Note

Medium Risk
Changes the meaning of delegator on an experimental payment API; correct for delegation chains but may break consumers that assumed the leaf delegator.

Overview
The experimental createx402DelegationProvider payment payload now exposes the root delegator for the delegation chain instead of the leaf delegator from the newly signed open delegation.

resolveDelegationCreationContext computes rootDelegator as the delegator on the last entry in existingDelegations (from parentPermissionContext), or from when there is no parent chain, and the provider returns that address in delegator. Tests and the changelog entry for the experimental provider are updated accordingly.

Integrators that relied on the previous (incorrect) leaf delegator value will see a behavior change when redeeming or displaying x402 payloads with a parent permission context.

^{Reviewed by Cursor Bugbot for commit 3607751. Bugbot is set up for automated code reviews on this repo. Configure here.}