@metamask-previews/wallet-cli 0.0.0-preview-b3db565c8 → 0.0.0-preview-8bfa290fb

package/dist/daemon/auto-approval.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-approval.cjs","sourceRoot":"","sources":["../../src/daemon/auto-approval.ts"],"names":[],"mappings":";;;AA2BA;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,uBAAuB,CACrC,SAAiE,EACjE,GAAY;IAEZ,MAAM,KAAK,GACT,GAAG;QACH,CAAC,CAAC,OAAe,EAAQ,EAAE;YACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAc,EAAQ,EAAE;QACtD,KAAK,CAAC,0CAA0C,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,EAAU,EAAQ,EAAE;QACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEjB,IAAI,CAAC;YACH,SAAS;iBACN,IAAI,CAAC,kCAAkC,EAAE,EAAE,CAAC;iBAC5C,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;iBAChD,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kEAAkE;YAClE,uEAAuE;YACvE,uEAAuE;YACvE,8DAA8D;YAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpB,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAA+B,CAAC,KAAK,EAAE,EAAE;QACpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrD,aAAa,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,+BAA+B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AA5CD,0DA4CC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,+BAA+B,CACtC,SAAiE,EACjE,OAAmC;IAEnC,MAAM,UAAU,GAAG,SAMlB,CAAC;IACF,UAAU,CAAC,SAAS,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,GAAG,EAAE;QACV,UAAU,CAAC,WAAW,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  DefaultActions,\n  DefaultEvents,\n  RootMessenger,\n} from '@metamask/wallet';\n\nimport type { Logger } from './types.js';\n\n/**\n * The slice of `ApprovalController` state this module reads. The full\n * state-change payload is the controller's `ApprovalControllerState`; auto\n * approval only needs the ids of the pending requests, so it looks at\n * `pendingApprovals` alone (the request bodies are irrelevant to accepting\n * them).\n */\ntype PendingApprovalsState = {\n  pendingApprovals: Record<string, unknown>;\n};\n\n/**\n * Handler for `ApprovalController`'s state-change event, narrowed to the slice\n * auto approval reads. The `Patch[]` second argument from the raw event is\n * intentionally absent — auto approval re-accepts on every state change and\n * does not filter by patch.\n */\ntype ApprovalStateChangeHandler = (state: PendingApprovalsState) => void;\n\n/**\n * Subscribe the daemon to auto-accept every pending approval request.\n *\n * Without this, any `ApprovalController:addRequest` call hangs forever on a\n * headless daemon. **Everything is approved without a prompt** — trust boundary\n * is the `0600` same-user socket. A scoped policy is tracked in\n * {@link https://github.com/MetaMask/core/issues/9513}.\n *\n * The `inFlight` guard makes accepting each id idempotent: `acceptRequest`\n * deletes the request on resolve, which itself re-emits `stateChanged`. Without\n * it the same id would be accepted twice and the second accept would reject.\n * Both sync throws and async rejections are logged and swallowed so one bad\n * request cannot crash the daemon or wedge the subscription.\n *\n * @param messenger - The wallet root messenger.\n * @param log - Optional logger for accept failures. Defaults to `console.error`.\n * @returns A function that unsubscribes the auto-approval handler.\n */\nexport function subscribeToAutoApproval(\n  messenger: Readonly<RootMessenger<DefaultActions, DefaultEvents>>,\n  log?: Logger,\n): () => void {\n  const logFn =\n    log ??\n    ((message: string): void => {\n      console.error(message);\n    });\n\n  const inFlight = new Set<string>();\n\n  const logFailure = (id: string, error: unknown): void => {\n    logFn(`Failed to auto-accept approval request ${id}: ${String(error)}`);\n  };\n\n  const acceptRequest = (id: string): void => {\n    if (inFlight.has(id)) {\n      return;\n    }\n    inFlight.add(id);\n\n    try {\n      messenger\n        .call('ApprovalController:acceptRequest', id)\n        .catch((error: unknown) => logFailure(id, error))\n        .finally(() => inFlight.delete(id));\n    } catch (error) {\n      // Synchronous throw means the Promise chain above was never built\n      // (no .catch/.finally attached), so clean up the in-flight guard here.\n      // The error is intentionally suppressed — a race-condition reject must\n      // not crash the daemon or permanently wedge the subscription.\n      inFlight.delete(id);\n      logFailure(id, error);\n    }\n  };\n\n  const handler: ApprovalStateChangeHandler = (state) => {\n    for (const id of Object.keys(state.pendingApprovals)) {\n      acceptRequest(id);\n    }\n  };\n\n  return subscribeToApprovalStateChanged(messenger, handler);\n}\n\n/**\n * Subscribe a handler to `ApprovalController:stateChanged`.\n *\n * `ApprovalControllerEvents` only declares `ApprovalController:stateChange`\n * (via `ControllerStateChangeEvent`), not the non-deprecated\n * `ApprovalController:stateChanged` variant that `BaseController` publishes at\n * runtime. This helper localizes the unavoidable cast — using the same\n * technique as `subscribeToStateChanged` in the persistence layer — behind a\n * typed {@link ApprovalStateChangeHandler}, keeping the `state` payload\n * compile-checked at the call site instead of erased by a statement-level\n * `@ts-expect-error`.\n *\n * TODO: Remove this cast once `ApprovalControllerEvents` includes\n * `ControllerStateChangedEvent` (`:stateChanged`), matching the union already\n * exported by `BaseController`.\n *\n * @param messenger - The wallet root messenger.\n * @param handler - The state-change handler to register.\n * @returns A function that unsubscribes the handler.\n */\nfunction subscribeToApprovalStateChanged(\n  messenger: Readonly<RootMessenger<DefaultActions, DefaultEvents>>,\n  handler: ApprovalStateChangeHandler,\n): () => void {\n  const subscriber = messenger as unknown as {\n    subscribe: (eventType: string, handler: ApprovalStateChangeHandler) => void;\n    unsubscribe: (\n      eventType: string,\n      handler: ApprovalStateChangeHandler,\n    ) => void;\n  };\n  subscriber.subscribe('ApprovalController:stateChanged', handler);\n  return () => {\n    subscriber.unsubscribe('ApprovalController:stateChanged', handler);\n  };\n}\n"]}

package/dist/daemon/{auto-approval.d.ts → auto-approval.d.cts}

@@ -1,5 +1,5 @@
-import type { DefaultActions, DefaultEvents, RootMessenger } from '@metamask/wallet';
-import type { Logger } from './types.js';
+import type { DefaultActions, DefaultEvents, RootMessenger } from "@metamask/wallet";
+import type { Logger } from "./types.cjs";
 /**
  * Subscribe the daemon to auto-accept every pending approval request.
  *
@@ -19,4 +19,4 @@ import type { Logger } from './types.js';
  * @returns A function that unsubscribes the auto-approval handler.
  */
 export declare function subscribeToAutoApproval(messenger: Readonly<RootMessenger<DefaultActions, DefaultEvents>>, log?: Logger): () => void;
-//# sourceMappingURL=auto-approval.d.ts.map
+//# sourceMappingURL=auto-approval.d.cts.map

package/dist/daemon/auto-approval.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-approval.d.cts","sourceRoot":"","sources":["../../src/daemon/auto-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACd,yBAAyB;AAE1B,OAAO,KAAK,EAAE,MAAM,EAAE,oBAAmB;AAqBzC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,EACjE,GAAG,CAAC,EAAE,MAAM,GACX,MAAM,IAAI,CAyCZ"}

package/dist/daemon/auto-approval.d.mts

@@ -0,0 +1,22 @@
+import type { DefaultActions, DefaultEvents, RootMessenger } from "@metamask/wallet";
+import type { Logger } from "./types.mjs";
+/**
+ * Subscribe the daemon to auto-accept every pending approval request.
+ *
+ * Without this, any `ApprovalController:addRequest` call hangs forever on a
+ * headless daemon. **Everything is approved without a prompt** — trust boundary
+ * is the `0600` same-user socket. A scoped policy is tracked in
+ * {@link https://github.com/MetaMask/core/issues/9513}.
+ *
+ * The `inFlight` guard makes accepting each id idempotent: `acceptRequest`
+ * deletes the request on resolve, which itself re-emits `stateChanged`. Without
+ * it the same id would be accepted twice and the second accept would reject.
+ * Both sync throws and async rejections are logged and swallowed so one bad
+ * request cannot crash the daemon or wedge the subscription.
+ *
+ * @param messenger - The wallet root messenger.
+ * @param log - Optional logger for accept failures. Defaults to `console.error`.
+ * @returns A function that unsubscribes the auto-approval handler.
+ */
+export declare function subscribeToAutoApproval(messenger: Readonly<RootMessenger<DefaultActions, DefaultEvents>>, log?: Logger): () => void;
+//# sourceMappingURL=auto-approval.d.mts.map

package/dist/daemon/auto-approval.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-approval.d.mts","sourceRoot":"","sources":["../../src/daemon/auto-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACd,yBAAyB;AAE1B,OAAO,KAAK,EAAE,MAAM,EAAE,oBAAmB;AAqBzC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,EACjE,GAAG,CAAC,EAAE,MAAM,GACX,MAAM,IAAI,CAyCZ"}

package/dist/daemon/{auto-approval.js → auto-approval.mjs}

@@ -79,4 +79,4 @@ function subscribeToApprovalStateChanged(messenger, handler) {
         subscriber.unsubscribe('ApprovalController:stateChanged', handler);
     };
 }
-//# sourceMappingURL=auto-approval.js.map
+//# sourceMappingURL=auto-approval.mjs.map

package/dist/daemon/auto-approval.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-approval.mjs","sourceRoot":"","sources":["../../src/daemon/auto-approval.ts"],"names":[],"mappings":"AA2BA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAiE,EACjE,GAAY;IAEZ,MAAM,KAAK,GACT,GAAG;QACH,CAAC,CAAC,OAAe,EAAQ,EAAE;YACzB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAc,EAAQ,EAAE;QACtD,KAAK,CAAC,0CAA0C,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,EAAU,EAAQ,EAAE;QACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEjB,IAAI,CAAC;YACH,SAAS;iBACN,IAAI,CAAC,kCAAkC,EAAE,EAAE,CAAC;iBAC5C,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;iBAChD,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kEAAkE;YAClE,uEAAuE;YACvE,uEAAuE;YACvE,8DAA8D;YAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpB,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAA+B,CAAC,KAAK,EAAE,EAAE;QACpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrD,aAAa,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,+BAA+B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,+BAA+B,CACtC,SAAiE,EACjE,OAAmC;IAEnC,MAAM,UAAU,GAAG,SAMlB,CAAC;IACF,UAAU,CAAC,SAAS,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,GAAG,EAAE;QACV,UAAU,CAAC,WAAW,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  DefaultActions,\n  DefaultEvents,\n  RootMessenger,\n} from '@metamask/wallet';\n\nimport type { Logger } from './types.js';\n\n/**\n * The slice of `ApprovalController` state this module reads. The full\n * state-change payload is the controller's `ApprovalControllerState`; auto\n * approval only needs the ids of the pending requests, so it looks at\n * `pendingApprovals` alone (the request bodies are irrelevant to accepting\n * them).\n */\ntype PendingApprovalsState = {\n  pendingApprovals: Record<string, unknown>;\n};\n\n/**\n * Handler for `ApprovalController`'s state-change event, narrowed to the slice\n * auto approval reads. The `Patch[]` second argument from the raw event is\n * intentionally absent — auto approval re-accepts on every state change and\n * does not filter by patch.\n */\ntype ApprovalStateChangeHandler = (state: PendingApprovalsState) => void;\n\n/**\n * Subscribe the daemon to auto-accept every pending approval request.\n *\n * Without this, any `ApprovalController:addRequest` call hangs forever on a\n * headless daemon. **Everything is approved without a prompt** — trust boundary\n * is the `0600` same-user socket. A scoped policy is tracked in\n * {@link https://github.com/MetaMask/core/issues/9513}.\n *\n * The `inFlight` guard makes accepting each id idempotent: `acceptRequest`\n * deletes the request on resolve, which itself re-emits `stateChanged`. Without\n * it the same id would be accepted twice and the second accept would reject.\n * Both sync throws and async rejections are logged and swallowed so one bad\n * request cannot crash the daemon or wedge the subscription.\n *\n * @param messenger - The wallet root messenger.\n * @param log - Optional logger for accept failures. Defaults to `console.error`.\n * @returns A function that unsubscribes the auto-approval handler.\n */\nexport function subscribeToAutoApproval(\n  messenger: Readonly<RootMessenger<DefaultActions, DefaultEvents>>,\n  log?: Logger,\n): () => void {\n  const logFn =\n    log ??\n    ((message: string): void => {\n      console.error(message);\n    });\n\n  const inFlight = new Set<string>();\n\n  const logFailure = (id: string, error: unknown): void => {\n    logFn(`Failed to auto-accept approval request ${id}: ${String(error)}`);\n  };\n\n  const acceptRequest = (id: string): void => {\n    if (inFlight.has(id)) {\n      return;\n    }\n    inFlight.add(id);\n\n    try {\n      messenger\n        .call('ApprovalController:acceptRequest', id)\n        .catch((error: unknown) => logFailure(id, error))\n        .finally(() => inFlight.delete(id));\n    } catch (error) {\n      // Synchronous throw means the Promise chain above was never built\n      // (no .catch/.finally attached), so clean up the in-flight guard here.\n      // The error is intentionally suppressed — a race-condition reject must\n      // not crash the daemon or permanently wedge the subscription.\n      inFlight.delete(id);\n      logFailure(id, error);\n    }\n  };\n\n  const handler: ApprovalStateChangeHandler = (state) => {\n    for (const id of Object.keys(state.pendingApprovals)) {\n      acceptRequest(id);\n    }\n  };\n\n  return subscribeToApprovalStateChanged(messenger, handler);\n}\n\n/**\n * Subscribe a handler to `ApprovalController:stateChanged`.\n *\n * `ApprovalControllerEvents` only declares `ApprovalController:stateChange`\n * (via `ControllerStateChangeEvent`), not the non-deprecated\n * `ApprovalController:stateChanged` variant that `BaseController` publishes at\n * runtime. This helper localizes the unavoidable cast — using the same\n * technique as `subscribeToStateChanged` in the persistence layer — behind a\n * typed {@link ApprovalStateChangeHandler}, keeping the `state` payload\n * compile-checked at the call site instead of erased by a statement-level\n * `@ts-expect-error`.\n *\n * TODO: Remove this cast once `ApprovalControllerEvents` includes\n * `ControllerStateChangedEvent` (`:stateChanged`), matching the union already\n * exported by `BaseController`.\n *\n * @param messenger - The wallet root messenger.\n * @param handler - The state-change handler to register.\n * @returns A function that unsubscribes the handler.\n */\nfunction subscribeToApprovalStateChanged(\n  messenger: Readonly<RootMessenger<DefaultActions, DefaultEvents>>,\n  handler: ApprovalStateChangeHandler,\n): () => void {\n  const subscriber = messenger as unknown as {\n    subscribe: (eventType: string, handler: ApprovalStateChangeHandler) => void;\n    unsubscribe: (\n      eventType: string,\n      handler: ApprovalStateChangeHandler,\n    ) => void;\n  };\n  subscriber.subscribe('ApprovalController:stateChanged', handler);\n  return () => {\n    subscriber.unsubscribe('ApprovalController:stateChanged', handler);\n  };\n}\n"]}

package/dist/daemon/daemon-client.cjs

@@ -0,0 +1,149 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pingDaemon = exports.sendCommand = void 0;
+const utils_1 = require("@metamask/utils");
+const node_crypto_1 = require("node:crypto");
+const node_net_1 = require("node:net");
+const socket_line_js_1 = require("./socket-line.cjs");
+const utils_js_1 = require("./utils.cjs");
+const DEFAULT_TIMEOUT_MS = 30000;
+async function connectSocket(socketPath) {
+    return new Promise((resolve, reject) => {
+        const socket = (0, node_net_1.createConnection)(socketPath, () => {
+            socket.removeAllListeners('error');
+            resolve(socket);
+        });
+        socket.on('error', (error) => {
+            // A failed connect never reaches the caller, so destroy the socket here
+            // to avoid leaking its file descriptor.
+            socket.destroy();
+            reject(error);
+        });
+    });
+}
+/**
+ * Send a JSON-RPC request to the daemon over a Unix socket and return the
+ * response.
+ *
+ * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC
+ * response line, then closes the connection. Retries once after a short delay
+ * only on `ECONNREFUSED` — the connection was never established, so the daemon
+ * provably never received the request and re-sending is safe. Does not retry
+ * on `ECONNRESET`, which can drop after the daemon has already received and
+ * acted on the request: blindly re-sending could execute a non-idempotent
+ * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller
+ * instead. Verifies that the response `id` matches the outgoing request `id`.
+ *
+ * @param options - Command options.
+ * @param options.socketPath - The Unix socket path.
+ * @param options.method - The RPC method name.
+ * @param options.params - Optional method parameters.
+ * @param options.timeoutMs - Read timeout in milliseconds.
+ * @returns The parsed JSON-RPC response.
+ */
+async function sendCommand({ socketPath, method, params, timeoutMs, }) {
+    const id = (0, node_crypto_1.randomUUID)();
+    const request = {
+        jsonrpc: '2.0',
+        id,
+        method,
+        ...(params === undefined ? {} : { params }),
+    };
+    const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const attempt = async () => {
+        const socket = await connectSocket(socketPath);
+        try {
+            await (0, socket_line_js_1.writeLine)(socket, JSON.stringify(request));
+            const responseLine = await (0, socket_line_js_1.readLine)(socket, effectiveTimeout);
+            const parsed = JSON.parse(responseLine);
+            (0, utils_1.assertIsJsonRpcResponse)(parsed);
+            if (parsed.id !== id) {
+                throw new Error(`JSON-RPC response id ${JSON.stringify(parsed.id)} does not match request id ${JSON.stringify(id)}`);
+            }
+            return parsed;
+        }
+        finally {
+            socket.destroy();
+        }
+    };
+    try {
+        return await attempt();
+    }
+    catch (error) {
+        // Only retry on ECONNREFUSED: the connection was never established, so the
+        // daemon provably never received the request and re-sending is safe.
+        // ECONNRESET can drop *after* the daemon received and began (or finished)
+        // processing the request, so blindly re-sending a non-idempotent request
+        // (e.g. a transaction broadcast) could execute it twice. Surface it to the
+        // caller instead of retrying.
+        if (!(0, utils_js_1.isErrorWithCode)(error, 'ECONNREFUSED')) {
+            throw error;
+        }
+        await new Promise((resolve) => setTimeout(resolve, 100));
+        return attempt();
+    }
+}
+exports.sendCommand = sendCommand;
+/**
+ * Normalize an unknown throw into a real Error instance so that downstream
+ * consumers (which read `.message`) cannot crash on string/object throws.
+ *
+ * @param error - The caught value.
+ * @returns An Error mirroring the caught value.
+ */
+function toError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+/**
+ * Categorise an unreachable error by Node errno / message shape so callers can
+ * make decisions per failure mode rather than parsing message strings.
+ *
+ * @param error - The caught value.
+ * @returns A {@link PingUnreachableReason} label.
+ */
+function classifyUnreachable(error) {
+    if ((0, utils_js_1.isErrorWithCode)(error, 'ECONNREFUSED') ||
+        (0, utils_js_1.isErrorWithCode)(error, 'ECONNRESET')) {
+        return 'refused';
+    }
+    if ((0, utils_js_1.isErrorWithCode)(error, 'EACCES') || (0, utils_js_1.isErrorWithCode)(error, 'EPERM')) {
+        return 'permission';
+    }
+    if (error instanceof Error && error.message === 'Socket read timed out') {
+        return 'timeout';
+    }
+    if (error instanceof Error &&
+        (error.message.includes('JSON-RPC response id') ||
+            /Expected .* JSON-RPC/u.test(error.message) ||
+            error.name === 'SyntaxError')) {
+        return 'protocol';
+    }
+    return 'other';
+}
+/**
+ * Check whether the daemon is running by sending a lightweight `getStatus`
+ * RPC call. Distinguishes "no daemon present" (socket file missing) from
+ * "daemon present but unreachable" (socket file exists but the daemon is
+ * wedged, mid-shutdown, or owned by a different user).
+ *
+ * @param socketPath - The Unix socket path.
+ * @returns A {@link PingResult} describing the daemon's reachability.
+ */
+async function pingDaemon(socketPath) {
+    try {
+        await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3000 });
+        return { status: 'responsive' };
+    }
+    catch (error) {
+        if ((0, utils_js_1.isErrorWithCode)(error, 'ENOENT')) {
+            return { status: 'absent' };
+        }
+        return {
+            status: 'unreachable',
+            reason: classifyUnreachable(error),
+            error: toError(error),
+        };
+    }
+}
+exports.pingDaemon = pingDaemon;
+//# sourceMappingURL=daemon-client.cjs.map

package/dist/daemon/daemon-client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-client.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":";;;AACA,2CAA0D;AAC1D,6CAAyC;AACzC,uCAA4C;AAG5C,sDAAuD;AACvD,0CAA6C;AAE7C,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAgBlC,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAA,2BAAgB,EAAC,UAAU,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,wEAAwE;YACxE,wCAAwC;YACxC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACU;IACnB,MAAM,EAAE,GAAG,IAAA,wBAAU,GAAE,CAAC;IACxB,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IAEF,MAAM,gBAAgB,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAEzD,MAAM,OAAO,GAAG,KAAK,IAA8B,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,IAAA,0BAAS,EAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,IAAA,yBAAQ,EAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,IAAA,+BAAuB,EAAC,MAAM,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CACpG,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,8BAA8B;QAC9B,IAAI,CAAC,IAAA,0BAAe,EAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAjDD,kCAiDC;AAyCD;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IACE,IAAA,0BAAe,EAAC,KAAK,EAAE,cAAc,CAAC;QACtC,IAAA,0BAAe,EAAC,KAAK,EAAE,YAAY,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAA,0BAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAA,0BAAe,EAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC7C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3C,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAC/B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAK,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,IAAA,0BAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;SACtB,CAAC;IACJ,CAAC;AACH,CAAC;AAdD,gCAcC","sourcesContent":["import type { JsonRpcParams, JsonRpcResponse } from '@metamask/utils';\nimport { assertIsJsonRpcResponse } from '@metamask/utils';\nimport { randomUUID } from 'node:crypto';\nimport { createConnection } from 'node:net';\nimport type { Socket } from 'node:net';\n\nimport { readLine, writeLine } from './socket-line.js';\nimport { isErrorWithCode } from './utils.js';\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options for {@link sendCommand}.\n */\ntype SendCommandOptions = {\n  /** The Unix socket path. */\n  socketPath: string;\n  /** The RPC method name. */\n  method: string;\n  /** Optional method parameters (object or positional array). */\n  params?: JsonRpcParams | undefined;\n  /** Response read timeout in milliseconds (default: 30 000). */\n  timeoutMs?: number | undefined;\n};\n\nasync function connectSocket(socketPath: string): Promise<Socket> {\n  return new Promise((resolve, reject) => {\n    const socket = createConnection(socketPath, () => {\n      socket.removeAllListeners('error');\n      resolve(socket);\n    });\n    socket.on('error', (error) => {\n      // A failed connect never reaches the caller, so destroy the socket here\n      // to avoid leaking its file descriptor.\n      socket.destroy();\n      reject(error);\n    });\n  });\n}\n\n/**\n * Send a JSON-RPC request to the daemon over a Unix socket and return the\n * response.\n *\n * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC\n * response line, then closes the connection. Retries once after a short delay\n * only on `ECONNREFUSED` — the connection was never established, so the daemon\n * provably never received the request and re-sending is safe. Does not retry\n * on `ECONNRESET`, which can drop after the daemon has already received and\n * acted on the request: blindly re-sending could execute a non-idempotent\n * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller\n * instead. Verifies that the response `id` matches the outgoing request `id`.\n *\n * @param options - Command options.\n * @param options.socketPath - The Unix socket path.\n * @param options.method - The RPC method name.\n * @param options.params - Optional method parameters.\n * @param options.timeoutMs - Read timeout in milliseconds.\n * @returns The parsed JSON-RPC response.\n */\nexport async function sendCommand({\n  socketPath,\n  method,\n  params,\n  timeoutMs,\n}: SendCommandOptions): Promise<JsonRpcResponse> {\n  const id = randomUUID();\n  const request = {\n    jsonrpc: '2.0',\n    id,\n    method,\n    ...(params === undefined ? {} : { params }),\n  };\n\n  const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  const attempt = async (): Promise<JsonRpcResponse> => {\n    const socket = await connectSocket(socketPath);\n    try {\n      await writeLine(socket, JSON.stringify(request));\n      const responseLine = await readLine(socket, effectiveTimeout);\n      const parsed: unknown = JSON.parse(responseLine);\n      assertIsJsonRpcResponse(parsed);\n      if (parsed.id !== id) {\n        throw new Error(\n          `JSON-RPC response id ${JSON.stringify(parsed.id)} does not match request id ${JSON.stringify(id)}`,\n        );\n      }\n      return parsed;\n    } finally {\n      socket.destroy();\n    }\n  };\n\n  try {\n    return await attempt();\n  } catch (error: unknown) {\n    // Only retry on ECONNREFUSED: the connection was never established, so the\n    // daemon provably never received the request and re-sending is safe.\n    // ECONNRESET can drop *after* the daemon received and began (or finished)\n    // processing the request, so blindly re-sending a non-idempotent request\n    // (e.g. a transaction broadcast) could execute it twice. Surface it to the\n    // caller instead of retrying.\n    if (!isErrorWithCode(error, 'ECONNREFUSED')) {\n      throw error;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 100));\n    return attempt();\n  }\n}\n\n/**\n * Why an unreachable daemon cannot be queried.\n *\n * - `'refused'`: the connection could not be completed — `ECONNREFUSED`\n *   (retried once) or `ECONNRESET` (a mid-request drop, not retried). Typical\n *   of a daemon that has crashed or is mid-restart.\n * - `'timeout'`: the daemon accepted the connection but did not respond within\n *   the read timeout — most likely wedged on a long-running operation.\n * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).\n *   The daemon almost certainly belongs to another user.\n * - `'protocol'`: the daemon responded but the response did not parse as a\n *   valid JSON-RPC response, or the response id did not match.\n * - `'other'`: anything else.\n */\nexport type PingUnreachableReason =\n  | 'refused'\n  | 'timeout'\n  | 'permission'\n  | 'protocol'\n  | 'other';\n\n/**\n * Outcome of a daemon health check.\n *\n * - `'responsive'`: the daemon answered a `getStatus` RPC.\n * - `'absent'`: the socket connect attempt failed with `ENOENT`, i.e. no\n *   socket file exists at the path. No daemon present.\n * - `'unreachable'`: any other non-success outcome. The daemon may still be\n *   alive but is not responding. Callers should not silently take over the\n *   slot or assume the daemon is dead. The `reason` field categorises the\n *   failure so callers can distinguish a wedged sibling daemon from a\n *   foreign-user daemon from a transient crash. User-initiated stop / purge\n *   flows may still escalate to signals against the recorded PID.\n */\nexport type PingResult =\n  | { status: 'responsive' }\n  | { status: 'absent' }\n  | { status: 'unreachable'; reason: PingUnreachableReason; error: Error };\n\n/**\n * Normalize an unknown throw into a real Error instance so that downstream\n * consumers (which read `.message`) cannot crash on string/object throws.\n *\n * @param error - The caught value.\n * @returns An Error mirroring the caught value.\n */\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\n/**\n * Categorise an unreachable error by Node errno / message shape so callers can\n * make decisions per failure mode rather than parsing message strings.\n *\n * @param error - The caught value.\n * @returns A {@link PingUnreachableReason} label.\n */\nfunction classifyUnreachable(error: unknown): PingUnreachableReason {\n  if (\n    isErrorWithCode(error, 'ECONNREFUSED') ||\n    isErrorWithCode(error, 'ECONNRESET')\n  ) {\n    return 'refused';\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return 'permission';\n  }\n  if (error instanceof Error && error.message === 'Socket read timed out') {\n    return 'timeout';\n  }\n  if (\n    error instanceof Error &&\n    (error.message.includes('JSON-RPC response id') ||\n      /Expected .* JSON-RPC/u.test(error.message) ||\n      error.name === 'SyntaxError')\n  ) {\n    return 'protocol';\n  }\n  return 'other';\n}\n\n/**\n * Check whether the daemon is running by sending a lightweight `getStatus`\n * RPC call. Distinguishes \"no daemon present\" (socket file missing) from\n * \"daemon present but unreachable\" (socket file exists but the daemon is\n * wedged, mid-shutdown, or owned by a different user).\n *\n * @param socketPath - The Unix socket path.\n * @returns A {@link PingResult} describing the daemon's reachability.\n */\nexport async function pingDaemon(socketPath: string): Promise<PingResult> {\n  try {\n    await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3_000 });\n    return { status: 'responsive' };\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return { status: 'absent' };\n    }\n    return {\n      status: 'unreachable',\n      reason: classifyUnreachable(error),\n      error: toError(error),\n    };\n  }\n}\n"]}

package/dist/daemon/{daemon-client.d.ts → daemon-client.d.cts}

@@ -1,4 +1,4 @@
-import type { JsonRpcParams, JsonRpcResponse } from '@metamask/utils';
+import type { JsonRpcParams, JsonRpcResponse } from "@metamask/utils";
 /**
  * Options for {@link sendCommand}.
  */
@@ -81,4 +81,4 @@ export type PingResult = {
  */
 export declare function pingDaemon(socketPath: string): Promise<PingResult>;
 export {};
-//# sourceMappingURL=daemon-client.d.ts.map
+//# sourceMappingURL=daemon-client.d.cts.map

package/dist/daemon/daemon-client.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-client.d.cts","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB;AAWtE;;GAEG;AACH,KAAK,kBAAkB,GAAG;IACxB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CA4C/C;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AA4C3E;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAcxE"}

package/dist/daemon/daemon-client.d.mts

@@ -0,0 +1,84 @@
+import type { JsonRpcParams, JsonRpcResponse } from "@metamask/utils";
+/**
+ * Options for {@link sendCommand}.
+ */
+type SendCommandOptions = {
+    /** The Unix socket path. */
+    socketPath: string;
+    /** The RPC method name. */
+    method: string;
+    /** Optional method parameters (object or positional array). */
+    params?: JsonRpcParams | undefined;
+    /** Response read timeout in milliseconds (default: 30 000). */
+    timeoutMs?: number | undefined;
+};
+/**
+ * Send a JSON-RPC request to the daemon over a Unix socket and return the
+ * response.
+ *
+ * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC
+ * response line, then closes the connection. Retries once after a short delay
+ * only on `ECONNREFUSED` — the connection was never established, so the daemon
+ * provably never received the request and re-sending is safe. Does not retry
+ * on `ECONNRESET`, which can drop after the daemon has already received and
+ * acted on the request: blindly re-sending could execute a non-idempotent
+ * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller
+ * instead. Verifies that the response `id` matches the outgoing request `id`.
+ *
+ * @param options - Command options.
+ * @param options.socketPath - The Unix socket path.
+ * @param options.method - The RPC method name.
+ * @param options.params - Optional method parameters.
+ * @param options.timeoutMs - Read timeout in milliseconds.
+ * @returns The parsed JSON-RPC response.
+ */
+export declare function sendCommand({ socketPath, method, params, timeoutMs, }: SendCommandOptions): Promise<JsonRpcResponse>;
+/**
+ * Why an unreachable daemon cannot be queried.
+ *
+ * - `'refused'`: the connection could not be completed — `ECONNREFUSED`
+ *   (retried once) or `ECONNRESET` (a mid-request drop, not retried). Typical
+ *   of a daemon that has crashed or is mid-restart.
+ * - `'timeout'`: the daemon accepted the connection but did not respond within
+ *   the read timeout — most likely wedged on a long-running operation.
+ * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).
+ *   The daemon almost certainly belongs to another user.
+ * - `'protocol'`: the daemon responded but the response did not parse as a
+ *   valid JSON-RPC response, or the response id did not match.
+ * - `'other'`: anything else.
+ */
+export type PingUnreachableReason = 'refused' | 'timeout' | 'permission' | 'protocol' | 'other';
+/**
+ * Outcome of a daemon health check.
+ *
+ * - `'responsive'`: the daemon answered a `getStatus` RPC.
+ * - `'absent'`: the socket connect attempt failed with `ENOENT`, i.e. no
+ *   socket file exists at the path. No daemon present.
+ * - `'unreachable'`: any other non-success outcome. The daemon may still be
+ *   alive but is not responding. Callers should not silently take over the
+ *   slot or assume the daemon is dead. The `reason` field categorises the
+ *   failure so callers can distinguish a wedged sibling daemon from a
+ *   foreign-user daemon from a transient crash. User-initiated stop / purge
+ *   flows may still escalate to signals against the recorded PID.
+ */
+export type PingResult = {
+    status: 'responsive';
+} | {
+    status: 'absent';
+} | {
+    status: 'unreachable';
+    reason: PingUnreachableReason;
+    error: Error;
+};
+/**
+ * Check whether the daemon is running by sending a lightweight `getStatus`
+ * RPC call. Distinguishes "no daemon present" (socket file missing) from
+ * "daemon present but unreachable" (socket file exists but the daemon is
+ * wedged, mid-shutdown, or owned by a different user).
+ *
+ * @param socketPath - The Unix socket path.
+ * @returns A {@link PingResult} describing the daemon's reachability.
+ */
+export declare function pingDaemon(socketPath: string): Promise<PingResult>;
+export {};
+//# sourceMappingURL=daemon-client.d.mts.map

package/dist/daemon/daemon-client.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-client.d.mts","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB;AAWtE;;GAEG;AACH,KAAK,kBAAkB,GAAG;IACxB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CA4C/C;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AA4C3E;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAcxE"}

package/dist/daemon/{daemon-client.js → daemon-client.mjs}

@@ -1,9 +1,9 @@
-import { assertIsJsonRpcResponse } from '@metamask/utils';
-import { randomUUID } from 'node:crypto';
-import { createConnection } from 'node:net';
-import { readLine, writeLine } from './socket-line.js';
-import { isErrorWithCode } from './utils.js';
-const DEFAULT_TIMEOUT_MS = 30_000;
+import { assertIsJsonRpcResponse } from "@metamask/utils";
+import { randomUUID } from "node:crypto";
+import { createConnection } from "node:net";
+import { readLine, writeLine } from "./socket-line.mjs";
+import { isErrorWithCode } from "./utils.mjs";
+const DEFAULT_TIMEOUT_MS = 30000;
 async function connectSocket(socketPath) {
     return new Promise((resolve, reject) => {
         const socket = createConnection(socketPath, () => {
@@ -127,7 +127,7 @@ function classifyUnreachable(error) {
  */
 export async function pingDaemon(socketPath) {
     try {
-        await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3_000 });
+        await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3000 });
         return { status: 'responsive' };
     }
     catch (error) {
@@ -141,4 +141,4 @@ export async function pingDaemon(socketPath) {
         };
     }
 }
-//# sourceMappingURL=daemon-client.js.map
+//# sourceMappingURL=daemon-client.mjs.map

package/dist/daemon/daemon-client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-client.mjs","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB;AAC1D,OAAO,EAAE,UAAU,EAAE,oBAAoB;AACzC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB;AAG5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,0BAAyB;AACvD,OAAO,EAAE,eAAe,EAAE,oBAAmB;AAE7C,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAgBlC,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,wEAAwE;YACxE,wCAAwC;YACxC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACU;IACnB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IAEF,MAAM,gBAAgB,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAEzD,MAAM,OAAO,GAAG,KAAK,IAA8B,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CACpG,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,8BAA8B;QAC9B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAyCD;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IACE,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC;QACtC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC7C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3C,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAC/B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAK,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;SACtB,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type { JsonRpcParams, JsonRpcResponse } from '@metamask/utils';\nimport { assertIsJsonRpcResponse } from '@metamask/utils';\nimport { randomUUID } from 'node:crypto';\nimport { createConnection } from 'node:net';\nimport type { Socket } from 'node:net';\n\nimport { readLine, writeLine } from './socket-line.js';\nimport { isErrorWithCode } from './utils.js';\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options for {@link sendCommand}.\n */\ntype SendCommandOptions = {\n  /** The Unix socket path. */\n  socketPath: string;\n  /** The RPC method name. */\n  method: string;\n  /** Optional method parameters (object or positional array). */\n  params?: JsonRpcParams | undefined;\n  /** Response read timeout in milliseconds (default: 30 000). */\n  timeoutMs?: number | undefined;\n};\n\nasync function connectSocket(socketPath: string): Promise<Socket> {\n  return new Promise((resolve, reject) => {\n    const socket = createConnection(socketPath, () => {\n      socket.removeAllListeners('error');\n      resolve(socket);\n    });\n    socket.on('error', (error) => {\n      // A failed connect never reaches the caller, so destroy the socket here\n      // to avoid leaking its file descriptor.\n      socket.destroy();\n      reject(error);\n    });\n  });\n}\n\n/**\n * Send a JSON-RPC request to the daemon over a Unix socket and return the\n * response.\n *\n * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC\n * response line, then closes the connection. Retries once after a short delay\n * only on `ECONNREFUSED` — the connection was never established, so the daemon\n * provably never received the request and re-sending is safe. Does not retry\n * on `ECONNRESET`, which can drop after the daemon has already received and\n * acted on the request: blindly re-sending could execute a non-idempotent\n * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller\n * instead. Verifies that the response `id` matches the outgoing request `id`.\n *\n * @param options - Command options.\n * @param options.socketPath - The Unix socket path.\n * @param options.method - The RPC method name.\n * @param options.params - Optional method parameters.\n * @param options.timeoutMs - Read timeout in milliseconds.\n * @returns The parsed JSON-RPC response.\n */\nexport async function sendCommand({\n  socketPath,\n  method,\n  params,\n  timeoutMs,\n}: SendCommandOptions): Promise<JsonRpcResponse> {\n  const id = randomUUID();\n  const request = {\n    jsonrpc: '2.0',\n    id,\n    method,\n    ...(params === undefined ? {} : { params }),\n  };\n\n  const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  const attempt = async (): Promise<JsonRpcResponse> => {\n    const socket = await connectSocket(socketPath);\n    try {\n      await writeLine(socket, JSON.stringify(request));\n      const responseLine = await readLine(socket, effectiveTimeout);\n      const parsed: unknown = JSON.parse(responseLine);\n      assertIsJsonRpcResponse(parsed);\n      if (parsed.id !== id) {\n        throw new Error(\n          `JSON-RPC response id ${JSON.stringify(parsed.id)} does not match request id ${JSON.stringify(id)}`,\n        );\n      }\n      return parsed;\n    } finally {\n      socket.destroy();\n    }\n  };\n\n  try {\n    return await attempt();\n  } catch (error: unknown) {\n    // Only retry on ECONNREFUSED: the connection was never established, so the\n    // daemon provably never received the request and re-sending is safe.\n    // ECONNRESET can drop *after* the daemon received and began (or finished)\n    // processing the request, so blindly re-sending a non-idempotent request\n    // (e.g. a transaction broadcast) could execute it twice. Surface it to the\n    // caller instead of retrying.\n    if (!isErrorWithCode(error, 'ECONNREFUSED')) {\n      throw error;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 100));\n    return attempt();\n  }\n}\n\n/**\n * Why an unreachable daemon cannot be queried.\n *\n * - `'refused'`: the connection could not be completed — `ECONNREFUSED`\n *   (retried once) or `ECONNRESET` (a mid-request drop, not retried). Typical\n *   of a daemon that has crashed or is mid-restart.\n * - `'timeout'`: the daemon accepted the connection but did not respond within\n *   the read timeout — most likely wedged on a long-running operation.\n * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).\n *   The daemon almost certainly belongs to another user.\n * - `'protocol'`: the daemon responded but the response did not parse as a\n *   valid JSON-RPC response, or the response id did not match.\n * - `'other'`: anything else.\n */\nexport type PingUnreachableReason =\n  | 'refused'\n  | 'timeout'\n  | 'permission'\n  | 'protocol'\n  | 'other';\n\n/**\n * Outcome of a daemon health check.\n *\n * - `'responsive'`: the daemon answered a `getStatus` RPC.\n * - `'absent'`: the socket connect attempt failed with `ENOENT`, i.e. no\n *   socket file exists at the path. No daemon present.\n * - `'unreachable'`: any other non-success outcome. The daemon may still be\n *   alive but is not responding. Callers should not silently take over the\n *   slot or assume the daemon is dead. The `reason` field categorises the\n *   failure so callers can distinguish a wedged sibling daemon from a\n *   foreign-user daemon from a transient crash. User-initiated stop / purge\n *   flows may still escalate to signals against the recorded PID.\n */\nexport type PingResult =\n  | { status: 'responsive' }\n  | { status: 'absent' }\n  | { status: 'unreachable'; reason: PingUnreachableReason; error: Error };\n\n/**\n * Normalize an unknown throw into a real Error instance so that downstream\n * consumers (which read `.message`) cannot crash on string/object throws.\n *\n * @param error - The caught value.\n * @returns An Error mirroring the caught value.\n */\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\n/**\n * Categorise an unreachable error by Node errno / message shape so callers can\n * make decisions per failure mode rather than parsing message strings.\n *\n * @param error - The caught value.\n * @returns A {@link PingUnreachableReason} label.\n */\nfunction classifyUnreachable(error: unknown): PingUnreachableReason {\n  if (\n    isErrorWithCode(error, 'ECONNREFUSED') ||\n    isErrorWithCode(error, 'ECONNRESET')\n  ) {\n    return 'refused';\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return 'permission';\n  }\n  if (error instanceof Error && error.message === 'Socket read timed out') {\n    return 'timeout';\n  }\n  if (\n    error instanceof Error &&\n    (error.message.includes('JSON-RPC response id') ||\n      /Expected .* JSON-RPC/u.test(error.message) ||\n      error.name === 'SyntaxError')\n  ) {\n    return 'protocol';\n  }\n  return 'other';\n}\n\n/**\n * Check whether the daemon is running by sending a lightweight `getStatus`\n * RPC call. Distinguishes \"no daemon present\" (socket file missing) from\n * \"daemon present but unreachable\" (socket file exists but the daemon is\n * wedged, mid-shutdown, or owned by a different user).\n *\n * @param socketPath - The Unix socket path.\n * @returns A {@link PingResult} describing the daemon's reachability.\n */\nexport async function pingDaemon(socketPath: string): Promise<PingResult> {\n  try {\n    await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3_000 });\n    return { status: 'responsive' };\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return { status: 'absent' };\n    }\n    return {\n      status: 'unreachable',\n      reason: classifyUnreachable(error),\n      error: toError(error),\n    };\n  }\n}\n"]}