@metamask-previews/wallet-cli 0.0.0-preview-8bfa290fb → 0.0.0-preview-e8a256c39

package/dist/daemon/wallet-factory.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"wallet-factory.cjs","sourceRoot":"","sources":["../../src/daemon/wallet-factory.ts"],"names":[],"mappings":";;;AAAA,yEAAoF;AAKpF,qFAA4E;AAC5E,mDAAgD;AAChD,6FAKkD;AAClD,+DAAmE;AAEnE,6CAI0B;AAO1B,+CAAsC;AAEtC,uEAAgE;AAChE,mEAA8E;AAC9E,0DAA6D;AAI7D,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAuB3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,oBAAoB,CAC3B,eAAuB;IAEvB,OAAO;QACL,wBAAwB,EAAE;YACxB,GAAG,EAAE,iDAAoB,CAAC,GAAG;SAC9B;QACD,kBAAkB,EAAE;YAClB,kEAAkE;YAClE,6EAA6E;YAC7E,iDAAiD;YACjD,6DAA6D;YAC7D,mBAAmB,EAAE,GAAc,EAAE,CAAC,SAAS;SAChD;QACD,sBAAsB,EAAE;YACtB,mBAAmB,EAAE,IAAI,4BAAmB,EAAE;SAC/C;QACD,gBAAgB,EAAE;YAChB,qEAAqE;YACrE,UAAU;YACV,QAAQ,EAAE,KAAK;SAChB;QACD,iBAAiB,EAAE;YACjB,eAAe;SAChB;QACD,2BAA2B,EAAE;YAC3B,sBAAsB,EAAE,IAAI,uDAAsB,CAAC;gBACjD,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE;oBACN,qEAAqE;oBACrE,iEAAiE;oBACjE,MAAM,EAAE,2CAAU,CAAC,SAAS;oBAC5B,YAAY,EAAE,iDAAgB,CAAC,IAAI;oBACnC,WAAW,EAAE,gDAAe,CAAC,UAAU;iBACxC;aACF,CAAC;YACF,gBAAgB,EAAE,GAAW,EAAE,CAAC,KAAK;YACrC,aAAa,EAAE,OAAO;SACvB;QACD,cAAc,EAAE;YACd,OAAO,EAAE,IAAI,wCAAsB,EAAE;SACtC;QACD,qBAAqB,EAAE;YACrB,+DAA+D;YAC/D,mEAAmE;YACnE,8CAA8C;YAC9C,YAAY,EAAE,IAAI;YAClB,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,4BAA4B;YAC5B,KAAK,EAAE,EAAE;SACV;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,6BAA6B,CAAC,SAA8B;IACnE,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,kBAAkB,GAAG,IAAI,qBAAS,CAKtC;QACA,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,SAAyD;KAClE,CAAC,CAAC;IACH,kBAAkB,CAAC,qBAAqB,CACtC,8BAA8B,EAC9B,GAAG,EAAE,CAAC,CAAC;QACL,GAAG,IAAA,yDAAkC,GAAE;QACvC,WAAW,EAAE,EAAE;KAChB,CAAC,CACH,CAAC;IACF,kBAAkB,CAAC,qBAAqB,CACtC,gCAAgC,EAChC,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACI,KAAK,UAAU,YAAY,CAAC,EACjC,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,eAAe,EACf,GAAG,GACgB;IACnB,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,OAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,gCAAa,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,MAA0B,CAAC;IAC/B,IAAI,sBAAgD,CAAC;IACrD,IAAI,uBAAiD,CAAC;IACtD,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACtE,WAAW,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE1C,sEAAsE;QACtE,mEAAmE;QACnE,kCAAkC;QAClC,IAAI,WAAW,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,4EAA4E;gBAC1E,mEAAmE,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,IAAI,eAAM,CAAC;YAClB,KAAK;YACL,eAAe,EAAE,oBAAoB,CAAC,eAAe,CAAC;SACvD,CAAC,CAAC;QACH,6BAA6B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,sBAAsB,GAAG,IAAA,mCAAkB,EACzC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,kBAAkB,EACzB,KAAK,EACL,KAAK,CACN,CAAC;QAEF,mFAAmF;QACnF,uBAAuB,GAAG,IAAA,0CAAuB,EAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE3E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CACrC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAC1E,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,iCAAiC,YAAY,CAAC,MAAM,+EAA+E,WAAW,EAAE,CACjJ,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,wEAAwE;YACxE,uEAAuE;YACvE,8DAA8D;YAC9D,6CAA6C;YAC7C,MAAM,IAAA,mCAA0B,EAC9B,MAAM,EACL,QAAqB,CAAC,MAAM,EAAE,EAC/B,GAAG,CAAC,MAAM,EAAE,CACb,CAAC;QACJ,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CACzB,kCAAkC,EAClC,QAAQ,CAAC,MAAM,EAAE,CAClB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,cAAyC,CAAC;QAC9C,OAAO;YACL,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,CAAC,cAAc,KAAd,cAAc,GAAK,QAAQ,CAC1B,sBAAsB,EACtB,uBAAuB,EACvB,MAAM,EACN,KAAK,EACL,KAAK,CACN,EAAC;SACL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,CACZ,sBAAsB,EACtB,uBAAuB,EACvB,MAAM,EACN,KAAK,EACL,KAAK,CACN,CAAC;QAEF,IAAI,WAAW,IAAI,YAAY,KAAK,uBAAuB,EAAE,CAAC;YAC5D,wEAAwE;YACxE,0EAA0E;YAC1E,sEAAsE;YACtE,4DAA4D;YAC5D,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,YAAY,EAAE,GAAG,YAAY,MAAM,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,GAAG,CAC9D,CAAC,IAAI,EAAE,EAAE,CACP,IAAA,aAAE,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;gBACnD,KAAK,CACH,oBAAoB,IAAI,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CACxE,CAAC;YACJ,CAAC,CAAC,CACL,CACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AA9HD,oCA8HC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,kBAAkB,CAC/B,KAAoB,EACpB,eAAuB,EACvB,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,eAAM,CAAC;QACvB,eAAe,EAAE,oBAAoB,CAAC,eAAe,CAAC;KACvD,CAAC,CAAC;IACH,6BAA6B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,IAAA,0BAAS,EAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7C,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,WAAqC,EACrC,KAAa,EACb,KAAa;IAEb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,WAAW,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CACH,GAAG,KAAK,gEAAgE;YACtE,iCAAiC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,QAAQ,CACrB,sBAAgD,EAChD,uBAAiD,EACjD,MAA0B,EAC1B,KAAoB,EACpB,KAAa;IAEb,cAAc,CAAC,sBAAsB,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7D,cAAc,CAAC,uBAAuB,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,4CAA4C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAC1B,KAA8C;IAE9C,OAAO,OAAO,KAAK,CAAC,iBAAiB,EAAE,KAAK,KAAK,QAAQ,CAAC;AAC5D,CAAC","sourcesContent":["import { getDefaultAnalyticsControllerState } from '@metamask/analytics-controller';\nimport type {\n  AnalyticsControllerGetStateAction,\n  AnalyticsControllerTrackEventAction,\n} from '@metamask/analytics-controller';\nimport { ConfigRegistryApiEnv } from '@metamask/config-registry-controller';\nimport { Messenger } from '@metamask/messenger';\nimport {\n  ClientConfigApiService,\n  ClientType,\n  DistributionType,\n  EnvironmentType,\n} from '@metamask/remote-feature-flag-controller';\nimport { InMemoryStorageAdapter } from '@metamask/storage-service';\nimport type { Json } from '@metamask/utils';\nimport {\n  AlwaysOnlineAdapter,\n  importSecretRecoveryPhrase,\n  Wallet,\n} from '@metamask/wallet';\nimport type {\n  DefaultActions,\n  DefaultEvents,\n  RootMessenger,\n  WalletOptions,\n} from '@metamask/wallet';\nimport { rm } from 'node:fs/promises';\n\nimport { KeyValueStore } from '../persistence/KeyValueStore.js';\nimport { loadState, subscribeToChanges } from '../persistence/persistence.js';\nimport { subscribeToAutoApproval } from './auto-approval.js';\nimport type { Password, Srp } from './secrets.js';\nimport type { Logger } from './types.js';\n\nconst IN_MEMORY_DATABASE_PATH = ':memory:';\n\nexport type CreateWalletConfig = {\n  databasePath: string;\n  password?: Password;\n  srp: Srp;\n  infuraProjectId: string;\n  log?: Logger;\n};\n\nexport type CreateWalletResult = {\n  wallet: Wallet;\n  /**\n   * Tear down everything `createWallet` set up, in the order that keeps\n   * in-flight persistence writes valid: stop the state-change subscription,\n   * destroy the wallet, then close the store (closing first would cause a\n   * teardown-time persistence write to fail). Resilient — a failure in any\n   * step is logged and the remaining steps still run — and idempotent (repeat\n   * calls coalesce onto the same teardown).\n   */\n  dispose: () => Promise<void>;\n};\n\n/**\n * Build the per-instance options the daemon's `Wallet` is constructed with.\n *\n * Returns a fresh set on every call so the metadata probe and the real wallet\n * never share adapter/service instances (the probe is destroyed, which may\n * tear those instances down).\n *\n * Only the slots wired on `@metamask/wallet` today are populated:\n * - `storageService` — backed by an in-memory adapter. This is the wallet's\n *   large-blob store (snap source, caches), distinct from the SQLite\n *   `KeyValueStore` that persists controller state; no wired controller\n *   offloads durable data to it yet, so in-memory suffices.\n * - `connectivityController` — the `AlwaysOnlineAdapter` exported for\n *   node-like hosts that have no platform connectivity signal.\n * - `networkController` — the Infura project ID used to reach Infura RPC\n *   endpoints.\n * - `remoteFeatureFlagController` — a `ClientConfigApiService` fetching real\n *   flags over the network.\n * - `approvalController` — a no-op `showApprovalRequest` (the daemon is\n *   headless); pending requests are accepted separately by the auto-approval\n *   subscription `createWallet` installs, not by this hook.\n * - `gasFeeController` — only `clientId: 'cli'` (sent as `X-Client-Id` to the\n *   gas API); the API endpoints, poll interval, and compatibility callbacks are\n *   left at the wallet package's platform-agnostic defaults (the default\n *   `EIP1559APIEndpoint` is already the production URL, so the daemon does not\n *   re-specify it).\n * - `transactionController` — swaps processing disabled and no client hooks;\n *   see the slot's inline comment for why the daemon relies on the\n *   controller's defaults for everything else.\n *\n * The optional `keyringController` slot is intentionally omitted so the\n * controller's built-in defaults (e.g. the PBKDF2 encryptor) apply.\n *\n * @param infuraProjectId - The Infura project ID for the `NetworkController`.\n * @returns The `instanceOptions` for the `Wallet` constructor.\n */\nfunction buildInstanceOptions(\n  infuraProjectId: string,\n): WalletOptions['instanceOptions'] {\n  return {\n    configRegistryApiService: {\n      env: ConfigRegistryApiEnv.PRD,\n    },\n    approvalController: {\n      // The daemon is headless, so there is no UI to open: requests are\n      // resolved by the auto-approval subscription (see `subscribeToAutoApproval`)\n      // rather than by this hook, which stays a no-op.\n      // TODO: surface approval requests over the daemon transport.\n      showApprovalRequest: (): undefined => undefined,\n    },\n    connectivityController: {\n      connectivityAdapter: new AlwaysOnlineAdapter(),\n    },\n    gasFeeController: {\n      // Identifies the CLI to the gas estimation API via the `X-Client-Id`\n      // header.\n      clientId: 'cli',\n    },\n    networkController: {\n      infuraProjectId,\n    },\n    remoteFeatureFlagController: {\n      clientConfigApiService: new ClientConfigApiService({\n        fetch: globalThis.fetch,\n        config: {\n          // TODO: switch to a CLI-specific `ClientType` once one exists; until\n          // then `Extension` buckets feature flags as an extension client.\n          client: ClientType.Extension,\n          distribution: DistributionType.Main,\n          environment: EnvironmentType.Production,\n        },\n      }),\n      getMetaMetricsId: (): string => 'cli',\n      clientVersion: '0.0.0',\n    },\n    storageService: {\n      storage: new InMemoryStorageAdapter(),\n    },\n    transactionController: {\n      // The CLI exposes no swaps surface, so skip the swaps-specific\n      // post-processing a full wallet client runs (mobile makes the same\n      // choice; the extension keeps swaps enabled).\n      disableSwaps: true,\n      // No CLI-specific transaction hooks: the controller's built-in publish\n      // path broadcasts through the wired `NetworkController` provider, and the\n      // remaining hooks (metrics, notifications, gas-fee tokens) are client-UI\n      // concerns the headless daemon has no equivalent for. Every other option\n      // (`getPermittedAccounts`, `isSimulationEnabled`, `trace`, …) is left at\n      // the controller's default.\n      hooks: {},\n    },\n  };\n}\n\n/**\n * Register handlers for the `AnalyticsController` actions that\n * `NetworkController` calls to emit RPC service analytics. The daemon does not\n * report analytics, so these do nothing: `getState` returns an empty analytics\n * ID, which stops the controller before it tracks anything, and `trackEvent` is\n * a no-op. Registering them keeps those messenger calls from throwing.\n *\n * @param messenger - The wallet's root messenger.\n */\nfunction registerAnalyticsStubHandlers(messenger: Wallet['messenger']): void {\n  // Register on an `AnalyticsController`-namespaced messenger, not the root: a\n  // messenger can only register handlers for its own namespace, and doing so\n  // delegates them up to the root, where `NetworkController` can reach them.\n  const analyticsMessenger = new Messenger<\n    'AnalyticsController',\n    AnalyticsControllerGetStateAction | AnalyticsControllerTrackEventAction,\n    never,\n    RootMessenger<DefaultActions, DefaultEvents>\n  >({\n    namespace: 'AnalyticsController',\n    parent: messenger as RootMessenger<DefaultActions, DefaultEvents>,\n  });\n  analyticsMessenger.registerActionHandler(\n    'AnalyticsController:getState',\n    () => ({\n      ...getDefaultAnalyticsControllerState(),\n      analyticsId: '',\n    }),\n  );\n  analyticsMessenger.registerActionHandler(\n    'AnalyticsController:trackEvent',\n    () => undefined,\n  );\n}\n\n/**\n * Create a configured `Wallet` for daemon use, backed by a SQLite key-value\n * store for controller-state persistence.\n *\n * Loads any previously-persisted controller state from the store, seeds the\n * wallet with it, then subscribes the store to subsequent state changes so all\n * persist-flagged properties are written through.\n *\n * If the store does not yet contain a keyring vault (first run), the supplied\n * secret recovery phrase is imported using the supplied password. On\n * subsequent runs, the persisted vault is reused: when a password is\n * supplied, the wallet is unlocked via `KeyringController:submitPassword` so\n * keyring-bound messenger actions work immediately; when no password is\n * supplied, the wallet starts locked and the caller is expected to invoke\n * `mm wallet unlock` before any keyring-bound operation. First-run startup\n * without a password is rejected (the SRP cannot be imported without one).\n * On a subsequent run, a wrong password rejects startup with a `Failed to\n * unlock the persisted vault` error that wraps the `submitPassword` rejection.\n *\n * On any failure after the store is opened, the store is closed (and the wallet\n * destroyed, if constructed). On a first-run failure, the on-disk database is\n * also removed so a retry does not latch onto an orphaned partial vault — this\n * covers in-process failures only; a hard crash (SIGKILL/power loss) mid-import\n * can still leave a vault on disk.\n *\n * @param config - Wallet configuration.\n * @param config.databasePath - Path to the SQLite database file (or\n * `':memory:'` for ephemeral use).\n * @param config.password - The wallet password. Optional on subsequent runs;\n * when omitted, the daemon starts with a locked keyring. Required on first\n * run (to import the SRP).\n * @param config.srp - The secret recovery phrase (BIP-39 mnemonic). Used\n * only on first run.\n * @param config.infuraProjectId - The Infura project ID for the\n * `NetworkController`.\n * @param config.log - Optional logger for persistence-write and teardown\n * failures. Without it, failures fall back to `console.error` (which a detached\n * daemon's `stdio: 'ignore'` discards).\n * @returns The `Wallet` and a `dispose` handle that tears it down.\n */\nexport async function createWallet({\n  databasePath,\n  password,\n  srp,\n  infuraProjectId,\n  log,\n}: CreateWalletConfig): Promise<CreateWalletResult> {\n  const logFn = log ?? ((message: string): void => console.error(message));\n  const store = new KeyValueStore(databasePath);\n  let wallet: Wallet | undefined;\n  let persistenceUnsubscribe: (() => void) | undefined;\n  let autoApprovalUnsubscribe: (() => void) | undefined;\n  let wasFirstRun = false;\n\n  try {\n    const state = await loadPersistedState(store, infuraProjectId, logFn);\n    wasFirstRun = !hasPersistedKeyring(state);\n\n    // Validate the first-run precondition BEFORE constructing the wallet,\n    // so a doomed startup doesn't build a Wallet (and wire persistence\n    // handlers) just to tear it down.\n    if (wasFirstRun && password === undefined) {\n      throw new Error(\n        'A password is required on first run to import the secret recovery phrase. ' +\n          'Pass `--password` (or `MM_WALLET_PASSWORD`) on `mm daemon start`.',\n      );\n    }\n\n    wallet = new Wallet({\n      state,\n      instanceOptions: buildInstanceOptions(infuraProjectId),\n    });\n    registerAnalyticsStubHandlers(wallet.messenger);\n    persistenceUnsubscribe = subscribeToChanges(\n      wallet.messenger,\n      wallet.controllerMetadata,\n      store,\n      logFn,\n    );\n\n    // Installed before `init` so any approval raised during initialization is covered.\n    autoApprovalUnsubscribe = subscribeToAutoApproval(wallet.messenger, logFn);\n\n    // Complete post-construction controller setup before serving requests —\n    // e.g. `NetworkController.init` applies the selected network so a provider\n    // is available. `init` settles every step independently; a rejected step\n    // leaves the wallet only partially usable, so abort startup (the catch\n    // below tears down and, on first run, removes the partial database) rather\n    // than serving a degraded daemon.\n    const initResults = await wallet.init();\n    const initFailures = initResults.filter(\n      (result): result is PromiseRejectedResult => result.status === 'rejected',\n    );\n    for (const failure of initFailures) {\n      logFn(`Wallet init step failed: ${String(failure.reason)}`);\n    }\n    if (initFailures.length > 0) {\n      const firstReason = String(initFailures[0].reason);\n      throw new Error(\n        `Wallet initialization failed (${initFailures.length} step(s)); refusing to serve a partially initialized wallet. First failure: ${firstReason}`,\n      );\n    }\n\n    if (wasFirstRun) {\n      // The precondition check above throws when `wasFirstRun && password ===\n      // undefined`, so `password` is defined here. TS does not correlate the\n      // two separate variables, so it cannot narrow `password` from\n      // `wasFirstRun` alone — hence the assertion.\n      await importSecretRecoveryPhrase(\n        wallet,\n        (password as Password).unwrap(),\n        srp.unwrap(),\n      );\n    } else if (password !== undefined) {\n      try {\n        await wallet.messenger.call(\n          'KeyringController:submitPassword',\n          password.unwrap(),\n        );\n      } catch (error) {\n        throw new Error(\n          `Failed to unlock the persisted vault: ${String(error)}`,\n        );\n      }\n    }\n\n    let disposePromise: Promise<void> | undefined;\n    return {\n      wallet,\n      dispose: async () =>\n        (disposePromise ??= teardown(\n          persistenceUnsubscribe,\n          autoApprovalUnsubscribe,\n          wallet,\n          store,\n          logFn,\n        )),\n    };\n  } catch (error) {\n    await teardown(\n      persistenceUnsubscribe,\n      autoApprovalUnsubscribe,\n      wallet,\n      store,\n      logFn,\n    );\n\n    if (wasFirstRun && databasePath !== IN_MEMORY_DATABASE_PATH) {\n      // Best-effort cleanup of the on-disk SQLite files (main, WAL, SHM) so a\n      // partially-persisted KeyringController vault cannot mislead the next run\n      // into skipping SRP import. Covers in-process failures only — a crash\n      // (SIGKILL/power loss) mid-import leaves the vault on disk.\n      await Promise.all(\n        [databasePath, `${databasePath}-wal`, `${databasePath}-shm`].map(\n          (path) =>\n            rm(path, { force: true }).catch((rmError: unknown) => {\n              logFn(\n                `Failed to remove ${path} during first-run cleanup: ${String(rmError)}`,\n              );\n            }),\n        ),\n      );\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Load persisted controller state, filtered to currently persist-flagged\n * properties.\n *\n * `loadState` filters against the live controller metadata, but that metadata\n * is only knowable from a constructed `Wallet` — and its output is what seeds\n * the real wallet. So this constructs a short-lived probe purely to read the\n * metadata, then tears it down.\n *\n * TODO: drop the probe once `@metamask/wallet` exposes controller metadata\n * without constructing a `Wallet`.\n *\n * @param store - The key-value store to read from.\n * @param infuraProjectId - The Infura project ID for the probe's\n * `NetworkController`.\n * @param logFn - Logger for a probe-teardown failure.\n * @returns The filtered persisted state, suitable for the `Wallet` `state`\n * option.\n */\nasync function loadPersistedState(\n  store: KeyValueStore,\n  infuraProjectId: string,\n  logFn: Logger,\n): Promise<Record<string, Record<string, Json>>> {\n  const probe = new Wallet({\n    instanceOptions: buildInstanceOptions(infuraProjectId),\n  });\n  registerAnalyticsStubHandlers(probe.messenger);\n  try {\n    return loadState(store, probe.controllerMetadata);\n  } finally {\n    await probe.destroy().catch((error: unknown) => {\n      logFn(`Metadata probe destroy failed: ${String(error)}`);\n    });\n  }\n}\n\n/**\n * Best-effort unsubscribe: run the function if present, logging (and\n * swallowing) any error so a later teardown step still runs.\n *\n * @param unsubscribe - The unsubscribe function, if one was registered.\n * @param label - Human-readable subscription name for the failure log.\n * @param logFn - Logger for a failure.\n */\nfunction runUnsubscribe(\n  unsubscribe: (() => void) | undefined,\n  label: string,\n  logFn: Logger,\n): void {\n  if (!unsubscribe) {\n    return;\n  }\n  try {\n    unsubscribe();\n  } catch (error) {\n    logFn(\n      `${label} unsubscribe failed during teardown — subscription may remain ` +\n        `live until the process exits: ${String(error)}`,\n    );\n  }\n}\n\n/**\n * Persistence-safe teardown of a wallet and its store; see {@link\n * CreateWalletResult.dispose} for the ordering rationale. Each step is\n * best-effort, so a failure is logged and the remaining steps still run.\n *\n * @param persistenceUnsubscribe - The persistence-subscription unsubscribe\n * function, if one was registered.\n * @param autoApprovalUnsubscribe - The auto-approval-subscription unsubscribe\n * function, if one was registered.\n * @param wallet - The wallet to destroy, if one was constructed.\n * @param store - The store to close.\n * @param logFn - Logger for step failures.\n */\nasync function teardown(\n  persistenceUnsubscribe: (() => void) | undefined,\n  autoApprovalUnsubscribe: (() => void) | undefined,\n  wallet: Wallet | undefined,\n  store: KeyValueStore,\n  logFn: Logger,\n): Promise<void> {\n  runUnsubscribe(persistenceUnsubscribe, 'Persistence', logFn);\n  runUnsubscribe(autoApprovalUnsubscribe, 'Auto-approval', logFn);\n  if (wallet) {\n    try {\n      await wallet.destroy();\n    } catch (error) {\n      logFn(`wallet.destroy() failed during teardown: ${String(error)}`);\n    }\n  }\n  try {\n    store.close();\n  } catch (error) {\n    logFn(`store.close() failed during teardown: ${String(error)}`);\n  }\n}\n\n/**\n * Determine whether the loaded state already contains a keyring vault.\n *\n * The KeyringController persists its `vault` once an SRP has been imported, so\n * its presence indicates that first-run setup completed before.\n *\n * @param state - The state loaded from the key-value store.\n * @returns True if a KeyringController vault string is present.\n */\nfunction hasPersistedKeyring(\n  state: Record<string, Record<string, unknown>>,\n): boolean {\n  return typeof state.KeyringController?.vault === 'string';\n}\n"]}

package/dist/daemon/wallet-factory.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wallet-factory.d.cts","sourceRoot":"","sources":["../../src/daemon/wallet-factory.ts"],"names":[],"mappings":"AAeA,OAAO,EAGL,MAAM,EACP,yBAAyB;AAY1B,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAqB;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,oBAAmB;AAIzC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,GAAG,EAAE,GAAG,CAAC;IACT,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAmIF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAsB,YAAY,CAAC,EACjC,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,eAAe,EACf,GAAG,GACJ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwHlD"}

package/dist/daemon/wallet-factory.d.mts

@@ -1,64 +0,0 @@
-import { Wallet } from "@metamask/wallet";
-import type { Password, Srp } from "./secrets.mjs";
-import type { Logger } from "./types.mjs";
-export type CreateWalletConfig = {
-    databasePath: string;
-    password?: Password;
-    srp: Srp;
-    infuraProjectId: string;
-    log?: Logger;
-};
-export type CreateWalletResult = {
-    wallet: Wallet;
-    /**
-     * Tear down everything `createWallet` set up, in the order that keeps
-     * in-flight persistence writes valid: stop the state-change subscription,
-     * destroy the wallet, then close the store (closing first would cause a
-     * teardown-time persistence write to fail). Resilient — a failure in any
-     * step is logged and the remaining steps still run — and idempotent (repeat
-     * calls coalesce onto the same teardown).
-     */
-    dispose: () => Promise<void>;
-};
-/**
- * Create a configured `Wallet` for daemon use, backed by a SQLite key-value
- * store for controller-state persistence.
- *
- * Loads any previously-persisted controller state from the store, seeds the
- * wallet with it, then subscribes the store to subsequent state changes so all
- * persist-flagged properties are written through.
- *
- * If the store does not yet contain a keyring vault (first run), the supplied
- * secret recovery phrase is imported using the supplied password. On
- * subsequent runs, the persisted vault is reused: when a password is
- * supplied, the wallet is unlocked via `KeyringController:submitPassword` so
- * keyring-bound messenger actions work immediately; when no password is
- * supplied, the wallet starts locked and the caller is expected to invoke
- * `mm wallet unlock` before any keyring-bound operation. First-run startup
- * without a password is rejected (the SRP cannot be imported without one).
- * On a subsequent run, a wrong password rejects startup with a `Failed to
- * unlock the persisted vault` error that wraps the `submitPassword` rejection.
- *
- * On any failure after the store is opened, the store is closed (and the wallet
- * destroyed, if constructed). On a first-run failure, the on-disk database is
- * also removed so a retry does not latch onto an orphaned partial vault — this
- * covers in-process failures only; a hard crash (SIGKILL/power loss) mid-import
- * can still leave a vault on disk.
- *
- * @param config - Wallet configuration.
- * @param config.databasePath - Path to the SQLite database file (or
- * `':memory:'` for ephemeral use).
- * @param config.password - The wallet password. Optional on subsequent runs;
- * when omitted, the daemon starts with a locked keyring. Required on first
- * run (to import the SRP).
- * @param config.srp - The secret recovery phrase (BIP-39 mnemonic). Used
- * only on first run.
- * @param config.infuraProjectId - The Infura project ID for the
- * `NetworkController`.
- * @param config.log - Optional logger for persistence-write and teardown
- * failures. Without it, failures fall back to `console.error` (which a detached
- * daemon's `stdio: 'ignore'` discards).
- * @returns The `Wallet` and a `dispose` handle that tears it down.
- */
-export declare function createWallet({ databasePath, password, srp, infuraProjectId, log, }: CreateWalletConfig): Promise<CreateWalletResult>;
-//# sourceMappingURL=wallet-factory.d.mts.map

package/dist/daemon/wallet-factory.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wallet-factory.d.mts","sourceRoot":"","sources":["../../src/daemon/wallet-factory.ts"],"names":[],"mappings":"AAeA,OAAO,EAGL,MAAM,EACP,yBAAyB;AAY1B,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAqB;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,oBAAmB;AAIzC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,GAAG,EAAE,GAAG,CAAC;IACT,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAmIF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAsB,YAAY,CAAC,EACjC,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,eAAe,EACf,GAAG,GACJ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwHlD"}

package/dist/daemon/wallet-factory.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"wallet-factory.mjs","sourceRoot":"","sources":["../../src/daemon/wallet-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,uCAAuC;AAKpF,OAAO,EAAE,oBAAoB,EAAE,6CAA6C;AAC5E,OAAO,EAAE,SAAS,EAAE,4BAA4B;AAChD,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,eAAe,EAChB,iDAAiD;AAClD,OAAO,EAAE,sBAAsB,EAAE,kCAAkC;AAEnE,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,MAAM,EACP,yBAAyB;AAO1B,OAAO,EAAE,EAAE,EAAE,yBAAyB;AAEtC,OAAO,EAAE,aAAa,EAAE,yCAAwC;AAChE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,uCAAsC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,4BAA2B;AAI7D,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAuB3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,oBAAoB,CAC3B,eAAuB;IAEvB,OAAO;QACL,wBAAwB,EAAE;YACxB,GAAG,EAAE,oBAAoB,CAAC,GAAG;SAC9B;QACD,kBAAkB,EAAE;YAClB,kEAAkE;YAClE,6EAA6E;YAC7E,iDAAiD;YACjD,6DAA6D;YAC7D,mBAAmB,EAAE,GAAc,EAAE,CAAC,SAAS;SAChD;QACD,sBAAsB,EAAE;YACtB,mBAAmB,EAAE,IAAI,mBAAmB,EAAE;SAC/C;QACD,gBAAgB,EAAE;YAChB,qEAAqE;YACrE,UAAU;YACV,QAAQ,EAAE,KAAK;SAChB;QACD,iBAAiB,EAAE;YACjB,eAAe;SAChB;QACD,2BAA2B,EAAE;YAC3B,sBAAsB,EAAE,IAAI,sBAAsB,CAAC;gBACjD,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE;oBACN,qEAAqE;oBACrE,iEAAiE;oBACjE,MAAM,EAAE,UAAU,CAAC,SAAS;oBAC5B,YAAY,EAAE,gBAAgB,CAAC,IAAI;oBACnC,WAAW,EAAE,eAAe,CAAC,UAAU;iBACxC;aACF,CAAC;YACF,gBAAgB,EAAE,GAAW,EAAE,CAAC,KAAK;YACrC,aAAa,EAAE,OAAO;SACvB;QACD,cAAc,EAAE;YACd,OAAO,EAAE,IAAI,sBAAsB,EAAE;SACtC;QACD,qBAAqB,EAAE;YACrB,+DAA+D;YAC/D,mEAAmE;YACnE,8CAA8C;YAC9C,YAAY,EAAE,IAAI;YAClB,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,4BAA4B;YAC5B,KAAK,EAAE,EAAE;SACV;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,6BAA6B,CAAC,SAA8B;IACnE,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,kBAAkB,GAAG,IAAI,SAAS,CAKtC;QACA,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,SAAyD;KAClE,CAAC,CAAC;IACH,kBAAkB,CAAC,qBAAqB,CACtC,8BAA8B,EAC9B,GAAG,EAAE,CAAC,CAAC;QACL,GAAG,kCAAkC,EAAE;QACvC,WAAW,EAAE,EAAE;KAChB,CAAC,CACH,CAAC;IACF,kBAAkB,CAAC,qBAAqB,CACtC,gCAAgC,EAChC,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,eAAe,EACf,GAAG,GACgB;IACnB,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,OAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,MAA0B,CAAC;IAC/B,IAAI,sBAAgD,CAAC;IACrD,IAAI,uBAAiD,CAAC;IACtD,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACtE,WAAW,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE1C,sEAAsE;QACtE,mEAAmE;QACnE,kCAAkC;QAClC,IAAI,WAAW,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,4EAA4E;gBAC1E,mEAAmE,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,IAAI,MAAM,CAAC;YAClB,KAAK;YACL,eAAe,EAAE,oBAAoB,CAAC,eAAe,CAAC;SACvD,CAAC,CAAC;QACH,6BAA6B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,sBAAsB,GAAG,kBAAkB,CACzC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,kBAAkB,EACzB,KAAK,EACL,KAAK,CACN,CAAC;QAEF,mFAAmF;QACnF,uBAAuB,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE3E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CACrC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAC1E,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,iCAAiC,YAAY,CAAC,MAAM,+EAA+E,WAAW,EAAE,CACjJ,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,wEAAwE;YACxE,uEAAuE;YACvE,8DAA8D;YAC9D,6CAA6C;YAC7C,MAAM,0BAA0B,CAC9B,MAAM,EACL,QAAqB,CAAC,MAAM,EAAE,EAC/B,GAAG,CAAC,MAAM,EAAE,CACb,CAAC;QACJ,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CACzB,kCAAkC,EAClC,QAAQ,CAAC,MAAM,EAAE,CAClB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,cAAyC,CAAC;QAC9C,OAAO;YACL,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,CAAC,cAAc,KAAd,cAAc,GAAK,QAAQ,CAC1B,sBAAsB,EACtB,uBAAuB,EACvB,MAAM,EACN,KAAK,EACL,KAAK,CACN,EAAC;SACL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,CACZ,sBAAsB,EACtB,uBAAuB,EACvB,MAAM,EACN,KAAK,EACL,KAAK,CACN,CAAC;QAEF,IAAI,WAAW,IAAI,YAAY,KAAK,uBAAuB,EAAE,CAAC;YAC5D,wEAAwE;YACxE,0EAA0E;YAC1E,sEAAsE;YACtE,4DAA4D;YAC5D,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,YAAY,EAAE,GAAG,YAAY,MAAM,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,GAAG,CAC9D,CAAC,IAAI,EAAE,EAAE,CACP,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;gBACnD,KAAK,CACH,oBAAoB,IAAI,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CACxE,CAAC;YACJ,CAAC,CAAC,CACL,CACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,kBAAkB,CAC/B,KAAoB,EACpB,eAAuB,EACvB,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC;QACvB,eAAe,EAAE,oBAAoB,CAAC,eAAe,CAAC;KACvD,CAAC,CAAC;IACH,6BAA6B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7C,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,WAAqC,EACrC,KAAa,EACb,KAAa;IAEb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,WAAW,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CACH,GAAG,KAAK,gEAAgE;YACtE,iCAAiC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,QAAQ,CACrB,sBAAgD,EAChD,uBAAiD,EACjD,MAA0B,EAC1B,KAAoB,EACpB,KAAa;IAEb,cAAc,CAAC,sBAAsB,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7D,cAAc,CAAC,uBAAuB,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,4CAA4C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAC1B,KAA8C;IAE9C,OAAO,OAAO,KAAK,CAAC,iBAAiB,EAAE,KAAK,KAAK,QAAQ,CAAC;AAC5D,CAAC","sourcesContent":["import { getDefaultAnalyticsControllerState } from '@metamask/analytics-controller';\nimport type {\n  AnalyticsControllerGetStateAction,\n  AnalyticsControllerTrackEventAction,\n} from '@metamask/analytics-controller';\nimport { ConfigRegistryApiEnv } from '@metamask/config-registry-controller';\nimport { Messenger } from '@metamask/messenger';\nimport {\n  ClientConfigApiService,\n  ClientType,\n  DistributionType,\n  EnvironmentType,\n} from '@metamask/remote-feature-flag-controller';\nimport { InMemoryStorageAdapter } from '@metamask/storage-service';\nimport type { Json } from '@metamask/utils';\nimport {\n  AlwaysOnlineAdapter,\n  importSecretRecoveryPhrase,\n  Wallet,\n} from '@metamask/wallet';\nimport type {\n  DefaultActions,\n  DefaultEvents,\n  RootMessenger,\n  WalletOptions,\n} from '@metamask/wallet';\nimport { rm } from 'node:fs/promises';\n\nimport { KeyValueStore } from '../persistence/KeyValueStore.js';\nimport { loadState, subscribeToChanges } from '../persistence/persistence.js';\nimport { subscribeToAutoApproval } from './auto-approval.js';\nimport type { Password, Srp } from './secrets.js';\nimport type { Logger } from './types.js';\n\nconst IN_MEMORY_DATABASE_PATH = ':memory:';\n\nexport type CreateWalletConfig = {\n  databasePath: string;\n  password?: Password;\n  srp: Srp;\n  infuraProjectId: string;\n  log?: Logger;\n};\n\nexport type CreateWalletResult = {\n  wallet: Wallet;\n  /**\n   * Tear down everything `createWallet` set up, in the order that keeps\n   * in-flight persistence writes valid: stop the state-change subscription,\n   * destroy the wallet, then close the store (closing first would cause a\n   * teardown-time persistence write to fail). Resilient — a failure in any\n   * step is logged and the remaining steps still run — and idempotent (repeat\n   * calls coalesce onto the same teardown).\n   */\n  dispose: () => Promise<void>;\n};\n\n/**\n * Build the per-instance options the daemon's `Wallet` is constructed with.\n *\n * Returns a fresh set on every call so the metadata probe and the real wallet\n * never share adapter/service instances (the probe is destroyed, which may\n * tear those instances down).\n *\n * Only the slots wired on `@metamask/wallet` today are populated:\n * - `storageService` — backed by an in-memory adapter. This is the wallet's\n *   large-blob store (snap source, caches), distinct from the SQLite\n *   `KeyValueStore` that persists controller state; no wired controller\n *   offloads durable data to it yet, so in-memory suffices.\n * - `connectivityController` — the `AlwaysOnlineAdapter` exported for\n *   node-like hosts that have no platform connectivity signal.\n * - `networkController` — the Infura project ID used to reach Infura RPC\n *   endpoints.\n * - `remoteFeatureFlagController` — a `ClientConfigApiService` fetching real\n *   flags over the network.\n * - `approvalController` — a no-op `showApprovalRequest` (the daemon is\n *   headless); pending requests are accepted separately by the auto-approval\n *   subscription `createWallet` installs, not by this hook.\n * - `gasFeeController` — only `clientId: 'cli'` (sent as `X-Client-Id` to the\n *   gas API); the API endpoints, poll interval, and compatibility callbacks are\n *   left at the wallet package's platform-agnostic defaults (the default\n *   `EIP1559APIEndpoint` is already the production URL, so the daemon does not\n *   re-specify it).\n * - `transactionController` — swaps processing disabled and no client hooks;\n *   see the slot's inline comment for why the daemon relies on the\n *   controller's defaults for everything else.\n *\n * The optional `keyringController` slot is intentionally omitted so the\n * controller's built-in defaults (e.g. the PBKDF2 encryptor) apply.\n *\n * @param infuraProjectId - The Infura project ID for the `NetworkController`.\n * @returns The `instanceOptions` for the `Wallet` constructor.\n */\nfunction buildInstanceOptions(\n  infuraProjectId: string,\n): WalletOptions['instanceOptions'] {\n  return {\n    configRegistryApiService: {\n      env: ConfigRegistryApiEnv.PRD,\n    },\n    approvalController: {\n      // The daemon is headless, so there is no UI to open: requests are\n      // resolved by the auto-approval subscription (see `subscribeToAutoApproval`)\n      // rather than by this hook, which stays a no-op.\n      // TODO: surface approval requests over the daemon transport.\n      showApprovalRequest: (): undefined => undefined,\n    },\n    connectivityController: {\n      connectivityAdapter: new AlwaysOnlineAdapter(),\n    },\n    gasFeeController: {\n      // Identifies the CLI to the gas estimation API via the `X-Client-Id`\n      // header.\n      clientId: 'cli',\n    },\n    networkController: {\n      infuraProjectId,\n    },\n    remoteFeatureFlagController: {\n      clientConfigApiService: new ClientConfigApiService({\n        fetch: globalThis.fetch,\n        config: {\n          // TODO: switch to a CLI-specific `ClientType` once one exists; until\n          // then `Extension` buckets feature flags as an extension client.\n          client: ClientType.Extension,\n          distribution: DistributionType.Main,\n          environment: EnvironmentType.Production,\n        },\n      }),\n      getMetaMetricsId: (): string => 'cli',\n      clientVersion: '0.0.0',\n    },\n    storageService: {\n      storage: new InMemoryStorageAdapter(),\n    },\n    transactionController: {\n      // The CLI exposes no swaps surface, so skip the swaps-specific\n      // post-processing a full wallet client runs (mobile makes the same\n      // choice; the extension keeps swaps enabled).\n      disableSwaps: true,\n      // No CLI-specific transaction hooks: the controller's built-in publish\n      // path broadcasts through the wired `NetworkController` provider, and the\n      // remaining hooks (metrics, notifications, gas-fee tokens) are client-UI\n      // concerns the headless daemon has no equivalent for. Every other option\n      // (`getPermittedAccounts`, `isSimulationEnabled`, `trace`, …) is left at\n      // the controller's default.\n      hooks: {},\n    },\n  };\n}\n\n/**\n * Register handlers for the `AnalyticsController` actions that\n * `NetworkController` calls to emit RPC service analytics. The daemon does not\n * report analytics, so these do nothing: `getState` returns an empty analytics\n * ID, which stops the controller before it tracks anything, and `trackEvent` is\n * a no-op. Registering them keeps those messenger calls from throwing.\n *\n * @param messenger - The wallet's root messenger.\n */\nfunction registerAnalyticsStubHandlers(messenger: Wallet['messenger']): void {\n  // Register on an `AnalyticsController`-namespaced messenger, not the root: a\n  // messenger can only register handlers for its own namespace, and doing so\n  // delegates them up to the root, where `NetworkController` can reach them.\n  const analyticsMessenger = new Messenger<\n    'AnalyticsController',\n    AnalyticsControllerGetStateAction | AnalyticsControllerTrackEventAction,\n    never,\n    RootMessenger<DefaultActions, DefaultEvents>\n  >({\n    namespace: 'AnalyticsController',\n    parent: messenger as RootMessenger<DefaultActions, DefaultEvents>,\n  });\n  analyticsMessenger.registerActionHandler(\n    'AnalyticsController:getState',\n    () => ({\n      ...getDefaultAnalyticsControllerState(),\n      analyticsId: '',\n    }),\n  );\n  analyticsMessenger.registerActionHandler(\n    'AnalyticsController:trackEvent',\n    () => undefined,\n  );\n}\n\n/**\n * Create a configured `Wallet` for daemon use, backed by a SQLite key-value\n * store for controller-state persistence.\n *\n * Loads any previously-persisted controller state from the store, seeds the\n * wallet with it, then subscribes the store to subsequent state changes so all\n * persist-flagged properties are written through.\n *\n * If the store does not yet contain a keyring vault (first run), the supplied\n * secret recovery phrase is imported using the supplied password. On\n * subsequent runs, the persisted vault is reused: when a password is\n * supplied, the wallet is unlocked via `KeyringController:submitPassword` so\n * keyring-bound messenger actions work immediately; when no password is\n * supplied, the wallet starts locked and the caller is expected to invoke\n * `mm wallet unlock` before any keyring-bound operation. First-run startup\n * without a password is rejected (the SRP cannot be imported without one).\n * On a subsequent run, a wrong password rejects startup with a `Failed to\n * unlock the persisted vault` error that wraps the `submitPassword` rejection.\n *\n * On any failure after the store is opened, the store is closed (and the wallet\n * destroyed, if constructed). On a first-run failure, the on-disk database is\n * also removed so a retry does not latch onto an orphaned partial vault — this\n * covers in-process failures only; a hard crash (SIGKILL/power loss) mid-import\n * can still leave a vault on disk.\n *\n * @param config - Wallet configuration.\n * @param config.databasePath - Path to the SQLite database file (or\n * `':memory:'` for ephemeral use).\n * @param config.password - The wallet password. Optional on subsequent runs;\n * when omitted, the daemon starts with a locked keyring. Required on first\n * run (to import the SRP).\n * @param config.srp - The secret recovery phrase (BIP-39 mnemonic). Used\n * only on first run.\n * @param config.infuraProjectId - The Infura project ID for the\n * `NetworkController`.\n * @param config.log - Optional logger for persistence-write and teardown\n * failures. Without it, failures fall back to `console.error` (which a detached\n * daemon's `stdio: 'ignore'` discards).\n * @returns The `Wallet` and a `dispose` handle that tears it down.\n */\nexport async function createWallet({\n  databasePath,\n  password,\n  srp,\n  infuraProjectId,\n  log,\n}: CreateWalletConfig): Promise<CreateWalletResult> {\n  const logFn = log ?? ((message: string): void => console.error(message));\n  const store = new KeyValueStore(databasePath);\n  let wallet: Wallet | undefined;\n  let persistenceUnsubscribe: (() => void) | undefined;\n  let autoApprovalUnsubscribe: (() => void) | undefined;\n  let wasFirstRun = false;\n\n  try {\n    const state = await loadPersistedState(store, infuraProjectId, logFn);\n    wasFirstRun = !hasPersistedKeyring(state);\n\n    // Validate the first-run precondition BEFORE constructing the wallet,\n    // so a doomed startup doesn't build a Wallet (and wire persistence\n    // handlers) just to tear it down.\n    if (wasFirstRun && password === undefined) {\n      throw new Error(\n        'A password is required on first run to import the secret recovery phrase. ' +\n          'Pass `--password` (or `MM_WALLET_PASSWORD`) on `mm daemon start`.',\n      );\n    }\n\n    wallet = new Wallet({\n      state,\n      instanceOptions: buildInstanceOptions(infuraProjectId),\n    });\n    registerAnalyticsStubHandlers(wallet.messenger);\n    persistenceUnsubscribe = subscribeToChanges(\n      wallet.messenger,\n      wallet.controllerMetadata,\n      store,\n      logFn,\n    );\n\n    // Installed before `init` so any approval raised during initialization is covered.\n    autoApprovalUnsubscribe = subscribeToAutoApproval(wallet.messenger, logFn);\n\n    // Complete post-construction controller setup before serving requests —\n    // e.g. `NetworkController.init` applies the selected network so a provider\n    // is available. `init` settles every step independently; a rejected step\n    // leaves the wallet only partially usable, so abort startup (the catch\n    // below tears down and, on first run, removes the partial database) rather\n    // than serving a degraded daemon.\n    const initResults = await wallet.init();\n    const initFailures = initResults.filter(\n      (result): result is PromiseRejectedResult => result.status === 'rejected',\n    );\n    for (const failure of initFailures) {\n      logFn(`Wallet init step failed: ${String(failure.reason)}`);\n    }\n    if (initFailures.length > 0) {\n      const firstReason = String(initFailures[0].reason);\n      throw new Error(\n        `Wallet initialization failed (${initFailures.length} step(s)); refusing to serve a partially initialized wallet. First failure: ${firstReason}`,\n      );\n    }\n\n    if (wasFirstRun) {\n      // The precondition check above throws when `wasFirstRun && password ===\n      // undefined`, so `password` is defined here. TS does not correlate the\n      // two separate variables, so it cannot narrow `password` from\n      // `wasFirstRun` alone — hence the assertion.\n      await importSecretRecoveryPhrase(\n        wallet,\n        (password as Password).unwrap(),\n        srp.unwrap(),\n      );\n    } else if (password !== undefined) {\n      try {\n        await wallet.messenger.call(\n          'KeyringController:submitPassword',\n          password.unwrap(),\n        );\n      } catch (error) {\n        throw new Error(\n          `Failed to unlock the persisted vault: ${String(error)}`,\n        );\n      }\n    }\n\n    let disposePromise: Promise<void> | undefined;\n    return {\n      wallet,\n      dispose: async () =>\n        (disposePromise ??= teardown(\n          persistenceUnsubscribe,\n          autoApprovalUnsubscribe,\n          wallet,\n          store,\n          logFn,\n        )),\n    };\n  } catch (error) {\n    await teardown(\n      persistenceUnsubscribe,\n      autoApprovalUnsubscribe,\n      wallet,\n      store,\n      logFn,\n    );\n\n    if (wasFirstRun && databasePath !== IN_MEMORY_DATABASE_PATH) {\n      // Best-effort cleanup of the on-disk SQLite files (main, WAL, SHM) so a\n      // partially-persisted KeyringController vault cannot mislead the next run\n      // into skipping SRP import. Covers in-process failures only — a crash\n      // (SIGKILL/power loss) mid-import leaves the vault on disk.\n      await Promise.all(\n        [databasePath, `${databasePath}-wal`, `${databasePath}-shm`].map(\n          (path) =>\n            rm(path, { force: true }).catch((rmError: unknown) => {\n              logFn(\n                `Failed to remove ${path} during first-run cleanup: ${String(rmError)}`,\n              );\n            }),\n        ),\n      );\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Load persisted controller state, filtered to currently persist-flagged\n * properties.\n *\n * `loadState` filters against the live controller metadata, but that metadata\n * is only knowable from a constructed `Wallet` — and its output is what seeds\n * the real wallet. So this constructs a short-lived probe purely to read the\n * metadata, then tears it down.\n *\n * TODO: drop the probe once `@metamask/wallet` exposes controller metadata\n * without constructing a `Wallet`.\n *\n * @param store - The key-value store to read from.\n * @param infuraProjectId - The Infura project ID for the probe's\n * `NetworkController`.\n * @param logFn - Logger for a probe-teardown failure.\n * @returns The filtered persisted state, suitable for the `Wallet` `state`\n * option.\n */\nasync function loadPersistedState(\n  store: KeyValueStore,\n  infuraProjectId: string,\n  logFn: Logger,\n): Promise<Record<string, Record<string, Json>>> {\n  const probe = new Wallet({\n    instanceOptions: buildInstanceOptions(infuraProjectId),\n  });\n  registerAnalyticsStubHandlers(probe.messenger);\n  try {\n    return loadState(store, probe.controllerMetadata);\n  } finally {\n    await probe.destroy().catch((error: unknown) => {\n      logFn(`Metadata probe destroy failed: ${String(error)}`);\n    });\n  }\n}\n\n/**\n * Best-effort unsubscribe: run the function if present, logging (and\n * swallowing) any error so a later teardown step still runs.\n *\n * @param unsubscribe - The unsubscribe function, if one was registered.\n * @param label - Human-readable subscription name for the failure log.\n * @param logFn - Logger for a failure.\n */\nfunction runUnsubscribe(\n  unsubscribe: (() => void) | undefined,\n  label: string,\n  logFn: Logger,\n): void {\n  if (!unsubscribe) {\n    return;\n  }\n  try {\n    unsubscribe();\n  } catch (error) {\n    logFn(\n      `${label} unsubscribe failed during teardown — subscription may remain ` +\n        `live until the process exits: ${String(error)}`,\n    );\n  }\n}\n\n/**\n * Persistence-safe teardown of a wallet and its store; see {@link\n * CreateWalletResult.dispose} for the ordering rationale. Each step is\n * best-effort, so a failure is logged and the remaining steps still run.\n *\n * @param persistenceUnsubscribe - The persistence-subscription unsubscribe\n * function, if one was registered.\n * @param autoApprovalUnsubscribe - The auto-approval-subscription unsubscribe\n * function, if one was registered.\n * @param wallet - The wallet to destroy, if one was constructed.\n * @param store - The store to close.\n * @param logFn - Logger for step failures.\n */\nasync function teardown(\n  persistenceUnsubscribe: (() => void) | undefined,\n  autoApprovalUnsubscribe: (() => void) | undefined,\n  wallet: Wallet | undefined,\n  store: KeyValueStore,\n  logFn: Logger,\n): Promise<void> {\n  runUnsubscribe(persistenceUnsubscribe, 'Persistence', logFn);\n  runUnsubscribe(autoApprovalUnsubscribe, 'Auto-approval', logFn);\n  if (wallet) {\n    try {\n      await wallet.destroy();\n    } catch (error) {\n      logFn(`wallet.destroy() failed during teardown: ${String(error)}`);\n    }\n  }\n  try {\n    store.close();\n  } catch (error) {\n    logFn(`store.close() failed during teardown: ${String(error)}`);\n  }\n}\n\n/**\n * Determine whether the loaded state already contains a keyring vault.\n *\n * The KeyringController persists its `vault` once an SRP has been imported, so\n * its presence indicates that first-run setup completed before.\n *\n * @param state - The state loaded from the key-value store.\n * @returns True if a KeyringController vault string is present.\n */\nfunction hasPersistedKeyring(\n  state: Record<string, Record<string, unknown>>,\n): boolean {\n  return typeof state.KeyringController?.vault === 'string';\n}\n"]}

package/dist/persistence/KeyValueStore.cjs

@@ -1,79 +0,0 @@
-"use strict";
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-var _KeyValueStore_db, _KeyValueStore_getStmt, _KeyValueStore_setStmt, _KeyValueStore_deleteStmt, _KeyValueStore_getAllStmt;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KeyValueStore = void 0;
-const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
-/**
- * A synchronous key-value store backed by better-sqlite3.
- *
- * Uses a single `kv` table with TEXT key (primary key) and TEXT value
- * (JSON-serialized). Intended as the persistence backend for wallet
- * controller state.
- */
-class KeyValueStore {
-    constructor(databasePath) {
-        _KeyValueStore_db.set(this, void 0);
-        _KeyValueStore_getStmt.set(this, void 0);
-        _KeyValueStore_setStmt.set(this, void 0);
-        _KeyValueStore_deleteStmt.set(this, void 0);
-        _KeyValueStore_getAllStmt.set(this, void 0);
-        __classPrivateFieldSet(this, _KeyValueStore_db, new better_sqlite3_1.default(databasePath), "f");
-        __classPrivateFieldGet(this, _KeyValueStore_db, "f").pragma('journal_mode = WAL');
-        __classPrivateFieldGet(this, _KeyValueStore_db, "f").exec('CREATE TABLE IF NOT EXISTS kv (key TEXT PRIMARY KEY, value TEXT NOT NULL)');
-        __classPrivateFieldSet(this, _KeyValueStore_getStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('SELECT value FROM kv WHERE key = ?'), "f");
-        __classPrivateFieldSet(this, _KeyValueStore_setStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('INSERT OR REPLACE INTO kv (key, value) VALUES (?, ?)'), "f");
-        __classPrivateFieldSet(this, _KeyValueStore_deleteStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('DELETE FROM kv WHERE key = ?'), "f");
-        __classPrivateFieldSet(this, _KeyValueStore_getAllStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('SELECT key, value FROM kv'), "f");
-    }
-    get(key) {
-        const row = __classPrivateFieldGet(this, _KeyValueStore_getStmt, "f").get(key);
-        if (!row) {
-            return undefined;
-        }
-        try {
-            return JSON.parse(row.value);
-        }
-        catch {
-            throw new Error(`Failed to parse stored value for key '${key}'`);
-        }
-    }
-    set(key, value) {
-        __classPrivateFieldGet(this, _KeyValueStore_setStmt, "f").run(key, JSON.stringify(value));
-    }
-    getAll() {
-        const rows = __classPrivateFieldGet(this, _KeyValueStore_getAllStmt, "f").all();
-        const result = {};
-        for (const row of rows) {
-            try {
-                result[row.key] = JSON.parse(row.value);
-            }
-            catch {
-                throw new Error(`Failed to parse stored value for key '${row.key}'`);
-            }
-        }
-        return result;
-    }
-    delete(key) {
-        __classPrivateFieldGet(this, _KeyValueStore_deleteStmt, "f").run(key);
-    }
-    close() {
-        __classPrivateFieldGet(this, _KeyValueStore_db, "f").close();
-    }
-}
-exports.KeyValueStore = KeyValueStore;
-_KeyValueStore_db = new WeakMap(), _KeyValueStore_getStmt = new WeakMap(), _KeyValueStore_setStmt = new WeakMap(), _KeyValueStore_deleteStmt = new WeakMap(), _KeyValueStore_getAllStmt = new WeakMap();
-//# sourceMappingURL=KeyValueStore.cjs.map

package/dist/persistence/KeyValueStore.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"KeyValueStore.cjs","sourceRoot":"","sources":["../../src/persistence/KeyValueStore.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AACA,oEAAoC;AAEpC;;;;;;GAMG;AACH,MAAa,aAAa;IAWxB,YAAY,YAAoB;QAVvB,oCAAqB;QAErB,yCAAoE;QAEpE,yCAAmD;QAEnD,4CAA8C;QAE9C,4CAAkE;QAGzE,uBAAA,IAAI,qBAAO,IAAI,wBAAM,CAAC,YAAY,CAAC,MAAA,CAAC;QACpC,uBAAA,IAAI,yBAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtC,uBAAA,IAAI,yBAAI,CAAC,IAAI,CACX,2EAA2E,CAC5E,CAAC;QAEF,uBAAA,IAAI,0BAAY,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,MAAA,CAAC;QACvE,uBAAA,IAAI,0BAAY,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAC9B,sDAAsD,CACvD,MAAA,CAAC;QACF,uBAAA,IAAI,6BAAe,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,MAAA,CAAC;QACpE,uBAAA,IAAI,6BAAe,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,MAAA,CAAC;IACnE,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,GAAG,GAAG,uBAAA,IAAI,8BAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAW;QAC1B,uBAAA,IAAI,8BAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,GAAG,uBAAA,IAAI,iCAAY,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,uBAAA,IAAI,iCAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,uBAAA,IAAI,yBAAI,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF;AA9DD,sCA8DC","sourcesContent":["import type { Json } from '@metamask/utils';\nimport Sqlite from 'better-sqlite3';\n\n/**\n * A synchronous key-value store backed by better-sqlite3.\n *\n * Uses a single `kv` table with TEXT key (primary key) and TEXT value\n * (JSON-serialized). Intended as the persistence backend for wallet\n * controller state.\n */\nexport class KeyValueStore {\n  readonly #db: Sqlite.Database;\n\n  readonly #getStmt: Sqlite.Statement<[string], { value: string } | undefined>;\n\n  readonly #setStmt: Sqlite.Statement<[string, string], void>;\n\n  readonly #deleteStmt: Sqlite.Statement<[string], void>;\n\n  readonly #getAllStmt: Sqlite.Statement<[], { key: string; value: string }>;\n\n  constructor(databasePath: string) {\n    this.#db = new Sqlite(databasePath);\n    this.#db.pragma('journal_mode = WAL');\n    this.#db.exec(\n      'CREATE TABLE IF NOT EXISTS kv (key TEXT PRIMARY KEY, value TEXT NOT NULL)',\n    );\n\n    this.#getStmt = this.#db.prepare('SELECT value FROM kv WHERE key = ?');\n    this.#setStmt = this.#db.prepare(\n      'INSERT OR REPLACE INTO kv (key, value) VALUES (?, ?)',\n    );\n    this.#deleteStmt = this.#db.prepare('DELETE FROM kv WHERE key = ?');\n    this.#getAllStmt = this.#db.prepare('SELECT key, value FROM kv');\n  }\n\n  get(key: string): Json | undefined {\n    const row = this.#getStmt.get(key);\n    if (!row) {\n      return undefined;\n    }\n    try {\n      return JSON.parse(row.value);\n    } catch {\n      throw new Error(`Failed to parse stored value for key '${key}'`);\n    }\n  }\n\n  set(key: string, value: Json): void {\n    this.#setStmt.run(key, JSON.stringify(value));\n  }\n\n  getAll(): Record<string, Json> {\n    const rows = this.#getAllStmt.all();\n    const result: Record<string, Json> = {};\n    for (const row of rows) {\n      try {\n        result[row.key] = JSON.parse(row.value);\n      } catch {\n        throw new Error(`Failed to parse stored value for key '${row.key}'`);\n      }\n    }\n    return result;\n  }\n\n  delete(key: string): void {\n    this.#deleteStmt.run(key);\n  }\n\n  close(): void {\n    this.#db.close();\n  }\n}\n"]}

package/dist/persistence/KeyValueStore.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"KeyValueStore.d.cts","sourceRoot":"","sources":["../../src/persistence/KeyValueStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAG5C;;;;;;GAMG;AACH,qBAAa,aAAa;;gBAWZ,YAAY,EAAE,MAAM;IAehC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAYlC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI;IAInC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;IAa9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,KAAK,IAAI,IAAI;CAGd"}

package/dist/persistence/KeyValueStore.d.mts

@@ -1,18 +0,0 @@
-import type { Json } from "@metamask/utils";
-/**
- * A synchronous key-value store backed by better-sqlite3.
- *
- * Uses a single `kv` table with TEXT key (primary key) and TEXT value
- * (JSON-serialized). Intended as the persistence backend for wallet
- * controller state.
- */
-export declare class KeyValueStore {
-    #private;
-    constructor(databasePath: string);
-    get(key: string): Json | undefined;
-    set(key: string, value: Json): void;
-    getAll(): Record<string, Json>;
-    delete(key: string): void;
-    close(): void;
-}
-//# sourceMappingURL=KeyValueStore.d.mts.map

package/dist/persistence/KeyValueStore.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"KeyValueStore.d.mts","sourceRoot":"","sources":["../../src/persistence/KeyValueStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAG5C;;;;;;GAMG;AACH,qBAAa,aAAa;;gBAWZ,YAAY,EAAE,MAAM;IAehC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAYlC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI;IAInC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;IAa9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,KAAK,IAAI,IAAI;CAGd"}

package/dist/persistence/KeyValueStore.mjs

@@ -1,79 +0,0 @@
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _KeyValueStore_db, _KeyValueStore_getStmt, _KeyValueStore_setStmt, _KeyValueStore_deleteStmt, _KeyValueStore_getAllStmt;
-function $importDefault(module) {
-    if (module?.__esModule) {
-        return module.default;
-    }
-    return module;
-}
-import $Sqlite from "better-sqlite3";
-const Sqlite = $importDefault($Sqlite);
-/**
- * A synchronous key-value store backed by better-sqlite3.
- *
- * Uses a single `kv` table with TEXT key (primary key) and TEXT value
- * (JSON-serialized). Intended as the persistence backend for wallet
- * controller state.
- */
-export class KeyValueStore {
-    constructor(databasePath) {
-        _KeyValueStore_db.set(this, void 0);
-        _KeyValueStore_getStmt.set(this, void 0);
-        _KeyValueStore_setStmt.set(this, void 0);
-        _KeyValueStore_deleteStmt.set(this, void 0);
-        _KeyValueStore_getAllStmt.set(this, void 0);
-        __classPrivateFieldSet(this, _KeyValueStore_db, new Sqlite(databasePath), "f");
-        __classPrivateFieldGet(this, _KeyValueStore_db, "f").pragma('journal_mode = WAL');
-        __classPrivateFieldGet(this, _KeyValueStore_db, "f").exec('CREATE TABLE IF NOT EXISTS kv (key TEXT PRIMARY KEY, value TEXT NOT NULL)');
-        __classPrivateFieldSet(this, _KeyValueStore_getStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('SELECT value FROM kv WHERE key = ?'), "f");
-        __classPrivateFieldSet(this, _KeyValueStore_setStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('INSERT OR REPLACE INTO kv (key, value) VALUES (?, ?)'), "f");
-        __classPrivateFieldSet(this, _KeyValueStore_deleteStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('DELETE FROM kv WHERE key = ?'), "f");
-        __classPrivateFieldSet(this, _KeyValueStore_getAllStmt, __classPrivateFieldGet(this, _KeyValueStore_db, "f").prepare('SELECT key, value FROM kv'), "f");
-    }
-    get(key) {
-        const row = __classPrivateFieldGet(this, _KeyValueStore_getStmt, "f").get(key);
-        if (!row) {
-            return undefined;
-        }
-        try {
-            return JSON.parse(row.value);
-        }
-        catch {
-            throw new Error(`Failed to parse stored value for key '${key}'`);
-        }
-    }
-    set(key, value) {
-        __classPrivateFieldGet(this, _KeyValueStore_setStmt, "f").run(key, JSON.stringify(value));
-    }
-    getAll() {
-        const rows = __classPrivateFieldGet(this, _KeyValueStore_getAllStmt, "f").all();
-        const result = {};
-        for (const row of rows) {
-            try {
-                result[row.key] = JSON.parse(row.value);
-            }
-            catch {
-                throw new Error(`Failed to parse stored value for key '${row.key}'`);
-            }
-        }
-        return result;
-    }
-    delete(key) {
-        __classPrivateFieldGet(this, _KeyValueStore_deleteStmt, "f").run(key);
-    }
-    close() {
-        __classPrivateFieldGet(this, _KeyValueStore_db, "f").close();
-    }
-}
-_KeyValueStore_db = new WeakMap(), _KeyValueStore_getStmt = new WeakMap(), _KeyValueStore_setStmt = new WeakMap(), _KeyValueStore_deleteStmt = new WeakMap(), _KeyValueStore_getAllStmt = new WeakMap();
-//# sourceMappingURL=KeyValueStore.mjs.map

package/dist/persistence/KeyValueStore.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"KeyValueStore.mjs","sourceRoot":"","sources":["../../src/persistence/KeyValueStore.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AACA,OAAO,OAAM,uBAAuB;;AAEpC;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IAWxB,YAAY,YAAoB;QAVvB,oCAAqB;QAErB,yCAAoE;QAEpE,yCAAmD;QAEnD,4CAA8C;QAE9C,4CAAkE;QAGzE,uBAAA,IAAI,qBAAO,IAAI,MAAM,CAAC,YAAY,CAAC,MAAA,CAAC;QACpC,uBAAA,IAAI,yBAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtC,uBAAA,IAAI,yBAAI,CAAC,IAAI,CACX,2EAA2E,CAC5E,CAAC;QAEF,uBAAA,IAAI,0BAAY,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,MAAA,CAAC;QACvE,uBAAA,IAAI,0BAAY,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAC9B,sDAAsD,CACvD,MAAA,CAAC;QACF,uBAAA,IAAI,6BAAe,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,MAAA,CAAC;QACpE,uBAAA,IAAI,6BAAe,uBAAA,IAAI,yBAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,MAAA,CAAC;IACnE,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,GAAG,GAAG,uBAAA,IAAI,8BAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAW;QAC1B,uBAAA,IAAI,8BAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,GAAG,uBAAA,IAAI,iCAAY,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,uBAAA,IAAI,iCAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,uBAAA,IAAI,yBAAI,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF","sourcesContent":["import type { Json } from '@metamask/utils';\nimport Sqlite from 'better-sqlite3';\n\n/**\n * A synchronous key-value store backed by better-sqlite3.\n *\n * Uses a single `kv` table with TEXT key (primary key) and TEXT value\n * (JSON-serialized). Intended as the persistence backend for wallet\n * controller state.\n */\nexport class KeyValueStore {\n  readonly #db: Sqlite.Database;\n\n  readonly #getStmt: Sqlite.Statement<[string], { value: string } | undefined>;\n\n  readonly #setStmt: Sqlite.Statement<[string, string], void>;\n\n  readonly #deleteStmt: Sqlite.Statement<[string], void>;\n\n  readonly #getAllStmt: Sqlite.Statement<[], { key: string; value: string }>;\n\n  constructor(databasePath: string) {\n    this.#db = new Sqlite(databasePath);\n    this.#db.pragma('journal_mode = WAL');\n    this.#db.exec(\n      'CREATE TABLE IF NOT EXISTS kv (key TEXT PRIMARY KEY, value TEXT NOT NULL)',\n    );\n\n    this.#getStmt = this.#db.prepare('SELECT value FROM kv WHERE key = ?');\n    this.#setStmt = this.#db.prepare(\n      'INSERT OR REPLACE INTO kv (key, value) VALUES (?, ?)',\n    );\n    this.#deleteStmt = this.#db.prepare('DELETE FROM kv WHERE key = ?');\n    this.#getAllStmt = this.#db.prepare('SELECT key, value FROM kv');\n  }\n\n  get(key: string): Json | undefined {\n    const row = this.#getStmt.get(key);\n    if (!row) {\n      return undefined;\n    }\n    try {\n      return JSON.parse(row.value);\n    } catch {\n      throw new Error(`Failed to parse stored value for key '${key}'`);\n    }\n  }\n\n  set(key: string, value: Json): void {\n    this.#setStmt.run(key, JSON.stringify(value));\n  }\n\n  getAll(): Record<string, Json> {\n    const rows = this.#getAllStmt.all();\n    const result: Record<string, Json> = {};\n    for (const row of rows) {\n      try {\n        result[row.key] = JSON.parse(row.value);\n      } catch {\n        throw new Error(`Failed to parse stored value for key '${row.key}'`);\n      }\n    }\n    return result;\n  }\n\n  delete(key: string): void {\n    this.#deleteStmt.run(key);\n  }\n\n  close(): void {\n    this.#db.close();\n  }\n}\n"]}

package/dist/persistence/persistence.cjs

@@ -1,204 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.subscribeToChanges = exports.loadState = void 0;
-const utils_1 = require("@metamask/utils");
-/**
- * Construct a store key from a controller name and property name.
- *
- * @param controllerName - The controller name.
- * @param propertyName - The property name.
- * @returns The store key in the format `ControllerName.propertyName`.
- */
-function storeKey(controllerName, propertyName) {
-    return `${controllerName}.${propertyName}`;
-}
-/**
- * Load persisted state from the key-value store and reconstruct it as
- * a record keyed by controller name.
- *
- * Keys in the store follow the format `ControllerName.propertyName`.
- * This function groups them into `{ [controllerName]: { [propertyName]: value } }`.
- *
- * Only properties that are currently persist-flagged in `controllerMetadata`
- * are rehydrated. Rows for controllers or properties that no longer exist — or
- * whose `persist` flag has since been disabled — are ignored. This keeps
- * loading symmetric with {@link subscribeToChanges}, which only ever writes
- * persist-flagged properties: without the filter, a migration that stops
- * persisting a property would leave its stale row on disk to be resurrected
- * into the `Wallet` constructor state on the next restart.
- *
- * @param store - The key-value store to read from.
- * @param controllerMetadata - A map from controller name to its state metadata,
- * used to filter out keys that are no longer persist-flagged.
- * @returns A record of controller states, keyed by controller name, suitable
- * for the `state` option of the `Wallet` constructor.
- */
-function loadState(store, controllerMetadata) {
-    const allPairs = store.getAll();
-    const state = {};
-    for (const [key, value] of Object.entries(allPairs)) {
-        const dotIndex = key.indexOf('.');
-        if (dotIndex === -1) {
-            throw new Error(`Invalid key in store: '${key}'. Expected format 'ControllerName.propertyName'.`);
-        }
-        const controllerName = key.slice(0, dotIndex);
-        const propertyName = key.slice(dotIndex + 1);
-        if (!controllerName || !propertyName) {
-            throw new Error(`Invalid key in store: '${key}'. Both controller name and property name must be non-empty.`);
-        }
-        if (!isPersisted(controllerMetadata[controllerName], propertyName)) {
-            continue;
-        }
-        if (!state[controllerName]) {
-            state[controllerName] = {};
-        }
-        state[controllerName][propertyName] = value;
-    }
-    return state;
-}
-exports.loadState = loadState;
-/**
- * Subscribe to all controller `stateChanged` events and persist changes
- * to the key-value store.
- *
- * For each controller's metadata, this function determines which state
- * properties are persist-flagged. When a `stateChanged` event fires, it uses
- * the Immer patches to identify which top-level properties changed, filters
- * to only persist-flagged properties, and writes them to the store.
- *
- * @param messenger - The root messenger to subscribe on.
- * @param controllerMetadata - A map from controller name to its state metadata.
- * @param store - The key-value store to write to.
- * @param log - Optional logger for persistence-write failures. Defaults to
- * `console.error` when omitted. A daemon host should supply its own logger,
- * since a backgrounded daemon's stdio may be discarded.
- * @returns A function that unsubscribes all persistence handlers.
- */
-function subscribeToChanges(messenger, controllerMetadata, store, log) {
-    const unsubscribers = [];
-    const logFn = log ??
-        ((message) => {
-            console.error(message);
-        });
-    for (const [controllerName, metadata] of Object.entries(controllerMetadata)) {
-        const persistedProperties = getPersistPropertyNames(metadata);
-        if (persistedProperties.size === 0) {
-            continue;
-        }
-        const eventType = `${controllerName}:stateChanged`;
-        const handler = (state, patches) => {
-            const changed = getChangedProperties(patches, persistedProperties);
-            for (const prop of changed) {
-                const key = storeKey(controllerName, prop);
-                const removed = !(0, utils_1.hasProperty)(state, prop);
-                // Derive the value before the try/catch so a throwing `StateDeriver`
-                // surfaces as its own error instead of a misreported write failure.
-                const persistFlag = metadata[prop]?.persist;
-                const value = !removed && typeof persistFlag === 'function'
-                    ? persistFlag(state[prop])
-                    : state[prop];
-                try {
-                    if (removed) {
-                        store.delete(key);
-                    }
-                    else {
-                        store.set(key, value);
-                    }
-                }
-                catch (error) {
-                    // TODO: Surface persistence-write failures up the stack so callers
-                    // can decide to halt rather than continue with diverging in-memory
-                    // and on-disk state. For now, log and continue.
-                    logFn(`Failed to persist state for ${key}: ${String(error)}`);
-                }
-            }
-        };
-        unsubscribers.push(subscribeToStateChanged(messenger, eventType, handler));
-    }
-    const unsubscribeAll = () => {
-        while (unsubscribers.length > 0) {
-            unsubscribers.pop()?.();
-        }
-    };
-    return unsubscribeAll;
-}
-exports.subscribeToChanges = subscribeToChanges;
-/**
- * Subscribe a handler to a controller's `stateChanged` event.
- *
- * The event name is built from a runtime controller name, so it widens to
- * `string` and cannot be proven to be a literal member of the messenger's event
- * union at compile time. This helper localizes that single unavoidable cast
- * behind a typed {@link StateChangedHandler}, so the `(state, patches)` payload
- * shape stays compile-checked at every call site instead of being erased by a
- * statement-level `@ts-expect-error`.
- *
- * @param messenger - The root messenger to subscribe on.
- * @param eventType - The `${controllerName}:stateChanged` event name.
- * @param handler - The state-change handler to register.
- * @returns A function that unsubscribes the handler.
- */
-function subscribeToStateChanged(messenger, eventType, handler) {
-    const subscriber = messenger;
-    subscriber.subscribe(eventType, handler);
-    return () => {
-        subscriber.unsubscribe(eventType, handler);
-    };
-}
-/**
- * Determine whether a property is currently persist-flagged.
- *
- * The `persist` flag is truthy when it is `true` or a `StateDeriver` function,
- * and falsy when it is `false` or when the controller or property is absent
- * from the metadata. `loadState` and `subscribeToChanges` share this predicate
- * so the read and write paths can never disagree on what counts as persisted.
- *
- * @param metadata - The controller's state metadata, or `undefined` when the
- * controller is absent from the metadata map.
- * @param propertyName - The property name to check.
- * @returns `true` if the property should be persisted.
- */
-function isPersisted(metadata, propertyName) {
-    return Boolean(metadata?.[propertyName]?.persist);
-}
-/**
- * Get the set of property names whose `persist` metadata is truthy
- * (either `true` or a `StateDeriver` function).
- *
- * @param metadata - The controller's state metadata.
- * @returns A set of property names that should be persisted.
- */
-function getPersistPropertyNames(metadata) {
-    const names = new Set();
-    for (const key of Object.keys(metadata)) {
-        if (isPersisted(metadata, key)) {
-            names.add(key);
-        }
-    }
-    return names;
-}
-/**
- * Extracts the set of persist-flagged top-level property names that changed
- * from an array of Immer patches.
- *
- * If any patch has an empty path (indicating a root state replacement),
- * all persist-flagged properties are returned.
- *
- * @param patches - Immer patches from a state update.
- * @param persistedProperties - The set of persist-flagged property names.
- * @returns A set of top-level property names that were modified.
- */
-function getChangedProperties(patches, persistedProperties) {
-    const changed = new Set();
-    for (const patch of patches) {
-        if (patch.path.length === 0) {
-            return persistedProperties;
-        }
-        const prop = String(patch.path[0]);
-        if (persistedProperties.has(prop)) {
-            changed.add(prop);
-        }
-    }
-    return changed;
-}
-//# sourceMappingURL=persistence.cjs.map