforcer: allowedCalldataEnforcer,\n    terms: allowedCalldataTerms,\n    args: '0x',\n  };\n\n  return [...caveats, payeeCaveat];\n};\n\n/**\n * Resolves caveats and applies x402-specific redeemer and payee constraints.\n *\n * @param options0 - Caveat resolution inputs.\n * @param options0.environment - Environment containing caveat enforcer addresses.\n * @param options0.caveatsConfig - Optional caveat builder config.\n * @param options0.existingDelegations - Existing parent-chain delegations.\n * @param options0.facilitatorAddresses - Optional facilitator addresses used for redeemer constraints.\n * @param options0.payee - Payee address used for allowed calldata constraints.\n * @param options0.expirySeconds - Optional relative expiry in seconds for adding timestamp constraints.\n * @param options0.requireRedeemers - Whether redeemer constraints are mandatory when no facilitator or configured redeemer addresses are present.\n * @param options0.redeemerAddresses - Optional redeemer addresses from provider config to merge with facilitator addresses.\n * @returns Caveats after redeemer and payee constraints are enforced.\n */\nexport const resolvex402DelegationCaveats = ({\n  environment,\n  caveatsConfig,\n  existingDelegations,\n  facilitatorAddresses,\n  payee,\n  expirySeconds,\n  requireRedeemers,\n  redeemerAddresses,\n}: Resolvex402DelegationCaveatsParams): Caveat[] => {\n  const {\n    caveatEnforcers: {\n      RedeemerEnforcer: redeemerEnforcer,\n      AllowedCalldataEnforcer: allowedCalldataEnforcer,\n      TimestampEnforcer: timestampEnforcer,\n    },\n  } = environment;\n\n  if (!redeemerEnforcer) {\n    throw new Error('RedeemerEnforcer not found in environment');\n  }\n\n  if (!allowedCalldataEnforcer) {\n    throw new Error('AllowedCalldataEnforcer not found in environment');\n  }\n\n  if (!timestampEnforcer) {\n    throw new Error('TimestampEnforcer not found in environment');\n  }\n\n  const initialCaveats = resolveCaveats({\n    environment,\n    caveats: caveatsConfig,\n    // Resolve caveats first so downstream constraint checks can append as needed.\n    // Scope is still attached later during delegation creation.\n    isScopeOptional: true,\n  });\n\n  const caveatsWithRedeemer = ensureRedeemerSufficientlyConstrained({\n    redeemerEnforcer,\n    facilitatorAddresses,\n    redeemerAddresses,\n    caveats: initialCaveats,\n    existingDelegations,\n    requireRedeemers,\n  });\n\n  const caveatsWithPayee = ensurePayeeSufficientlyConstrained({\n    allowedCalldataEnforcer,\n    caveats: caveatsWithRedeemer,\n    existingDelegations,\n    payee,\n  });\n\n  if (expirySeconds === undefined) {\n    return caveatsWithPayee;\n  }\n\n  return ensureExpirySufficientlyConstrained({\n    timestampEnforcer,\n    caveats: caveatsWithPayee,\n    existingDelegations,\n    expirySeconds,\n  });\n};\n\n/**\n * Builds the delegation creation context from provider config and requirements.\n *\n * @param config - Delegation provider config for context construction.\n * @param requirements - Payment requirements used to scope caveats.\n * @returns The resolved context used to create and sign a delegation.\n */\nexport const resolveDelegationCreationContext = async (\n  config: x402DelegationProviderConfig,\n  requirements: PaymentRequirements,\n): Promise<DelegationCreationContext> => {\n  const account = await resolveMaybeDeferred(config.account, requirements);\n  const redeemersConfig = await resolveMaybeDeferred(\n    config.redeemers,\n    requirements,\n  );\n\n  const requireRedeemers = redeemersConfig?.requireRedeemers ?? false;\n  const redeemerAddresses = await resolveMaybeDeferred(\n    redeemersConfig?.addresses,\n    requirements,\n  );\n\n  const specifiedEnvironment = await resolveMaybeDeferred(\n    config.environment,\n    requirements,\n  );\n  const environment =\n    specifiedEnvironment ??\n    getSmartAccountsEnvironment(parseEip155ChainId(requirements.network));\n\n  const caveatsConfig: Caveats | undefined = await resolveMaybeDeferred(\n    config.caveats,\n    requirements,\n  );\n  const parentPermissionContext: PermissionContext | undefined =\n    await resolveMaybeDeferred(config.parentPermissionContext, requirements);\n  const expirySeconds = await resolveMaybeDeferred(\n    config.expirySeconds,\n    requirements,\n  );\n\n  const from =\n    (await resolveMaybeDeferred(config.from, requirements)) ?? account.address;\n  const salt =\n    (await resolveMaybeDeferred(config.salt, requirements)) ?? generateSalt();\n\n  const scope = {\n    type: ScopeType.Erc20TransferAmount,\n    tokenAddress: requirements.asset as Hex,\n    maxAmount: BigInt(requirements.amount),\n  } as const;\n\n  const facilitatorAddresses = requirements.extra?.facilitatorAddresses as\n    | Hex[]\n    | undefined;\n\n  const existingDelegations = parentPermissionContext\n    ? decodeDelegations(parentPermissionContext)\n    : [];\n\n  const { DelegationManager: delegationManager } = environment;\n  const caveats = resolvex402DelegationCaveats({\n    environment,\n    caveatsConfig,\n    existingDelegations,\n    facilitatorAddresses,\n    payee: requirements.payTo as Hex,\n    expirySeconds,\n    requireRedeemers,\n    redeemerAddresses,\n  });\n\n  let createDelegationConfig: Parameters<typeof createOpenDelegation>[0];\n\n  if (parentPermissionContext) {\n    const parentDelegation = existingDelegations[0];\n\n    if (!parentDelegation) {\n      throw new Error('Parent permission context is not a valid delegation');\n    }\n\n    createDelegationConfig = {\n      environment,\n      from,\n      caveats,\n      salt,\n      scope,\n      parentDelegation,\n    };\n  } else {\n    createDelegationConfig = {\n      environment,\n      from,\n      caveats,\n      salt,\n      scope,\n    };\n  }\n\n  const rootDelegator =\n    existingDelegations[existingDelegations.length - 1]?.delegator ?? from;\n\n  return {\n    account,\n    createDelegationConfig,\n    delegationManager,\n    existingDelegations,\n    rootDelegator,\n  };\n};\n","import type { Address } from 'viem';\n\nimport {\n  createOpenDelegation,\n  encodeDelegations,\n  prepareSignDelegationTypedData,\n} from '../delegation';\nimport type {\n  PaymentRequirements,\n  x402DelegationProvider,\n  x402DelegationProviderConfig,\n  x402DelegationProviderPaymentPayload,\n} from './x402DelegationProviderTypes';\nimport {\n  parseEip155ChainId,\n  resolveDelegationCreationContext,\n} from './x402DelegationProviderUtils';\n\nexport type {\n  MaybeDeferred,\n  PaymentRequirements,\n  x402DelegationProvider,\n  x402DelegationProviderConfig,\n  x402DelegationProviderPaymentPayload,\n} from './x402DelegationProviderTypes';\n\nexport { parseEip155ChainId } from './x402DelegationProviderUtils';\n\nexport const METAMASK_FACILITATOR_ADDRESSES: readonly Address[] = [\n  '0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E',\n  '0xC066ac5D385419B1A8c43A0E146fA439837a8B8c',\n  '0xB42F812A44c22cc6b861478900401ee759EbEAD6',\n];\nexport const METAMASK_FACILITATOR_ADDRESSES_DEV: readonly Address[] = [\n  '0xb4827A2a066CD2Ef88560EFdf063dD05C6c41cC7',\n];\n\n/**\n * Creates a delegation provider function for x402 payment requirements.\n *\n * The returned provider resolves deferred config values using incoming payment\n * requirements, creates an open delegation, signs it, and returns an encoded\n * permission context payload.\n *\n * @param config - Delegation creation and signing configuration.\n * @returns A provider that maps payment requirements to a signed delegation payload.\n */\nexport function createx402DelegationProvider(\n  config: x402DelegationProviderConfig,\n): x402DelegationProvider {\n  return async (\n    requirements: PaymentRequirements,\n  ): Promise<x402DelegationProviderPaymentPayload> => {\n    const {\n      account,\n      createDelegationConfig,\n      delegationManager,\n      existingDelegations,\n      rootDelegator,\n    } = await resolveDelegationCreationContext(config, requirements);\n\n    const delegation = createOpenDelegation(createDelegationConfig);\n\n    const chainId = parseEip155ChainId(requirements.network);\n\n    const typedData = prepareSignDelegationTypedData({\n      delegationManager,\n      chainId,\n      delegation,\n    });\n\n    if (!account.signTypedData) {\n      throw new Error('Account does not support signTypedData');\n    }\n\n    const signature = await account.signTypedData(typedData);\n\n    const signedDelegation = {\n      ...delegation,\n      signature,\n    };\n\n    const permissionContext = encodeDelegations([\n      signedDelegation,\n      ...existingDelegations,\n    ]);\n\n    return {\n      delegationManager,\n      permissionContext,\n      delegator: rootDelegator,\n    };\n  };\n}\n"]}

package/dist/experimental/index.d.cts

@@ -1,5 +1,5 @@
 import { Hex, Account, Address } from 'viem';
-import { D as Delegation, S as SmartAccountsEnvironment, c as Caveats, P as PermissionContext } from '../resolveCaveats-A9xC29l8.cjs';
+import { D as Delegation, S as SmartAccountsEnvironment, C as Caveats, P as PermissionContext } from '../resolveCaveats-aQPEogPk.cjs';
 import '@metamask/delegation-abis';
 import 'viem/account-abstraction';
 import 'viem/chains';
@@ -63,6 +63,8 @@ type x402DelegationProviderConfig = {
 
 declare function parseEip155ChainId(network: PaymentRequirements['network']): number;
 
+declare const METAMASK_FACILITATOR_ADDRESSES: readonly Address[];
+declare const METAMASK_FACILITATOR_ADDRESSES_DEV: readonly Address[];
 declare function createx402DelegationProvider(config: x402DelegationProviderConfig): x402DelegationProvider;
 
-export { DelegationStorageClient, type DelegationStorageConfig, DelegationStorageEnvironment, DelegationStoreFilter, type Environment, type MaybeDeferred, type PaymentRequirements, createx402DelegationProvider, parseEip155ChainId, type x402DelegationProvider, type x402DelegationProviderConfig, type x402DelegationProviderPaymentPayload };
+export { DelegationStorageClient, type DelegationStorageConfig, DelegationStorageEnvironment, DelegationStoreFilter, type Environment, METAMASK_FACILITATOR_ADDRESSES, METAMASK_FACILITATOR_ADDRESSES_DEV, type MaybeDeferred, type PaymentRequirements, createx402DelegationProvider, parseEip155ChainId, type x402DelegationProvider, type x402DelegationProviderConfig, type x402DelegationProviderPaymentPayload };

package/dist/experimental/index.d.ts

@@ -1,5 +1,5 @@
 import { Hex, Account, Address } from 'viem';
-import { D as Delegation, S as SmartAccountsEnvironment, c as Caveats, P as PermissionContext } from '../resolveCaveats-A9xC29l8.js';
+import { D as Delegation, S as SmartAccountsEnvironment, C as Caveats, P as PermissionContext } from '../resolveCaveats-aQPEogPk.js';
 import '@metamask/delegation-abis';
 import 'viem/account-abstraction';
 import 'viem/chains';
@@ -63,6 +63,8 @@ type x402DelegationProviderConfig = {
 
 declare function parseEip155ChainId(network: PaymentRequirements['network']): number;
 
+declare const METAMASK_FACILITATOR_ADDRESSES: readonly Address[];
+declare const METAMASK_FACILITATOR_ADDRESSES_DEV: readonly Address[];
 declare function createx402DelegationProvider(config: x402DelegationProviderConfig): x402DelegationProvider;
 
-export { DelegationStorageClient, type DelegationStorageConfig, DelegationStorageEnvironment, DelegationStoreFilter, type Environment, type MaybeDeferred, type PaymentRequirements, createx402DelegationProvider, parseEip155ChainId, type x402DelegationProvider, type x402DelegationProviderConfig, type x402DelegationProviderPaymentPayload };
+export { DelegationStorageClient, type DelegationStorageConfig, DelegationStorageEnvironment, DelegationStoreFilter, type Environment, METAMASK_FACILITATOR_ADDRESSES, METAMASK_FACILITATOR_ADDRESSES_DEV, type MaybeDeferred, type PaymentRequirements, createx402DelegationProvider, parseEip155ChainId, type x402DelegationProvider, type x402DelegationProviderConfig, type x402DelegationProviderPaymentPayload };

package/dist/experimental/index.mjs

@@ -1,11 +1,11 @@
 import {
   generateSalt
 } from "../chunk-IMO6XNDJ.mjs";
-import "../chunk-UJQ3JN3U.mjs";
+import "../chunk-T6SWQZRX.mjs";
 import {
   getSmartAccountsEnvironment
 } from "../chunk-GMGJRC3D.mjs";
-import "../chunk-YVU66KSH.mjs";
+import "../chunk-EMPAUTIV.mjs";
 import {
   createOpenDelegation,
   decodeDelegations,
@@ -14,7 +14,7 @@ import {
   prepareSignDelegationTypedData,
   resolveCaveats,
   trackSmartAccountsKitFunctionCall
-} from "../chunk-TNGQTVSY.mjs";
+} from "../chunk-3KWKQ7PV.mjs";
 
 // src/experimental/delegationStorage.ts
 import { toHex } from "viem";
@@ -266,22 +266,45 @@ var ensureExpirySufficientlyConstrained = ({
   };
   return [...caveats, timestampCaveat];
 };
-var ensureRedeemerSufficientlyConstrained = ({
-  redeemerEnforcer,
-  caveats,
-  existingDelegations,
-  redeemerAddresses,
-  requireRedeemers
+var resolveRedeemerAddresses = ({
+  facilitatorAddresses,
+  redeemerAddresses
 }) => {
-  const redeemerAddressNormalized = normalizeAddress(redeemerEnforcer);
-  if (redeemerAddresses.length === 0) {
-    if (!requireRedeemers) {
+  if (!facilitatorAddresses) {
+    if (!redeemerAddresses) {
+      return void 0;
+    }
+    return redeemerAddresses;
+  }
+  if (!redeemerAddresses) {
+    return facilitatorAddresses;
+  }
+  const normalizedFacilitatorAddresses = facilitatorAddresses.map(normalizeAddress);
+  const normalizedRedeemerAddressSet = new Set(
+    redeemerAddresses.map(normalizeAddress)
+  );
+  const redeemerAddressesIntersection = normalizedFacilitatorAddresses.filter(
+    (address) => normalizedRedeemerAddressSet.has(address)
+  );
+  return redeemerAddressesIntersection;
+};
+var ensureRedeemerSufficientlyConstrained = (config) => {
+  const redeemerAddresses = resolveRedeemerAddresses(config);
+  if (redeemerAddresses?.length === 0) {
+    throw new Error(
+      "No valid redeemer addresses were resolved. If both `redeemers.addresses` and `extra.facilitatorAddresses` are provided, they must overlap. If only one is provided, it must include at least one address."
+    );
+  }
+  const { caveats, existingDelegations, redeemerEnforcer } = config;
+  const redeemerEnforcerNormalized = normalizeAddress(redeemerEnforcer);
+  if (!redeemerAddresses) {
+    if (!config.requireRedeemers) {
       return caveats;
     }
     const hasExistingRedeemerCaveat = hasMatchingCaveats(
       caveats,
       existingDelegations,
-      ({ enforcer }) => normalizeAddress(enforcer) === redeemerAddressNormalized
+      ({ enforcer }) => normalizeAddress(enforcer) === redeemerEnforcerNormalized
     );
     if (!hasExistingRedeemerCaveat) {
       throw new Error(
@@ -290,13 +313,12 @@ var ensureRedeemerSufficientlyConstrained = ({
     }
     return caveats;
   }
-  const redeemerAddressesNormalized = redeemerAddresses.map(normalizeAddress);
-  const redeemerAddressesSet = new Set(redeemerAddressesNormalized);
+  const redeemerAddressesSet = new Set(redeemerAddresses.map(normalizeAddress));
   const hasSupersedingRedeemerCaveat = hasMatchingCaveats(
     caveats,
     existingDelegations,
     (caveat) => {
-      if (normalizeAddress(caveat.enforcer) !== redeemerAddressNormalized) {
+      if (normalizeAddress(caveat.enforcer) !== redeemerEnforcerNormalized) {
         return false;
       }
       const allowedRedeemerAddresses = decodeRedeemerTerms(
@@ -379,16 +401,12 @@ var resolvex402DelegationCaveats = ({
     // Scope is still attached later during delegation creation.
     isScopeOptional: true
   });
-  const allRedeemerAddresses = new Set(
-    [...facilitatorAddresses ?? [], ...redeemerAddresses ?? []].map(
-      normalizeAddress
-    )
-  );
   const caveatsWithRedeemer = ensureRedeemerSufficientlyConstrained({
     redeemerEnforcer,
+    facilitatorAddresses,
+    redeemerAddresses,
     caveats: initialCaveats,
     existingDelegations,
-    redeemerAddresses: Array.from(allRedeemerAddresses),
     requireRedeemers
   });
   const caveatsWithPayee = ensurePayeeSufficientlyConstrained({
@@ -486,6 +504,14 @@ var resolveDelegationCreationContext = async (config, requirements) => {
 };
 
 // src/experimental/x402DelegationProvider.ts
+var METAMASK_FACILITATOR_ADDRESSES = [
+  "0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E",
+  "0xC066ac5D385419B1A8c43A0E146fA439837a8B8c",
+  "0xB42F812A44c22cc6b861478900401ee759EbEAD6"
+];
+var METAMASK_FACILITATOR_ADDRESSES_DEV = [
+  "0xb4827A2a066CD2Ef88560EFdf063dD05C6c41cC7"
+];
 function createx402DelegationProvider(config) {
   return async (requirements) => {
     const {
@@ -524,6 +550,8 @@ function createx402DelegationProvider(config) {
 export {
   DelegationStorageClient,
   DelegationStorageEnvironment,
+  METAMASK_FACILITATOR_ADDRESSES,
+  METAMASK_FACILITATOR_ADDRESSES_DEV,
   createx402DelegationProvider,
   parseEip155ChainId
 };