@metamask-previews/wallet-cli 0.0.0-preview-9298fa429 → 0.0.0-preview-574b60e35

package/dist/daemon/data-dir.d.mts

@@ -0,0 +1,14 @@
+/**
+ * Create the daemon's data directory (if it does not exist) and restrict it to
+ * the owning user.
+ *
+ * The mode is `0o700` (owner-only). The daemon exposes the full wallet
+ * messenger over the socket inside this directory, so anyone who can traverse
+ * the dir can also `connect()` to the socket. Restricting to the owning user is
+ * the only access-control boundary. We `chmod` after `mkdir` because the `mode`
+ * option is ignored when the directory already exists.
+ *
+ * @param dataDir - The data directory to create and lock down.
+ */
+export declare function ensureOwnerOnlyDirectory(dataDir: string): Promise<void>;
+//# sourceMappingURL=data-dir.d.mts.map

package/dist/daemon/data-dir.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-dir.d.mts","sourceRoot":"","sources":["../../src/daemon/data-dir.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG7E"}

package/dist/daemon/data-dir.mjs

@@ -0,0 +1,19 @@
+import { mkdirSync } from "node:fs";
+import { chmod } from "node:fs/promises";
+/**
+ * Create the daemon's data directory (if it does not exist) and restrict it to
+ * the owning user.
+ *
+ * The mode is `0o700` (owner-only). The daemon exposes the full wallet
+ * messenger over the socket inside this directory, so anyone who can traverse
+ * the dir can also `connect()` to the socket. Restricting to the owning user is
+ * the only access-control boundary. We `chmod` after `mkdir` because the `mode`
+ * option is ignored when the directory already exists.
+ *
+ * @param dataDir - The data directory to create and lock down.
+ */
+export async function ensureOwnerOnlyDirectory(dataDir) {
+    mkdirSync(dataDir, { recursive: true, mode: 0o700 });
+    await chmod(dataDir, 0o700);
+}
+//# sourceMappingURL=data-dir.mjs.map

package/dist/daemon/data-dir.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-dir.mjs","sourceRoot":"","sources":["../../src/daemon/data-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB;AACpC,OAAO,EAAE,KAAK,EAAE,yBAAyB;AAEzC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAe;IAC5D,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { mkdirSync } from 'node:fs';\nimport { chmod } from 'node:fs/promises';\n\n/**\n * Create the daemon's data directory (if it does not exist) and restrict it to\n * the owning user.\n *\n * The mode is `0o700` (owner-only). The daemon exposes the full wallet\n * messenger over the socket inside this directory, so anyone who can traverse\n * the dir can also `connect()` to the socket. Restricting to the owning user is\n * the only access-control boundary. We `chmod` after `mkdir` because the `mode`\n * option is ignored when the directory already exists.\n *\n * @param dataDir - The data directory to create and lock down.\n */\nexport async function ensureOwnerOnlyDirectory(dataDir: string): Promise<void> {\n  mkdirSync(dataDir, { recursive: true, mode: 0o700 });\n  await chmod(dataDir, 0o700);\n}\n"]}

package/dist/daemon/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Json } from '@metamask/utils';\n\n/**\n * A function that handles a JSON-RPC method call.\n *\n * The `params` argument will be `null` if the client did not provide params.\n */\nexport type RpcHandler = (params: Json) => Promise<Json | void>;\n\n/**\n * A map of RPC method names to their handler functions.\n */\nexport type RpcHandlerMap = Record<string, RpcHandler>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password: string;\n  srp: string;\n  packageRoot: string;\n};\n"]}
+{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Json } from '@metamask/utils';\n\n/**\n * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be\n * discarded, so hosts supply a logger that writes somewhere durable.\n */\nexport type Logger = (message: string) => void;\n\n/**\n * A function that handles a JSON-RPC method call.\n *\n * The `params` argument will be `null` if the client did not provide params.\n */\nexport type RpcHandler = (params: Json) => Promise<Json | void>;\n\n/**\n * A map of RPC method names to their handler functions.\n */\nexport type RpcHandlerMap = Record<string, RpcHandler>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password: string;\n  srp: string;\n  packageRoot: string;\n};\n"]}

package/dist/daemon/types.d.cts

@@ -1,4 +1,9 @@
 import type { Json } from "@metamask/utils";
+/**
+ * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be
+ * discarded, so hosts supply a logger that writes somewhere durable.
+ */
+export type Logger = (message: string) => void;
 /**
  * A function that handles a JSON-RPC method call.
  *

package/dist/daemon/types.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.cts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}
+{"version":3,"file":"types.d.cts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}

package/dist/daemon/types.d.mts

@@ -1,4 +1,9 @@
 import type { Json } from "@metamask/utils";
+/**
+ * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be
+ * discarded, so hosts supply a logger that writes somewhere durable.
+ */
+export type Logger = (message: string) => void;
 /**
  * A function that handles a JSON-RPC method call.
  *

package/dist/daemon/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}
+{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}

package/dist/daemon/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Json } from '@metamask/utils';\n\n/**\n * A function that handles a JSON-RPC method call.\n *\n * The `params` argument will be `null` if the client did not provide params.\n */\nexport type RpcHandler = (params: Json) => Promise<Json | void>;\n\n/**\n * A map of RPC method names to their handler functions.\n */\nexport type RpcHandlerMap = Record<string, RpcHandler>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password: string;\n  srp: string;\n  packageRoot: string;\n};\n"]}
+{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Json } from '@metamask/utils';\n\n/**\n * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be\n * discarded, so hosts supply a logger that writes somewhere durable.\n */\nexport type Logger = (message: string) => void;\n\n/**\n * A function that handles a JSON-RPC method call.\n *\n * The `params` argument will be `null` if the client did not provide params.\n */\nexport type RpcHandler = (params: Json) => Promise<Json | void>;\n\n/**\n * A map of RPC method names to their handler functions.\n */\nexport type RpcHandlerMap = Record<string, RpcHandler>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password: string;\n  srp: string;\n  packageRoot: string;\n};\n"]}

package/dist/daemon/wallet-factory.cjs

@@ -0,0 +1,234 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWallet = void 0;
+const remote_feature_flag_controller_1 = require("@metamask/remote-feature-flag-controller");
+const storage_service_1 = require("@metamask/storage-service");
+const wallet_1 = require("@metamask/wallet");
+const promises_1 = require("node:fs/promises");
+const KeyValueStore_1 = require("../persistence/KeyValueStore.cjs");
+const persistence_1 = require("../persistence/persistence.cjs");
+const IN_MEMORY_DATABASE_PATH = ':memory:';
+/**
+ * Build the per-instance options the daemon's `Wallet` is constructed with.
+ *
+ * Returns a fresh set on every call so the metadata probe and the real wallet
+ * never share adapter/service instances (the probe is destroyed, which may
+ * tear those instances down).
+ *
+ * Only the slots wired on `@metamask/wallet` today are populated:
+ * - `storageService` — backed by an in-memory adapter. This is the wallet's
+ *   large-blob store (snap source, caches), distinct from the SQLite
+ *   `KeyValueStore` that persists controller state; no wired controller
+ *   offloads durable data to it yet, so in-memory suffices.
+ * - `connectivityController` — the `AlwaysOnlineAdapter` exported for
+ *   node-like hosts that have no platform connectivity signal.
+ * - `networkController` — the Infura project ID used to reach Infura RPC
+ *   endpoints.
+ * - `remoteFeatureFlagController` — a `ClientConfigApiService` fetching real
+ *   flags over the network.
+ * - `approvalController` — a no-op `showApprovalRequest` (the daemon is
+ *   headless).
+ *
+ * The optional `keyringController` slot is intentionally omitted so the
+ * controller's built-in defaults (e.g. the PBKDF2 encryptor) apply.
+ *
+ * @param infuraProjectId - The Infura project ID for the `NetworkController`.
+ * @returns The `instanceOptions` for the `Wallet` constructor.
+ */
+function buildInstanceOptions(infuraProjectId) {
+    return {
+        approvalController: {
+            // TODO: surface approval requests over the daemon transport.
+            showApprovalRequest: () => undefined,
+        },
+        connectivityController: {
+            connectivityAdapter: new wallet_1.AlwaysOnlineAdapter(),
+        },
+        networkController: {
+            infuraProjectId,
+        },
+        remoteFeatureFlagController: {
+            clientConfigApiService: new remote_feature_flag_controller_1.ClientConfigApiService({
+                fetch: globalThis.fetch,
+                config: {
+                    // TODO: switch to a CLI-specific `ClientType` once one exists; until
+                    // then `Extension` buckets feature flags as an extension client.
+                    client: remote_feature_flag_controller_1.ClientType.Extension,
+                    distribution: remote_feature_flag_controller_1.DistributionType.Main,
+                    environment: remote_feature_flag_controller_1.EnvironmentType.Production,
+                },
+            }),
+            getMetaMetricsId: () => 'cli',
+            clientVersion: '0.0.0',
+        },
+        storageService: {
+            storage: new storage_service_1.InMemoryStorageAdapter(),
+        },
+        // TODO(#8975): add the `transactionController` slot once it is wired.
+    };
+}
+/**
+ * Create a configured `Wallet` for daemon use, backed by a SQLite key-value
+ * store for controller-state persistence.
+ *
+ * Loads any previously-persisted controller state from the store, seeds the
+ * wallet with it, then subscribes the store to subsequent state changes so all
+ * persist-flagged properties are written through.
+ *
+ * If the store does not yet contain a keyring vault (first run), the supplied
+ * secret recovery phrase is imported. On subsequent runs the persisted vault is
+ * reused — `password`/`srp` go unused and the wallet starts locked; the caller
+ * unlocks it via `KeyringController:submitPassword` before any keyring-bound
+ * operation.
+ *
+ * On any failure after the store is opened, the store is closed (and the wallet
+ * destroyed, if constructed). On a first-run failure, the on-disk database is
+ * also removed so a retry does not latch onto an orphaned partial vault — this
+ * covers in-process failures only; a hard crash (SIGKILL/power loss) mid-import
+ * can still leave a vault on disk.
+ *
+ * @param config - Wallet configuration.
+ * @param config.databasePath - Path to the SQLite database file (or
+ * `':memory:'` for ephemeral use).
+ * @param config.password - The wallet password.
+ * @param config.srp - The secret recovery phrase (BIP-39 mnemonic).
+ * @param config.infuraProjectId - The Infura project ID for the
+ * `NetworkController`.
+ * @param config.log - Optional logger for persistence-write and teardown
+ * failures. Without it, failures fall back to `console.error` (which a detached
+ * daemon's `stdio: 'ignore'` discards).
+ * @returns The `Wallet` and a `dispose` handle that tears it down.
+ */
+async function createWallet({ databasePath, password, srp, infuraProjectId, log, }) {
+    const logFn = log ?? ((message) => console.error(message));
+    const store = new KeyValueStore_1.KeyValueStore(databasePath);
+    let wallet;
+    let unsubscribe;
+    let wasFirstRun = false;
+    try {
+        const state = await loadPersistedState(store, infuraProjectId, logFn);
+        wasFirstRun = !hasPersistedKeyring(state);
+        wallet = new wallet_1.Wallet({
+            state,
+            instanceOptions: buildInstanceOptions(infuraProjectId),
+        });
+        unsubscribe = (0, persistence_1.subscribeToChanges)(wallet.messenger, wallet.controllerMetadata, store, logFn);
+        // Complete post-construction controller setup before serving requests —
+        // e.g. `NetworkController.init` applies the selected network so a provider
+        // is available. `init` settles every step independently; a rejected step
+        // leaves the wallet only partially usable, so abort startup (the catch
+        // below tears down and, on first run, removes the partial database) rather
+        // than serving a degraded daemon.
+        const initResults = await wallet.init();
+        const initFailures = initResults.filter((result) => result.status === 'rejected');
+        for (const failure of initFailures) {
+            logFn(`Wallet init step failed: ${String(failure.reason)}`);
+        }
+        if (initFailures.length > 0) {
+            const firstReason = String(initFailures[0].reason);
+            throw new Error(`Wallet initialization failed (${initFailures.length} step(s)); refusing to serve a partially initialized wallet. First failure: ${firstReason}`);
+        }
+        if (wasFirstRun) {
+            await (0, wallet_1.importSecretRecoveryPhrase)(wallet, password, srp);
+        }
+        let disposePromise;
+        return {
+            wallet,
+            dispose: async () => (disposePromise ?? (disposePromise = teardown(unsubscribe, wallet, store, logFn))),
+        };
+    }
+    catch (error) {
+        await teardown(unsubscribe, wallet, store, logFn);
+        if (wasFirstRun && databasePath !== IN_MEMORY_DATABASE_PATH) {
+            // Best-effort cleanup of the on-disk SQLite files (main, WAL, SHM) so a
+            // partially-persisted KeyringController vault cannot mislead the next run
+            // into skipping SRP import. Covers in-process failures only — a crash
+            // (SIGKILL/power loss) mid-import leaves the vault on disk.
+            await Promise.all([databasePath, `${databasePath}-wal`, `${databasePath}-shm`].map((path) => (0, promises_1.rm)(path, { force: true }).catch((rmError) => {
+                logFn(`Failed to remove ${path} during first-run cleanup: ${String(rmError)}`);
+            })));
+        }
+        throw error;
+    }
+}
+exports.createWallet = createWallet;
+/**
+ * Load persisted controller state, filtered to currently persist-flagged
+ * properties.
+ *
+ * `loadState` filters against the live controller metadata, but that metadata
+ * is only knowable from a constructed `Wallet` — and its output is what seeds
+ * the real wallet. So this constructs a short-lived probe purely to read the
+ * metadata, then tears it down.
+ *
+ * TODO: drop the probe once `@metamask/wallet` exposes controller metadata
+ * without constructing a `Wallet`.
+ *
+ * @param store - The key-value store to read from.
+ * @param infuraProjectId - The Infura project ID for the probe's
+ * `NetworkController`.
+ * @param logFn - Logger for a probe-teardown failure.
+ * @returns The filtered persisted state, suitable for the `Wallet` `state`
+ * option.
+ */
+async function loadPersistedState(store, infuraProjectId, logFn) {
+    const probe = new wallet_1.Wallet({
+        instanceOptions: buildInstanceOptions(infuraProjectId),
+    });
+    try {
+        return (0, persistence_1.loadState)(store, probe.controllerMetadata);
+    }
+    finally {
+        await probe.destroy().catch((error) => {
+            logFn(`Metadata probe destroy failed: ${String(error)}`);
+        });
+    }
+}
+/**
+ * Persistence-safe teardown of a wallet and its store; see {@link
+ * CreateWalletResult.dispose} for the ordering rationale. Each step is
+ * best-effort, so a failure is logged and the remaining steps still run.
+ *
+ * @param unsubscribe - The persistence-subscription unsubscribe function, if
+ * one was registered.
+ * @param wallet - The wallet to destroy, if one was constructed.
+ * @param store - The store to close.
+ * @param logFn - Logger for step failures.
+ */
+async function teardown(unsubscribe, wallet, store, logFn) {
+    if (unsubscribe) {
+        try {
+            unsubscribe();
+        }
+        catch (error) {
+            logFn(`Persistence unsubscribe failed during teardown: ${String(error)}`);
+        }
+    }
+    if (wallet) {
+        try {
+            await wallet.destroy();
+        }
+        catch (error) {
+            logFn(`wallet.destroy() failed during teardown: ${String(error)}`);
+        }
+    }
+    try {
+        store.close();
+    }
+    catch (error) {
+        logFn(`store.close() failed during teardown: ${String(error)}`);
+    }
+}
+/**
+ * Determine whether the loaded state already contains a keyring vault.
+ *
+ * The KeyringController persists its `vault` once an SRP has been imported, so
+ * its presence indicates that first-run setup completed before.
+ *
+ * @param state - The state loaded from the key-value store.
+ * @returns True if a KeyringController vault string is present.
+ */
+function hasPersistedKeyring(state) {
+    return typeof state.KeyringController?.vault === 'string';
+}
+//# sourceMappingURL=wallet-factory.cjs.map

package/dist/daemon/wallet-factory.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-factory.cjs","sourceRoot":"","sources":["../../src/daemon/wallet-factory.ts"],"names":[],"mappings":";;;AAAA,6FAKkD;AAClD,+DAAmE;AAEnE,6CAI0B;AAE1B,+CAAsC;AAEtC,oEAA6D;AAC7D,gEAA2E;AAG3E,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAuB3C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAS,oBAAoB,CAC3B,eAAuB;IAEvB,OAAO;QACL,kBAAkB,EAAE;YAClB,6DAA6D;YAC7D,mBAAmB,EAAE,GAAc,EAAE,CAAC,SAAS;SAChD;QACD,sBAAsB,EAAE;YACtB,mBAAmB,EAAE,IAAI,4BAAmB,EAAE;SAC/C;QACD,iBAAiB,EAAE;YACjB,eAAe;SAChB;QACD,2BAA2B,EAAE;YAC3B,sBAAsB,EAAE,IAAI,uDAAsB,CAAC;gBACjD,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE;oBACN,qEAAqE;oBACrE,iEAAiE;oBACjE,MAAM,EAAE,2CAAU,CAAC,SAAS;oBAC5B,YAAY,EAAE,iDAAgB,CAAC,IAAI;oBACnC,WAAW,EAAE,gDAAe,CAAC,UAAU;iBACxC;aACF,CAAC;YACF,gBAAgB,EAAE,GAAW,EAAE,CAAC,KAAK;YACrC,aAAa,EAAE,OAAO;SACvB;QACD,cAAc,EAAE;YACd,OAAO,EAAE,IAAI,wCAAsB,EAAE;SACtC;QACD,sEAAsE;KACvE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACI,KAAK,UAAU,YAAY,CAAC,EACjC,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,eAAe,EACf,GAAG,GACgB;IACnB,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,OAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,6BAAa,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,MAA0B,CAAC;IAC/B,IAAI,WAAqC,CAAC;IAC1C,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACtE,WAAW,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,GAAG,IAAI,eAAM,CAAC;YAClB,KAAK;YACL,eAAe,EAAE,oBAAoB,CAAC,eAAe,CAAC;SACvD,CAAC,CAAC;QACH,WAAW,GAAG,IAAA,gCAAkB,EAC9B,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,kBAAkB,EACzB,KAAK,EACL,KAAK,CACN,CAAC;QAEF,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CACrC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAC1E,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,iCAAiC,YAAY,CAAC,MAAM,+EAA+E,WAAW,EAAE,CACjJ,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAA,mCAA0B,EAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,cAAyC,CAAC;QAC9C,OAAO;YACL,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,CAAC,cAAc,KAAd,cAAc,GAAK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAElD,IAAI,WAAW,IAAI,YAAY,KAAK,uBAAuB,EAAE,CAAC;YAC5D,wEAAwE;YACxE,0EAA0E;YAC1E,sEAAsE;YACtE,4DAA4D;YAC5D,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,YAAY,EAAE,GAAG,YAAY,MAAM,EAAE,GAAG,YAAY,MAAM,CAAC,CAAC,GAAG,CAC9D,CAAC,IAAI,EAAE,EAAE,CACP,IAAA,aAAE,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;gBACnD,KAAK,CACH,oBAAoB,IAAI,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CACxE,CAAC;YACJ,CAAC,CAAC,CACL,CACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAhFD,oCAgFC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,kBAAkB,CAC/B,KAAoB,EACpB,eAAuB,EACvB,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,eAAM,CAAC;QACvB,eAAe,EAAE,oBAAoB,CAAC,eAAe,CAAC;KACvD,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,IAAA,uBAAS,EAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7C,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,QAAQ,CACrB,WAAqC,EACrC,MAA0B,EAC1B,KAAoB,EACpB,KAAa;IAEb,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,WAAW,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,mDAAmD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,4CAA4C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAC1B,KAA8C;IAE9C,OAAO,OAAO,KAAK,CAAC,iBAAiB,EAAE,KAAK,KAAK,QAAQ,CAAC;AAC5D,CAAC","sourcesContent":["import {\n  ClientConfigApiService,\n  ClientType,\n  DistributionType,\n  EnvironmentType,\n} from '@metamask/remote-feature-flag-controller';\nimport { InMemoryStorageAdapter } from '@metamask/storage-service';\nimport type { Json } from '@metamask/utils';\nimport {\n  AlwaysOnlineAdapter,\n  importSecretRecoveryPhrase,\n  Wallet,\n} from '@metamask/wallet';\nimport type { WalletOptions } from '@metamask/wallet';\nimport { rm } from 'node:fs/promises';\n\nimport { KeyValueStore } from '../persistence/KeyValueStore';\nimport { loadState, subscribeToChanges } from '../persistence/persistence';\nimport type { Logger } from './types';\n\nconst IN_MEMORY_DATABASE_PATH = ':memory:';\n\nexport type CreateWalletConfig = {\n  databasePath: string;\n  password: string;\n  srp: string;\n  infuraProjectId: string;\n  log?: Logger;\n};\n\nexport type CreateWalletResult = {\n  wallet: Wallet;\n  /**\n   * Tear down everything `createWallet` set up, in the order that keeps\n   * in-flight persistence writes valid: stop the state-change subscription,\n   * destroy the wallet, then close the store (closing first would cause a\n   * teardown-time persistence write to fail). Resilient — a failure in any\n   * step is logged and the remaining steps still run — and idempotent (repeat\n   * calls coalesce onto the same teardown).\n   */\n  dispose: () => Promise<void>;\n};\n\n/**\n * Build the per-instance options the daemon's `Wallet` is constructed with.\n *\n * Returns a fresh set on every call so the metadata probe and the real wallet\n * never share adapter/service instances (the probe is destroyed, which may\n * tear those instances down).\n *\n * Only the slots wired on `@metamask/wallet` today are populated:\n * - `storageService` — backed by an in-memory adapter. This is the wallet's\n *   large-blob store (snap source, caches), distinct from the SQLite\n *   `KeyValueStore` that persists controller state; no wired controller\n *   offloads durable data to it yet, so in-memory suffices.\n * - `connectivityController` — the `AlwaysOnlineAdapter` exported for\n *   node-like hosts that have no platform connectivity signal.\n * - `networkController` — the Infura project ID used to reach Infura RPC\n *   endpoints.\n * - `remoteFeatureFlagController` — a `ClientConfigApiService` fetching real\n *   flags over the network.\n * - `approvalController` — a no-op `showApprovalRequest` (the daemon is\n *   headless).\n *\n * The optional `keyringController` slot is intentionally omitted so the\n * controller's built-in defaults (e.g. the PBKDF2 encryptor) apply.\n *\n * @param infuraProjectId - The Infura project ID for the `NetworkController`.\n * @returns The `instanceOptions` for the `Wallet` constructor.\n */\nfunction buildInstanceOptions(\n  infuraProjectId: string,\n): WalletOptions['instanceOptions'] {\n  return {\n    approvalController: {\n      // TODO: surface approval requests over the daemon transport.\n      showApprovalRequest: (): undefined => undefined,\n    },\n    connectivityController: {\n      connectivityAdapter: new AlwaysOnlineAdapter(),\n    },\n    networkController: {\n      infuraProjectId,\n    },\n    remoteFeatureFlagController: {\n      clientConfigApiService: new ClientConfigApiService({\n        fetch: globalThis.fetch,\n        config: {\n          // TODO: switch to a CLI-specific `ClientType` once one exists; until\n          // then `Extension` buckets feature flags as an extension client.\n          client: ClientType.Extension,\n          distribution: DistributionType.Main,\n          environment: EnvironmentType.Production,\n        },\n      }),\n      getMetaMetricsId: (): string => 'cli',\n      clientVersion: '0.0.0',\n    },\n    storageService: {\n      storage: new InMemoryStorageAdapter(),\n    },\n    // TODO(#8975): add the `transactionController` slot once it is wired.\n  };\n}\n\n/**\n * Create a configured `Wallet` for daemon use, backed by a SQLite key-value\n * store for controller-state persistence.\n *\n * Loads any previously-persisted controller state from the store, seeds the\n * wallet with it, then subscribes the store to subsequent state changes so all\n * persist-flagged properties are written through.\n *\n * If the store does not yet contain a keyring vault (first run), the supplied\n * secret recovery phrase is imported. On subsequent runs the persisted vault is\n * reused — `password`/`srp` go unused and the wallet starts locked; the caller\n * unlocks it via `KeyringController:submitPassword` before any keyring-bound\n * operation.\n *\n * On any failure after the store is opened, the store is closed (and the wallet\n * destroyed, if constructed). On a first-run failure, the on-disk database is\n * also removed so a retry does not latch onto an orphaned partial vault — this\n * covers in-process failures only; a hard crash (SIGKILL/power loss) mid-import\n * can still leave a vault on disk.\n *\n * @param config - Wallet configuration.\n * @param config.databasePath - Path to the SQLite database file (or\n * `':memory:'` for ephemeral use).\n * @param config.password - The wallet password.\n * @param config.srp - The secret recovery phrase (BIP-39 mnemonic).\n * @param config.infuraProjectId - The Infura project ID for the\n * `NetworkController`.\n * @param config.log - Optional logger for persistence-write and teardown\n * failures. Without it, failures fall back to `console.error` (which a detached\n * daemon's `stdio: 'ignore'` discards).\n * @returns The `Wallet` and a `dispose` handle that tears it down.\n */\nexport async function createWallet({\n  databasePath,\n  password,\n  srp,\n  infuraProjectId,\n  log,\n}: CreateWalletConfig): Promise<CreateWalletResult> {\n  const logFn = log ?? ((message: string): void => console.error(message));\n  const store = new KeyValueStore(databasePath);\n  let wallet: Wallet | undefined;\n  let unsubscribe: (() => void) | undefined;\n  let wasFirstRun = false;\n\n  try {\n    const state = await loadPersistedState(store, infuraProjectId, logFn);\n    wasFirstRun = !hasPersistedKeyring(state);\n\n    wallet = new Wallet({\n      state,\n      instanceOptions: buildInstanceOptions(infuraProjectId),\n    });\n    unsubscribe = subscribeToChanges(\n      wallet.messenger,\n      wallet.controllerMetadata,\n      store,\n      logFn,\n    );\n\n    // Complete post-construction controller setup before serving requests —\n    // e.g. `NetworkController.init` applies the selected network so a provider\n    // is available. `init` settles every step independently; a rejected step\n    // leaves the wallet only partially usable, so abort startup (the catch\n    // below tears down and, on first run, removes the partial database) rather\n    // than serving a degraded daemon.\n    const initResults = await wallet.init();\n    const initFailures = initResults.filter(\n      (result): result is PromiseRejectedResult => result.status === 'rejected',\n    );\n    for (const failure of initFailures) {\n      logFn(`Wallet init step failed: ${String(failure.reason)}`);\n    }\n    if (initFailures.length > 0) {\n      const firstReason = String(initFailures[0].reason);\n      throw new Error(\n        `Wallet initialization failed (${initFailures.length} step(s)); refusing to serve a partially initialized wallet. First failure: ${firstReason}`,\n      );\n    }\n\n    if (wasFirstRun) {\n      await importSecretRecoveryPhrase(wallet, password, srp);\n    }\n\n    let disposePromise: Promise<void> | undefined;\n    return {\n      wallet,\n      dispose: async () =>\n        (disposePromise ??= teardown(unsubscribe, wallet, store, logFn)),\n    };\n  } catch (error) {\n    await teardown(unsubscribe, wallet, store, logFn);\n\n    if (wasFirstRun && databasePath !== IN_MEMORY_DATABASE_PATH) {\n      // Best-effort cleanup of the on-disk SQLite files (main, WAL, SHM) so a\n      // partially-persisted KeyringController vault cannot mislead the next run\n      // into skipping SRP import. Covers in-process failures only — a crash\n      // (SIGKILL/power loss) mid-import leaves the vault on disk.\n      await Promise.all(\n        [databasePath, `${databasePath}-wal`, `${databasePath}-shm`].map(\n          (path) =>\n            rm(path, { force: true }).catch((rmError: unknown) => {\n              logFn(\n                `Failed to remove ${path} during first-run cleanup: ${String(rmError)}`,\n              );\n            }),\n        ),\n      );\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Load persisted controller state, filtered to currently persist-flagged\n * properties.\n *\n * `loadState` filters against the live controller metadata, but that metadata\n * is only knowable from a constructed `Wallet` — and its output is what seeds\n * the real wallet. So this constructs a short-lived probe purely to read the\n * metadata, then tears it down.\n *\n * TODO: drop the probe once `@metamask/wallet` exposes controller metadata\n * without constructing a `Wallet`.\n *\n * @param store - The key-value store to read from.\n * @param infuraProjectId - The Infura project ID for the probe's\n * `NetworkController`.\n * @param logFn - Logger for a probe-teardown failure.\n * @returns The filtered persisted state, suitable for the `Wallet` `state`\n * option.\n */\nasync function loadPersistedState(\n  store: KeyValueStore,\n  infuraProjectId: string,\n  logFn: Logger,\n): Promise<Record<string, Record<string, Json>>> {\n  const probe = new Wallet({\n    instanceOptions: buildInstanceOptions(infuraProjectId),\n  });\n  try {\n    return loadState(store, probe.controllerMetadata);\n  } finally {\n    await probe.destroy().catch((error: unknown) => {\n      logFn(`Metadata probe destroy failed: ${String(error)}`);\n    });\n  }\n}\n\n/**\n * Persistence-safe teardown of a wallet and its store; see {@link\n * CreateWalletResult.dispose} for the ordering rationale. Each step is\n * best-effort, so a failure is logged and the remaining steps still run.\n *\n * @param unsubscribe - The persistence-subscription unsubscribe function, if\n * one was registered.\n * @param wallet - The wallet to destroy, if one was constructed.\n * @param store - The store to close.\n * @param logFn - Logger for step failures.\n */\nasync function teardown(\n  unsubscribe: (() => void) | undefined,\n  wallet: Wallet | undefined,\n  store: KeyValueStore,\n  logFn: Logger,\n): Promise<void> {\n  if (unsubscribe) {\n    try {\n      unsubscribe();\n    } catch (error) {\n      logFn(`Persistence unsubscribe failed during teardown: ${String(error)}`);\n    }\n  }\n  if (wallet) {\n    try {\n      await wallet.destroy();\n    } catch (error) {\n      logFn(`wallet.destroy() failed during teardown: ${String(error)}`);\n    }\n  }\n  try {\n    store.close();\n  } catch (error) {\n    logFn(`store.close() failed during teardown: ${String(error)}`);\n  }\n}\n\n/**\n * Determine whether the loaded state already contains a keyring vault.\n *\n * The KeyringController persists its `vault` once an SRP has been imported, so\n * its presence indicates that first-run setup completed before.\n *\n * @param state - The state loaded from the key-value store.\n * @returns True if a KeyringController vault string is present.\n */\nfunction hasPersistedKeyring(\n  state: Record<string, Record<string, unknown>>,\n): boolean {\n  return typeof state.KeyringController?.vault === 'string';\n}\n"]}

package/dist/daemon/wallet-factory.d.cts

@@ -0,0 +1,55 @@
+import { Wallet } from "@metamask/wallet";
+import type { Logger } from "./types.cjs";
+export type CreateWalletConfig = {
+    databasePath: string;
+    password: string;
+    srp: string;
+    infuraProjectId: string;
+    log?: Logger;
+};
+export type CreateWalletResult = {
+    wallet: Wallet;
+    /**
+     * Tear down everything `createWallet` set up, in the order that keeps
+     * in-flight persistence writes valid: stop the state-change subscription,
+     * destroy the wallet, then close the store (closing first would cause a
+     * teardown-time persistence write to fail). Resilient — a failure in any
+     * step is logged and the remaining steps still run — and idempotent (repeat
+     * calls coalesce onto the same teardown).
+     */
+    dispose: () => Promise<void>;
+};
+/**
+ * Create a configured `Wallet` for daemon use, backed by a SQLite key-value
+ * store for controller-state persistence.
+ *
+ * Loads any previously-persisted controller state from the store, seeds the
+ * wallet with it, then subscribes the store to subsequent state changes so all
+ * persist-flagged properties are written through.
+ *
+ * If the store does not yet contain a keyring vault (first run), the supplied
+ * secret recovery phrase is imported. On subsequent runs the persisted vault is
+ * reused — `password`/`srp` go unused and the wallet starts locked; the caller
+ * unlocks it via `KeyringController:submitPassword` before any keyring-bound
+ * operation.
+ *
+ * On any failure after the store is opened, the store is closed (and the wallet
+ * destroyed, if constructed). On a first-run failure, the on-disk database is
+ * also removed so a retry does not latch onto an orphaned partial vault — this
+ * covers in-process failures only; a hard crash (SIGKILL/power loss) mid-import
+ * can still leave a vault on disk.
+ *
+ * @param config - Wallet configuration.
+ * @param config.databasePath - Path to the SQLite database file (or
+ * `':memory:'` for ephemeral use).
+ * @param config.password - The wallet password.
+ * @param config.srp - The secret recovery phrase (BIP-39 mnemonic).
+ * @param config.infuraProjectId - The Infura project ID for the
+ * `NetworkController`.
+ * @param config.log - Optional logger for persistence-write and teardown
+ * failures. Without it, failures fall back to `console.error` (which a detached
+ * daemon's `stdio: 'ignore'` discards).
+ * @returns The `Wallet` and a `dispose` handle that tears it down.
+ */
+export declare function createWallet({ databasePath, password, srp, infuraProjectId, log, }: CreateWalletConfig): Promise<CreateWalletResult>;
+//# sourceMappingURL=wallet-factory.d.cts.map

package/dist/daemon/wallet-factory.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-factory.d.cts","sourceRoot":"","sources":["../../src/daemon/wallet-factory.ts"],"names":[],"mappings":"AAQA,OAAO,EAGL,MAAM,EACP,yBAAyB;AAM1B,OAAO,KAAK,EAAE,MAAM,EAAE,oBAAgB;AAItC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAgEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,YAAY,CAAC,EACjC,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,eAAe,EACf,GAAG,GACJ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA0ElD"}

package/dist/daemon/wallet-factory.d.mts

@@ -0,0 +1,55 @@
+import { Wallet } from "@metamask/wallet";
+import type { Logger } from "./types.mjs";
+export type CreateWalletConfig = {
+    databasePath: string;
+    password: string;
+    srp: string;
+    infuraProjectId: string;
+    log?: Logger;
+};
+export type CreateWalletResult = {
+    wallet: Wallet;
+    /**
+     * Tear down everything `createWallet` set up, in the order that keeps
+     * in-flight persistence writes valid: stop the state-change subscription,
+     * destroy the wallet, then close the store (closing first would cause a
+     * teardown-time persistence write to fail). Resilient — a failure in any
+     * step is logged and the remaining steps still run — and idempotent (repeat
+     * calls coalesce onto the same teardown).
+     */
+    dispose: () => Promise<void>;
+};
+/**
+ * Create a configured `Wallet` for daemon use, backed by a SQLite key-value
+ * store for controller-state persistence.
+ *
+ * Loads any previously-persisted controller state from the store, seeds the
+ * wallet with it, then subscribes the store to subsequent state changes so all
+ * persist-flagged properties are written through.
+ *
+ * If the store does not yet contain a keyring vault (first run), the supplied
+ * secret recovery phrase is imported. On subsequent runs the persisted vault is
+ * reused — `password`/`srp` go unused and the wallet starts locked; the caller
+ * unlocks it via `KeyringController:submitPassword` before any keyring-bound
+ * operation.
+ *
+ * On any failure after the store is opened, the store is closed (and the wallet
+ * destroyed, if constructed). On a first-run failure, the on-disk database is
+ * also removed so a retry does not latch onto an orphaned partial vault — this
+ * covers in-process failures only; a hard crash (SIGKILL/power loss) mid-import
+ * can still leave a vault on disk.
+ *
+ * @param config - Wallet configuration.
+ * @param config.databasePath - Path to the SQLite database file (or
+ * `':memory:'` for ephemeral use).
+ * @param config.password - The wallet password.
+ * @param config.srp - The secret recovery phrase (BIP-39 mnemonic).
+ * @param config.infuraProjectId - The Infura project ID for the
+ * `NetworkController`.
+ * @param config.log - Optional logger for persistence-write and teardown
+ * failures. Without it, failures fall back to `console.error` (which a detached
+ * daemon's `stdio: 'ignore'` discards).
+ * @returns The `Wallet` and a `dispose` handle that tears it down.
+ */
+export declare function createWallet({ databasePath, password, srp, infuraProjectId, log, }: CreateWalletConfig): Promise<CreateWalletResult>;
+//# sourceMappingURL=wallet-factory.d.mts.map

package/dist/daemon/wallet-factory.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-factory.d.mts","sourceRoot":"","sources":["../../src/daemon/wallet-factory.ts"],"names":[],"mappings":"AAQA,OAAO,EAGL,MAAM,EACP,yBAAyB;AAM1B,OAAO,KAAK,EAAE,MAAM,EAAE,oBAAgB;AAItC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAgEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,YAAY,CAAC,EACjC,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,eAAe,EACf,GAAG,GACJ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA0ElD"}