@metamask-previews/wallet-cli 0.0.0-preview-b3db565c8 → 0.0.0-preview-8bfa290fb

package/dist/daemon/rpc-socket-server.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-socket-server.cjs","sourceRoot":"","sources":["../../src/daemon/rpc-socket-server.ts"],"names":[],"mappings":";;;AAAA,qDAAiD;AACjD,uDAAmE;AAMnE,2CAAgE;AAChE,+CAAiD;AACjD,uCAAwC;AAIxC,0CAA6C;AAE7C,MAAM,qBAAqB,GAAG,KAAM,CAAC;AA4BrC;;;;;;;;;;;;;;;;GAgBG;AACI,KAAK,UAAU,oBAAoB,CAAC,EACzC,UAAU,EACV,QAAQ,EACR,UAAU,EACV,GAAG,GACyB;IAC5B,MAAM,KAAK,GAAG,GAAG,IAAI,UAAU,CAAC;IAEhC,MAAM,MAAM,GAAG,IAAA,uBAAY,EAAC,CAAC,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd;;;WAGG;QACH,MAAM,cAAc,GAAG,GAAS,EAAE;YAChC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACpC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,cAAc,EAAE,CAAC;YAEjB,8BAA8B;YAC9B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,GAAG,EAAE,CAAC;YAEZ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,CACR,GAAG,IAAI,CAAC,SAAS,CAAC;oBAChB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,sBAAS;yBACb,cAAc,CAAC;wBACd,OAAO,EAAE,4CAA4C;qBACtD,CAAC;yBACD,SAAS,EAAE;iBACf,CAAC,IAAI,CACP,CAAC;gBACF,OAAO;YACT,CAAC;YAED,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC;iBAC7C,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACjB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,aAAsB,EAAE,EAAE;gBAChC,KAAK,CAAC,iCAAiC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAChE,MAAM,CAAC,GAAG,CACR,GAAG,IAAI,CAAC,SAAS,CAAC;oBAChB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,sBAAS;yBACb,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;yBACvC,SAAS,EAAE;iBACf,CAAC,IAAI,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,WAAkC,EAAE,EAAE;YACxD,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC;YAC7B,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9C,OAAO,CAAC,oCAAoC;YAC9C,CAAC;YACD,KAAK,CAAC,4BAA4B,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEjC,OAAO;QACL,KAAK,EAAE,KAAK,IAAmB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;KACtD,CAAC;AACJ,CAAC;AA1FD,oDA0FC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAC1B,QAAuB,EACvB,IAAY,EACZ,UAA6C,EAC7C,GAA8B;IAE9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,sBAAS,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,SAAS,EAAE;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAA,wBAAgB,EAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,GACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,IAAA,mBAAW,EAAC,MAAM,EAAE,IAAI,CAAC;YACzB,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,EAAE;YACX,CAAC,CAAC,IAAI,CAAC;QACX,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE;YACF,KAAK,EAAE,sBAAS;iBACb,cAAc,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;iBACvD,SAAS,EAAE;SACf,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAEtC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,IAAI,UAAU,EAAE,CAAC;gBACf,UAAU,CAAC,GAAG,EAAE;oBACd,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;wBACpC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACtD,CAAC,CAAC,CAAC;gBACL,CAAC,EAAE,CAAC,CAAC,CAAC;YACR,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YACpE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,EAAE;gBACF,KAAK,EAAE,sBAAS;qBACb,cAAc,CAAC,EAAE,OAAO,EAAE,qBAAqB,MAAM,EAAE,EAAE,CAAC;qBAC1D,SAAS,EAAE;aACf,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,IAAA,sBAAc,EACnD,mBAAmB,CAAC,MAAM,CAAC,EAC3B,OAAO,CAAC,YAAY,CACrB,CAAC;QACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,EAAE;gBACF,KAAK,EAAE,sBAAS;qBACb,aAAa,CAAC;oBACb,OAAO,EAAE,sBAAsB,MAAM,KAAK,WAAW,CAAC,OAAO,EAAE;iBAChE,CAAC;qBACD,SAAS,EAAE;aACf,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,gBAAgB,MAAM,aAAa,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE;YACF,KAAK,EAAE,sBAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE;SACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAC1B,MAAiC;IAEjC,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CACzE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,IAAA,mBAAW,EAAC,KAAK,EAAE,MAAM,CAAC;QAC1B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,IAAA,mBAAW,EAAC,KAAK,EAAE,SAAS,CAAC;QAC7B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,UAAkB;IACtD,IAAI,CAAC;QACH,MAAM,IAAA,iBAAM,EAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,IAAA,0BAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,CAAC;QACH,MAAM,IAAA,gBAAK,EAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,IAAA,iBAAM,EAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { rpcErrors } from '@metamask/rpc-errors';\nimport { validate as validateStruct } from '@metamask/superstruct';\nimport type {\n  JsonRpcId,\n  JsonRpcParams,\n  JsonRpcResponse,\n} from '@metamask/utils';\nimport { hasProperty, isJsonRpcRequest } from '@metamask/utils';\nimport { chmod, unlink } from 'node:fs/promises';\nimport { createServer } from 'node:net';\nimport type { Server } from 'node:net';\n\nimport type { RpcHandlerMap } from './types.js';\nimport { isErrorWithCode } from './utils.js';\n\nconst CONNECTION_TIMEOUT_MS = 30_000;\n\n/**\n * Handle returned by {@link startRpcSocketServer}.\n */\nexport type RpcSocketServerHandle = {\n  close: () => Promise<void>;\n};\n\n/**\n * Options for {@link startRpcSocketServer}.\n */\nexport type StartRpcSocketServerOptions = {\n  /** The Unix socket path to listen on. */\n  socketPath: string;\n  /** Map of RPC method names to handler functions. */\n  handlers: RpcHandlerMap;\n  /** Callback invoked when a `shutdown` RPC is received. */\n  onShutdown?: (() => Promise<void>) | undefined;\n  /**\n   * Optional logger for server-side diagnostics (unexpected socket errors,\n   * unhandled handler rejections, `onShutdown` callback failures). Without\n   * this, failures fall back to `process.stderr.write`, which is discarded\n   * when the daemon is spawned with `stdio: 'ignore'`.\n   */\n  log?: ((message: string) => void) | undefined;\n};\n\n/**\n * Start a Unix socket server that processes JSON-RPC requests.\n *\n * Each connection reads one newline-delimited JSON-RPC request, processes it\n * via the provided handler map, writes a JSON-RPC response, and closes.\n *\n * The special `shutdown` method is intercepted before handler dispatch and\n * triggers the provided {@link StartRpcSocketServerOptions.onShutdown} callback\n * after responding.\n *\n * @param options - Server options.\n * @param options.socketPath - The Unix socket path to listen on.\n * @param options.handlers - Map of RPC method names to handler functions.\n * @param options.onShutdown - Optional callback invoked when a `shutdown` RPC is received.\n * @param options.log - Optional logger for server-side diagnostics.\n * @returns A handle with a `close()` function for cleanup.\n */\nexport async function startRpcSocketServer({\n  socketPath,\n  handlers,\n  onShutdown,\n  log,\n}: StartRpcSocketServerOptions): Promise<RpcSocketServerHandle> {\n  const logFn = log ?? defaultLog;\n\n  const server = createServer((socket) => {\n    let buffer = '';\n\n    // Destroy connections that never send a complete request line. `unref` so\n    // the timer alone cannot keep the event loop alive at shutdown.\n    const timer = setTimeout(() => {\n      socket.destroy();\n    }, CONNECTION_TIMEOUT_MS);\n    timer.unref();\n\n    /**\n     * Clear the idle-connection timer. Called from data, close, and error\n     * paths so the timer never outlives the connection itself.\n     */\n    const clearIdleTimer = (): void => {\n      clearTimeout(timer);\n    };\n\n    const onData = (data: Buffer): void => {\n      buffer += data.toString();\n      const idx = buffer.indexOf('\\n');\n      if (idx === -1) {\n        return;\n      }\n\n      clearIdleTimer();\n\n      // One request per connection.\n      socket.removeListener('data', onData);\n\n      const line = buffer.slice(0, idx);\n      const remaining = buffer.slice(idx + 1);\n      buffer = '';\n\n      if (remaining.length > 0) {\n        socket.end(\n          `${JSON.stringify({\n            jsonrpc: '2.0',\n            error: rpcErrors\n              .invalidRequest({\n                message: 'Only one request per connection is allowed',\n              })\n              .serialize(),\n          })}\\n`,\n        );\n        return;\n      }\n\n      handleRequest(handlers, line, onShutdown, logFn)\n        .then((response) => {\n          socket.end(`${JSON.stringify(response)}\\n`);\n          return undefined;\n        })\n        .catch((dispatchError: unknown) => {\n          logFn(`Unhandled RPC dispatch error: ${String(dispatchError)}`);\n          socket.end(\n            `${JSON.stringify({\n              jsonrpc: '2.0',\n              error: rpcErrors\n                .internal({ message: 'Internal error' })\n                .serialize(),\n            })}\\n`,\n          );\n        });\n    };\n    socket.on('data', onData);\n    socket.once('close', clearIdleTimer);\n    socket.on('error', (socketError: NodeJS.ErrnoException) => {\n      clearIdleTimer();\n      const { code } = socketError;\n      if (code === 'EPIPE' || code === 'ECONNRESET') {\n        return; // Expected during probe/disconnect.\n      }\n      logFn(`Unexpected socket error: ${String(socketError)}`);\n    });\n  });\n\n  await listen(server, socketPath);\n\n  return {\n    close: async (): Promise<void> => closeServer(server),\n  };\n}\n\n/**\n * Default fallback logger: writes to stderr. Daemons spawned with\n * `stdio: 'ignore'` should always pass an explicit `log`.\n *\n * @param message - The message to log.\n */\nfunction defaultLog(message: string): void {\n  process.stderr.write(`${message}\\n`);\n}\n\n/**\n * Handle a single JSON-RPC request line, intercepting the `shutdown` method.\n *\n * @param handlers - The RPC handler map.\n * @param line - The raw JSON line from the socket.\n * @param onShutdown - Optional shutdown callback.\n * @param log - Logger for diagnostic messages.\n * @returns A JSON-RPC response object.\n */\nasync function handleRequest(\n  handlers: RpcHandlerMap,\n  line: string,\n  onShutdown: (() => Promise<void>) | undefined,\n  log: (message: string) => void,\n): Promise<JsonRpcResponse> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return {\n      jsonrpc: '2.0',\n      id: null,\n      error: rpcErrors.parse({ message: 'Parse error' }).serialize(),\n    };\n  }\n\n  if (!isJsonRpcRequest(parsed)) {\n    const id: JsonRpcId =\n      typeof parsed === 'object' &&\n      parsed !== null &&\n      hasProperty(parsed, 'id') &&\n      isValidJsonRpcId(parsed.id)\n        ? parsed.id\n        : null;\n    return {\n      jsonrpc: '2.0',\n      id,\n      error: rpcErrors\n        .invalidRequest({ message: 'Invalid JSON-RPC request' })\n        .serialize(),\n    };\n  }\n\n  const { id, method, params } = parsed;\n\n  try {\n    if (method === 'shutdown') {\n      if (onShutdown) {\n        setTimeout(() => {\n          onShutdown().catch((error: unknown) => {\n            log(`onShutdown callback failed: ${String(error)}`);\n          });\n        }, 0);\n      }\n      return { jsonrpc: '2.0', id, result: { status: 'shutting down' } };\n    }\n\n    const handler = Object.prototype.hasOwnProperty.call(handlers, method)\n      ? handlers[method]\n      : undefined;\n    if (!handler) {\n      return {\n        jsonrpc: '2.0',\n        id,\n        error: rpcErrors\n          .methodNotFound({ message: `Method not found: ${method}` })\n          .serialize(),\n      };\n    }\n\n    const [structError, validatedParams] = validateStruct(\n      coerceHandlerParams(params),\n      handler.paramsStruct,\n    );\n    if (structError !== undefined) {\n      return {\n        jsonrpc: '2.0',\n        id,\n        error: rpcErrors\n          .invalidParams({\n            message: `Invalid params for ${method}: ${structError.message}`,\n          })\n          .serialize(),\n      };\n    }\n\n    const result = await handler.run(validatedParams);\n    return { jsonrpc: '2.0', id, result: result ?? null };\n  } catch (error) {\n    log(`RPC handler \"${method}\" failed: ${String(error)}`);\n    if (isRpcError(error)) {\n      return { jsonrpc: '2.0', id, error };\n    }\n    const message = error instanceof Error ? error.message : 'Internal error';\n    return {\n      jsonrpc: '2.0',\n      id,\n      error: rpcErrors.internal({ message }).serialize(),\n    };\n  }\n}\n\n/**\n * Narrow `params` to the shape handlers expect. JSON-RPC 2.0 requires\n * `params`, when present, to be an array or object; both are valid `Json`.\n *\n * @param params - The validated `params` field from a JSON-RPC request.\n * @returns The same value, or `null` when absent.\n */\nfunction coerceHandlerParams(\n  params: JsonRpcParams | undefined,\n): JsonRpcParams | null {\n  return params ?? null;\n}\n\n/**\n * Per JSON-RPC 2.0, `id` must be a string, number, or null. Used when\n * salvaging an `id` from a parse-success-but-not-valid-request payload.\n *\n * @param value - The candidate id.\n * @returns True if the value is an acceptable JSON-RPC id.\n */\nfunction isValidJsonRpcId(value: unknown): value is JsonRpcId {\n  return (\n    value === null || typeof value === 'string' || typeof value === 'number'\n  );\n}\n\n/**\n * Check if an error is an RPC error with a numeric code.\n *\n * @param error - The error to check.\n * @returns True if the error has a numeric code property.\n */\nfunction isRpcError(\n  error: unknown,\n): error is { code: number; message: string } {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    hasProperty(error, 'code') &&\n    typeof error.code === 'number' &&\n    hasProperty(error, 'message') &&\n    typeof error.message === 'string'\n  );\n}\n\n/**\n * Start listening on a Unix socket path, removing any stale socket file.\n *\n * @param server - The net.Server instance.\n * @param socketPath - The Unix socket path.\n */\nasync function listen(server: Server, socketPath: string): Promise<void> {\n  try {\n    await unlink(socketPath);\n  } catch (error) {\n    if (!isErrorWithCode(error, 'ENOENT')) {\n      throw error;\n    }\n  }\n\n  await new Promise<void>((resolve, reject) => {\n    server.on('error', reject);\n    server.listen(socketPath, () => {\n      server.removeListener('error', reject);\n      resolve();\n    });\n  });\n\n  // Restrict the socket to its owner. The daemon hosts an unlocked wallet, so\n  // a world-connectable socket would let any local user drive it. listen()\n  // creates the socket with umask-derived (typically world-accessible) perms.\n  try {\n    await chmod(socketPath, 0o600);\n  } catch (error) {\n    // Never leave a possibly world-accessible socket listening with no handle\n    // to close it. Cleanup is best-effort so the chmod failure still surfaces.\n    await closeServer(server).catch(() => undefined);\n    await unlink(socketPath).catch(() => undefined);\n    throw error;\n  }\n}\n\n/**\n * Close a server, resolving once it stops accepting connections.\n *\n * @param server - The net.Server instance.\n */\nasync function closeServer(server: Server): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    server.close((error) => {\n      if (error) {\n        reject(error);\n      } else {\n        resolve();\n      }\n    });\n  });\n}\n"]}

package/dist/daemon/{rpc-socket-server.d.ts → rpc-socket-server.d.cts}

@@ -1,4 +1,4 @@
-import type { RpcHandlerMap } from './types.js';
+import type { RpcHandlerMap } from "./types.cjs";
 /**
  * Handle returned by {@link startRpcSocketServer}.
  */
@@ -41,4 +41,4 @@ export type StartRpcSocketServerOptions = {
  * @returns A handle with a `close()` function for cleanup.
  */
 export declare function startRpcSocketServer({ socketPath, handlers, onShutdown, log, }: StartRpcSocketServerOptions): Promise<RpcSocketServerHandle>;
-//# sourceMappingURL=rpc-socket-server.d.ts.map
+//# sourceMappingURL=rpc-socket-server.d.cts.map

package/dist/daemon/rpc-socket-server.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-socket-server.d.cts","sourceRoot":"","sources":["../../src/daemon/rpc-socket-server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAmB;AAKhD;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,aAAa,CAAC;IACxB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IAC/C;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC/C,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,UAAU,EACV,QAAQ,EACR,UAAU,EACV,GAAG,GACJ,EAAE,2BAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAqF9D"}

package/dist/daemon/rpc-socket-server.d.mts

@@ -0,0 +1,44 @@
+import type { RpcHandlerMap } from "./types.mjs";
+/**
+ * Handle returned by {@link startRpcSocketServer}.
+ */
+export type RpcSocketServerHandle = {
+    close: () => Promise<void>;
+};
+/**
+ * Options for {@link startRpcSocketServer}.
+ */
+export type StartRpcSocketServerOptions = {
+    /** The Unix socket path to listen on. */
+    socketPath: string;
+    /** Map of RPC method names to handler functions. */
+    handlers: RpcHandlerMap;
+    /** Callback invoked when a `shutdown` RPC is received. */
+    onShutdown?: (() => Promise<void>) | undefined;
+    /**
+     * Optional logger for server-side diagnostics (unexpected socket errors,
+     * unhandled handler rejections, `onShutdown` callback failures). Without
+     * this, failures fall back to `process.stderr.write`, which is discarded
+     * when the daemon is spawned with `stdio: 'ignore'`.
+     */
+    log?: ((message: string) => void) | undefined;
+};
+/**
+ * Start a Unix socket server that processes JSON-RPC requests.
+ *
+ * Each connection reads one newline-delimited JSON-RPC request, processes it
+ * via the provided handler map, writes a JSON-RPC response, and closes.
+ *
+ * The special `shutdown` method is intercepted before handler dispatch and
+ * triggers the provided {@link StartRpcSocketServerOptions.onShutdown} callback
+ * after responding.
+ *
+ * @param options - Server options.
+ * @param options.socketPath - The Unix socket path to listen on.
+ * @param options.handlers - Map of RPC method names to handler functions.
+ * @param options.onShutdown - Optional callback invoked when a `shutdown` RPC is received.
+ * @param options.log - Optional logger for server-side diagnostics.
+ * @returns A handle with a `close()` function for cleanup.
+ */
+export declare function startRpcSocketServer({ socketPath, handlers, onShutdown, log, }: StartRpcSocketServerOptions): Promise<RpcSocketServerHandle>;
+//# sourceMappingURL=rpc-socket-server.d.mts.map

package/dist/daemon/rpc-socket-server.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-socket-server.d.mts","sourceRoot":"","sources":["../../src/daemon/rpc-socket-server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAmB;AAKhD;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,aAAa,CAAC;IACxB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IAC/C;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC/C,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,UAAU,EACV,QAAQ,EACR,UAAU,EACV,GAAG,GACJ,EAAE,2BAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAqF9D"}

package/dist/daemon/{rpc-socket-server.js → rpc-socket-server.mjs}

@@ -1,10 +1,10 @@
-import { rpcErrors } from '@metamask/rpc-errors';
-import { validate as validateStruct } from '@metamask/superstruct';
-import { hasProperty, isJsonRpcRequest } from '@metamask/utils';
-import { chmod, unlink } from 'node:fs/promises';
-import { createServer } from 'node:net';
-import { isErrorWithCode } from './utils.js';
-const CONNECTION_TIMEOUT_MS = 30_000;
+import { rpcErrors } from "@metamask/rpc-errors";
+import { validate as validateStruct } from "@metamask/superstruct";
+import { hasProperty, isJsonRpcRequest } from "@metamask/utils";
+import { chmod, unlink } from "node:fs/promises";
+import { createServer } from "node:net";
+import { isErrorWithCode } from "./utils.mjs";
+const CONNECTION_TIMEOUT_MS = 30000;
 /**
  * Start a Unix socket server that processes JSON-RPC requests.
  *
@@ -277,4 +277,4 @@ async function closeServer(server) {
         });
     });
 }
-//# sourceMappingURL=rpc-socket-server.js.map
+//# sourceMappingURL=rpc-socket-server.mjs.map

package/dist/daemon/rpc-socket-server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-socket-server.mjs","sourceRoot":"","sources":["../../src/daemon/rpc-socket-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,6BAA6B;AACjD,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,8BAA8B;AAMnE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,wBAAwB;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB;AACjD,OAAO,EAAE,YAAY,EAAE,iBAAiB;AAIxC,OAAO,EAAE,eAAe,EAAE,oBAAmB;AAE7C,MAAM,qBAAqB,GAAG,KAAM,CAAC;AA4BrC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,UAAU,EACV,QAAQ,EACR,UAAU,EACV,GAAG,GACyB;IAC5B,MAAM,KAAK,GAAG,GAAG,IAAI,UAAU,CAAC;IAEhC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd;;;WAGG;QACH,MAAM,cAAc,GAAG,GAAS,EAAE;YAChC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACpC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,cAAc,EAAE,CAAC;YAEjB,8BAA8B;YAC9B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,GAAG,EAAE,CAAC;YAEZ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,CACR,GAAG,IAAI,CAAC,SAAS,CAAC;oBAChB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,SAAS;yBACb,cAAc,CAAC;wBACd,OAAO,EAAE,4CAA4C;qBACtD,CAAC;yBACD,SAAS,EAAE;iBACf,CAAC,IAAI,CACP,CAAC;gBACF,OAAO;YACT,CAAC;YAED,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC;iBAC7C,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACjB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,aAAsB,EAAE,EAAE;gBAChC,KAAK,CAAC,iCAAiC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBAChE,MAAM,CAAC,GAAG,CACR,GAAG,IAAI,CAAC,SAAS,CAAC;oBAChB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,SAAS;yBACb,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;yBACvC,SAAS,EAAE;iBACf,CAAC,IAAI,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,WAAkC,EAAE,EAAE;YACxD,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC;YAC7B,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9C,OAAO,CAAC,oCAAoC;YAC9C,CAAC;YACD,KAAK,CAAC,4BAA4B,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEjC,OAAO;QACL,KAAK,EAAE,KAAK,IAAmB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAC1B,QAAuB,EACvB,IAAY,EACZ,UAA6C,EAC7C,GAA8B;IAE9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,SAAS,EAAE;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,GACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC;YACzB,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,EAAE;YACX,CAAC,CAAC,IAAI,CAAC;QACX,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE;YACF,KAAK,EAAE,SAAS;iBACb,cAAc,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;iBACvD,SAAS,EAAE;SACf,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAEtC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,IAAI,UAAU,EAAE,CAAC;gBACf,UAAU,CAAC,GAAG,EAAE;oBACd,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;wBACpC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACtD,CAAC,CAAC,CAAC;gBACL,CAAC,EAAE,CAAC,CAAC,CAAC;YACR,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YACpE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,EAAE;gBACF,KAAK,EAAE,SAAS;qBACb,cAAc,CAAC,EAAE,OAAO,EAAE,qBAAqB,MAAM,EAAE,EAAE,CAAC;qBAC1D,SAAS,EAAE;aACf,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,cAAc,CACnD,mBAAmB,CAAC,MAAM,CAAC,EAC3B,OAAO,CAAC,YAAY,CACrB,CAAC;QACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,EAAE;gBACF,KAAK,EAAE,SAAS;qBACb,aAAa,CAAC;oBACb,OAAO,EAAE,sBAAsB,MAAM,KAAK,WAAW,CAAC,OAAO,EAAE;iBAChE,CAAC;qBACD,SAAS,EAAE;aACf,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,gBAAgB,MAAM,aAAa,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE;YACF,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE;SACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAC1B,MAAiC;IAEjC,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CACzE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;QAC1B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;QAC7B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,UAAkB;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { rpcErrors } from '@metamask/rpc-errors';\nimport { validate as validateStruct } from '@metamask/superstruct';\nimport type {\n  JsonRpcId,\n  JsonRpcParams,\n  JsonRpcResponse,\n} from '@metamask/utils';\nimport { hasProperty, isJsonRpcRequest } from '@metamask/utils';\nimport { chmod, unlink } from 'node:fs/promises';\nimport { createServer } from 'node:net';\nimport type { Server } from 'node:net';\n\nimport type { RpcHandlerMap } from './types.js';\nimport { isErrorWithCode } from './utils.js';\n\nconst CONNECTION_TIMEOUT_MS = 30_000;\n\n/**\n * Handle returned by {@link startRpcSocketServer}.\n */\nexport type RpcSocketServerHandle = {\n  close: () => Promise<void>;\n};\n\n/**\n * Options for {@link startRpcSocketServer}.\n */\nexport type StartRpcSocketServerOptions = {\n  /** The Unix socket path to listen on. */\n  socketPath: string;\n  /** Map of RPC method names to handler functions. */\n  handlers: RpcHandlerMap;\n  /** Callback invoked when a `shutdown` RPC is received. */\n  onShutdown?: (() => Promise<void>) | undefined;\n  /**\n   * Optional logger for server-side diagnostics (unexpected socket errors,\n   * unhandled handler rejections, `onShutdown` callback failures). Without\n   * this, failures fall back to `process.stderr.write`, which is discarded\n   * when the daemon is spawned with `stdio: 'ignore'`.\n   */\n  log?: ((message: string) => void) | undefined;\n};\n\n/**\n * Start a Unix socket server that processes JSON-RPC requests.\n *\n * Each connection reads one newline-delimited JSON-RPC request, processes it\n * via the provided handler map, writes a JSON-RPC response, and closes.\n *\n * The special `shutdown` method is intercepted before handler dispatch and\n * triggers the provided {@link StartRpcSocketServerOptions.onShutdown} callback\n * after responding.\n *\n * @param options - Server options.\n * @param options.socketPath - The Unix socket path to listen on.\n * @param options.handlers - Map of RPC method names to handler functions.\n * @param options.onShutdown - Optional callback invoked when a `shutdown` RPC is received.\n * @param options.log - Optional logger for server-side diagnostics.\n * @returns A handle with a `close()` function for cleanup.\n */\nexport async function startRpcSocketServer({\n  socketPath,\n  handlers,\n  onShutdown,\n  log,\n}: StartRpcSocketServerOptions): Promise<RpcSocketServerHandle> {\n  const logFn = log ?? defaultLog;\n\n  const server = createServer((socket) => {\n    let buffer = '';\n\n    // Destroy connections that never send a complete request line. `unref` so\n    // the timer alone cannot keep the event loop alive at shutdown.\n    const timer = setTimeout(() => {\n      socket.destroy();\n    }, CONNECTION_TIMEOUT_MS);\n    timer.unref();\n\n    /**\n     * Clear the idle-connection timer. Called from data, close, and error\n     * paths so the timer never outlives the connection itself.\n     */\n    const clearIdleTimer = (): void => {\n      clearTimeout(timer);\n    };\n\n    const onData = (data: Buffer): void => {\n      buffer += data.toString();\n      const idx = buffer.indexOf('\\n');\n      if (idx === -1) {\n        return;\n      }\n\n      clearIdleTimer();\n\n      // One request per connection.\n      socket.removeListener('data', onData);\n\n      const line = buffer.slice(0, idx);\n      const remaining = buffer.slice(idx + 1);\n      buffer = '';\n\n      if (remaining.length > 0) {\n        socket.end(\n          `${JSON.stringify({\n            jsonrpc: '2.0',\n            error: rpcErrors\n              .invalidRequest({\n                message: 'Only one request per connection is allowed',\n              })\n              .serialize(),\n          })}\\n`,\n        );\n        return;\n      }\n\n      handleRequest(handlers, line, onShutdown, logFn)\n        .then((response) => {\n          socket.end(`${JSON.stringify(response)}\\n`);\n          return undefined;\n        })\n        .catch((dispatchError: unknown) => {\n          logFn(`Unhandled RPC dispatch error: ${String(dispatchError)}`);\n          socket.end(\n            `${JSON.stringify({\n              jsonrpc: '2.0',\n              error: rpcErrors\n                .internal({ message: 'Internal error' })\n                .serialize(),\n            })}\\n`,\n          );\n        });\n    };\n    socket.on('data', onData);\n    socket.once('close', clearIdleTimer);\n    socket.on('error', (socketError: NodeJS.ErrnoException) => {\n      clearIdleTimer();\n      const { code } = socketError;\n      if (code === 'EPIPE' || code === 'ECONNRESET') {\n        return; // Expected during probe/disconnect.\n      }\n      logFn(`Unexpected socket error: ${String(socketError)}`);\n    });\n  });\n\n  await listen(server, socketPath);\n\n  return {\n    close: async (): Promise<void> => closeServer(server),\n  };\n}\n\n/**\n * Default fallback logger: writes to stderr. Daemons spawned with\n * `stdio: 'ignore'` should always pass an explicit `log`.\n *\n * @param message - The message to log.\n */\nfunction defaultLog(message: string): void {\n  process.stderr.write(`${message}\\n`);\n}\n\n/**\n * Handle a single JSON-RPC request line, intercepting the `shutdown` method.\n *\n * @param handlers - The RPC handler map.\n * @param line - The raw JSON line from the socket.\n * @param onShutdown - Optional shutdown callback.\n * @param log - Logger for diagnostic messages.\n * @returns A JSON-RPC response object.\n */\nasync function handleRequest(\n  handlers: RpcHandlerMap,\n  line: string,\n  onShutdown: (() => Promise<void>) | undefined,\n  log: (message: string) => void,\n): Promise<JsonRpcResponse> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return {\n      jsonrpc: '2.0',\n      id: null,\n      error: rpcErrors.parse({ message: 'Parse error' }).serialize(),\n    };\n  }\n\n  if (!isJsonRpcRequest(parsed)) {\n    const id: JsonRpcId =\n      typeof parsed === 'object' &&\n      parsed !== null &&\n      hasProperty(parsed, 'id') &&\n      isValidJsonRpcId(parsed.id)\n        ? parsed.id\n        : null;\n    return {\n      jsonrpc: '2.0',\n      id,\n      error: rpcErrors\n        .invalidRequest({ message: 'Invalid JSON-RPC request' })\n        .serialize(),\n    };\n  }\n\n  const { id, method, params } = parsed;\n\n  try {\n    if (method === 'shutdown') {\n      if (onShutdown) {\n        setTimeout(() => {\n          onShutdown().catch((error: unknown) => {\n            log(`onShutdown callback failed: ${String(error)}`);\n          });\n        }, 0);\n      }\n      return { jsonrpc: '2.0', id, result: { status: 'shutting down' } };\n    }\n\n    const handler = Object.prototype.hasOwnProperty.call(handlers, method)\n      ? handlers[method]\n      : undefined;\n    if (!handler) {\n      return {\n        jsonrpc: '2.0',\n        id,\n        error: rpcErrors\n          .methodNotFound({ message: `Method not found: ${method}` })\n          .serialize(),\n      };\n    }\n\n    const [structError, validatedParams] = validateStruct(\n      coerceHandlerParams(params),\n      handler.paramsStruct,\n    );\n    if (structError !== undefined) {\n      return {\n        jsonrpc: '2.0',\n        id,\n        error: rpcErrors\n          .invalidParams({\n            message: `Invalid params for ${method}: ${structError.message}`,\n          })\n          .serialize(),\n      };\n    }\n\n    const result = await handler.run(validatedParams);\n    return { jsonrpc: '2.0', id, result: result ?? null };\n  } catch (error) {\n    log(`RPC handler \"${method}\" failed: ${String(error)}`);\n    if (isRpcError(error)) {\n      return { jsonrpc: '2.0', id, error };\n    }\n    const message = error instanceof Error ? error.message : 'Internal error';\n    return {\n      jsonrpc: '2.0',\n      id,\n      error: rpcErrors.internal({ message }).serialize(),\n    };\n  }\n}\n\n/**\n * Narrow `params` to the shape handlers expect. JSON-RPC 2.0 requires\n * `params`, when present, to be an array or object; both are valid `Json`.\n *\n * @param params - The validated `params` field from a JSON-RPC request.\n * @returns The same value, or `null` when absent.\n */\nfunction coerceHandlerParams(\n  params: JsonRpcParams | undefined,\n): JsonRpcParams | null {\n  return params ?? null;\n}\n\n/**\n * Per JSON-RPC 2.0, `id` must be a string, number, or null. Used when\n * salvaging an `id` from a parse-success-but-not-valid-request payload.\n *\n * @param value - The candidate id.\n * @returns True if the value is an acceptable JSON-RPC id.\n */\nfunction isValidJsonRpcId(value: unknown): value is JsonRpcId {\n  return (\n    value === null || typeof value === 'string' || typeof value === 'number'\n  );\n}\n\n/**\n * Check if an error is an RPC error with a numeric code.\n *\n * @param error - The error to check.\n * @returns True if the error has a numeric code property.\n */\nfunction isRpcError(\n  error: unknown,\n): error is { code: number; message: string } {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    hasProperty(error, 'code') &&\n    typeof error.code === 'number' &&\n    hasProperty(error, 'message') &&\n    typeof error.message === 'string'\n  );\n}\n\n/**\n * Start listening on a Unix socket path, removing any stale socket file.\n *\n * @param server - The net.Server instance.\n * @param socketPath - The Unix socket path.\n */\nasync function listen(server: Server, socketPath: string): Promise<void> {\n  try {\n    await unlink(socketPath);\n  } catch (error) {\n    if (!isErrorWithCode(error, 'ENOENT')) {\n      throw error;\n    }\n  }\n\n  await new Promise<void>((resolve, reject) => {\n    server.on('error', reject);\n    server.listen(socketPath, () => {\n      server.removeListener('error', reject);\n      resolve();\n    });\n  });\n\n  // Restrict the socket to its owner. The daemon hosts an unlocked wallet, so\n  // a world-connectable socket would let any local user drive it. listen()\n  // creates the socket with umask-derived (typically world-accessible) perms.\n  try {\n    await chmod(socketPath, 0o600);\n  } catch (error) {\n    // Never leave a possibly world-accessible socket listening with no handle\n    // to close it. Cleanup is best-effort so the chmod failure still surfaces.\n    await closeServer(server).catch(() => undefined);\n    await unlink(socketPath).catch(() => undefined);\n    throw error;\n  }\n}\n\n/**\n * Close a server, resolving once it stops accepting connections.\n *\n * @param server - The net.Server instance.\n */\nasync function closeServer(server: Server): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    server.close((error) => {\n      if (error) {\n        reject(error);\n      } else {\n        resolve();\n      }\n    });\n  });\n}\n"]}

package/dist/daemon/secrets.cjs

@@ -0,0 +1,137 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _Password_value, _Srp_value;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Srp = exports.Password = void 0;
+const scure_bip39_1 = require("@metamask/scure-bip39");
+const english_1 = require("@metamask/scure-bip39/dist/wordlists/english.js");
+const REDACTED = '[redacted]';
+const VALID_SRP_WORD_COUNTS = [12, 15, 18, 21, 24];
+const INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');
+const WORDLIST_SET = new Set(english_1.wordlist);
+/**
+ * Opaque wrapper around a wallet password.
+ *
+ * Constructed via {@link Password.from}, which validates the input. The
+ * underlying string is only reachable through {@link Password.unwrap}; every
+ * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal
+ * interpolation) yields `[redacted]`. This makes accidental logging produce a
+ * harmless placeholder instead of leaking the secret.
+ */
+class Password {
+    // See .from() for why this is private.
+    // eslint-disable-next-line no-restricted-syntax
+    constructor(value) {
+        _Password_value.set(this, void 0);
+        __classPrivateFieldSet(this, _Password_value, value, "f");
+    }
+    /**
+     * Wrap a non-empty string as a {@link Password}.
+     *
+     * Matches the `@metamask/keyring-controller` convention: any non-empty
+     * string is acceptable; minimum-length policy is left to the keyring.
+     *
+     * @param value - The raw password string.
+     * @returns A redacting {@link Password} wrapper.
+     * @throws If `value` is empty.
+     */
+    static from(value) {
+        if (value.length === 0) {
+            throw new Error('Password must be a non-empty string');
+        }
+        return new Password(value);
+    }
+    /**
+     * Reveal the underlying password string. Call this only at trust boundaries
+     * (e.g. handing the value to the keyring or to a child-process env var).
+     *
+     * @returns The original password string.
+     */
+    unwrap() {
+        return __classPrivateFieldGet(this, _Password_value, "f");
+    }
+    toString() {
+        return REDACTED;
+    }
+    toJSON() {
+        return REDACTED;
+    }
+    [(_Password_value = new WeakMap(), INSPECT_CUSTOM)]() {
+        return REDACTED;
+    }
+}
+exports.Password = Password;
+/**
+ * Opaque wrapper around a BIP-39 secret recovery phrase.
+ *
+ * Constructed via {@link Srp.from}, which validates the word count
+ * (12/15/18/21/24) and that every word is present in the BIP-39 English
+ * wordlist. The underlying string is only reachable through {@link Srp.unwrap};
+ * every other path yields `[redacted]`.
+ */
+class Srp {
+    // See .from() for why this is private.
+    // eslint-disable-next-line no-restricted-syntax
+    constructor(value) {
+        _Srp_value.set(this, void 0);
+        __classPrivateFieldSet(this, _Srp_value, value, "f");
+    }
+    /**
+     * Validate and wrap a BIP-39 mnemonic phrase.
+     *
+     * Whitespace is normalized (trimmed and collapsed) before validation so that
+     * copy-pasted phrases with accidental leading/trailing/extra spaces are
+     * accepted. Catching malformed input here (rather than letting it reach
+     * `KeyringController:createNewVaultAndRestore`) produces a clearer error.
+     *
+     * @param value - The raw mnemonic string.
+     * @returns A redacting {@link Srp} wrapper containing the normalized phrase.
+     * @throws If the word count is not one of 12/15/18/21/24, if any word is
+     * not present in the BIP-39 English wordlist, or if the checksum is invalid.
+     */
+    static from(value) {
+        const words = value.trim().split(/\s+/u);
+        if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {
+            throw new Error(`Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`);
+        }
+        for (const word of words) {
+            if (!WORDLIST_SET.has(word)) {
+                throw new Error('Secret recovery phrase contains a word not in the BIP-39 English wordlist');
+            }
+        }
+        const normalized = words.join(' ');
+        if (!(0, scure_bip39_1.validateMnemonic)(normalized, english_1.wordlist)) {
+            throw new Error('Secret recovery phrase has an invalid checksum');
+        }
+        return new Srp(normalized);
+    }
+    /**
+     * Reveal the underlying mnemonic string. Call this only at trust boundaries.
+     *
+     * @returns The original mnemonic string.
+     */
+    unwrap() {
+        return __classPrivateFieldGet(this, _Srp_value, "f");
+    }
+    toString() {
+        return REDACTED;
+    }
+    toJSON() {
+        return REDACTED;
+    }
+    [(_Srp_value = new WeakMap(), INSPECT_CUSTOM)]() {
+        return REDACTED;
+    }
+}
+exports.Srp = Srp;
+//# sourceMappingURL=secrets.cjs.map

package/dist/daemon/secrets.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.cjs","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,uDAAyD;AACzD,6EAAwE;AAExE,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,qBAAqB,GAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAEtE,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAEhE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,kBAAQ,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAa,QAAQ;IAGnB,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,kCAAe;QAKtB,uBAAA,IAAI,mBAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,uBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA/CD,4BA+CC;AAED;;;;;;;GAOG;AACH,MAAa,GAAG;IAGd,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,6BAAe;QAKtB,uBAAA,IAAI,cAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,MAAM,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,IAAA,8BAAgB,EAAC,UAAU,EAAE,kBAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,kBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8BAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAhED,kBAgEC","sourcesContent":["import { validateMnemonic } from '@metamask/scure-bip39';\nimport { wordlist } from '@metamask/scure-bip39/dist/wordlists/english';\n\nconst REDACTED = '[redacted]';\n\nconst VALID_SRP_WORD_COUNTS: readonly number[] = [12, 15, 18, 21, 24];\n\nconst INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');\n\nconst WORDLIST_SET: ReadonlySet<string> = new Set(wordlist);\n\n/**\n * Opaque wrapper around a wallet password.\n *\n * Constructed via {@link Password.from}, which validates the input. The\n * underlying string is only reachable through {@link Password.unwrap}; every\n * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal\n * interpolation) yields `[redacted]`. This makes accidental logging produce a\n * harmless placeholder instead of leaking the secret.\n */\nexport class Password {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Wrap a non-empty string as a {@link Password}.\n   *\n   * Matches the `@metamask/keyring-controller` convention: any non-empty\n   * string is acceptable; minimum-length policy is left to the keyring.\n   *\n   * @param value - The raw password string.\n   * @returns A redacting {@link Password} wrapper.\n   * @throws If `value` is empty.\n   */\n  static from(value: string): Password {\n    if (value.length === 0) {\n      throw new Error('Password must be a non-empty string');\n    }\n    return new Password(value);\n  }\n\n  /**\n   * Reveal the underlying password string. Call this only at trust boundaries\n   * (e.g. handing the value to the keyring or to a child-process env var).\n   *\n   * @returns The original password string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n\n/**\n * Opaque wrapper around a BIP-39 secret recovery phrase.\n *\n * Constructed via {@link Srp.from}, which validates the word count\n * (12/15/18/21/24) and that every word is present in the BIP-39 English\n * wordlist. The underlying string is only reachable through {@link Srp.unwrap};\n * every other path yields `[redacted]`.\n */\nexport class Srp {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Validate and wrap a BIP-39 mnemonic phrase.\n   *\n   * Whitespace is normalized (trimmed and collapsed) before validation so that\n   * copy-pasted phrases with accidental leading/trailing/extra spaces are\n   * accepted. Catching malformed input here (rather than letting it reach\n   * `KeyringController:createNewVaultAndRestore`) produces a clearer error.\n   *\n   * @param value - The raw mnemonic string.\n   * @returns A redacting {@link Srp} wrapper containing the normalized phrase.\n   * @throws If the word count is not one of 12/15/18/21/24, if any word is\n   * not present in the BIP-39 English wordlist, or if the checksum is invalid.\n   */\n  static from(value: string): Srp {\n    const words = value.trim().split(/\\s+/u);\n    if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {\n      throw new Error(\n        `Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`,\n      );\n    }\n    for (const word of words) {\n      if (!WORDLIST_SET.has(word)) {\n        throw new Error(\n          'Secret recovery phrase contains a word not in the BIP-39 English wordlist',\n        );\n      }\n    }\n\n    const normalized = words.join(' ');\n    if (!validateMnemonic(normalized, wordlist)) {\n      throw new Error('Secret recovery phrase has an invalid checksum');\n    }\n    return new Srp(normalized);\n  }\n\n  /**\n   * Reveal the underlying mnemonic string. Call this only at trust boundaries.\n   *\n   * @returns The original mnemonic string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n"]}

package/dist/daemon/{secrets.d.ts → secrets.d.cts}

@@ -69,4 +69,4 @@ export declare class Srp {
     [INSPECT_CUSTOM](): string;
 }
 export {};
-//# sourceMappingURL=secrets.d.ts.map
+//# sourceMappingURL=secrets.d.cts.map

package/dist/daemon/secrets.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.cts","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,cAAc,eAA2C,CAAC;AAIhE;;;;;;;;GAQG;AACH,qBAAa,QAAQ;;IAKnB,OAAO;IAIP;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;IAOpC;;;;;OAKG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B;AAED;;;;;;;GAOG;AACH,qBAAa,GAAG;;IAKd,OAAO;IAIP;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG;IAsB/B;;;;OAIG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B"}

package/dist/daemon/secrets.d.mts

@@ -0,0 +1,72 @@
+declare const INSPECT_CUSTOM: unique symbol;
+/**
+ * Opaque wrapper around a wallet password.
+ *
+ * Constructed via {@link Password.from}, which validates the input. The
+ * underlying string is only reachable through {@link Password.unwrap}; every
+ * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal
+ * interpolation) yields `[redacted]`. This makes accidental logging produce a
+ * harmless placeholder instead of leaking the secret.
+ */
+export declare class Password {
+    #private;
+    private constructor();
+    /**
+     * Wrap a non-empty string as a {@link Password}.
+     *
+     * Matches the `@metamask/keyring-controller` convention: any non-empty
+     * string is acceptable; minimum-length policy is left to the keyring.
+     *
+     * @param value - The raw password string.
+     * @returns A redacting {@link Password} wrapper.
+     * @throws If `value` is empty.
+     */
+    static from(value: string): Password;
+    /**
+     * Reveal the underlying password string. Call this only at trust boundaries
+     * (e.g. handing the value to the keyring or to a child-process env var).
+     *
+     * @returns The original password string.
+     */
+    unwrap(): string;
+    toString(): string;
+    toJSON(): string;
+    [INSPECT_CUSTOM](): string;
+}
+/**
+ * Opaque wrapper around a BIP-39 secret recovery phrase.
+ *
+ * Constructed via {@link Srp.from}, which validates the word count
+ * (12/15/18/21/24) and that every word is present in the BIP-39 English
+ * wordlist. The underlying string is only reachable through {@link Srp.unwrap};
+ * every other path yields `[redacted]`.
+ */
+export declare class Srp {
+    #private;
+    private constructor();
+    /**
+     * Validate and wrap a BIP-39 mnemonic phrase.
+     *
+     * Whitespace is normalized (trimmed and collapsed) before validation so that
+     * copy-pasted phrases with accidental leading/trailing/extra spaces are
+     * accepted. Catching malformed input here (rather than letting it reach
+     * `KeyringController:createNewVaultAndRestore`) produces a clearer error.
+     *
+     * @param value - The raw mnemonic string.
+     * @returns A redacting {@link Srp} wrapper containing the normalized phrase.
+     * @throws If the word count is not one of 12/15/18/21/24, if any word is
+     * not present in the BIP-39 English wordlist, or if the checksum is invalid.
+     */
+    static from(value: string): Srp;
+    /**
+     * Reveal the underlying mnemonic string. Call this only at trust boundaries.
+     *
+     * @returns The original mnemonic string.
+     */
+    unwrap(): string;
+    toString(): string;
+    toJSON(): string;
+    [INSPECT_CUSTOM](): string;
+}
+export {};
+//# sourceMappingURL=secrets.d.mts.map

package/dist/daemon/secrets.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.mts","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,cAAc,eAA2C,CAAC;AAIhE;;;;;;;;GAQG;AACH,qBAAa,QAAQ;;IAKnB,OAAO;IAIP;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;IAOpC;;;;;OAKG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B;AAED;;;;;;;GAOG;AACH,qBAAa,GAAG;;IAKd,OAAO;IAIP;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG;IAsB/B;;;;OAIG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B"}

package/dist/daemon/{secrets.js → secrets.mjs}

@@ -1,5 +1,17 @@
-import { validateMnemonic } from '@metamask/scure-bip39';
-import { wordlist } from '@metamask/scure-bip39/dist/wordlists/english.js';
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _Password_value, _Srp_value;
+import { validateMnemonic } from "@metamask/scure-bip39";
+import { wordlist } from "@metamask/scure-bip39/dist/wordlists/english.js";
 const REDACTED = '[redacted]';
 const VALID_SRP_WORD_COUNTS = [12, 15, 18, 21, 24];
 const INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');
@@ -14,11 +26,11 @@ const WORDLIST_SET = new Set(wordlist);
  * harmless placeholder instead of leaking the secret.
  */
 export class Password {
-    #value;
     // See .from() for why this is private.
     // eslint-disable-next-line no-restricted-syntax
     constructor(value) {
-        this.#value = value;
+        _Password_value.set(this, void 0);
+        __classPrivateFieldSet(this, _Password_value, value, "f");
     }
     /**
      * Wrap a non-empty string as a {@link Password}.
@@ -43,7 +55,7 @@ export class Password {
      * @returns The original password string.
      */
     unwrap() {
-        return this.#value;
+        return __classPrivateFieldGet(this, _Password_value, "f");
     }
     toString() {
         return REDACTED;
@@ -51,7 +63,7 @@ export class Password {
     toJSON() {
         return REDACTED;
     }
-    [INSPECT_CUSTOM]() {
+    [(_Password_value = new WeakMap(), INSPECT_CUSTOM)]() {
         return REDACTED;
     }
 }
@@ -64,11 +76,11 @@ export class Password {
  * every other path yields `[redacted]`.
  */
 export class Srp {
-    #value;
     // See .from() for why this is private.
     // eslint-disable-next-line no-restricted-syntax
     constructor(value) {
-        this.#value = value;
+        _Srp_value.set(this, void 0);
+        __classPrivateFieldSet(this, _Srp_value, value, "f");
     }
     /**
      * Validate and wrap a BIP-39 mnemonic phrase.
@@ -105,7 +117,7 @@ export class Srp {
      * @returns The original mnemonic string.
      */
     unwrap() {
-        return this.#value;
+        return __classPrivateFieldGet(this, _Srp_value, "f");
     }
     toString() {
         return REDACTED;
@@ -113,8 +125,8 @@ export class Srp {
     toJSON() {
         return REDACTED;
     }
-    [INSPECT_CUSTOM]() {
+    [(_Srp_value = new WeakMap(), INSPECT_CUSTOM)]() {
         return REDACTED;
     }
 }
-//# sourceMappingURL=secrets.js.map
+//# sourceMappingURL=secrets.mjs.map

package/dist/daemon/secrets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.mjs","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,8BAA8B;AACzD,OAAO,EAAE,QAAQ,EAAE,wDAAqD;AAExE,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,qBAAqB,GAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAEtE,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAEhE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAQ;IAGnB,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,kCAAe;QAKtB,uBAAA,IAAI,mBAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,uBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG;IAGd,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,6BAAe;QAKtB,uBAAA,IAAI,cAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,MAAM,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,kBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8BAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { validateMnemonic } from '@metamask/scure-bip39';\nimport { wordlist } from '@metamask/scure-bip39/dist/wordlists/english';\n\nconst REDACTED = '[redacted]';\n\nconst VALID_SRP_WORD_COUNTS: readonly number[] = [12, 15, 18, 21, 24];\n\nconst INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');\n\nconst WORDLIST_SET: ReadonlySet<string> = new Set(wordlist);\n\n/**\n * Opaque wrapper around a wallet password.\n *\n * Constructed via {@link Password.from}, which validates the input. The\n * underlying string is only reachable through {@link Password.unwrap}; every\n * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal\n * interpolation) yields `[redacted]`. This makes accidental logging produce a\n * harmless placeholder instead of leaking the secret.\n */\nexport class Password {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Wrap a non-empty string as a {@link Password}.\n   *\n   * Matches the `@metamask/keyring-controller` convention: any non-empty\n   * string is acceptable; minimum-length policy is left to the keyring.\n   *\n   * @param value - The raw password string.\n   * @returns A redacting {@link Password} wrapper.\n   * @throws If `value` is empty.\n   */\n  static from(value: string): Password {\n    if (value.length === 0) {\n      throw new Error('Password must be a non-empty string');\n    }\n    return new Password(value);\n  }\n\n  /**\n   * Reveal the underlying password string. Call this only at trust boundaries\n   * (e.g. handing the value to the keyring or to a child-process env var).\n   *\n   * @returns The original password string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n\n/**\n * Opaque wrapper around a BIP-39 secret recovery phrase.\n *\n * Constructed via {@link Srp.from}, which validates the word count\n * (12/15/18/21/24) and that every word is present in the BIP-39 English\n * wordlist. The underlying string is only reachable through {@link Srp.unwrap};\n * every other path yields `[redacted]`.\n */\nexport class Srp {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Validate and wrap a BIP-39 mnemonic phrase.\n   *\n   * Whitespace is normalized (trimmed and collapsed) before validation so that\n   * copy-pasted phrases with accidental leading/trailing/extra spaces are\n   * accepted. Catching malformed input here (rather than letting it reach\n   * `KeyringController:createNewVaultAndRestore`) produces a clearer error.\n   *\n   * @param value - The raw mnemonic string.\n   * @returns A redacting {@link Srp} wrapper containing the normalized phrase.\n   * @throws If the word count is not one of 12/15/18/21/24, if any word is\n   * not present in the BIP-39 English wordlist, or if the checksum is invalid.\n   */\n  static from(value: string): Srp {\n    const words = value.trim().split(/\\s+/u);\n    if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {\n      throw new Error(\n        `Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`,\n      );\n    }\n    for (const word of words) {\n      if (!WORDLIST_SET.has(word)) {\n        throw new Error(\n          'Secret recovery phrase contains a word not in the BIP-39 English wordlist',\n        );\n      }\n    }\n\n    const normalized = words.join(' ');\n    if (!validateMnemonic(normalized, wordlist)) {\n      throw new Error('Secret recovery phrase has an invalid checksum');\n    }\n    return new Srp(normalized);\n  }\n\n  /**\n   * Reveal the underlying mnemonic string. Call this only at trust boundaries.\n   *\n   * @returns The original mnemonic string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n"]}