@metamask/subscription-controller 10.0.1 → 11.0.0

package/dist/subscription-delegation/caveats.d.ts

@@ -1,10 +1,29 @@
 import type { SignedDelegation } from '@metamask/authenticated-user-storage';
 import type { Hex } from '@metamask/utils';
 import type { SubscriptionDelegationEnforcers } from './types.js';
+/**
+ * Calldata offset of the `AllowedCalldata` prefix. Must match CHOMP's
+ * expected terms, which pin the selector together with the recipient.
+ * ref: https://github.com/consensys-vertical-apps/va-mmcx-chomp-api/blob/28b72ff16cb5d1b89a7a8ebeb0049a53015a516b/src/intent/delegation-validation.service.ts#L244
+ */
+export declare const TRANSFER_CALLDATA_PREFIX_START_INDEX = 0;
+/**
+ * Encodes the ERC-20 `transfer(address,uint256)` selector followed by the
+ * ABI-encoded recipient (36 bytes), i.e. calldata up to the amount argument.
+ *
+ * @param recipient - Transfer recipient address.
+ * @returns The lowercased hex calldata prefix.
+ */
+export declare function encodeTransferToCalldataPrefix(recipient: Hex): Hex;
 export type UnsignedSubscriptionDelegation = Omit<SignedDelegation, 'signature'>;
 export type BuildSubscriptionCaveatsParams = {
     enforcers: SubscriptionDelegationEnforcers;
     delegateAddress: Hex;
+    /**
+     * Subscription treasury (pricing chain `paymentAddress`); the only allowed
+     * ERC-20 `transfer` recipient.
+     */
+    recipientAddress: Hex;
     tokenAddress: Hex;
     periodAmount: bigint;
     periodDuration: number;
@@ -12,18 +31,28 @@ export type BuildSubscriptionCaveatsParams = {
 };
 /**
  * Builds the caveat list for a cash-subscription delegation:
- * `ValueLte(0)` then `ERC20TokenPeriodTransfer(...)`.
+ * `ERC20TokenPeriodTransfer(...)` then `AllowedCalldata` pinning the
+ * `transfer` recipient to the subscription treasury.
+ *
+ * `ValueLte(0)` is intentionally omitted: CHOMP rejects cash-subscription
+ * delegations whose enforcers are not exactly `ERC20PeriodTransferEnforcer`
+ * and `AllowedCalldataEnforcer`. Neither enforcer restricts native value, so
+ * this relies on the settlement token's `transfer` being non-payable. Re-add
+ * `ValueLte(0)` once CHOMP accepts it.
+ * ref: https://github.com/consensys-vertical-apps/va-mmcx-chomp-api/blob/28b72ff16cb5d1b89a7a8ebeb0049a53015a516b/src/intent/delegation-validation.service.ts#L174
  *
  * @param params - Enforcer addresses, parties, and period terms.
  * @param params.enforcers - Delegation Framework enforcer addresses.
+ * @param params.recipientAddress - Subscription treasury address.
  * @param params.tokenAddress - Subscription settlement token.
  * @param params.periodAmount - Maximum token amount per period.
  * @param params.periodDuration - Period length in seconds.
  * @param params.startDate - Unix timestamp when transfers may begin.
  * @returns Caveats in enforcer order.
  */
-export declare function buildSubscriptionCaveats({ enforcers, tokenAddress, periodAmount, periodDuration, startDate, }: BuildSubscriptionCaveatsParams): SignedDelegation['caveats'];
+export declare function buildSubscriptionCaveats({ enforcers, recipientAddress, tokenAddress, periodAmount, periodDuration, startDate, }: BuildSubscriptionCaveatsParams): SignedDelegation['caveats'];
 export type BuildUnsignedSubscriptionDelegationParams = BuildSubscriptionCaveatsParams & {
+    delegateAddress: Hex;
     delegatorAddress: Hex;
     /**
      * Optional salt for tests. When omitted, a random 32-byte salt is generated.

package/dist/subscription-delegation/caveats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"caveats.d.ts","sourceRoot":"","sources":["../../src/subscription-delegation/caveats.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAO7E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC/C,gBAAgB,EAChB,WAAW,CACZ,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,SAAS,EAAE,+BAA+B,CAAC;IAC3C,eAAe,EAAE,GAAG,CAAC;IACrB,YAAY,EAAE,GAAG,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,SAAS,GACV,EAAE,8BAA8B,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAkB9D;AAED,MAAM,MAAM,yCAAyC,GACnD,8BAA8B,GAAG;IAC/B,gBAAgB,EAAE,GAAG,CAAC;IACtB;;OAEG;IACH,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ,CAAC;AAEJ;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,yCAAyC,GAChD,8BAA8B,CAYhC"}
+{"version":3,"file":"caveats.d.ts","sourceRoot":"","sources":["../../src/subscription-delegation/caveats.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAO7E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAG3C,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAMlE;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,IAAI,CAAC;AAEtD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,GAAG,GAAG,GAAG,CAWlE;AAED,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC/C,gBAAgB,EAChB,WAAW,CACZ,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,SAAS,EAAE,+BAA+B,CAAC;IAC3C,eAAe,EAAE,GAAG,CAAC;IACrB;;;OAGG;IACH,gBAAgB,EAAE,GAAG,CAAC;IACtB,YAAY,EAAE,GAAG,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,SAAS,GACV,EAAE,8BAA8B,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAqB9D;AAED,MAAM,MAAM,yCAAyC,GACnD,8BAA8B,GAAG;IAC/B,eAAe,EAAE,GAAG,CAAC;IACrB,gBAAgB,EAAE,GAAG,CAAC;IACtB;;OAEG;IACH,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ,CAAC;AAEJ;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,yCAAyC,GAChD,8BAA8B,CAYhC"}

package/dist/subscription-delegation/caveats.js

@@ -1,24 +1,56 @@
-import { ROOT_AUTHORITY, createERC20TokenPeriodTransferTerms, createValueLteTerms, } from '@metamask/delegation-core';
-import { bytesToHex } from '@metamask/utils';
+import { defaultAbiCoder, Interface } from '@ethersproject/abi';
+import { ROOT_AUTHORITY, createAllowedCalldataTerms, createERC20TokenPeriodTransferTerms, } from '@metamask/delegation-core';
+import { bytesToHex, remove0x } from '@metamask/utils';
+import { SubscriptionDelegationServiceErrorMessage } from '../constants.js';
+const ERC20_INTERFACE = new Interface([
+    'function transfer(address to, uint256 amount)',
+]);
+/**
+ * Calldata offset of the `AllowedCalldata` prefix. Must match CHOMP's
+ * expected terms, which pin the selector together with the recipient.
+ * ref: https://github.com/consensys-vertical-apps/va-mmcx-chomp-api/blob/28b72ff16cb5d1b89a7a8ebeb0049a53015a516b/src/intent/delegation-validation.service.ts#L244
+ */
+export const TRANSFER_CALLDATA_PREFIX_START_INDEX = 0;
+/**
+ * Encodes the ERC-20 `transfer(address,uint256)` selector followed by the
+ * ABI-encoded recipient (36 bytes), i.e. calldata up to the amount argument.
+ *
+ * @param recipient - Transfer recipient address.
+ * @returns The lowercased hex calldata prefix.
+ */
+export function encodeTransferToCalldataPrefix(recipient) {
+    let encodedRecipient;
+    try {
+        encodedRecipient = defaultAbiCoder.encode(['address'], [recipient]);
+    }
+    catch {
+        throw new Error(`${SubscriptionDelegationServiceErrorMessage.InvalidRecipientAddress}: ${recipient}`);
+    }
+    return `${ERC20_INTERFACE.getSighash('transfer')}${remove0x(encodedRecipient)}`;
+}
 /**
  * Builds the caveat list for a cash-subscription delegation:
- * `ValueLte(0)` then `ERC20TokenPeriodTransfer(...)`.
+ * `ERC20TokenPeriodTransfer(...)` then `AllowedCalldata` pinning the
+ * `transfer` recipient to the subscription treasury.
+ *
+ * `ValueLte(0)` is intentionally omitted: CHOMP rejects cash-subscription
+ * delegations whose enforcers are not exactly `ERC20PeriodTransferEnforcer`
+ * and `AllowedCalldataEnforcer`. Neither enforcer restricts native value, so
+ * this relies on the settlement token's `transfer` being non-payable. Re-add
+ * `ValueLte(0)` once CHOMP accepts it.
+ * ref: https://github.com/consensys-vertical-apps/va-mmcx-chomp-api/blob/28b72ff16cb5d1b89a7a8ebeb0049a53015a516b/src/intent/delegation-validation.service.ts#L174
  *
  * @param params - Enforcer addresses, parties, and period terms.
  * @param params.enforcers - Delegation Framework enforcer addresses.
+ * @param params.recipientAddress - Subscription treasury address.
  * @param params.tokenAddress - Subscription settlement token.
  * @param params.periodAmount - Maximum token amount per period.
  * @param params.periodDuration - Period length in seconds.
  * @param params.startDate - Unix timestamp when transfers may begin.
  * @returns Caveats in enforcer order.
  */
-export function buildSubscriptionCaveats({ enforcers, tokenAddress, periodAmount, periodDuration, startDate, }) {
+export function buildSubscriptionCaveats({ enforcers, recipientAddress, tokenAddress, periodAmount, periodDuration, startDate, }) {
     return [
-        {
-            enforcer: enforcers.valueLte,
-            terms: createValueLteTerms({ maxValue: 0n }),
-            args: '0x',
-        },
         {
             enforcer: enforcers.erc20TokenPeriodTransfer,
             terms: createERC20TokenPeriodTransferTerms({
@@ -29,6 +61,14 @@ export function buildSubscriptionCaveats({ enforcers, tokenAddress, periodAmount
             }),
             args: '0x',
         },
+        {
+            enforcer: enforcers.allowedCalldata,
+            terms: createAllowedCalldataTerms({
+                startIndex: TRANSFER_CALLDATA_PREFIX_START_INDEX,
+                value: encodeTransferToCalldataPrefix(recipientAddress),
+            }),
+            args: '0x',
+        },
     ];
 }
 /**

package/dist/subscription-delegation/caveats.js.map

@@ -1 +1 @@
-{"version":3,"file":"caveats.js","sourceRoot":"","sources":["../../src/subscription-delegation/caveats.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,mCAAmC,EACnC,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAmB7C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACvC,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,SAAS,GACsB;IAC/B,OAAO;QACL;YACE,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,KAAK,EAAE,mBAAmB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC5C,IAAI,EAAE,IAAI;SACX;QACD;YACE,QAAQ,EAAE,SAAS,CAAC,wBAAwB;YAC5C,KAAK,EAAE,mCAAmC,CAAC;gBACzC,YAAY;gBACZ,YAAY;gBACZ,cAAc;gBACd,SAAS;aACV,CAAC;YACF,IAAI,EAAE,IAAI;SACX;KACF,CAAC;AACJ,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAiD;IAEjD,MAAM,IAAI,GACR,MAAM,CAAC,IAAI;QACX,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEpE,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,eAAe;QAChC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,SAAS,EAAE,cAAc;QACzB,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC;QACzC,IAAI;KACL,CAAC;AACJ,CAAC","sourcesContent":["import type { SignedDelegation } from '@metamask/authenticated-user-storage';\nimport {\n  ROOT_AUTHORITY,\n  createERC20TokenPeriodTransferTerms,\n  createValueLteTerms,\n} from '@metamask/delegation-core';\nimport { bytesToHex } from '@metamask/utils';\nimport type { Hex } from '@metamask/utils';\n\nimport type { SubscriptionDelegationEnforcers } from './types.js';\n\nexport type UnsignedSubscriptionDelegation = Omit<\n  SignedDelegation,\n  'signature'\n>;\n\nexport type BuildSubscriptionCaveatsParams = {\n  enforcers: SubscriptionDelegationEnforcers;\n  delegateAddress: Hex;\n  tokenAddress: Hex;\n  periodAmount: bigint;\n  periodDuration: number;\n  startDate: number;\n};\n\n/**\n * Builds the caveat list for a cash-subscription delegation:\n * `ValueLte(0)` then `ERC20TokenPeriodTransfer(...)`.\n *\n * @param params - Enforcer addresses, parties, and period terms.\n * @param params.enforcers - Delegation Framework enforcer addresses.\n * @param params.tokenAddress - Subscription settlement token.\n * @param params.periodAmount - Maximum token amount per period.\n * @param params.periodDuration - Period length in seconds.\n * @param params.startDate - Unix timestamp when transfers may begin.\n * @returns Caveats in enforcer order.\n */\nexport function buildSubscriptionCaveats({\n  enforcers,\n  tokenAddress,\n  periodAmount,\n  periodDuration,\n  startDate,\n}: BuildSubscriptionCaveatsParams): SignedDelegation['caveats'] {\n  return [\n    {\n      enforcer: enforcers.valueLte,\n      terms: createValueLteTerms({ maxValue: 0n }),\n      args: '0x',\n    },\n    {\n      enforcer: enforcers.erc20TokenPeriodTransfer,\n      terms: createERC20TokenPeriodTransferTerms({\n        tokenAddress,\n        periodAmount,\n        periodDuration,\n        startDate,\n      }),\n      args: '0x',\n    },\n  ];\n}\n\nexport type BuildUnsignedSubscriptionDelegationParams =\n  BuildSubscriptionCaveatsParams & {\n    delegatorAddress: Hex;\n    /**\n     * Optional salt for tests. When omitted, a random 32-byte salt is generated.\n     */\n    salt?: Hex;\n  };\n\n/**\n * Builds an unsigned root cash-subscription delegation.\n *\n * @param params - Delegation parties, enforcers, and period terms.\n * @returns An unsigned delegation ready for signing.\n */\nexport function buildUnsignedSubscriptionDelegation(\n  params: BuildUnsignedSubscriptionDelegationParams,\n): UnsignedSubscriptionDelegation {\n  const salt =\n    params.salt ??\n    bytesToHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));\n\n  return {\n    delegate: params.delegateAddress,\n    delegator: params.delegatorAddress,\n    authority: ROOT_AUTHORITY,\n    caveats: buildSubscriptionCaveats(params),\n    salt,\n  };\n}\n"]}
+{"version":3,"file":"caveats.js","sourceRoot":"","sources":["../../src/subscription-delegation/caveats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,mCAAmC,GACpC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGvD,OAAO,EAAE,yCAAyC,EAAE,MAAM,iBAAiB,CAAC;AAG5E,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC;IACpC,+CAA+C;CAChD,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,SAAc;IAC3D,IAAI,gBAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,GAAG,yCAAyC,CAAC,uBAAuB,KAAK,SAAS,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,gBAAgB,CAAC,EAAS,CAAC;AACzF,CAAC;AAqBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACvC,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,SAAS,GACsB;IAC/B,OAAO;QACL;YACE,QAAQ,EAAE,SAAS,CAAC,wBAAwB;YAC5C,KAAK,EAAE,mCAAmC,CAAC;gBACzC,YAAY;gBACZ,YAAY;gBACZ,cAAc;gBACd,SAAS;aACV,CAAC;YACF,IAAI,EAAE,IAAI;SACX;QACD;YACE,QAAQ,EAAE,SAAS,CAAC,eAAe;YACnC,KAAK,EAAE,0BAA0B,CAAC;gBAChC,UAAU,EAAE,oCAAoC;gBAChD,KAAK,EAAE,8BAA8B,CAAC,gBAAgB,CAAC;aACxD,CAAC;YACF,IAAI,EAAE,IAAI;SACX;KACF,CAAC;AACJ,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAiD;IAEjD,MAAM,IAAI,GACR,MAAM,CAAC,IAAI;QACX,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEpE,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,eAAe;QAChC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,SAAS,EAAE,cAAc;QACzB,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC;QACzC,IAAI;KACL,CAAC;AACJ,CAAC","sourcesContent":["import { defaultAbiCoder, Interface } from '@ethersproject/abi';\nimport type { SignedDelegation } from '@metamask/authenticated-user-storage';\nimport {\n  ROOT_AUTHORITY,\n  createAllowedCalldataTerms,\n  createERC20TokenPeriodTransferTerms,\n} from '@metamask/delegation-core';\nimport { bytesToHex, remove0x } from '@metamask/utils';\nimport type { Hex } from '@metamask/utils';\n\nimport { SubscriptionDelegationServiceErrorMessage } from '../constants.js';\nimport type { SubscriptionDelegationEnforcers } from './types.js';\n\nconst ERC20_INTERFACE = new Interface([\n  'function transfer(address to, uint256 amount)',\n]);\n\n/**\n * Calldata offset of the `AllowedCalldata` prefix. Must match CHOMP's\n * expected terms, which pin the selector together with the recipient.\n * ref: https://github.com/consensys-vertical-apps/va-mmcx-chomp-api/blob/28b72ff16cb5d1b89a7a8ebeb0049a53015a516b/src/intent/delegation-validation.service.ts#L244\n */\nexport const TRANSFER_CALLDATA_PREFIX_START_INDEX = 0;\n\n/**\n * Encodes the ERC-20 `transfer(address,uint256)` selector followed by the\n * ABI-encoded recipient (36 bytes), i.e. calldata up to the amount argument.\n *\n * @param recipient - Transfer recipient address.\n * @returns The lowercased hex calldata prefix.\n */\nexport function encodeTransferToCalldataPrefix(recipient: Hex): Hex {\n  let encodedRecipient: string;\n  try {\n    encodedRecipient = defaultAbiCoder.encode(['address'], [recipient]);\n  } catch {\n    throw new Error(\n      `${SubscriptionDelegationServiceErrorMessage.InvalidRecipientAddress}: ${recipient}`,\n    );\n  }\n\n  return `${ERC20_INTERFACE.getSighash('transfer')}${remove0x(encodedRecipient)}` as Hex;\n}\n\nexport type UnsignedSubscriptionDelegation = Omit<\n  SignedDelegation,\n  'signature'\n>;\n\nexport type BuildSubscriptionCaveatsParams = {\n  enforcers: SubscriptionDelegationEnforcers;\n  delegateAddress: Hex;\n  /**\n   * Subscription treasury (pricing chain `paymentAddress`); the only allowed\n   * ERC-20 `transfer` recipient.\n   */\n  recipientAddress: Hex;\n  tokenAddress: Hex;\n  periodAmount: bigint;\n  periodDuration: number;\n  startDate: number;\n};\n\n/**\n * Builds the caveat list for a cash-subscription delegation:\n * `ERC20TokenPeriodTransfer(...)` then `AllowedCalldata` pinning the\n * `transfer` recipient to the subscription treasury.\n *\n * `ValueLte(0)` is intentionally omitted: CHOMP rejects cash-subscription\n * delegations whose enforcers are not exactly `ERC20PeriodTransferEnforcer`\n * and `AllowedCalldataEnforcer`. Neither enforcer restricts native value, so\n * this relies on the settlement token's `transfer` being non-payable. Re-add\n * `ValueLte(0)` once CHOMP accepts it.\n * ref: https://github.com/consensys-vertical-apps/va-mmcx-chomp-api/blob/28b72ff16cb5d1b89a7a8ebeb0049a53015a516b/src/intent/delegation-validation.service.ts#L174\n *\n * @param params - Enforcer addresses, parties, and period terms.\n * @param params.enforcers - Delegation Framework enforcer addresses.\n * @param params.recipientAddress - Subscription treasury address.\n * @param params.tokenAddress - Subscription settlement token.\n * @param params.periodAmount - Maximum token amount per period.\n * @param params.periodDuration - Period length in seconds.\n * @param params.startDate - Unix timestamp when transfers may begin.\n * @returns Caveats in enforcer order.\n */\nexport function buildSubscriptionCaveats({\n  enforcers,\n  recipientAddress,\n  tokenAddress,\n  periodAmount,\n  periodDuration,\n  startDate,\n}: BuildSubscriptionCaveatsParams): SignedDelegation['caveats'] {\n  return [\n    {\n      enforcer: enforcers.erc20TokenPeriodTransfer,\n      terms: createERC20TokenPeriodTransferTerms({\n        tokenAddress,\n        periodAmount,\n        periodDuration,\n        startDate,\n      }),\n      args: '0x',\n    },\n    {\n      enforcer: enforcers.allowedCalldata,\n      terms: createAllowedCalldataTerms({\n        startIndex: TRANSFER_CALLDATA_PREFIX_START_INDEX,\n        value: encodeTransferToCalldataPrefix(recipientAddress),\n      }),\n      args: '0x',\n    },\n  ];\n}\n\nexport type BuildUnsignedSubscriptionDelegationParams =\n  BuildSubscriptionCaveatsParams & {\n    delegateAddress: Hex;\n    delegatorAddress: Hex;\n    /**\n     * Optional salt for tests. When omitted, a random 32-byte salt is generated.\n     */\n    salt?: Hex;\n  };\n\n/**\n * Builds an unsigned root cash-subscription delegation.\n *\n * @param params - Delegation parties, enforcers, and period terms.\n * @returns An unsigned delegation ready for signing.\n */\nexport function buildUnsignedSubscriptionDelegation(\n  params: BuildUnsignedSubscriptionDelegationParams,\n): UnsignedSubscriptionDelegation {\n  const salt =\n    params.salt ??\n    bytesToHex(globalThis.crypto.getRandomValues(new Uint8Array(32)));\n\n  return {\n    delegate: params.delegateAddress,\n    delegator: params.delegatorAddress,\n    authority: ROOT_AUTHORITY,\n    caveats: buildSubscriptionCaveats(params),\n    salt,\n  };\n}\n"]}

package/dist/subscription-delegation/fingerprint.d.ts

@@ -4,6 +4,7 @@ import type { SubscriptionDelegationEnforcers } from './types.js';
 export type SubscriptionDelegationFingerprint = {
     delegatorAddress: Hex;
     delegateAddress: Hex;
+    recipientAddress: Hex;
     chainId: Hex;
     tokenAddress: Hex;
     periodAmount: bigint;

package/dist/subscription-delegation/fingerprint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../src/subscription-delegation/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAK/E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAGlE,MAAM,MAAM,iCAAiC,GAAG;IAC9C,gBAAgB,EAAE,GAAG,CAAC;IACtB,eAAe,EAAE,GAAG,CAAC;IACrB,OAAO,EAAE,GAAG,CAAC;IACb,YAAY,EAAE,GAAG,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAErE;AAED;;;;;;;;;GASG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,iCAAiC,GAC1C,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAsExC;AA8BD;;;;;;;;;GASG;AACH,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,SAAS,EAAE,+BAA+B,GACzC,kBAAkB,GAAG,SAAS,CAYhC"}
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../src/subscription-delegation/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAK/E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAM3C,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAGlE,MAAM,MAAM,iCAAiC,GAAG;IAC9C,gBAAgB,EAAE,GAAG,CAAC;IACtB,eAAe,EAAE,GAAG,CAAC;IACrB,gBAAgB,EAAE,GAAG,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC;IACb,YAAY,EAAE,GAAG,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAErE;AAED;;;;;;;;;GASG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,iCAAiC,GAC1C,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CA+ExC;AA8BD;;;;;;;;;GASG;AACH,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,SAAS,EAAE,+BAA+B,GACzC,kBAAkB,GAAG,SAAS,CAYhC"}

package/dist/subscription-delegation/fingerprint.js

@@ -1,4 +1,5 @@
-import { decodeERC20TokenPeriodTransferTerms, decodeValueLteTerms, } from '@metamask/delegation-core';
+import { decodeAllowedCalldataTerms, decodeERC20TokenPeriodTransferTerms, } from '@metamask/delegation-core';
+import { encodeTransferToCalldataPrefix, TRANSFER_CALLDATA_PREFIX_START_INDEX, } from './caveats.js';
 import { CASH_SUBSCRIPTION_DELEGATION_TYPE } from './types.js';
 /**
  * Case-insensitive hex equality.
@@ -37,18 +38,21 @@ export function makeMatchesSubscriptionDelegation(expected) {
         if (!equalsIgnoreCase(entry.metadata.tokenAddress, expected.tokenAddress)) {
             return false;
         }
+        // CHOMP requires exactly these two enforcers, so stored delegations with
+        // extra caveats (e.g. a legacy `ValueLte`) cannot be reused.
         const { caveats } = entry.signedDelegation;
-        if (caveats.length < 2) {
+        if (caveats.length !== 2) {
             return false;
         }
-        const valueLteCaveat = caveats.find((caveat) => equalsIgnoreCase(caveat.enforcer, expected.enforcers.valueLte));
         const periodCaveat = caveats.find((caveat) => equalsIgnoreCase(caveat.enforcer, expected.enforcers.erc20TokenPeriodTransfer));
-        if (!valueLteCaveat || !periodCaveat) {
+        const allowedCalldataCaveat = caveats.find((caveat) => equalsIgnoreCase(caveat.enforcer, expected.enforcers.allowedCalldata));
+        if (!periodCaveat || !allowedCalldataCaveat) {
             return false;
         }
         try {
-            const valueTerms = decodeValueLteTerms(valueLteCaveat.terms);
-            if (valueTerms.maxValue !== 0n) {
+            const calldataTerms = decodeAllowedCalldataTerms(allowedCalldataCaveat.terms);
+            if (calldataTerms.startIndex !== TRANSFER_CALLDATA_PREFIX_START_INDEX ||
+                !equalsIgnoreCase(calldataTerms.value, encodeTransferToCalldataPrefix(expected.recipientAddress))) {
                 return false;
             }
             const periodTerms = decodeERC20TokenPeriodTransferTerms(periodCaveat.terms);

package/dist/subscription-delegation/fingerprint.js.map

@@ -1 +1 @@
-{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/subscription-delegation/fingerprint.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mCAAmC,EACnC,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAInC,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAsB/D;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAA2C;IAE3C,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IACE,CAAC,gBAAgB,CACf,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAChC,QAAQ,CAAC,gBAAgB,CAC1B,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IACE,CAAC,gBAAgB,CACf,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAC/B,QAAQ,CAAC,eAAe,CACzB,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAC/D,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,gBAAgB,CACd,MAAM,CAAC,QAAQ,EACf,QAAQ,CAAC,SAAS,CAAC,wBAAwB,CAC5C,CACF,CAAC;QACF,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7D,IAAI,UAAU,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,WAAW,GAAG,mCAAmC,CACrD,YAAY,CAAC,KAAK,CACnB,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC;YAC/D,IAAI,QAAQ,CAAC,eAAe,KAAK,gBAAgB,EAAE,CAAC;gBAClD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,gBAAgB,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC;gBACjE,WAAW,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;gBAClD,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,cAAc,CAC/D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kCAAkC,CACzC,KAAyB,EACzB,SAA0C;IAE1C,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAClE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,wBAAwB,CAAC,CACtE,CAAC;IACF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,CACX,mCAAmC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,CAClE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wCAAwC,CACtD,OAAsC,EACtC,SAA0C;IAE1C,MAAM,qBAAqB,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC9D,MAAM,SAAS,GACb,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC;YACnD,MAAM,CAAC,iBAAiB,CAAC;QAC3B,MAAM,UAAU,GACd,kCAAkC,CAAC,KAAK,EAAE,SAAS,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC;QAC3B,OAAO,UAAU,GAAG,SAAS,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC","sourcesContent":["import type { DelegationResponse } from '@metamask/authenticated-user-storage';\nimport {\n  decodeERC20TokenPeriodTransferTerms,\n  decodeValueLteTerms,\n} from '@metamask/delegation-core';\nimport type { Hex } from '@metamask/utils';\n\nimport type { SubscriptionDelegationEnforcers } from './types.js';\nimport { CASH_SUBSCRIPTION_DELEGATION_TYPE } from './types.js';\n\nexport type SubscriptionDelegationFingerprint = {\n  delegatorAddress: Hex;\n  delegateAddress: Hex;\n  chainId: Hex;\n  tokenAddress: Hex;\n  periodAmount: bigint;\n  periodDuration: number;\n  /**\n   * Current unix timestamp in seconds. Used to classify a stored period\n   * `startDate` as immediately redeemable (`<= now`) vs trial-deferred (`> now`).\n   */\n  nowSeconds: number;\n  /**\n   * When true, only a still-deferred period start (`> nowSeconds`) matches.\n   * When false, only an immediately redeemable start (`<= nowSeconds`) matches.\n   */\n  isTrialDeferred: boolean;\n  enforcers: SubscriptionDelegationEnforcers;\n};\n\n/**\n * Case-insensitive hex equality.\n *\n * @param left - First hex value.\n * @param right - Second hex value.\n * @returns Whether the values are equal ignoring case.\n */\nexport function equalsIgnoreCase(left: string, right: string): boolean {\n  return left.toLowerCase() === right.toLowerCase();\n}\n\n/**\n * Builds a predicate that matches a stored AUS delegation to the semantic\n * cash-subscription fingerprint. Salt is ignored so a previously signed\n * equivalent permission can be reused. Period `startDate` is compared only\n * as trial-deferred (`> nowSeconds`) vs immediately redeemable (`<= nowSeconds`)\n * so a positive-length trial cannot reuse a live permission and vice versa.\n *\n * @param expected - Semantic fields that must match.\n * @returns Predicate over {@link DelegationResponse}.\n */\nexport function makeMatchesSubscriptionDelegation(\n  expected: SubscriptionDelegationFingerprint,\n): (entry: DelegationResponse) => boolean {\n  return (entry) => {\n    if (entry.metadata.type !== CASH_SUBSCRIPTION_DELEGATION_TYPE) {\n      return false;\n    }\n    if (\n      !equalsIgnoreCase(\n        entry.signedDelegation.delegator,\n        expected.delegatorAddress,\n      )\n    ) {\n      return false;\n    }\n    if (\n      !equalsIgnoreCase(\n        entry.signedDelegation.delegate,\n        expected.delegateAddress,\n      )\n    ) {\n      return false;\n    }\n    if (!equalsIgnoreCase(entry.metadata.chainIdHex, expected.chainId)) {\n      return false;\n    }\n    if (!equalsIgnoreCase(entry.metadata.tokenAddress, expected.tokenAddress)) {\n      return false;\n    }\n\n    const { caveats } = entry.signedDelegation;\n    if (caveats.length < 2) {\n      return false;\n    }\n\n    const valueLteCaveat = caveats.find((caveat) =>\n      equalsIgnoreCase(caveat.enforcer, expected.enforcers.valueLte),\n    );\n    const periodCaveat = caveats.find((caveat) =>\n      equalsIgnoreCase(\n        caveat.enforcer,\n        expected.enforcers.erc20TokenPeriodTransfer,\n      ),\n    );\n    if (!valueLteCaveat || !periodCaveat) {\n      return false;\n    }\n\n    try {\n      const valueTerms = decodeValueLteTerms(valueLteCaveat.terms);\n      if (valueTerms.maxValue !== 0n) {\n        return false;\n      }\n\n      const periodTerms = decodeERC20TokenPeriodTransferTerms(\n        periodCaveat.terms,\n      );\n      const storedStartDate = Number(periodTerms.startDate);\n      const isStoredDeferred = storedStartDate > expected.nowSeconds;\n      if (expected.isTrialDeferred !== isStoredDeferred) {\n        return false;\n      }\n\n      return (\n        equalsIgnoreCase(periodTerms.tokenAddress, expected.tokenAddress) &&\n        periodTerms.periodAmount === expected.periodAmount &&\n        Number(periodTerms.periodDuration) === expected.periodDuration\n      );\n    } catch {\n      return false;\n    }\n  };\n}\n\n/**\n * Reads the ERC-20 period-transfer `startDate` from a stored delegation.\n *\n * @param entry - Stored AUS delegation.\n * @param enforcers - Enforcer addresses used to locate the period caveat.\n * @returns Unix timestamp in seconds, or `undefined` when the caveat is\n * missing or malformed.\n */\nfunction getSubscriptionDelegationStartDate(\n  entry: DelegationResponse,\n  enforcers: SubscriptionDelegationEnforcers,\n): number | undefined {\n  const periodCaveat = entry.signedDelegation.caveats.find((caveat) =>\n    equalsIgnoreCase(caveat.enforcer, enforcers.erc20TokenPeriodTransfer),\n  );\n  if (!periodCaveat) {\n    return undefined;\n  }\n\n  try {\n    return Number(\n      decodeERC20TokenPeriodTransferTerms(periodCaveat.terms).startDate,\n    );\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Returns the fingerprint match with the latest period `startDate`.\n *\n * Equal `startDate`s keep list order. A delegation whose `startDate` cannot\n * be read sorts last.\n *\n * @param matches - Fingerprint-matching AUS delegations, in list order.\n * @param enforcers - Enforcer addresses used to read `startDate`.\n * @returns The preferred match, or `undefined` when `matches` is empty.\n */\nexport function pickLatestMatchingSubscriptionDelegation(\n  matches: readonly DelegationResponse[],\n  enforcers: SubscriptionDelegationEnforcers,\n): DelegationResponse | undefined {\n  const byStartDateDescending = [...matches].sort((left, right) => {\n    const leftStart =\n      getSubscriptionDelegationStartDate(left, enforcers) ??\n      Number.NEGATIVE_INFINITY;\n    const rightStart =\n      getSubscriptionDelegationStartDate(right, enforcers) ??\n      Number.NEGATIVE_INFINITY;\n    return rightStart - leftStart;\n  });\n\n  return byStartDateDescending[0];\n}\n"]}
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/subscription-delegation/fingerprint.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,mCAAmC,GACpC,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAuB/D;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAA2C;IAE3C,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IACE,CAAC,gBAAgB,CACf,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAChC,QAAQ,CAAC,gBAAgB,CAC1B,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IACE,CAAC,gBAAgB,CACf,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAC/B,QAAQ,CAAC,eAAe,CACzB,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yEAAyE;QACzE,6DAA6D;QAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,gBAAgB,CACd,MAAM,CAAC,QAAQ,EACf,QAAQ,CAAC,SAAS,CAAC,wBAAwB,CAC5C,CACF,CAAC;QACF,MAAM,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACpD,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,CACtE,CAAC;QACF,IAAI,CAAC,YAAY,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,0BAA0B,CAC9C,qBAAqB,CAAC,KAAK,CAC5B,CAAC;YACF,IACE,aAAa,CAAC,UAAU,KAAK,oCAAoC;gBACjE,CAAC,gBAAgB,CACf,aAAa,CAAC,KAAK,EACnB,8BAA8B,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAC1D,EACD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,WAAW,GAAG,mCAAmC,CACrD,YAAY,CAAC,KAAK,CACnB,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC;YAC/D,IAAI,QAAQ,CAAC,eAAe,KAAK,gBAAgB,EAAE,CAAC;gBAClD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CACL,gBAAgB,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC;gBACjE,WAAW,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;gBAClD,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,cAAc,CAC/D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kCAAkC,CACzC,KAAyB,EACzB,SAA0C;IAE1C,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAClE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,wBAAwB,CAAC,CACtE,CAAC;IACF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,CACX,mCAAmC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,CAClE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wCAAwC,CACtD,OAAsC,EACtC,SAA0C;IAE1C,MAAM,qBAAqB,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC9D,MAAM,SAAS,GACb,kCAAkC,CAAC,IAAI,EAAE,SAAS,CAAC;YACnD,MAAM,CAAC,iBAAiB,CAAC;QAC3B,MAAM,UAAU,GACd,kCAAkC,CAAC,KAAK,EAAE,SAAS,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC;QAC3B,OAAO,UAAU,GAAG,SAAS,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC","sourcesContent":["import type { DelegationResponse } from '@metamask/authenticated-user-storage';\nimport {\n  decodeAllowedCalldataTerms,\n  decodeERC20TokenPeriodTransferTerms,\n} from '@metamask/delegation-core';\nimport type { Hex } from '@metamask/utils';\n\nimport {\n  encodeTransferToCalldataPrefix,\n  TRANSFER_CALLDATA_PREFIX_START_INDEX,\n} from './caveats.js';\nimport type { SubscriptionDelegationEnforcers } from './types.js';\nimport { CASH_SUBSCRIPTION_DELEGATION_TYPE } from './types.js';\n\nexport type SubscriptionDelegationFingerprint = {\n  delegatorAddress: Hex;\n  delegateAddress: Hex;\n  recipientAddress: Hex;\n  chainId: Hex;\n  tokenAddress: Hex;\n  periodAmount: bigint;\n  periodDuration: number;\n  /**\n   * Current unix timestamp in seconds. Used to classify a stored period\n   * `startDate` as immediately redeemable (`<= now`) vs trial-deferred (`> now`).\n   */\n  nowSeconds: number;\n  /**\n   * When true, only a still-deferred period start (`> nowSeconds`) matches.\n   * When false, only an immediately redeemable start (`<= nowSeconds`) matches.\n   */\n  isTrialDeferred: boolean;\n  enforcers: SubscriptionDelegationEnforcers;\n};\n\n/**\n * Case-insensitive hex equality.\n *\n * @param left - First hex value.\n * @param right - Second hex value.\n * @returns Whether the values are equal ignoring case.\n */\nexport function equalsIgnoreCase(left: string, right: string): boolean {\n  return left.toLowerCase() === right.toLowerCase();\n}\n\n/**\n * Builds a predicate that matches a stored AUS delegation to the semantic\n * cash-subscription fingerprint. Salt is ignored so a previously signed\n * equivalent permission can be reused. Period `startDate` is compared only\n * as trial-deferred (`> nowSeconds`) vs immediately redeemable (`<= nowSeconds`)\n * so a positive-length trial cannot reuse a live permission and vice versa.\n *\n * @param expected - Semantic fields that must match.\n * @returns Predicate over {@link DelegationResponse}.\n */\nexport function makeMatchesSubscriptionDelegation(\n  expected: SubscriptionDelegationFingerprint,\n): (entry: DelegationResponse) => boolean {\n  return (entry) => {\n    if (entry.metadata.type !== CASH_SUBSCRIPTION_DELEGATION_TYPE) {\n      return false;\n    }\n    if (\n      !equalsIgnoreCase(\n        entry.signedDelegation.delegator,\n        expected.delegatorAddress,\n      )\n    ) {\n      return false;\n    }\n    if (\n      !equalsIgnoreCase(\n        entry.signedDelegation.delegate,\n        expected.delegateAddress,\n      )\n    ) {\n      return false;\n    }\n    if (!equalsIgnoreCase(entry.metadata.chainIdHex, expected.chainId)) {\n      return false;\n    }\n    if (!equalsIgnoreCase(entry.metadata.tokenAddress, expected.tokenAddress)) {\n      return false;\n    }\n\n    // CHOMP requires exactly these two enforcers, so stored delegations with\n    // extra caveats (e.g. a legacy `ValueLte`) cannot be reused.\n    const { caveats } = entry.signedDelegation;\n    if (caveats.length !== 2) {\n      return false;\n    }\n\n    const periodCaveat = caveats.find((caveat) =>\n      equalsIgnoreCase(\n        caveat.enforcer,\n        expected.enforcers.erc20TokenPeriodTransfer,\n      ),\n    );\n    const allowedCalldataCaveat = caveats.find((caveat) =>\n      equalsIgnoreCase(caveat.enforcer, expected.enforcers.allowedCalldata),\n    );\n    if (!periodCaveat || !allowedCalldataCaveat) {\n      return false;\n    }\n\n    try {\n      const calldataTerms = decodeAllowedCalldataTerms(\n        allowedCalldataCaveat.terms,\n      );\n      if (\n        calldataTerms.startIndex !== TRANSFER_CALLDATA_PREFIX_START_INDEX ||\n        !equalsIgnoreCase(\n          calldataTerms.value,\n          encodeTransferToCalldataPrefix(expected.recipientAddress),\n        )\n      ) {\n        return false;\n      }\n\n      const periodTerms = decodeERC20TokenPeriodTransferTerms(\n        periodCaveat.terms,\n      );\n      const storedStartDate = Number(periodTerms.startDate);\n      const isStoredDeferred = storedStartDate > expected.nowSeconds;\n      if (expected.isTrialDeferred !== isStoredDeferred) {\n        return false;\n      }\n      return (\n        equalsIgnoreCase(periodTerms.tokenAddress, expected.tokenAddress) &&\n        periodTerms.periodAmount === expected.periodAmount &&\n        Number(periodTerms.periodDuration) === expected.periodDuration\n      );\n    } catch {\n      return false;\n    }\n  };\n}\n\n/**\n * Reads the ERC-20 period-transfer `startDate` from a stored delegation.\n *\n * @param entry - Stored AUS delegation.\n * @param enforcers - Enforcer addresses used to locate the period caveat.\n * @returns Unix timestamp in seconds, or `undefined` when the caveat is\n * missing or malformed.\n */\nfunction getSubscriptionDelegationStartDate(\n  entry: DelegationResponse,\n  enforcers: SubscriptionDelegationEnforcers,\n): number | undefined {\n  const periodCaveat = entry.signedDelegation.caveats.find((caveat) =>\n    equalsIgnoreCase(caveat.enforcer, enforcers.erc20TokenPeriodTransfer),\n  );\n  if (!periodCaveat) {\n    return undefined;\n  }\n\n  try {\n    return Number(\n      decodeERC20TokenPeriodTransferTerms(periodCaveat.terms).startDate,\n    );\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Returns the fingerprint match with the latest period `startDate`.\n *\n * Equal `startDate`s keep list order. A delegation whose `startDate` cannot\n * be read sorts last.\n *\n * @param matches - Fingerprint-matching AUS delegations, in list order.\n * @param enforcers - Enforcer addresses used to read `startDate`.\n * @returns The preferred match, or `undefined` when `matches` is empty.\n */\nexport function pickLatestMatchingSubscriptionDelegation(\n  matches: readonly DelegationResponse[],\n  enforcers: SubscriptionDelegationEnforcers,\n): DelegationResponse | undefined {\n  const byStartDateDescending = [...matches].sort((left, right) => {\n    const leftStart =\n      getSubscriptionDelegationStartDate(left, enforcers) ??\n      Number.NEGATIVE_INFINITY;\n    const rightStart =\n      getSubscriptionDelegationStartDate(right, enforcers) ??\n      Number.NEGATIVE_INFINITY;\n    return rightStart - leftStart;\n  });\n\n  return byStartDateDescending[0];\n}\n"]}

package/dist/subscription-delegation/typed-data.d.ts

@@ -0,0 +1,23 @@
+import type { Hex } from '@metamask/utils';
+import type { DecodedPermission, SubscriptionDelegationEnforcers, SubscriptionDelegationTypedData, UnsignedSubscriptionDelegation } from './types.js';
+export declare function buildDelegationTypedData({ delegation, chainId, delegationManager, }: {
+    delegation: UnsignedSubscriptionDelegation;
+    chainId: Hex;
+    delegationManager: Hex;
+}): SubscriptionDelegationTypedData;
+/**
+ * Decodes the effective permission granted by a cash-subscription delegation
+ * for display in confirmations.
+ *
+ * The delegation must carry exactly the two caveats CHOMP accepts:
+ * `ERC20TokenPeriodTransfer` (token, amount, period, start) and
+ * `AllowedCalldata` (pinning the `transfer` recipient). No `ValueLte` caveat
+ * is present; `maxNativeValue` is reported as `'0'` because the settlement
+ * token's `transfer` is non-payable (see `buildSubscriptionCaveats`).
+ *
+ * @param delegation - The unsigned subscription delegation.
+ * @param enforcers - Delegation Framework enforcer addresses for the chain.
+ * @returns The decoded permission.
+ */
+export declare function decodeSubscriptionAuthority(delegation: UnsignedSubscriptionDelegation, enforcers: SubscriptionDelegationEnforcers): DecodedPermission;
+//# sourceMappingURL=typed-data.d.ts.map

package/dist/subscription-delegation/typed-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed-data.d.ts","sourceRoot":"","sources":["../../src/subscription-delegation/typed-data.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAG3C,OAAO,KAAK,EACV,iBAAiB,EACjB,+BAA+B,EAC/B,+BAA+B,EAC/B,8BAA8B,EAC/B,MAAM,YAAY,CAAC;AAsBpB,wBAAgB,wBAAwB,CAAC,EACvC,UAAU,EACV,OAAO,EACP,iBAAiB,GAClB,EAAE;IACD,UAAU,EAAE,8BAA8B,CAAC;IAC3C,OAAO,EAAE,GAAG,CAAC;IACb,iBAAiB,EAAE,GAAG,CAAC;CACxB,GAAG,+BAA+B,CAqBlC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,8BAA8B,EAC1C,SAAS,EAAE,+BAA+B,GACzC,iBAAiB,CAqBnB"}

package/dist/subscription-delegation/typed-data.js

@@ -0,0 +1,75 @@
+import { decodeERC20TokenPeriodTransferTerms } from '@metamask/delegation-core';
+import { getChecksumAddress, hexToNumber } from '@metamask/utils';
+import { equalsIgnoreCase } from './fingerprint.js';
+const SIGNABLE_DELEGATION_TYPES = {
+    EIP712Domain: [
+        { name: 'name', type: 'string' },
+        { name: 'version', type: 'string' },
+        { name: 'chainId', type: 'uint256' },
+        { name: 'verifyingContract', type: 'address' },
+    ],
+    Caveat: [
+        { name: 'enforcer', type: 'address' },
+        { name: 'terms', type: 'bytes' },
+    ],
+    Delegation: [
+        { name: 'delegate', type: 'address' },
+        { name: 'delegator', type: 'address' },
+        { name: 'authority', type: 'bytes32' },
+        { name: 'caveats', type: 'Caveat[]' },
+        { name: 'salt', type: 'uint256' },
+    ],
+};
+export function buildDelegationTypedData({ delegation, chainId, delegationManager, }) {
+    return {
+        types: SIGNABLE_DELEGATION_TYPES,
+        primaryType: 'Delegation',
+        domain: {
+            chainId: hexToNumber(chainId),
+            name: 'DelegationManager',
+            version: '1',
+            verifyingContract: delegationManager,
+        },
+        message: {
+            delegate: getChecksumAddress(delegation.delegate),
+            delegator: getChecksumAddress(delegation.delegator),
+            authority: delegation.authority,
+            caveats: delegation.caveats.map(({ enforcer, terms }) => ({
+                enforcer: getChecksumAddress(enforcer),
+                terms,
+            })),
+            salt: delegation.salt,
+        },
+    };
+}
+/**
+ * Decodes the effective permission granted by a cash-subscription delegation
+ * for display in confirmations.
+ *
+ * The delegation must carry exactly the two caveats CHOMP accepts:
+ * `ERC20TokenPeriodTransfer` (token, amount, period, start) and
+ * `AllowedCalldata` (pinning the `transfer` recipient). No `ValueLte` caveat
+ * is present; `maxNativeValue` is reported as `'0'` because the settlement
+ * token's `transfer` is non-payable (see `buildSubscriptionCaveats`).
+ *
+ * @param delegation - The unsigned subscription delegation.
+ * @param enforcers - Delegation Framework enforcer addresses for the chain.
+ * @returns The decoded permission.
+ */
+export function decodeSubscriptionAuthority(delegation, enforcers) {
+    const periodTransfer = delegation.caveats.find(({ enforcer }) => equalsIgnoreCase(enforcer, enforcers.erc20TokenPeriodTransfer));
+    const allowedCalldata = delegation.caveats.find(({ enforcer }) => equalsIgnoreCase(enforcer, enforcers.allowedCalldata));
+    if (!periodTransfer || !allowedCalldata) {
+        throw new Error('Subscription delegation is missing required caveats');
+    }
+    const periodTerms = decodeERC20TokenPeriodTransferTerms(periodTransfer.terms);
+    return {
+        tokenAddress: periodTerms.tokenAddress,
+        delegateAddress: delegation.delegate,
+        periodAmount: periodTerms.periodAmount.toString(),
+        periodDuration: Number(periodTerms.periodDuration),
+        startDate: Number(periodTerms.startDate),
+        maxNativeValue: '0',
+    };
+}
+//# sourceMappingURL=typed-data.js.map

package/dist/subscription-delegation/typed-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed-data.js","sourceRoot":"","sources":["../../src/subscription-delegation/typed-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAQpD,MAAM,yBAAyB,GAAG;IAChC,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;KAC/C;IACD,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;KACjC;IACD,UAAU,EAAE;QACV,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;QACrC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;KAClC;CACF,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,EACvC,UAAU,EACV,OAAO,EACP,iBAAiB,GAKlB;IACC,OAAO;QACL,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE;YACN,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC;YAC7B,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,GAAG;YACZ,iBAAiB,EAAE,iBAAiB;SACrC;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC;YACjD,SAAS,EAAE,kBAAkB,CAAC,UAAU,CAAC,SAAS,CAAC;YACnD,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;gBACxD,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;gBACtC,KAAK;aACN,CAAC,CAAC;YACH,IAAI,EAAE,UAAU,CAAC,IAAI;SACtB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAA0C,EAC1C,SAA0C;IAE1C,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC9D,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,wBAAwB,CAAC,CAC/D,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC/D,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,eAAe,CAAC,CACtD,CAAC;IACF,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,WAAW,GAAG,mCAAmC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAE9E,OAAO;QACL,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,eAAe,EAAE,UAAU,CAAC,QAAQ;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE;QACjD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC;QAClD,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;QACxC,cAAc,EAAE,GAAG;KACpB,CAAC;AACJ,CAAC","sourcesContent":["import { decodeERC20TokenPeriodTransferTerms } from '@metamask/delegation-core';\nimport { getChecksumAddress, hexToNumber } from '@metamask/utils';\nimport type { Hex } from '@metamask/utils';\n\nimport { equalsIgnoreCase } from './fingerprint.js';\nimport type {\n  DecodedPermission,\n  SubscriptionDelegationEnforcers,\n  SubscriptionDelegationTypedData,\n  UnsignedSubscriptionDelegation,\n} from './types.js';\n\nconst SIGNABLE_DELEGATION_TYPES = {\n  EIP712Domain: [\n    { name: 'name', type: 'string' },\n    { name: 'version', type: 'string' },\n    { name: 'chainId', type: 'uint256' },\n    { name: 'verifyingContract', type: 'address' },\n  ],\n  Caveat: [\n    { name: 'enforcer', type: 'address' },\n    { name: 'terms', type: 'bytes' },\n  ],\n  Delegation: [\n    { name: 'delegate', type: 'address' },\n    { name: 'delegator', type: 'address' },\n    { name: 'authority', type: 'bytes32' },\n    { name: 'caveats', type: 'Caveat[]' },\n    { name: 'salt', type: 'uint256' },\n  ],\n};\n\nexport function buildDelegationTypedData({\n  delegation,\n  chainId,\n  delegationManager,\n}: {\n  delegation: UnsignedSubscriptionDelegation;\n  chainId: Hex;\n  delegationManager: Hex;\n}): SubscriptionDelegationTypedData {\n  return {\n    types: SIGNABLE_DELEGATION_TYPES,\n    primaryType: 'Delegation',\n    domain: {\n      chainId: hexToNumber(chainId),\n      name: 'DelegationManager',\n      version: '1',\n      verifyingContract: delegationManager,\n    },\n    message: {\n      delegate: getChecksumAddress(delegation.delegate),\n      delegator: getChecksumAddress(delegation.delegator),\n      authority: delegation.authority,\n      caveats: delegation.caveats.map(({ enforcer, terms }) => ({\n        enforcer: getChecksumAddress(enforcer),\n        terms,\n      })),\n      salt: delegation.salt,\n    },\n  };\n}\n\n/**\n * Decodes the effective permission granted by a cash-subscription delegation\n * for display in confirmations.\n *\n * The delegation must carry exactly the two caveats CHOMP accepts:\n * `ERC20TokenPeriodTransfer` (token, amount, period, start) and\n * `AllowedCalldata` (pinning the `transfer` recipient). No `ValueLte` caveat\n * is present; `maxNativeValue` is reported as `'0'` because the settlement\n * token's `transfer` is non-payable (see `buildSubscriptionCaveats`).\n *\n * @param delegation - The unsigned subscription delegation.\n * @param enforcers - Delegation Framework enforcer addresses for the chain.\n * @returns The decoded permission.\n */\nexport function decodeSubscriptionAuthority(\n  delegation: UnsignedSubscriptionDelegation,\n  enforcers: SubscriptionDelegationEnforcers,\n): DecodedPermission {\n  const periodTransfer = delegation.caveats.find(({ enforcer }) =>\n    equalsIgnoreCase(enforcer, enforcers.erc20TokenPeriodTransfer),\n  );\n  const allowedCalldata = delegation.caveats.find(({ enforcer }) =>\n    equalsIgnoreCase(enforcer, enforcers.allowedCalldata),\n  );\n  if (!periodTransfer || !allowedCalldata) {\n    throw new Error('Subscription delegation is missing required caveats');\n  }\n\n  const periodTerms = decodeERC20TokenPeriodTransferTerms(periodTransfer.terms);\n\n  return {\n    tokenAddress: periodTerms.tokenAddress,\n    delegateAddress: delegation.delegate,\n    periodAmount: periodTerms.periodAmount.toString(),\n    periodDuration: Number(periodTerms.periodDuration),\n    startDate: Number(periodTerms.startDate),\n    maxNativeValue: '0',\n  };\n}\n"]}

package/dist/subscription-delegation/types.d.ts

@@ -1,15 +1,110 @@
-import type { Hex } from '@metamask/utils';
+import type { ChompIntentType } from '@metamask/chomp-api-service';
+import type { Hex, Json } from '@metamask/utils';
 import { PRODUCT_TYPES } from '../types.js';
-import type { RecurringInterval } from '../types.js';
+import type { ProductType, RecurringInterval, StartCryptoSubscriptionResponse } from '../types.js';
+export type { ChompIntentType };
 /**
  * Storage / CHOMP metadata type for cash-subscription delegations.
  *
- * Defined locally so this package does not depend on an unreleased
- * `@metamask/chomp-api-service` intent type. Production CHOMP intent
- * registration still requires a follow-up chomp-api-service release that
- * accepts `'cash-subscription'`.
+ * The `'cash-subscription'` member of {@link ChompIntentType}.
  */
-export declare const CASH_SUBSCRIPTION_DELEGATION_TYPE: 'cash-subscription';
+export declare const CASH_SUBSCRIPTION_DELEGATION_TYPE: "cash-subscription";
+export declare const SUBSCRIPTION_DELEGATION_APPROVAL_TYPE: 'subscription_delegation';
+export declare const SUBSCRIPTION_DELEGATION_POLICY_VERSION: '1';
+export type SubscriptionPermissionId = ChompIntentType;
+export type MoneyAccountAuthorizationReason = 'controller-not-ready' | 'address-not-associated' | 'eip7702-not-active' | 'monitoring-list-missing' | 'configuration-changed';
+export type UnsignedSubscriptionDelegation = {
+    delegate: Hex;
+    delegator: Hex;
+    authority: Hex;
+    caveats: {
+        enforcer: Hex;
+        terms: Hex;
+        args: Hex;
+    }[];
+    salt: Hex;
+};
+export type SignedSubscriptionDelegation = UnsignedSubscriptionDelegation & {
+    signature: Hex;
+};
+export type SubscriptionDelegationTypedData = {
+    types: Record<string, {
+        name: string;
+        type: string;
+    }[]>;
+    primaryType: string;
+    domain: {
+        chainId: number;
+        name: string;
+        version: string;
+        verifyingContract: Hex;
+    };
+    message: Json;
+};
+export type DecodedPermission = {
+    tokenAddress: Hex;
+    delegateAddress: Hex;
+    periodAmount: string;
+    periodDuration: number;
+    startDate: number;
+    maxNativeValue: '0';
+};
+export type PreparedSubscriptionPermission = {
+    id: SubscriptionPermissionId;
+    owner: 'money-account' | 'subscription';
+    disposition: 'new' | 'reused';
+    delegation: UnsignedSubscriptionDelegation;
+    typedData: SubscriptionDelegationTypedData;
+    decodedAuthority: DecodedPermission;
+    existingDelegationHash?: Hex;
+};
+export type PreparedSubscriptionDelegationBundle = {
+    policyVersion: string;
+    account: Hex;
+    chainId: Hex;
+    permissions: PreparedSubscriptionPermission[];
+};
+export type SubscriptionFundingRequest = {
+    useCase: 'subscription';
+    destinationAccount: Hex;
+    chainId: Hex;
+    targetToken: {
+        symbol: 'mUSD';
+        address: Hex;
+    };
+    targetAmount: string;
+};
+export type SubscriptionDelegationApprovalResult = {
+    fundingTransactionHash: Hex;
+};
+export type StartSubscriptionWithDelegationRequest = {
+    product: ProductType;
+    recurringInterval: RecurringInterval;
+    chainId: Hex;
+    payerAddress: Hex;
+    /**
+     * When `true`, skips the `ApprovalController:addRequest` consent and
+     * funding step and proceeds directly to signing, committing, and starting
+     * the subscription. Callers must have already obtained user consent and
+     * ensured the Money Account is funded.
+     */
+    skipApproval?: boolean;
+};
+export type PrepareAuthorizationBundleResult = {
+    status: 'prepared';
+    bundle: PreparedSubscriptionDelegationBundle;
+} | {
+    status: 'money-account-authorization-required';
+    reasons: MoneyAccountAuthorizationReason[];
+};
+export type CommitAuthorizationBundleRequest = {
+    bundle: PreparedSubscriptionDelegationBundle;
+    signedPaymentDelegation: SignedSubscriptionDelegation;
+};
+export type CommitAuthorizationBundleResult = {
+    paymentDelegationHash: Hex;
+};
+export type StartSubscriptionWithDelegationResult = StartCryptoSubscriptionResponse;
 /**
  * Request to prepare a cash-subscription delegation.
  *
@@ -34,10 +129,8 @@ export type PrepareSubscriptionDelegationRequest = {
      */
     checkBalance?: boolean;
     /**
-     * When true, skips CHOMP verify/intent interactions. Required for alpha
-     * until `@metamask/chomp-api-service` accepts `'cash-subscription'` intent
-     * metadata. Defaults to false (production path; unsupported until that
-     * follow-up release).
+     * When true, skips CHOMP verify and intent registration. The returned
+     * delegation hash is computed locally. Defaults to false.
      */
     skipChompInteractions?: boolean;
 };
@@ -66,7 +159,7 @@ export type MoneyAccountBalanceCheckResult = {
  * Delegation Framework enforcers used by cash-subscription delegations.
  */
 export type SubscriptionDelegationEnforcers = {
-    valueLte: Hex;
     erc20TokenPeriodTransfer: Hex;
+    allowedCalldata: Hex;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/subscription-delegation/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/subscription-delegation/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,EAAG,mBAA4B,CAAC;AAE9E;;;;;;;;GAQG;AACH,MAAM,MAAM,oCAAoC,GAAG;IACjD,OAAO,EAAE,OAAO,aAAa,CAAC,kBAAkB,CAAC;IACjD,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,YAAY,EAAE,GAAG,CAAC;IAClB;;;OAGG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,cAAc,EAAE,GAAG,CAAC;IACpB,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC;CACnC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GAAG,IAAI,CAChD,oCAAoC,EACpC,SAAS,GAAG,mBAAmB,GAAG,cAAc,CACjD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,EAAE,GAAG,CAAC;IACd,wBAAwB,EAAE,GAAG,CAAC;CAC/B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/subscription-delegation/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,+BAA+B,EAChC,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,eAAe,EAAE,CAAC;AAEhC;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,qBACU,CAAC;AAEzD,eAAO,MAAM,qCAAqC,EAChD,yBAAkC,CAAC;AAErC,eAAO,MAAM,sCAAsC,EAAG,GAAY,CAAC;AAEnE,MAAM,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEvD,MAAM,MAAM,+BAA+B,GACvC,sBAAsB,GACtB,wBAAwB,GACxB,oBAAoB,GACpB,yBAAyB,GACzB,uBAAuB,CAAC;AAE5B,MAAM,MAAM,8BAA8B,GAAG;IAC3C,QAAQ,EAAE,GAAG,CAAC;IACd,SAAS,EAAE,GAAG,CAAC;IACf,SAAS,EAAE,GAAG,CAAC;IACf,OAAO,EAAE;QACP,QAAQ,EAAE,GAAG,CAAC;QACd,KAAK,EAAE,GAAG,CAAC;QACX,IAAI,EAAE,GAAG,CAAC;KACX,EAAE,CAAC;IACJ,IAAI,EAAE,GAAG,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,8BAA8B,GAAG;IAC1E,SAAS,EAAE,GAAG,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,iBAAiB,EAAE,GAAG,CAAC;KACxB,CAAC;IACF,OAAO,EAAE,IAAI,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,EAAE,GAAG,CAAC;IAClB,eAAe,EAAE,GAAG,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,GAAG,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,EAAE,EAAE,wBAAwB,CAAC;IAC7B,KAAK,EAAE,eAAe,GAAG,cAAc,CAAC;IACxC,WAAW,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC9B,UAAU,EAAE,8BAA8B,CAAC;IAC3C,SAAS,EAAE,+BAA+B,CAAC;IAC3C,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,sBAAsB,CAAC,EAAE,GAAG,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC;IACb,OAAO,EAAE,GAAG,CAAC;IACb,WAAW,EAAE,8BAA8B,EAAE,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,cAAc,CAAC;IACxB,kBAAkB,EAAE,GAAG,CAAC;IACxB,OAAO,EAAE,GAAG,CAAC;IACb,WAAW,EAAE;QACX,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,GAAG,CAAC;KACd,CAAC;IACF,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,sBAAsB,EAAE,GAAG,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,sCAAsC,GAAG;IACnD,OAAO,EAAE,WAAW,CAAC;IACrB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,OAAO,EAAE,GAAG,CAAC;IACb,YAAY,EAAE,GAAG,CAAC;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GACxC;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,oCAAoC,CAAC;CAC9C,GACD;IACE,MAAM,EAAE,sCAAsC,CAAC;IAC/C,OAAO,EAAE,+BAA+B,EAAE,CAAC;CAC5C,CAAC;AAEN,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,oCAAoC,CAAC;IAC7C,uBAAuB,EAAE,4BAA4B,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,qBAAqB,EAAE,GAAG,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAC/C,+BAA+B,CAAC;AAElC;;;;;;;;GAQG;AACH,MAAM,MAAM,oCAAoC,GAAG;IACjD,OAAO,EAAE,OAAO,aAAa,CAAC,kBAAkB,CAAC;IACjD,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,YAAY,EAAE,GAAG,CAAC;IAClB;;;OAGG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,cAAc,EAAE,GAAG,CAAC;IACpB,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC;CACnC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GAAG,IAAI,CAChD,oCAAoC,EACpC,SAAS,GAAG,mBAAmB,GAAG,cAAc,CACjD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,wBAAwB,EAAE,GAAG,CAAC;IAC9B,eAAe,EAAE,GAAG,CAAC;CACtB,CAAC"}

package/dist/subscription-delegation/types.js

@@ -1,10 +1,9 @@
 /**
  * Storage / CHOMP metadata type for cash-subscription delegations.
  *
- * Defined locally so this package does not depend on an unreleased
- * `@metamask/chomp-api-service` intent type. Production CHOMP intent
- * registration still requires a follow-up chomp-api-service release that
- * accepts `'cash-subscription'`.
+ * The `'cash-subscription'` member of {@link ChompIntentType}.
  */
 export const CASH_SUBSCRIPTION_DELEGATION_TYPE = 'cash-subscription';
+export const SUBSCRIPTION_DELEGATION_APPROVAL_TYPE = 'subscription_delegation';
+export const SUBSCRIPTION_DELEGATION_POLICY_VERSION = '1';
 //# sourceMappingURL=types.js.map

package/dist/subscription-delegation/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/subscription-delegation/types.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,mBAA4B,CAAC","sourcesContent":["import type { Hex } from '@metamask/utils';\n\nimport { PRODUCT_TYPES } from '../types.js';\nimport type { RecurringInterval } from '../types.js';\n\n/**\n * Storage / CHOMP metadata type for cash-subscription delegations.\n *\n * Defined locally so this package does not depend on an unreleased\n * `@metamask/chomp-api-service` intent type. Production CHOMP intent\n * registration still requires a follow-up chomp-api-service release that\n * accepts `'cash-subscription'`.\n */\nexport const CASH_SUBSCRIPTION_DELEGATION_TYPE = 'cash-subscription' as const;\n\n/**\n * Request to prepare a cash-subscription delegation.\n *\n * The service resolves all amount, token, delegate, and trial-duration fields\n * from authoritative pricing held by `SubscriptionController`.\n *\n * Only Money Account Plus is supported; Shield continues to use ERC-20\n * approval rather than delegation.\n */\nexport type PrepareSubscriptionDelegationRequest = {\n  product: typeof PRODUCT_TYPES.MONEY_ACCOUNT_PLUS;\n  recurringInterval: RecurringInterval;\n  payerAddress: Hex;\n  /**\n   * Whether the user selected the pricing trial. Pricing `trialPeriodDays`\n   * only affects the delegation start date when this is true.\n   */\n  isTrialRequested: boolean;\n  /**\n   * When true, gates preparation on a sufficient Money Account balance\n   * (`unitAmount × minBillingCyclesForBalance` in mUSD) before side effects.\n   */\n  checkBalance?: boolean;\n  /**\n   * When true, skips CHOMP verify/intent interactions. Required for alpha\n   * until `@metamask/chomp-api-service` accepts `'cash-subscription'` intent\n   * metadata. Defaults to false (production path; unsupported until that\n   * follow-up release).\n   */\n  skipChompInteractions?: boolean;\n};\n\n/**\n * Result of {@link SubscriptionDelegationService.prepareDelegation}.\n */\nexport type PreparedSubscriptionDelegation = {\n  delegationHash: Hex;\n  disposition: 'created' | 'reused';\n};\n\n/**\n * Request to check whether a Money Account holds enough convertible mUSD value\n * to cover the subscription funding requirement.\n */\nexport type MoneyAccountBalanceCheckRequest = Pick<\n  PrepareSubscriptionDelegationRequest,\n  'product' | 'recurringInterval' | 'payerAddress'\n>;\n\n/**\n * Result of {@link SubscriptionDelegationService.checkMoneyAccountBalance}.\n * `balance` and `requiredBalance` are mUSD base units (6 decimals).\n */\nexport type MoneyAccountBalanceCheckResult = {\n  hasSufficientBalance: boolean;\n  balance: string;\n  requiredBalance: string;\n};\n\n/**\n * Delegation Framework enforcers used by cash-subscription delegations.\n */\nexport type SubscriptionDelegationEnforcers = {\n  valueLte: Hex;\n  erc20TokenPeriodTransfer: Hex;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/subscription-delegation/types.ts"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAC5C,mBAAsD,CAAC;AAEzD,MAAM,CAAC,MAAM,qCAAqC,GAChD,yBAAkC,CAAC;AAErC,MAAM,CAAC,MAAM,sCAAsC,GAAG,GAAY,CAAC","sourcesContent":["import type { ChompIntentType } from '@metamask/chomp-api-service';\nimport type { Hex, Json } from '@metamask/utils';\n\nimport { PRODUCT_TYPES } from '../types.js';\nimport type {\n  ProductType,\n  RecurringInterval,\n  StartCryptoSubscriptionResponse,\n} from '../types.js';\n\nexport type { ChompIntentType };\n\n/**\n * Storage / CHOMP metadata type for cash-subscription delegations.\n *\n * The `'cash-subscription'` member of {@link ChompIntentType}.\n */\nexport const CASH_SUBSCRIPTION_DELEGATION_TYPE =\n  'cash-subscription' as const satisfies ChompIntentType;\n\nexport const SUBSCRIPTION_DELEGATION_APPROVAL_TYPE =\n  'subscription_delegation' as const;\n\nexport const SUBSCRIPTION_DELEGATION_POLICY_VERSION = '1' as const;\n\nexport type SubscriptionPermissionId = ChompIntentType;\n\nexport type MoneyAccountAuthorizationReason =\n  | 'controller-not-ready'\n  | 'address-not-associated'\n  | 'eip7702-not-active'\n  | 'monitoring-list-missing'\n  | 'configuration-changed';\n\nexport type UnsignedSubscriptionDelegation = {\n  delegate: Hex;\n  delegator: Hex;\n  authority: Hex;\n  caveats: {\n    enforcer: Hex;\n    terms: Hex;\n    args: Hex;\n  }[];\n  salt: Hex;\n};\n\nexport type SignedSubscriptionDelegation = UnsignedSubscriptionDelegation & {\n  signature: Hex;\n};\n\nexport type SubscriptionDelegationTypedData = {\n  types: Record<string, { name: string; type: string }[]>;\n  primaryType: string;\n  domain: {\n    chainId: number;\n    name: string;\n    version: string;\n    verifyingContract: Hex;\n  };\n  message: Json;\n};\n\nexport type DecodedPermission = {\n  tokenAddress: Hex;\n  delegateAddress: Hex;\n  periodAmount: string;\n  periodDuration: number;\n  startDate: number;\n  maxNativeValue: '0';\n};\n\nexport type PreparedSubscriptionPermission = {\n  id: SubscriptionPermissionId;\n  owner: 'money-account' | 'subscription';\n  disposition: 'new' | 'reused';\n  delegation: UnsignedSubscriptionDelegation;\n  typedData: SubscriptionDelegationTypedData;\n  decodedAuthority: DecodedPermission;\n  existingDelegationHash?: Hex;\n};\n\nexport type PreparedSubscriptionDelegationBundle = {\n  policyVersion: string;\n  account: Hex;\n  chainId: Hex;\n  permissions: PreparedSubscriptionPermission[];\n};\n\nexport type SubscriptionFundingRequest = {\n  useCase: 'subscription';\n  destinationAccount: Hex;\n  chainId: Hex;\n  targetToken: {\n    symbol: 'mUSD';\n    address: Hex;\n  };\n  targetAmount: string;\n};\n\nexport type SubscriptionDelegationApprovalResult = {\n  fundingTransactionHash: Hex;\n};\n\nexport type StartSubscriptionWithDelegationRequest = {\n  product: ProductType;\n  recurringInterval: RecurringInterval;\n  chainId: Hex;\n  payerAddress: Hex;\n  /**\n   * When `true`, skips the `ApprovalController:addRequest` consent and\n   * funding step and proceeds directly to signing, committing, and starting\n   * the subscription. Callers must have already obtained user consent and\n   * ensured the Money Account is funded.\n   */\n  skipApproval?: boolean;\n};\n\nexport type PrepareAuthorizationBundleResult =\n  | {\n      status: 'prepared';\n      bundle: PreparedSubscriptionDelegationBundle;\n    }\n  | {\n      status: 'money-account-authorization-required';\n      reasons: MoneyAccountAuthorizationReason[];\n    };\n\nexport type CommitAuthorizationBundleRequest = {\n  bundle: PreparedSubscriptionDelegationBundle;\n  signedPaymentDelegation: SignedSubscriptionDelegation;\n};\n\nexport type CommitAuthorizationBundleResult = {\n  paymentDelegationHash: Hex;\n};\n\nexport type StartSubscriptionWithDelegationResult =\n  StartCryptoSubscriptionResponse;\n\n/**\n * Request to prepare a cash-subscription delegation.\n *\n * The service resolves all amount, token, delegate, and trial-duration fields\n * from authoritative pricing held by `SubscriptionController`.\n *\n * Only Money Account Plus is supported; Shield continues to use ERC-20\n * approval rather than delegation.\n */\nexport type PrepareSubscriptionDelegationRequest = {\n  product: typeof PRODUCT_TYPES.MONEY_ACCOUNT_PLUS;\n  recurringInterval: RecurringInterval;\n  payerAddress: Hex;\n  /**\n   * Whether the user selected the pricing trial. Pricing `trialPeriodDays`\n   * only affects the delegation start date when this is true.\n   */\n  isTrialRequested: boolean;\n  /**\n   * When true, gates preparation on a sufficient Money Account balance\n   * (`unitAmount × minBillingCyclesForBalance` in mUSD) before side effects.\n   */\n  checkBalance?: boolean;\n  /**\n   * When true, skips CHOMP verify and intent registration. The returned\n   * delegation hash is computed locally. Defaults to false.\n   */\n  skipChompInteractions?: boolean;\n};\n\n/**\n * Result of {@link SubscriptionDelegationService.prepareDelegation}.\n */\nexport type PreparedSubscriptionDelegation = {\n  delegationHash: Hex;\n  disposition: 'created' | 'reused';\n};\n\n/**\n * Request to check whether a Money Account holds enough convertible mUSD value\n * to cover the subscription funding requirement.\n */\nexport type MoneyAccountBalanceCheckRequest = Pick<\n  PrepareSubscriptionDelegationRequest,\n  'product' | 'recurringInterval' | 'payerAddress'\n>;\n\n/**\n * Result of {@link SubscriptionDelegationService.checkMoneyAccountBalance}.\n * `balance` and `requiredBalance` are mUSD base units (6 decimals).\n */\nexport type MoneyAccountBalanceCheckResult = {\n  hasSufficientBalance: boolean;\n  balance: string;\n  requiredBalance: string;\n};\n\n/**\n * Delegation Framework enforcers used by cash-subscription delegations.\n */\nexport type SubscriptionDelegationEnforcers = {\n  erc20TokenPeriodTransfer: Hex;\n  allowedCalldata: Hex;\n};\n"]}