feat: add getApprovals to PhishingController

[AugmentedMode]

Summary

• Adds getApprovals method to PhishingController that wraps the security alerts API POST /address/evm/approvals endpoint (Blockaid's approvals endpoint)
• Returns token approvals for an EVM address with security enrichments (verdict, spender info, exposure data, allowance details)
• Follows the existing scanAddress pattern (input validation, chain resolution, safelyExecuteWithTimeout) but intentionally does not cache — the frontend manages state

Changes

• src/types.ts — Added ApprovalResultType/ApprovalFeatureType enums and types: Approval, ApprovalsResponse, Allowance, ApprovalAsset, Exposure, Spender, ApprovalFeature
• src/PhishingController.ts — Added APPROVALS_ENDPOINT constant, PhishingControllerGetApprovalsAction action type, messenger registration, and getApprovals method
• src/index.ts — Exported all new types and enums
• src/PhishingController.test.ts — Added 8 test cases covering: valid response, missing address/chainId, unknown chain, HTTP errors, timeout, address/chainId normalization

---

Note

Medium Risk
Adds a new network-backed controller method that calls the Security Alerts approvals endpoint; correctness depends on chain resolution/support gating and error/timeout handling to avoid unexpected empty results.

Overview
Adds a new PhishingController:getApprovals messenger action and getApprovals(chainId, address) method that POSTs to the Security Alerts API (/address/evm/approvals) to retrieve token approvals with security enrichments, returning { approvals: [] } for invalid inputs, unsupported/unknown chains, HTTP errors, or timeouts.

Introduces approval domain types/enums (ApprovalsResponse, Approval, ApprovalResultType, etc.), a supported-chain allowlist (APPROVAL_SUPPORTED_CHAINS) with isApprovalSupportedChain, exports these from index.ts, and adds comprehensive unit tests covering success, normalization, unsupported chains, errors, and timeout behavior.

^{Written by Cursor Bugbot for commit e2ad990. This will update automatically on new commits. Configure here.}

[imblue-dabadee]

May as well use the enum that is introduced (ApprovalResultType and ApprovalFeatureType).

[AugmentedMode]

Done, updated to use ApprovalResultType and ApprovalFeatureType enums.

[imblue-dabadee]

The flow duplicates scanAddress, seems like a good opportunity to extract the shared logic and reuse for both.

[AugmentedMode]

Agreed there's duplication. Similar to the test scaffold

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}