@metamask-previews/wallet-cli 0.0.0-preview-b8d04f274 → 0.0.0-preview-1ccf11bcb

package/dist/daemon/daemon-entry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-entry.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-entry.ts"],"names":[],"mappings":";;AAEA,+CAAuE;AAEvE,uDAA6C;AAC7C,6CAAsD;AACtD,uCAAyC;AACzC,+DAA2D;AAG3D,uCAAuE;AACvE,yDAAgD;AAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE7B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,2DAA2D;IAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAEjC,MAAM,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC;IAExC,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EACP,OAAO,EACP,MAAM,GACP,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,iBAAiB,CAAC;IAE1E,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE1B,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAEhD,MAAM,eAAe,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC;IAEzD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,CAAC;QACH,MAAM,IAAA,oBAAS,EAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,OAAO,EAAE,kCAAkC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;aACvE,CAAC;YACJ,CAAC,CAAC,2EAA2E;gBAC3E,IAAI,KAAK,CACP,kCAAkC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACR,CAAC;IAED,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA0C,CAAC;IAC/C,IAAI,MAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,6BAAY,EAAC;YACxC,YAAY,EAAE,MAAM;YACpB,QAAQ;YACR,GAAG;YACH,eAAe;YACf,GAAG;SACJ,CAAC,CAAC,CAAC;QAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,QAAQ,GAAkB;YAC9B,SAAS,EAAE,KAAK,IAA+B,EAAE,CAAC,CAAC;gBACjD,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;aACpD,CAAC;YACF,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,WAAW,EAAE,KAAK,IAAmB,EAAE,CACrC,iBAAiB,CAAC,SAAS,CAAC,wBAAwB,EAAE;YACxD,wEAAwE;YACxE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,0DAA0D;YAC1D,iCAAiC;YACjC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC5D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAA6B,CAAC;gBAQxD,MAAM,MAAM,GACV,iBAAiB,CAAC,SACnB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;gBACxB,OAAO,CAAC,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAS,CAAC;YACrE,CAAC;SACF,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,GAAG,MAAM,IAAA,wCAAoB,EAAC;YAClC,UAAU;YACV,QAAQ;YACR,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CACtD,CAAC,OAAgB,EAAE,EAAE;YACnB,GAAG,CAAC,6CAA6C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAO,CAAC;IAE9B,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAE7C,IAAI,eAA0C,CAAC;IAE/C;;;;;OAKG;IACH,KAAK,UAAU,QAAQ,CAAC,MAAc;QACpC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,kBAAkB,MAAM,MAAM,CAAC,CAAC;YACpC,eAAe,GAAG,CAAC,KAAK,IAAmB,EAAE;gBAC3C,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC7B,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,GAAG,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,aAAa,EAAE,CAAC;gBACtB,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CAChD,CAAC,OAAgB,EAAE,EAAE;wBACnB,GAAG,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvD,CAAC,CACF;oBACD,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;wBACzD,GAAG,CAAC,iCAAiC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,CAAC,CAAC;iBACH,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,iJAAiJ;QACjJ,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,iJAAiJ;QACjJ,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,UAAkB,EAClB,GAAW;IAEX,MAAM,WAAW,GAAG,MAAM,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ,WAAW,GAAG,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,iDAAiD;IACjD,wEAAwE;IACxE,qCAAqC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,6CAA6C;IAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,IAAA,sBAAc,EAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,aAAa;YAC3B,CAAC,CAAC,aAAa,UAAU,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;YACnE,CAAC,CAAC,gBAAgB,UAAU,0BAA0B,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,MAAM,MAAM,IAAI;YAC7D,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,4BAA4B,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5B,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAwB;IAExB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,IAAA,uBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,OAAe,EAAQ,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC;QAC1D,IAAA,qBAAU,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Json } from '@metamask/utils';\nimport type { Wallet } from '@metamask/wallet';\nimport { appendFile, readFile, rm, writeFile } from 'node:fs/promises';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport { startRpcSocketServer } from './rpc-socket-server';\nimport type { RpcSocketServerHandle } from './rpc-socket-server';\nimport type { DaemonStatusInfo, Logger, RpcHandlerMap } from './types';\nimport { isErrorWithCode, isProcessAlive, readPidFile } from './utils';\nimport { createWallet } from './wallet-factory';\n\nconst startTime = Date.now();\n\nmain().catch((error: unknown) => {\n  process.stderr.write(`Daemon fatal: ${String(error)}\\n`);\n  process.exitCode = 1;\n});\n\nasync function main(): Promise<void> {\n  const dataDir = process.env.MM_DAEMON_DATA_DIR;\n  if (!dataDir) {\n    throw new Error('MM_DAEMON_DATA_DIR environment variable is required');\n  }\n\n  const infuraProjectId = process.env.INFURA_PROJECT_ID;\n  if (!infuraProjectId) {\n    throw new Error('INFURA_PROJECT_ID environment variable is required');\n  }\n\n  const password = process.env.MM_WALLET_PASSWORD;\n  if (!password) {\n    throw new Error('MM_WALLET_PASSWORD environment variable is required');\n  }\n\n  const srp = process.env.MM_WALLET_SRP;\n  if (!srp) {\n    throw new Error('MM_WALLET_SRP environment variable is required');\n  }\n\n  // Scrub the wallet secrets from the environment now they are captured. The\n  // daemon is long-lived and dispatches arbitrary messenger actions over its\n  // socket, so leaving the SRP/password in `process.env` for its whole lifetime\n  // needlessly widens their exposure to any in-process code.\n  delete process.env.MM_WALLET_PASSWORD;\n  delete process.env.MM_WALLET_SRP;\n\n  await ensureOwnerOnlyDirectory(dataDir);\n\n  const {\n    socketPath: defaultSocketPath,\n    pidPath,\n    logPath,\n    dbPath,\n  } = getDaemonPaths(dataDir);\n  const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;\n\n  const log = makeLogger(logPath);\n  log('Starting daemon...');\n\n  // Pre-flight: refuse to take over if a responsive daemon already owns this\n  // socket. If the existing PID file is stale (or the socket is dead), clean\n  // it up so the exclusive PID-file write below has a chance to succeed.\n  await claimDaemonSlot(pidPath, socketPath, log);\n\n  const pidFileContents = `${process.pid}\\n${startTime}\\n`;\n\n  // Claim the slot atomically BEFORE opening the SQLite database or\n  // constructing the Wallet. Two concurrent `daemon start` invocations can\n  // both pass `claimDaemonSlot` (the gap between its preflight and the slot\n  // write is racy); without this ordering, both would open `wallet.db` and\n  // both would run first-run SRP import before one loses the wx race.\n  try {\n    await writeFile(pidPath, pidFileContents, { flag: 'wx' });\n  } catch (error) {\n    throw error instanceof Error\n      ? Object.assign(error, {\n          message: `Failed to claim daemon slot at ${pidPath}: ${error.message}`,\n        })\n      : /* istanbul ignore next -- node:fs/promises always rejects with an Error */\n        new Error(\n          `Failed to claim daemon slot at ${pidPath}: ${String(error)}`,\n        );\n  }\n\n  let wallet: Wallet | undefined;\n  let dispose: (() => Promise<void>) | undefined;\n  let handle: RpcSocketServerHandle | undefined;\n\n  try {\n    ({ wallet, dispose } = await createWallet({\n      databasePath: dbPath,\n      password,\n      srp,\n      infuraProjectId,\n      log,\n    }));\n\n    const constructedWallet = wallet;\n    const handlers: RpcHandlerMap = {\n      getStatus: async (): Promise<DaemonStatusInfo> => ({\n        pid: process.pid,\n        uptime: Math.floor((Date.now() - startTime) / 1000),\n      }),\n      // Exposes the callable surface for discovery: it grows silently as\n      // controllers are wired, so consumers need a way to see it without a\n      // hand-kept catalog that would rot.\n      listActions: async (): Promise<Json> =>\n        constructedWallet.messenger.getRegisteredActionTypes(),\n      // Arbitrary messenger dispatch is intentional: the CLI exposes the full\n      // messenger surface over a Unix socket inside the per-user oclif data\n      // directory. The dataDir is chmodded to 0o700 above and the socket to\n      // 0o600 by the RPC server on bind, so only the owning user can open\n      // them, but there is no in-process auth check beyond that\n      // filesystem-permission barrier.\n      call: async (params) => {\n        if (!Array.isArray(params) || typeof params[0] !== 'string') {\n          throw new Error('Expected params to be an array with an action name');\n        }\n        const [action, ...args] = params as [string, ...Json[]];\n        // The messenger's `call` is typed to a literal action-name union; the\n        // daemon dispatches arbitrary action names from RPC. Cast to a\n        // string-keyed `call` (which preserves arity) rather than to `any`, so\n        // the only untyped value is the `unknown` result narrowed below.\n        type ArbitraryDispatch = {\n          call: (actionName: string, ...callArgs: Json[]) => unknown;\n        };\n        const result = (\n          constructedWallet.messenger as unknown as ArbitraryDispatch\n        ).call(action, ...args);\n        return (result instanceof Promise ? await result : result) as Json;\n      },\n    };\n\n    // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)\n    // on bind and never leaves a live server/socket behind if it rejects, so\n    // the catch below has nothing of its own to close.\n    handle = await startRpcSocketServer({\n      socketPath,\n      handlers,\n      onShutdown: async () => shutdown('RPC shutdown'),\n      log,\n    });\n  } catch (error) {\n    // `dispose` is undefined only when `createWallet` itself threw — it has\n    // already torn down its own store in that case.\n    if (dispose) {\n      await dispose();\n    }\n    // Only remove the PID file if it's still ours (we may have lost the race\n    // and the file now belongs to another daemon).\n    await removeOwnedPidFile(pidPath, pidFileContents).catch(\n      (rmError: unknown) => {\n        log(`Failed to remove PID file during cleanup: ${String(rmError)}`);\n      },\n    );\n    throw error;\n  }\n\n  // Stable non-undefined refs for the shutdown closures (TS won't narrow the\n  // outer `let`s across closure escape).\n  const activeHandle = handle;\n  const activeDispose = dispose;\n\n  log(`Daemon started. Socket: ${socketPath}`);\n\n  let shutdownPromise: Promise<void> | undefined;\n\n  /**\n   * Shut down the daemon idempotently. Concurrent calls coalesce.\n   *\n   * @param reason - A label describing why shutdown was triggered.\n   * @returns A promise that resolves when shutdown completes.\n   */\n  async function shutdown(reason: string): Promise<void> {\n    if (shutdownPromise === undefined) {\n      log(`Shutting down (${reason})...`);\n      shutdownPromise = (async (): Promise<void> => {\n        try {\n          await activeHandle.close();\n        } catch (closeError) {\n          log(`handle.close() failed: ${String(closeError)}`);\n        }\n        await activeDispose();\n        await Promise.all([\n          removeOwnedPidFile(pidPath, pidFileContents).catch(\n            (rmError: unknown) => {\n              log(`Failed to remove PID file: ${String(rmError)}`);\n            },\n          ),\n          rm(socketPath, { force: true }).catch((rmError: unknown) => {\n            log(`Failed to remove socket file: ${String(rmError)}`);\n          }),\n        ]);\n      })();\n    }\n    return shutdownPromise;\n  }\n\n  process.on('SIGTERM', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGTERM').catch(() => undefined);\n  });\n  process.on('SIGINT', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGINT').catch(() => undefined);\n  });\n}\n\n/**\n * Refuse to start if a responsive daemon already owns the socket. Otherwise\n * clear any stale PID/socket files so the exclusive PID-file write can\n * proceed.\n *\n * @param pidPath - The PID file path.\n * @param socketPath - The socket path.\n * @param log - Logger for diagnostic messages.\n */\nasync function claimDaemonSlot(\n  pidPath: string,\n  socketPath: string,\n  log: Logger,\n): Promise<void> {\n  const existingPid = await readPidFile(pidPath);\n  const ping = await pingDaemon(socketPath);\n\n  if (ping.status === 'responsive') {\n    const pidPart =\n      existingPid === undefined\n        ? '(no PID file present)'\n        : `(pid ${existingPid})`;\n    throw new Error(`A daemon is already running on ${socketPath} ${pidPart}`);\n  }\n\n  // Refuse to clobber when the recorded PID is still alive, regardless of\n  // whether the socket exists. Possible scenarios:\n  // - `unreachable`: wedged or mid-startup sibling daemon (socket present\n  //   but not responding to JSON-RPC).\n  // - `absent`: a sibling daemon that hasn't yet bound its socket, or one\n  //   whose socket was manually removed. In either case, removing its PID\n  //   file would orphan it from `daemon stop`.\n  if (existingPid !== undefined && isProcessAlive(existingPid)) {\n    const detail =\n      ping.status === 'unreachable'\n        ? `socket at ${socketPath} is unresponsive (${ping.error.message})`\n        : `no socket at ${socketPath}, but pid is still alive`;\n    throw new Error(\n      `A daemon is already running (pid ${existingPid}): ${detail}. ` +\n        `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon.`,\n    );\n  }\n\n  if (ping.status === 'unreachable') {\n    log(`Removing stale socket at ${socketPath} (${ping.error.message}).`);\n  }\n  // Always clear both files before claiming the slot. The PID file may be\n  // corrupt (truncated, partial write from a crashed run); without this, the\n  // exclusive `wx` write below would fail with EEXIST and the daemon could\n  // not start until a human manually deleted the file.\n  await Promise.all([\n    rm(pidPath, { force: true }),\n    rm(socketPath, { force: true }),\n  ]);\n}\n\n/**\n * Remove the PID file only if it still contains our exact contents. Guards\n * against a racing daemon's PID file being removed by this daemon during\n * cleanup.\n *\n * @param pidPath - Path to the PID file.\n * @param expectedContents - The contents we wrote when claiming the slot.\n */\nasync function removeOwnedPidFile(\n  pidPath: string,\n  expectedContents: string,\n): Promise<void> {\n  let actual: string;\n  try {\n    actual = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return;\n    }\n    throw error;\n  }\n  if (actual === expectedContents) {\n    await rm(pidPath, { force: true });\n  }\n}\n\n/**\n * Create a file logger that appends timestamped lines to `logPath`, falling\n * back to stderr if the append fails.\n *\n * @param logPath - The log file path.\n * @returns A logging function.\n */\nfunction makeLogger(logPath: string): Logger {\n  return (message: string): void => {\n    const line = `[${new Date().toISOString()}] ${message}\\n`;\n    appendFile(logPath, line).catch((error: unknown) => {\n      process.stderr.write(`[log write failed: ${String(error)}] ${message}\\n`);\n    });\n  };\n}\n"]}
+{"version":3,"file":"daemon-entry.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-entry.ts"],"names":[],"mappings":";;AAAA,uDAAwD;AAGxD,+CAAuE;AAEvE,uDAA6C;AAC7C,6CAAsD;AACtD,uCAAyC;AACzC,+DAA2D;AAE3D,2CAA0C;AAC1C,uCAAwC;AAOxC,uCAAuE;AACvE,yDAAgD;AAEhD;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAA,oBAAM,EAC7B,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE;IACR,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE7B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,uEAAuE;IACvE,mCAAmC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAEjC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,aAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC;IAExC,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EACP,OAAO,EACP,MAAM,GACP,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,iBAAiB,CAAC;IAE1E,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE1B,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAEhD,MAAM,eAAe,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC;IAEzD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,CAAC;QACH,MAAM,IAAA,oBAAS,EAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,OAAO,EAAE,kCAAkC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;aACvE,CAAC;YACJ,CAAC,CAAC,2EAA2E;gBAC3E,IAAI,KAAK,CACP,kCAAkC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACR,CAAC;IAED,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA0C,CAAC;IAC/C,IAAI,MAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,6BAAY,EAAC;YACxC,YAAY,EAAE,MAAM;YACpB,QAAQ;YACR,GAAG;YACH,eAAe;YACf,GAAG;SACJ,CAAC,CAAC,CAAC;QAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACpD,iBAAiB,CAAC,SAAS,CACA,CAAC;QAE9B,MAAM,QAAQ,GAAkB;YAC9B,SAAS,EAAE,IAAA,qBAAa,EACtB,IAAA,qBAAO,EAAC,IAAI,CAAC,EACb,KAAK,IAA+B,EAAE,CAAC,CAAC;gBACtC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;aACpD,CAAC,CACH;YACD,IAAI,EAAE,IAAA,qBAAa,EAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;gBACjC,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAI,IAAe,CAAC,CAAC;YACrD,CAAC,CAAC;YACF,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,WAAW,EAAE,IAAA,qBAAa,EACxB,IAAA,qBAAO,EAAC,IAAI,CAAC,EACb,KAAK,IAAmB,EAAE,CACxB,iBAAiB,CAAC,SAAS,CAAC,wBAAwB,EAAE,CACzD;SACF,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,GAAG,MAAM,IAAA,wCAAoB,EAAC;YAClC,UAAU;YACV,QAAQ;YACR,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CACtD,CAAC,OAAgB,EAAE,EAAE;YACnB,GAAG,CAAC,6CAA6C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAO,CAAC;IAE9B,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAE7C,IAAI,eAA0C,CAAC;IAE/C;;;;;OAKG;IACH,KAAK,UAAU,QAAQ,CAAC,MAAc;QACpC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,kBAAkB,MAAM,MAAM,CAAC,CAAC;YACpC,eAAe,GAAG,CAAC,KAAK,IAAmB,EAAE;gBAC3C,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC7B,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,GAAG,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,aAAa,EAAE,CAAC;gBACxB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,GAAG,CAAC,qCAAqC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CAChD,CAAC,OAAgB,EAAE,EAAE;wBACnB,GAAG,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvD,CAAC,CACF;oBACD,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;wBACzD,GAAG,CAAC,iCAAiC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,CAAC,CAAC;iBACH,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,iJAAiJ;QACjJ,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,iJAAiJ;QACjJ,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,UAAkB,EAClB,GAAW;IAEX,MAAM,WAAW,GAAG,MAAM,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ,WAAW,GAAG,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,iDAAiD;IACjD,wEAAwE;IACxE,qCAAqC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,6CAA6C;IAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,IAAA,sBAAc,EAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,aAAa;YAC3B,CAAC,CAAC,aAAa,UAAU,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;YACnE,CAAC,CAAC,gBAAgB,UAAU,0BAA0B,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,MAAM,MAAM,IAAI;YAC7D,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,4BAA4B,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5B,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAwB;IAExB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,IAAA,uBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,OAAe,EAAQ,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC;QAC1D,IAAA,qBAAU,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { define, literal } from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport type { Wallet } from '@metamask/wallet';\nimport { appendFile, readFile, rm, writeFile } from 'node:fs/promises';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport { startRpcSocketServer } from './rpc-socket-server';\nimport type { RpcSocketServerHandle } from './rpc-socket-server';\nimport { Password, Srp } from './secrets';\nimport { defineHandler } from './types';\nimport type {\n  DaemonStatusInfo,\n  Logger,\n  RpcDispatcher,\n  RpcHandlerMap,\n} from './types';\nimport { isErrorWithCode, isProcessAlive, readPidFile } from './utils';\nimport { createWallet } from './wallet-factory';\n\n/**\n * Params struct for the `call` RPC method. `params` must be a non-empty array\n * whose first element is the messenger action name; remaining elements are\n * positional action arguments forwarded as-is to `messenger.call`.\n */\nconst callParamsStruct = define<[string, ...unknown[]]>(\n  'CallParams',\n  (value) => {\n    if (!Array.isArray(value)) {\n      return 'Expected an array';\n    }\n    if (value.length === 0) {\n      return 'Expected a non-empty array';\n    }\n    if (typeof value[0] !== 'string') {\n      return 'Expected the first element to be a string action name';\n    }\n    return true;\n  },\n);\n\nconst startTime = Date.now();\n\nmain().catch((error: unknown) => {\n  process.stderr.write(`Daemon fatal: ${String(error)}\\n`);\n  process.exitCode = 1;\n});\n\nasync function main(): Promise<void> {\n  const dataDir = process.env.MM_DAEMON_DATA_DIR;\n  if (!dataDir) {\n    throw new Error('MM_DAEMON_DATA_DIR environment variable is required');\n  }\n\n  const infuraProjectId = process.env.INFURA_PROJECT_ID;\n  if (!infuraProjectId) {\n    throw new Error('INFURA_PROJECT_ID environment variable is required');\n  }\n\n  // Password is optional: when absent, the daemon starts without unlocking\n  // the keyring (e.g. when the user prefers to call `mm wallet unlock`\n  // interactively rather than embed the password in their environment).\n  // First-run startup still requires a password; wallet-factory enforces\n  // that and surfaces a clear error.\n  const passwordRaw = process.env.MM_WALLET_PASSWORD;\n\n  const srpRaw = process.env.MM_WALLET_SRP;\n  if (!srpRaw) {\n    throw new Error('MM_WALLET_SRP environment variable is required');\n  }\n\n  // Scrub before validation so a throw from Password.from / Srp.from (bad\n  // value) does not leave the raw secrets in the long-lived daemon's env.\n  delete process.env.MM_WALLET_PASSWORD;\n  delete process.env.MM_WALLET_SRP;\n\n  const password = passwordRaw ? Password.from(passwordRaw) : undefined;\n  const srp = Srp.from(srpRaw);\n\n  await ensureOwnerOnlyDirectory(dataDir);\n\n  const {\n    socketPath: defaultSocketPath,\n    pidPath,\n    logPath,\n    dbPath,\n  } = getDaemonPaths(dataDir);\n  const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;\n\n  const log = makeLogger(logPath);\n  log('Starting daemon...');\n\n  // Pre-flight: refuse to take over if a responsive daemon already owns this\n  // socket. If the existing PID file is stale (or the socket is dead), clean\n  // it up so the exclusive PID-file write below has a chance to succeed.\n  await claimDaemonSlot(pidPath, socketPath, log);\n\n  const pidFileContents = `${process.pid}\\n${startTime}\\n`;\n\n  // Claim the slot atomically BEFORE opening the SQLite database or\n  // constructing the Wallet. Two concurrent `daemon start` invocations can\n  // both pass `claimDaemonSlot` (the gap between its preflight and the slot\n  // write is racy); without this ordering, both would open `wallet.db` and\n  // both would run first-run SRP import before one loses the wx race.\n  try {\n    await writeFile(pidPath, pidFileContents, { flag: 'wx' });\n  } catch (error) {\n    throw error instanceof Error\n      ? Object.assign(error, {\n          message: `Failed to claim daemon slot at ${pidPath}: ${error.message}`,\n        })\n      : /* istanbul ignore next -- node:fs/promises always rejects with an Error */\n        new Error(\n          `Failed to claim daemon slot at ${pidPath}: ${String(error)}`,\n        );\n  }\n\n  let wallet: Wallet | undefined;\n  let dispose: (() => Promise<void>) | undefined;\n  let handle: RpcSocketServerHandle | undefined;\n\n  try {\n    ({ wallet, dispose } = await createWallet({\n      databasePath: dbPath,\n      password,\n      srp,\n      infuraProjectId,\n      log,\n    }));\n\n    const constructedWallet = wallet;\n    // Arbitrary messenger dispatch is intentional: the CLI exposes the full\n    // messenger surface over a Unix socket inside the per-user oclif data\n    // directory. The dataDir is chmodded to 0o700 above and the socket to\n    // 0o600 by the RPC server on bind, so only the owning user can open them,\n    // but there is no in-process auth check beyond that filesystem-permission\n    // barrier. The messenger is strongly typed by action name; we narrow it\n    // once here to the RpcDispatcher shape the `call` handler needs.\n    const dispatch = constructedWallet.messenger.call.bind(\n      constructedWallet.messenger,\n    ) as unknown as RpcDispatcher;\n\n    const handlers: RpcHandlerMap = {\n      getStatus: defineHandler(\n        literal(null),\n        async (): Promise<DaemonStatusInfo> => ({\n          pid: process.pid,\n          uptime: Math.floor((Date.now() - startTime) / 1000),\n        }),\n      ),\n      call: defineHandler(callParamsStruct, async (params) => {\n        const [action, ...args] = params;\n        return await dispatch(action, ...(args as Json[]));\n      }),\n      // Exposes the callable surface for discovery: it grows silently as\n      // controllers are wired, so consumers need a way to see it without a\n      // hand-kept catalog that would rot.\n      listActions: defineHandler(\n        literal(null),\n        async (): Promise<Json> =>\n          constructedWallet.messenger.getRegisteredActionTypes(),\n      ),\n    };\n\n    // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)\n    // on bind and never leaves a live server/socket behind if it rejects, so\n    // the catch below has nothing of its own to close.\n    handle = await startRpcSocketServer({\n      socketPath,\n      handlers,\n      onShutdown: async () => shutdown('RPC shutdown'),\n      log,\n    });\n  } catch (error) {\n    // `dispose` is undefined only when `createWallet` itself threw — it has\n    // already torn down its own store in that case.\n    if (dispose) {\n      await dispose();\n    }\n    // Only remove the PID file if it's still ours (we may have lost the race\n    // and the file now belongs to another daemon).\n    await removeOwnedPidFile(pidPath, pidFileContents).catch(\n      (rmError: unknown) => {\n        log(`Failed to remove PID file during cleanup: ${String(rmError)}`);\n      },\n    );\n    throw error;\n  }\n\n  // Stable non-undefined refs for the shutdown closures (TS won't narrow the\n  // outer `let`s across closure escape).\n  const activeHandle = handle;\n  const activeDispose = dispose;\n\n  log(`Daemon started. Socket: ${socketPath}`);\n\n  let shutdownPromise: Promise<void> | undefined;\n\n  /**\n   * Shut down the daemon idempotently. Concurrent calls coalesce.\n   *\n   * @param reason - A label describing why shutdown was triggered.\n   * @returns A promise that resolves when shutdown completes.\n   */\n  async function shutdown(reason: string): Promise<void> {\n    if (shutdownPromise === undefined) {\n      log(`Shutting down (${reason})...`);\n      shutdownPromise = (async (): Promise<void> => {\n        try {\n          await activeHandle.close();\n        } catch (closeError) {\n          log(`handle.close() failed: ${String(closeError)}`);\n        }\n        try {\n          await activeDispose();\n        } catch (disposeError) {\n          log(`dispose() failed during shutdown: ${String(disposeError)}`);\n        }\n        await Promise.all([\n          removeOwnedPidFile(pidPath, pidFileContents).catch(\n            (rmError: unknown) => {\n              log(`Failed to remove PID file: ${String(rmError)}`);\n            },\n          ),\n          rm(socketPath, { force: true }).catch((rmError: unknown) => {\n            log(`Failed to remove socket file: ${String(rmError)}`);\n          }),\n        ]);\n      })();\n    }\n    return shutdownPromise;\n  }\n\n  process.on('SIGTERM', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGTERM').catch(() => undefined);\n  });\n  process.on('SIGINT', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGINT').catch(() => undefined);\n  });\n}\n\n/**\n * Refuse to start if a responsive daemon already owns the socket. Otherwise\n * clear any stale PID/socket files so the exclusive PID-file write can\n * proceed.\n *\n * @param pidPath - The PID file path.\n * @param socketPath - The socket path.\n * @param log - Logger for diagnostic messages.\n */\nasync function claimDaemonSlot(\n  pidPath: string,\n  socketPath: string,\n  log: Logger,\n): Promise<void> {\n  const existingPid = await readPidFile(pidPath);\n  const ping = await pingDaemon(socketPath);\n\n  if (ping.status === 'responsive') {\n    const pidPart =\n      existingPid === undefined\n        ? '(no PID file present)'\n        : `(pid ${existingPid})`;\n    throw new Error(`A daemon is already running on ${socketPath} ${pidPart}`);\n  }\n\n  // Refuse to clobber when the recorded PID is still alive, regardless of\n  // whether the socket exists. Possible scenarios:\n  // - `unreachable`: wedged or mid-startup sibling daemon (socket present\n  //   but not responding to JSON-RPC).\n  // - `absent`: a sibling daemon that hasn't yet bound its socket, or one\n  //   whose socket was manually removed. In either case, removing its PID\n  //   file would orphan it from `daemon stop`.\n  if (existingPid !== undefined && isProcessAlive(existingPid)) {\n    const detail =\n      ping.status === 'unreachable'\n        ? `socket at ${socketPath} is unresponsive (${ping.error.message})`\n        : `no socket at ${socketPath}, but pid is still alive`;\n    throw new Error(\n      `A daemon is already running (pid ${existingPid}): ${detail}. ` +\n        `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon.`,\n    );\n  }\n\n  if (ping.status === 'unreachable') {\n    log(`Removing stale socket at ${socketPath} (${ping.error.message}).`);\n  }\n  // Always clear both files before claiming the slot. The PID file may be\n  // corrupt (truncated, partial write from a crashed run); without this, the\n  // exclusive `wx` write below would fail with EEXIST and the daemon could\n  // not start until a human manually deleted the file.\n  await Promise.all([\n    rm(pidPath, { force: true }),\n    rm(socketPath, { force: true }),\n  ]);\n}\n\n/**\n * Remove the PID file only if it still contains our exact contents. Guards\n * against a racing daemon's PID file being removed by this daemon during\n * cleanup.\n *\n * @param pidPath - Path to the PID file.\n * @param expectedContents - The contents we wrote when claiming the slot.\n */\nasync function removeOwnedPidFile(\n  pidPath: string,\n  expectedContents: string,\n): Promise<void> {\n  let actual: string;\n  try {\n    actual = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return;\n    }\n    throw error;\n  }\n  if (actual === expectedContents) {\n    await rm(pidPath, { force: true });\n  }\n}\n\n/**\n * Create a file logger that appends timestamped lines to `logPath`, falling\n * back to stderr if the append fails.\n *\n * @param logPath - The log file path.\n * @returns A logging function.\n */\nfunction makeLogger(logPath: string): Logger {\n  return (message: string): void => {\n    const line = `[${new Date().toISOString()}] ${message}\\n`;\n    appendFile(logPath, line).catch((error: unknown) => {\n      process.stderr.write(`[log write failed: ${String(error)}] ${message}\\n`);\n    });\n  };\n}\n"]}

package/dist/daemon/daemon-entry.mjs

@@ -1,10 +1,30 @@
+import { define, literal } from "@metamask/superstruct";
 import { appendFile, readFile, rm, writeFile } from "node:fs/promises";
 import { pingDaemon } from "./daemon-client.mjs";
 import { ensureOwnerOnlyDirectory } from "./data-dir.mjs";
 import { getDaemonPaths } from "./paths.mjs";
 import { startRpcSocketServer } from "./rpc-socket-server.mjs";
+import { Password, Srp } from "./secrets.mjs";
+import { defineHandler } from "./types.mjs";
 import { isErrorWithCode, isProcessAlive, readPidFile } from "./utils.mjs";
 import { createWallet } from "./wallet-factory.mjs";
+/**
+ * Params struct for the `call` RPC method. `params` must be a non-empty array
+ * whose first element is the messenger action name; remaining elements are
+ * positional action arguments forwarded as-is to `messenger.call`.
+ */
+const callParamsStruct = define('CallParams', (value) => {
+    if (!Array.isArray(value)) {
+        return 'Expected an array';
+    }
+    if (value.length === 0) {
+        return 'Expected a non-empty array';
+    }
+    if (typeof value[0] !== 'string') {
+        return 'Expected the first element to be a string action name';
+    }
+    return true;
+});
 const startTime = Date.now();
 main().catch((error) => {
     process.stderr.write(`Daemon fatal: ${String(error)}\n`);
@@ -19,20 +39,22 @@ async function main() {
     if (!infuraProjectId) {
         throw new Error('INFURA_PROJECT_ID environment variable is required');
     }
-    const password = process.env.MM_WALLET_PASSWORD;
-    if (!password) {
-        throw new Error('MM_WALLET_PASSWORD environment variable is required');
-    }
-    const srp = process.env.MM_WALLET_SRP;
-    if (!srp) {
+    // Password is optional: when absent, the daemon starts without unlocking
+    // the keyring (e.g. when the user prefers to call `mm wallet unlock`
+    // interactively rather than embed the password in their environment).
+    // First-run startup still requires a password; wallet-factory enforces
+    // that and surfaces a clear error.
+    const passwordRaw = process.env.MM_WALLET_PASSWORD;
+    const srpRaw = process.env.MM_WALLET_SRP;
+    if (!srpRaw) {
         throw new Error('MM_WALLET_SRP environment variable is required');
     }
-    // Scrub the wallet secrets from the environment now they are captured. The
-    // daemon is long-lived and dispatches arbitrary messenger actions over its
-    // socket, so leaving the SRP/password in `process.env` for its whole lifetime
-    // needlessly widens their exposure to any in-process code.
+    // Scrub before validation so a throw from Password.from / Srp.from (bad
+    // value) does not leave the raw secrets in the long-lived daemon's env.
     delete process.env.MM_WALLET_PASSWORD;
     delete process.env.MM_WALLET_SRP;
+    const password = passwordRaw ? Password.from(passwordRaw) : undefined;
+    const srp = Srp.from(srpRaw);
     await ensureOwnerOnlyDirectory(dataDir);
     const { socketPath: defaultSocketPath, pidPath, logPath, dbPath, } = getDaemonPaths(dataDir);
     const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;
@@ -71,29 +93,27 @@ async function main() {
             log,
         }));
         const constructedWallet = wallet;
+        // Arbitrary messenger dispatch is intentional: the CLI exposes the full
+        // messenger surface over a Unix socket inside the per-user oclif data
+        // directory. The dataDir is chmodded to 0o700 above and the socket to
+        // 0o600 by the RPC server on bind, so only the owning user can open them,
+        // but there is no in-process auth check beyond that filesystem-permission
+        // barrier. The messenger is strongly typed by action name; we narrow it
+        // once here to the RpcDispatcher shape the `call` handler needs.
+        const dispatch = constructedWallet.messenger.call.bind(constructedWallet.messenger);
         const handlers = {
-            getStatus: async () => ({
+            getStatus: defineHandler(literal(null), async () => ({
                 pid: process.pid,
                 uptime: Math.floor((Date.now() - startTime) / 1000),
+            })),
+            call: defineHandler(callParamsStruct, async (params) => {
+                const [action, ...args] = params;
+                return await dispatch(action, ...args);
             }),
             // Exposes the callable surface for discovery: it grows silently as
             // controllers are wired, so consumers need a way to see it without a
             // hand-kept catalog that would rot.
-            listActions: async () => constructedWallet.messenger.getRegisteredActionTypes(),
-            // Arbitrary messenger dispatch is intentional: the CLI exposes the full
-            // messenger surface over a Unix socket inside the per-user oclif data
-            // directory. The dataDir is chmodded to 0o700 above and the socket to
-            // 0o600 by the RPC server on bind, so only the owning user can open
-            // them, but there is no in-process auth check beyond that
-            // filesystem-permission barrier.
-            call: async (params) => {
-                if (!Array.isArray(params) || typeof params[0] !== 'string') {
-                    throw new Error('Expected params to be an array with an action name');
-                }
-                const [action, ...args] = params;
-                const result = constructedWallet.messenger.call(action, ...args);
-                return (result instanceof Promise ? await result : result);
-            },
+            listActions: defineHandler(literal(null), async () => constructedWallet.messenger.getRegisteredActionTypes()),
         };
         // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)
         // on bind and never leaves a live server/socket behind if it rejects, so
@@ -140,7 +160,12 @@ async function main() {
                 catch (closeError) {
                     log(`handle.close() failed: ${String(closeError)}`);
                 }
-                await activeDispose();
+                try {
+                    await activeDispose();
+                }
+                catch (disposeError) {
+                    log(`dispose() failed during shutdown: ${String(disposeError)}`);
+                }
                 await Promise.all([
                     removeOwnedPidFile(pidPath, pidFileContents).catch((rmError) => {
                         log(`Failed to remove PID file: ${String(rmError)}`);

package/dist/daemon/daemon-entry.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-entry.mjs","sourceRoot":"","sources":["../../src/daemon/daemon-entry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,yBAAyB;AAEvE,OAAO,EAAE,UAAU,EAAE,4BAAwB;AAC7C,OAAO,EAAE,wBAAwB,EAAE,uBAAmB;AACtD,OAAO,EAAE,cAAc,EAAE,oBAAgB;AACzC,OAAO,EAAE,oBAAoB,EAAE,gCAA4B;AAG3D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,oBAAgB;AACvE,OAAO,EAAE,YAAY,EAAE,6BAAyB;AAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE7B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,2DAA2D;IAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAEjC,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAExC,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EACP,OAAO,EACP,MAAM,GACP,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,iBAAiB,CAAC;IAE1E,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE1B,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAEhD,MAAM,eAAe,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC;IAEzD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,OAAO,EAAE,kCAAkC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;aACvE,CAAC;YACJ,CAAC,CAAC,2EAA2E;gBAC3E,IAAI,KAAK,CACP,kCAAkC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACR,CAAC;IAED,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA0C,CAAC;IAC/C,IAAI,MAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC;YACxC,YAAY,EAAE,MAAM;YACpB,QAAQ;YACR,GAAG;YACH,eAAe;YACf,GAAG;SACJ,CAAC,CAAC,CAAC;QAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,MAAM,QAAQ,GAAkB;YAC9B,SAAS,EAAE,KAAK,IAA+B,EAAE,CAAC,CAAC;gBACjD,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;aACpD,CAAC;YACF,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,WAAW,EAAE,KAAK,IAAmB,EAAE,CACrC,iBAAiB,CAAC,SAAS,CAAC,wBAAwB,EAAE;YACxD,wEAAwE;YACxE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,0DAA0D;YAC1D,iCAAiC;YACjC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC5D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAA6B,CAAC;gBAQxD,MAAM,MAAM,GACV,iBAAiB,CAAC,SACnB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;gBACxB,OAAO,CAAC,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAS,CAAC;YACrE,CAAC;SACF,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,GAAG,MAAM,oBAAoB,CAAC;YAClC,UAAU;YACV,QAAQ;YACR,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CACtD,CAAC,OAAgB,EAAE,EAAE;YACnB,GAAG,CAAC,6CAA6C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAO,CAAC;IAE9B,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAE7C,IAAI,eAA0C,CAAC;IAE/C;;;;;OAKG;IACH,KAAK,UAAU,QAAQ,CAAC,MAAc;QACpC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,kBAAkB,MAAM,MAAM,CAAC,CAAC;YACpC,eAAe,GAAG,CAAC,KAAK,IAAmB,EAAE;gBAC3C,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC7B,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,GAAG,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,aAAa,EAAE,CAAC;gBACtB,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CAChD,CAAC,OAAgB,EAAE,EAAE;wBACnB,GAAG,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvD,CAAC,CACF;oBACD,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;wBACzD,GAAG,CAAC,iCAAiC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,CAAC,CAAC;iBACH,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,iJAAiJ;QACjJ,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,iJAAiJ;QACjJ,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,UAAkB,EAClB,GAAW;IAEX,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ,WAAW,GAAG,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,iDAAiD;IACjD,wEAAwE;IACxE,qCAAqC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,6CAA6C;IAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,aAAa;YAC3B,CAAC,CAAC,aAAa,UAAU,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;YACnE,CAAC,CAAC,gBAAgB,UAAU,0BAA0B,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,MAAM,MAAM,IAAI;YAC7D,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,4BAA4B,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5B,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAwB;IAExB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,OAAe,EAAQ,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC;QAC1D,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Json } from '@metamask/utils';\nimport type { Wallet } from '@metamask/wallet';\nimport { appendFile, readFile, rm, writeFile } from 'node:fs/promises';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport { startRpcSocketServer } from './rpc-socket-server';\nimport type { RpcSocketServerHandle } from './rpc-socket-server';\nimport type { DaemonStatusInfo, Logger, RpcHandlerMap } from './types';\nimport { isErrorWithCode, isProcessAlive, readPidFile } from './utils';\nimport { createWallet } from './wallet-factory';\n\nconst startTime = Date.now();\n\nmain().catch((error: unknown) => {\n  process.stderr.write(`Daemon fatal: ${String(error)}\\n`);\n  process.exitCode = 1;\n});\n\nasync function main(): Promise<void> {\n  const dataDir = process.env.MM_DAEMON_DATA_DIR;\n  if (!dataDir) {\n    throw new Error('MM_DAEMON_DATA_DIR environment variable is required');\n  }\n\n  const infuraProjectId = process.env.INFURA_PROJECT_ID;\n  if (!infuraProjectId) {\n    throw new Error('INFURA_PROJECT_ID environment variable is required');\n  }\n\n  const password = process.env.MM_WALLET_PASSWORD;\n  if (!password) {\n    throw new Error('MM_WALLET_PASSWORD environment variable is required');\n  }\n\n  const srp = process.env.MM_WALLET_SRP;\n  if (!srp) {\n    throw new Error('MM_WALLET_SRP environment variable is required');\n  }\n\n  // Scrub the wallet secrets from the environment now they are captured. The\n  // daemon is long-lived and dispatches arbitrary messenger actions over its\n  // socket, so leaving the SRP/password in `process.env` for its whole lifetime\n  // needlessly widens their exposure to any in-process code.\n  delete process.env.MM_WALLET_PASSWORD;\n  delete process.env.MM_WALLET_SRP;\n\n  await ensureOwnerOnlyDirectory(dataDir);\n\n  const {\n    socketPath: defaultSocketPath,\n    pidPath,\n    logPath,\n    dbPath,\n  } = getDaemonPaths(dataDir);\n  const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;\n\n  const log = makeLogger(logPath);\n  log('Starting daemon...');\n\n  // Pre-flight: refuse to take over if a responsive daemon already owns this\n  // socket. If the existing PID file is stale (or the socket is dead), clean\n  // it up so the exclusive PID-file write below has a chance to succeed.\n  await claimDaemonSlot(pidPath, socketPath, log);\n\n  const pidFileContents = `${process.pid}\\n${startTime}\\n`;\n\n  // Claim the slot atomically BEFORE opening the SQLite database or\n  // constructing the Wallet. Two concurrent `daemon start` invocations can\n  // both pass `claimDaemonSlot` (the gap between its preflight and the slot\n  // write is racy); without this ordering, both would open `wallet.db` and\n  // both would run first-run SRP import before one loses the wx race.\n  try {\n    await writeFile(pidPath, pidFileContents, { flag: 'wx' });\n  } catch (error) {\n    throw error instanceof Error\n      ? Object.assign(error, {\n          message: `Failed to claim daemon slot at ${pidPath}: ${error.message}`,\n        })\n      : /* istanbul ignore next -- node:fs/promises always rejects with an Error */\n        new Error(\n          `Failed to claim daemon slot at ${pidPath}: ${String(error)}`,\n        );\n  }\n\n  let wallet: Wallet | undefined;\n  let dispose: (() => Promise<void>) | undefined;\n  let handle: RpcSocketServerHandle | undefined;\n\n  try {\n    ({ wallet, dispose } = await createWallet({\n      databasePath: dbPath,\n      password,\n      srp,\n      infuraProjectId,\n      log,\n    }));\n\n    const constructedWallet = wallet;\n    const handlers: RpcHandlerMap = {\n      getStatus: async (): Promise<DaemonStatusInfo> => ({\n        pid: process.pid,\n        uptime: Math.floor((Date.now() - startTime) / 1000),\n      }),\n      // Exposes the callable surface for discovery: it grows silently as\n      // controllers are wired, so consumers need a way to see it without a\n      // hand-kept catalog that would rot.\n      listActions: async (): Promise<Json> =>\n        constructedWallet.messenger.getRegisteredActionTypes(),\n      // Arbitrary messenger dispatch is intentional: the CLI exposes the full\n      // messenger surface over a Unix socket inside the per-user oclif data\n      // directory. The dataDir is chmodded to 0o700 above and the socket to\n      // 0o600 by the RPC server on bind, so only the owning user can open\n      // them, but there is no in-process auth check beyond that\n      // filesystem-permission barrier.\n      call: async (params) => {\n        if (!Array.isArray(params) || typeof params[0] !== 'string') {\n          throw new Error('Expected params to be an array with an action name');\n        }\n        const [action, ...args] = params as [string, ...Json[]];\n        // The messenger's `call` is typed to a literal action-name union; the\n        // daemon dispatches arbitrary action names from RPC. Cast to a\n        // string-keyed `call` (which preserves arity) rather than to `any`, so\n        // the only untyped value is the `unknown` result narrowed below.\n        type ArbitraryDispatch = {\n          call: (actionName: string, ...callArgs: Json[]) => unknown;\n        };\n        const result = (\n          constructedWallet.messenger as unknown as ArbitraryDispatch\n        ).call(action, ...args);\n        return (result instanceof Promise ? await result : result) as Json;\n      },\n    };\n\n    // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)\n    // on bind and never leaves a live server/socket behind if it rejects, so\n    // the catch below has nothing of its own to close.\n    handle = await startRpcSocketServer({\n      socketPath,\n      handlers,\n      onShutdown: async () => shutdown('RPC shutdown'),\n      log,\n    });\n  } catch (error) {\n    // `dispose` is undefined only when `createWallet` itself threw — it has\n    // already torn down its own store in that case.\n    if (dispose) {\n      await dispose();\n    }\n    // Only remove the PID file if it's still ours (we may have lost the race\n    // and the file now belongs to another daemon).\n    await removeOwnedPidFile(pidPath, pidFileContents).catch(\n      (rmError: unknown) => {\n        log(`Failed to remove PID file during cleanup: ${String(rmError)}`);\n      },\n    );\n    throw error;\n  }\n\n  // Stable non-undefined refs for the shutdown closures (TS won't narrow the\n  // outer `let`s across closure escape).\n  const activeHandle = handle;\n  const activeDispose = dispose;\n\n  log(`Daemon started. Socket: ${socketPath}`);\n\n  let shutdownPromise: Promise<void> | undefined;\n\n  /**\n   * Shut down the daemon idempotently. Concurrent calls coalesce.\n   *\n   * @param reason - A label describing why shutdown was triggered.\n   * @returns A promise that resolves when shutdown completes.\n   */\n  async function shutdown(reason: string): Promise<void> {\n    if (shutdownPromise === undefined) {\n      log(`Shutting down (${reason})...`);\n      shutdownPromise = (async (): Promise<void> => {\n        try {\n          await activeHandle.close();\n        } catch (closeError) {\n          log(`handle.close() failed: ${String(closeError)}`);\n        }\n        await activeDispose();\n        await Promise.all([\n          removeOwnedPidFile(pidPath, pidFileContents).catch(\n            (rmError: unknown) => {\n              log(`Failed to remove PID file: ${String(rmError)}`);\n            },\n          ),\n          rm(socketPath, { force: true }).catch((rmError: unknown) => {\n            log(`Failed to remove socket file: ${String(rmError)}`);\n          }),\n        ]);\n      })();\n    }\n    return shutdownPromise;\n  }\n\n  process.on('SIGTERM', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGTERM').catch(() => undefined);\n  });\n  process.on('SIGINT', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGINT').catch(() => undefined);\n  });\n}\n\n/**\n * Refuse to start if a responsive daemon already owns the socket. Otherwise\n * clear any stale PID/socket files so the exclusive PID-file write can\n * proceed.\n *\n * @param pidPath - The PID file path.\n * @param socketPath - The socket path.\n * @param log - Logger for diagnostic messages.\n */\nasync function claimDaemonSlot(\n  pidPath: string,\n  socketPath: string,\n  log: Logger,\n): Promise<void> {\n  const existingPid = await readPidFile(pidPath);\n  const ping = await pingDaemon(socketPath);\n\n  if (ping.status === 'responsive') {\n    const pidPart =\n      existingPid === undefined\n        ? '(no PID file present)'\n        : `(pid ${existingPid})`;\n    throw new Error(`A daemon is already running on ${socketPath} ${pidPart}`);\n  }\n\n  // Refuse to clobber when the recorded PID is still alive, regardless of\n  // whether the socket exists. Possible scenarios:\n  // - `unreachable`: wedged or mid-startup sibling daemon (socket present\n  //   but not responding to JSON-RPC).\n  // - `absent`: a sibling daemon that hasn't yet bound its socket, or one\n  //   whose socket was manually removed. In either case, removing its PID\n  //   file would orphan it from `daemon stop`.\n  if (existingPid !== undefined && isProcessAlive(existingPid)) {\n    const detail =\n      ping.status === 'unreachable'\n        ? `socket at ${socketPath} is unresponsive (${ping.error.message})`\n        : `no socket at ${socketPath}, but pid is still alive`;\n    throw new Error(\n      `A daemon is already running (pid ${existingPid}): ${detail}. ` +\n        `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon.`,\n    );\n  }\n\n  if (ping.status === 'unreachable') {\n    log(`Removing stale socket at ${socketPath} (${ping.error.message}).`);\n  }\n  // Always clear both files before claiming the slot. The PID file may be\n  // corrupt (truncated, partial write from a crashed run); without this, the\n  // exclusive `wx` write below would fail with EEXIST and the daemon could\n  // not start until a human manually deleted the file.\n  await Promise.all([\n    rm(pidPath, { force: true }),\n    rm(socketPath, { force: true }),\n  ]);\n}\n\n/**\n * Remove the PID file only if it still contains our exact contents. Guards\n * against a racing daemon's PID file being removed by this daemon during\n * cleanup.\n *\n * @param pidPath - Path to the PID file.\n * @param expectedContents - The contents we wrote when claiming the slot.\n */\nasync function removeOwnedPidFile(\n  pidPath: string,\n  expectedContents: string,\n): Promise<void> {\n  let actual: string;\n  try {\n    actual = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return;\n    }\n    throw error;\n  }\n  if (actual === expectedContents) {\n    await rm(pidPath, { force: true });\n  }\n}\n\n/**\n * Create a file logger that appends timestamped lines to `logPath`, falling\n * back to stderr if the append fails.\n *\n * @param logPath - The log file path.\n * @returns A logging function.\n */\nfunction makeLogger(logPath: string): Logger {\n  return (message: string): void => {\n    const line = `[${new Date().toISOString()}] ${message}\\n`;\n    appendFile(logPath, line).catch((error: unknown) => {\n      process.stderr.write(`[log write failed: ${String(error)}] ${message}\\n`);\n    });\n  };\n}\n"]}
+{"version":3,"file":"daemon-entry.mjs","sourceRoot":"","sources":["../../src/daemon/daemon-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B;AAGxD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,yBAAyB;AAEvE,OAAO,EAAE,UAAU,EAAE,4BAAwB;AAC7C,OAAO,EAAE,wBAAwB,EAAE,uBAAmB;AACtD,OAAO,EAAE,cAAc,EAAE,oBAAgB;AACzC,OAAO,EAAE,oBAAoB,EAAE,gCAA4B;AAE3D,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAkB;AAC1C,OAAO,EAAE,aAAa,EAAE,oBAAgB;AAOxC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,oBAAgB;AACvE,OAAO,EAAE,YAAY,EAAE,6BAAyB;AAEhD;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAC7B,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE;IACR,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE7B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,uEAAuE;IACvE,mCAAmC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAEjC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAExC,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EACP,OAAO,EACP,MAAM,GACP,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,iBAAiB,CAAC;IAE1E,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE1B,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAEhD,MAAM,eAAe,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC;IAEzD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,OAAO,EAAE,kCAAkC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;aACvE,CAAC;YACJ,CAAC,CAAC,2EAA2E;gBAC3E,IAAI,KAAK,CACP,kCAAkC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACR,CAAC;IAED,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA0C,CAAC;IAC/C,IAAI,MAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC;YACxC,YAAY,EAAE,MAAM;YACpB,QAAQ;YACR,GAAG;YACH,eAAe;YACf,GAAG;SACJ,CAAC,CAAC,CAAC;QAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACpD,iBAAiB,CAAC,SAAS,CACA,CAAC;QAE9B,MAAM,QAAQ,GAAkB;YAC9B,SAAS,EAAE,aAAa,CACtB,OAAO,CAAC,IAAI,CAAC,EACb,KAAK,IAA+B,EAAE,CAAC,CAAC;gBACtC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;aACpD,CAAC,CACH;YACD,IAAI,EAAE,aAAa,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;gBACjC,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAI,IAAe,CAAC,CAAC;YACrD,CAAC,CAAC;YACF,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,WAAW,EAAE,aAAa,CACxB,OAAO,CAAC,IAAI,CAAC,EACb,KAAK,IAAmB,EAAE,CACxB,iBAAiB,CAAC,SAAS,CAAC,wBAAwB,EAAE,CACzD;SACF,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,GAAG,MAAM,oBAAoB,CAAC;YAClC,UAAU;YACV,QAAQ;YACR,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CACtD,CAAC,OAAgB,EAAE,EAAE;YACnB,GAAG,CAAC,6CAA6C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAO,CAAC;IAE9B,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAE7C,IAAI,eAA0C,CAAC;IAE/C;;;;;OAKG;IACH,KAAK,UAAU,QAAQ,CAAC,MAAc;QACpC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,kBAAkB,MAAM,MAAM,CAAC,CAAC;YACpC,eAAe,GAAG,CAAC,KAAK,IAAmB,EAAE;gBAC3C,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC7B,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,GAAG,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,aAAa,EAAE,CAAC;gBACxB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,GAAG,CAAC,qCAAqC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CAChD,CAAC,OAAgB,EAAE,EAAE;wBACnB,GAAG,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvD,CAAC,CACF;oBACD,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;wBACzD,GAAG,CAAC,iCAAiC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,CAAC,CAAC;iBACH,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,iJAAiJ;QACjJ,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,iJAAiJ;QACjJ,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,UAAkB,EAClB,GAAW;IAEX,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ,WAAW,GAAG,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,iDAAiD;IACjD,wEAAwE;IACxE,qCAAqC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,6CAA6C;IAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,aAAa;YAC3B,CAAC,CAAC,aAAa,UAAU,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;YACnE,CAAC,CAAC,gBAAgB,UAAU,0BAA0B,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,MAAM,MAAM,IAAI;YAC7D,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,4BAA4B,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5B,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAwB;IAExB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,OAAe,EAAQ,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC;QAC1D,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { define, literal } from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport type { Wallet } from '@metamask/wallet';\nimport { appendFile, readFile, rm, writeFile } from 'node:fs/promises';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport { startRpcSocketServer } from './rpc-socket-server';\nimport type { RpcSocketServerHandle } from './rpc-socket-server';\nimport { Password, Srp } from './secrets';\nimport { defineHandler } from './types';\nimport type {\n  DaemonStatusInfo,\n  Logger,\n  RpcDispatcher,\n  RpcHandlerMap,\n} from './types';\nimport { isErrorWithCode, isProcessAlive, readPidFile } from './utils';\nimport { createWallet } from './wallet-factory';\n\n/**\n * Params struct for the `call` RPC method. `params` must be a non-empty array\n * whose first element is the messenger action name; remaining elements are\n * positional action arguments forwarded as-is to `messenger.call`.\n */\nconst callParamsStruct = define<[string, ...unknown[]]>(\n  'CallParams',\n  (value) => {\n    if (!Array.isArray(value)) {\n      return 'Expected an array';\n    }\n    if (value.length === 0) {\n      return 'Expected a non-empty array';\n    }\n    if (typeof value[0] !== 'string') {\n      return 'Expected the first element to be a string action name';\n    }\n    return true;\n  },\n);\n\nconst startTime = Date.now();\n\nmain().catch((error: unknown) => {\n  process.stderr.write(`Daemon fatal: ${String(error)}\\n`);\n  process.exitCode = 1;\n});\n\nasync function main(): Promise<void> {\n  const dataDir = process.env.MM_DAEMON_DATA_DIR;\n  if (!dataDir) {\n    throw new Error('MM_DAEMON_DATA_DIR environment variable is required');\n  }\n\n  const infuraProjectId = process.env.INFURA_PROJECT_ID;\n  if (!infuraProjectId) {\n    throw new Error('INFURA_PROJECT_ID environment variable is required');\n  }\n\n  // Password is optional: when absent, the daemon starts without unlocking\n  // the keyring (e.g. when the user prefers to call `mm wallet unlock`\n  // interactively rather than embed the password in their environment).\n  // First-run startup still requires a password; wallet-factory enforces\n  // that and surfaces a clear error.\n  const passwordRaw = process.env.MM_WALLET_PASSWORD;\n\n  const srpRaw = process.env.MM_WALLET_SRP;\n  if (!srpRaw) {\n    throw new Error('MM_WALLET_SRP environment variable is required');\n  }\n\n  // Scrub before validation so a throw from Password.from / Srp.from (bad\n  // value) does not leave the raw secrets in the long-lived daemon's env.\n  delete process.env.MM_WALLET_PASSWORD;\n  delete process.env.MM_WALLET_SRP;\n\n  const password = passwordRaw ? Password.from(passwordRaw) : undefined;\n  const srp = Srp.from(srpRaw);\n\n  await ensureOwnerOnlyDirectory(dataDir);\n\n  const {\n    socketPath: defaultSocketPath,\n    pidPath,\n    logPath,\n    dbPath,\n  } = getDaemonPaths(dataDir);\n  const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;\n\n  const log = makeLogger(logPath);\n  log('Starting daemon...');\n\n  // Pre-flight: refuse to take over if a responsive daemon already owns this\n  // socket. If the existing PID file is stale (or the socket is dead), clean\n  // it up so the exclusive PID-file write below has a chance to succeed.\n  await claimDaemonSlot(pidPath, socketPath, log);\n\n  const pidFileContents = `${process.pid}\\n${startTime}\\n`;\n\n  // Claim the slot atomically BEFORE opening the SQLite database or\n  // constructing the Wallet. Two concurrent `daemon start` invocations can\n  // both pass `claimDaemonSlot` (the gap between its preflight and the slot\n  // write is racy); without this ordering, both would open `wallet.db` and\n  // both would run first-run SRP import before one loses the wx race.\n  try {\n    await writeFile(pidPath, pidFileContents, { flag: 'wx' });\n  } catch (error) {\n    throw error instanceof Error\n      ? Object.assign(error, {\n          message: `Failed to claim daemon slot at ${pidPath}: ${error.message}`,\n        })\n      : /* istanbul ignore next -- node:fs/promises always rejects with an Error */\n        new Error(\n          `Failed to claim daemon slot at ${pidPath}: ${String(error)}`,\n        );\n  }\n\n  let wallet: Wallet | undefined;\n  let dispose: (() => Promise<void>) | undefined;\n  let handle: RpcSocketServerHandle | undefined;\n\n  try {\n    ({ wallet, dispose } = await createWallet({\n      databasePath: dbPath,\n      password,\n      srp,\n      infuraProjectId,\n      log,\n    }));\n\n    const constructedWallet = wallet;\n    // Arbitrary messenger dispatch is intentional: the CLI exposes the full\n    // messenger surface over a Unix socket inside the per-user oclif data\n    // directory. The dataDir is chmodded to 0o700 above and the socket to\n    // 0o600 by the RPC server on bind, so only the owning user can open them,\n    // but there is no in-process auth check beyond that filesystem-permission\n    // barrier. The messenger is strongly typed by action name; we narrow it\n    // once here to the RpcDispatcher shape the `call` handler needs.\n    const dispatch = constructedWallet.messenger.call.bind(\n      constructedWallet.messenger,\n    ) as unknown as RpcDispatcher;\n\n    const handlers: RpcHandlerMap = {\n      getStatus: defineHandler(\n        literal(null),\n        async (): Promise<DaemonStatusInfo> => ({\n          pid: process.pid,\n          uptime: Math.floor((Date.now() - startTime) / 1000),\n        }),\n      ),\n      call: defineHandler(callParamsStruct, async (params) => {\n        const [action, ...args] = params;\n        return await dispatch(action, ...(args as Json[]));\n      }),\n      // Exposes the callable surface for discovery: it grows silently as\n      // controllers are wired, so consumers need a way to see it without a\n      // hand-kept catalog that would rot.\n      listActions: defineHandler(\n        literal(null),\n        async (): Promise<Json> =>\n          constructedWallet.messenger.getRegisteredActionTypes(),\n      ),\n    };\n\n    // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)\n    // on bind and never leaves a live server/socket behind if it rejects, so\n    // the catch below has nothing of its own to close.\n    handle = await startRpcSocketServer({\n      socketPath,\n      handlers,\n      onShutdown: async () => shutdown('RPC shutdown'),\n      log,\n    });\n  } catch (error) {\n    // `dispose` is undefined only when `createWallet` itself threw — it has\n    // already torn down its own store in that case.\n    if (dispose) {\n      await dispose();\n    }\n    // Only remove the PID file if it's still ours (we may have lost the race\n    // and the file now belongs to another daemon).\n    await removeOwnedPidFile(pidPath, pidFileContents).catch(\n      (rmError: unknown) => {\n        log(`Failed to remove PID file during cleanup: ${String(rmError)}`);\n      },\n    );\n    throw error;\n  }\n\n  // Stable non-undefined refs for the shutdown closures (TS won't narrow the\n  // outer `let`s across closure escape).\n  const activeHandle = handle;\n  const activeDispose = dispose;\n\n  log(`Daemon started. Socket: ${socketPath}`);\n\n  let shutdownPromise: Promise<void> | undefined;\n\n  /**\n   * Shut down the daemon idempotently. Concurrent calls coalesce.\n   *\n   * @param reason - A label describing why shutdown was triggered.\n   * @returns A promise that resolves when shutdown completes.\n   */\n  async function shutdown(reason: string): Promise<void> {\n    if (shutdownPromise === undefined) {\n      log(`Shutting down (${reason})...`);\n      shutdownPromise = (async (): Promise<void> => {\n        try {\n          await activeHandle.close();\n        } catch (closeError) {\n          log(`handle.close() failed: ${String(closeError)}`);\n        }\n        try {\n          await activeDispose();\n        } catch (disposeError) {\n          log(`dispose() failed during shutdown: ${String(disposeError)}`);\n        }\n        await Promise.all([\n          removeOwnedPidFile(pidPath, pidFileContents).catch(\n            (rmError: unknown) => {\n              log(`Failed to remove PID file: ${String(rmError)}`);\n            },\n          ),\n          rm(socketPath, { force: true }).catch((rmError: unknown) => {\n            log(`Failed to remove socket file: ${String(rmError)}`);\n          }),\n        ]);\n      })();\n    }\n    return shutdownPromise;\n  }\n\n  process.on('SIGTERM', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGTERM').catch(() => undefined);\n  });\n  process.on('SIGINT', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGINT').catch(() => undefined);\n  });\n}\n\n/**\n * Refuse to start if a responsive daemon already owns the socket. Otherwise\n * clear any stale PID/socket files so the exclusive PID-file write can\n * proceed.\n *\n * @param pidPath - The PID file path.\n * @param socketPath - The socket path.\n * @param log - Logger for diagnostic messages.\n */\nasync function claimDaemonSlot(\n  pidPath: string,\n  socketPath: string,\n  log: Logger,\n): Promise<void> {\n  const existingPid = await readPidFile(pidPath);\n  const ping = await pingDaemon(socketPath);\n\n  if (ping.status === 'responsive') {\n    const pidPart =\n      existingPid === undefined\n        ? '(no PID file present)'\n        : `(pid ${existingPid})`;\n    throw new Error(`A daemon is already running on ${socketPath} ${pidPart}`);\n  }\n\n  // Refuse to clobber when the recorded PID is still alive, regardless of\n  // whether the socket exists. Possible scenarios:\n  // - `unreachable`: wedged or mid-startup sibling daemon (socket present\n  //   but not responding to JSON-RPC).\n  // - `absent`: a sibling daemon that hasn't yet bound its socket, or one\n  //   whose socket was manually removed. In either case, removing its PID\n  //   file would orphan it from `daemon stop`.\n  if (existingPid !== undefined && isProcessAlive(existingPid)) {\n    const detail =\n      ping.status === 'unreachable'\n        ? `socket at ${socketPath} is unresponsive (${ping.error.message})`\n        : `no socket at ${socketPath}, but pid is still alive`;\n    throw new Error(\n      `A daemon is already running (pid ${existingPid}): ${detail}. ` +\n        `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon.`,\n    );\n  }\n\n  if (ping.status === 'unreachable') {\n    log(`Removing stale socket at ${socketPath} (${ping.error.message}).`);\n  }\n  // Always clear both files before claiming the slot. The PID file may be\n  // corrupt (truncated, partial write from a crashed run); without this, the\n  // exclusive `wx` write below would fail with EEXIST and the daemon could\n  // not start until a human manually deleted the file.\n  await Promise.all([\n    rm(pidPath, { force: true }),\n    rm(socketPath, { force: true }),\n  ]);\n}\n\n/**\n * Remove the PID file only if it still contains our exact contents. Guards\n * against a racing daemon's PID file being removed by this daemon during\n * cleanup.\n *\n * @param pidPath - Path to the PID file.\n * @param expectedContents - The contents we wrote when claiming the slot.\n */\nasync function removeOwnedPidFile(\n  pidPath: string,\n  expectedContents: string,\n): Promise<void> {\n  let actual: string;\n  try {\n    actual = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return;\n    }\n    throw error;\n  }\n  if (actual === expectedContents) {\n    await rm(pidPath, { force: true });\n  }\n}\n\n/**\n * Create a file logger that appends timestamped lines to `logPath`, falling\n * back to stderr if the append fails.\n *\n * @param logPath - The log file path.\n * @returns A logging function.\n */\nfunction makeLogger(logPath: string): Logger {\n  return (message: string): void => {\n    const line = `[${new Date().toISOString()}] ${message}\\n`;\n    appendFile(logPath, line).catch((error: unknown) => {\n      process.stderr.write(`[log write failed: ${String(error)}] ${message}\\n`);\n    });\n  };\n}\n"]}

package/dist/daemon/daemon-spawn.cjs

@@ -54,17 +54,28 @@ async function ensureDaemon(config) {
     // discarding it, so a crash after startup stays diagnosable. stdout stays
     // ignored — structured status goes through the file logger.
     const logFileDescriptor = (0, node_fs_1.openSync)(logPath, 'a');
+    const childEnv = {
+        ...process.env,
+        MM_DAEMON_DATA_DIR: config.dataDir,
+        MM_DAEMON_SOCKET_PATH: socketPath,
+        INFURA_PROJECT_ID: config.infuraProjectId,
+        MM_WALLET_SRP: config.srp.unwrap(),
+    };
+    // `childEnv` spreads `process.env`, so an inherited `MM_WALLET_PASSWORD`
+    // would otherwise leak into the child and unlock a daemon the caller meant
+    // to start locked. When no password was supplied, delete the inherited key
+    // so the daemon comes up locked; otherwise overwrite it with the supplied
+    // value.
+    if (config.password === undefined) {
+        delete childEnv.MM_WALLET_PASSWORD;
+    }
+    else {
+        childEnv.MM_WALLET_PASSWORD = config.password.unwrap();
+    }
     const child = (0, node_child_process_1.spawn)(process.execPath, [...args, entryPath], {
         detached: true,
         stdio: ['ignore', 'ignore', logFileDescriptor],
-        env: {
-            ...process.env,
-            MM_DAEMON_DATA_DIR: config.dataDir,
-            MM_DAEMON_SOCKET_PATH: socketPath,
-            INFURA_PROJECT_ID: config.infuraProjectId,
-            MM_WALLET_PASSWORD: config.password,
-            MM_WALLET_SRP: config.srp,
-        },
+        env: childEnv,
     });
     // The child dup'd the file descriptor into its stderr, so drop the parent's
     // copy. Safe on the success path: `spawn` reports failures via the 'error'

package/dist/daemon/daemon-spawn.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-spawn.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":";;;AAAA,2DAA2C;AAC3C,qCAA0D;AAC1D,yCAAiC;AAEjC,uDAA6C;AAC7C,6CAAsD;AACtD,uCAAyC;AAGzC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,aAAa;AAgBpC;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,YAAY,CAChC,MAAyB;IAEzB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAA,sBAAc,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG,MAAM,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC;IACjD,QAAQ,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;QAClD,KAAK,aAAa;YAChB,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,6BAA6B;oBACzE,wFAAwF;oBACxF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wDAAwD,UAAU,wBAAwB;gBACxF,gFAAgF;gBAChF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;QACJ,KAAK,QAAQ;YACX,MAAM;QACR,gGAAgG;QAChG,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,WAAW,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,eAAe,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAE7C,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAElE,8EAA8E;IAC9E,2EAA2E;IAC3E,oCAAoC;IACpC,MAAM,IAAA,mCAAwB,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/C,oEAAoE;IACpE,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,iBAAiB,GAAG,IAAA,kBAAQ,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE;QAC1D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,kBAAkB,EAAE,MAAM,CAAC,OAAO;YAClC,qBAAqB,EAAE,UAAU;YACjC,iBAAiB,EAAE,MAAM,CAAC,eAAe;YACzC,kBAAkB,EAAE,MAAM,CAAC,QAAQ;YACnC,aAAa,EAAE,MAAM,CAAC,GAAG;SAC1B;KACF,CAAC,CAAC;IACH,4EAA4E;IAC5E,2EAA2E;IAC3E,kCAAkC;IAClC,IAAA,mBAAS,EAAC,iBAAiB,CAAC,CAAC;IAO7B,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,OAAO,GAAgC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAE9E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI;gBAC1D,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;gBACvG,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,+BAA+B,CAAC,SAAS,GAAG,gBAAgB,CAAC,GAAG,IAAI,GAAG,CACxE,CAAC;AACJ,CAAC;AA7GD,oCA6GC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAI5C,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACvE,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { closeSync, existsSync, openSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport type { DaemonSpawnConfig } from './types';\n\nconst POLL_INTERVAL_MS = 100;\nconst MAX_POLLS = 300; // 30 seconds\n\n/**\n * Outcome of {@link ensureDaemon}.\n *\n * - `'already-running'`: a responsive daemon was found at the configured\n *   socket path. The supplied flags (`infuraProjectId`, `password`, `srp`)\n *   were NOT applied to that daemon; the caller should surface this so a\n *   user who is trying to change them isn't silently ignored.\n * - `'started'`: a new daemon was spawned and is now responsive.\n */\nexport type EnsureDaemonResult = {\n  state: 'already-running' | 'started';\n  socketPath: string;\n};\n\n/**\n * Ensure the daemon is running. If a responsive daemon already exists, return\n * `'already-running'` (caller decides how to surface that). Otherwise spawn\n * one as a detached process and wait until the socket becomes responsive.\n *\n * Refuses to spawn when pinging the existing socket fails with anything other\n * than `ENOENT` (wedged or foreign daemon) — taking over could orphan the\n * existing process and corrupt its PID file.\n *\n * @param config - Spawn configuration.\n * @returns The state of the daemon and the socket path it's listening on.\n */\nexport async function ensureDaemon(\n  config: DaemonSpawnConfig,\n): Promise<EnsureDaemonResult> {\n  const { socketPath, logPath } = getDaemonPaths(config.dataDir);\n\n  const initialPing = await pingDaemon(socketPath);\n  switch (initialPing.status) {\n    case 'responsive':\n      return { state: 'already-running', socketPath };\n    case 'unreachable':\n      if (initialPing.reason === 'permission') {\n        throw new Error(\n          `Refusing to start: the socket at ${socketPath} is owned by another user. ` +\n            `Choose a different data directory (MM_DAEMON_DATA_DIR) or remove the socket manually. ` +\n            `(${initialPing.error.message})`,\n        );\n      }\n      throw new Error(\n        `Refusing to start: a daemon socket already exists at ${socketPath} but is unresponsive. ` +\n          `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon. ` +\n          `(${initialPing.error.message})`,\n      );\n    case 'absent':\n      break;\n    /* istanbul ignore next -- exhaustiveness guard; unreachable for the current PingResult union */\n    default: {\n      const exhaustiveCheck: never = initialPing;\n      throw new Error(\n        `Unexpected daemon ping status: ${String(exhaustiveCheck)}`,\n      );\n    }\n  }\n\n  process.stderr.write('Starting daemon...\\n');\n\n  const { entryPath, args } = resolveEntryPoint(config.packageRoot);\n\n  // Create the data directory before opening the log file inside it. The daemon\n  // entry also does this, but only after spawn — opening the log first would\n  // ENOENT on a fresh data directory.\n  await ensureOwnerOnlyDirectory(config.dataDir);\n\n  // Redirect the detached daemon's stderr to its log file rather than\n  // discarding it, so a crash after startup stays diagnosable. stdout stays\n  // ignored — structured status goes through the file logger.\n  const logFileDescriptor = openSync(logPath, 'a');\n  const child = spawn(process.execPath, [...args, entryPath], {\n    detached: true,\n    stdio: ['ignore', 'ignore', logFileDescriptor],\n    env: {\n      ...process.env,\n      MM_DAEMON_DATA_DIR: config.dataDir,\n      MM_DAEMON_SOCKET_PATH: socketPath,\n      INFURA_PROJECT_ID: config.infuraProjectId,\n      MM_WALLET_PASSWORD: config.password,\n      MM_WALLET_SRP: config.srp,\n    },\n  });\n  // The child dup'd the file descriptor into its stderr, so drop the parent's\n  // copy. Safe on the success path: `spawn` reports failures via the 'error'\n  // event, not a synchronous throw.\n  closeSync(logFileDescriptor);\n\n  type StartupOutcome =\n    | { kind: 'pending' }\n    | { kind: 'error'; error: Error }\n    | { kind: 'exited'; code: number | null; signal: NodeJS.Signals | null };\n\n  // A failed spawn (bad interpreter, EACCES, ENOENT) emits 'error' and may\n  // never emit 'exit', so 'error' is recorded first and not overwritten by a\n  // later 'exit' — the loop surfaces the real cause instead of hanging.\n  const outcome: { current: StartupOutcome } = { current: { kind: 'pending' } };\n\n  child.on('error', (error: Error) => {\n    process.stderr.write(`Failed to spawn daemon process: ${String(error)}\\n`);\n    outcome.current = { kind: 'error', error };\n  });\n  child.on('exit', (code, signal) => {\n    if (outcome.current.kind === 'pending') {\n      outcome.current = { kind: 'exited', code, signal };\n    }\n  });\n  child.unref();\n\n  for (let i = 0; i < MAX_POLLS; i++) {\n    await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));\n    const settled = outcome.current;\n    if (settled.kind === 'error') {\n      throw new Error(\n        `Failed to spawn daemon process: ${settled.error.message}. ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    if (settled.kind === 'exited') {\n      throw new Error(\n        `Daemon process exited during startup (code=${String(settled.code)}, signal=${String(settled.signal)}). ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    const ping = await pingDaemon(socketPath);\n    if (ping.status === 'responsive') {\n      process.stderr.write('Daemon ready.\\n');\n      return { state: 'started', socketPath };\n    }\n  }\n\n  throw new Error(\n    `Daemon did not start within ${(MAX_POLLS * POLL_INTERVAL_MS) / 1000}s`,\n  );\n}\n\n/**\n * Resolve the daemon entry point path and any extra Node.js args needed.\n *\n * In production, uses the compiled dist output. In development, uses tsx\n * to run TypeScript source directly.\n *\n * @param packageRoot - The root directory of the wallet-cli package.\n * @returns The entry path and any extra node args.\n */\nfunction resolveEntryPoint(packageRoot: string): {\n  entryPath: string;\n  args: string[];\n} {\n  const distEntry = join(packageRoot, 'dist', 'daemon', 'daemon-entry.mjs');\n  if (existsSync(distEntry)) {\n    return { entryPath: distEntry, args: [] };\n  }\n\n  const srcEntry = join(packageRoot, 'src', 'daemon', 'daemon-entry.ts');\n  return {\n    entryPath: srcEntry,\n    args: ['--import', 'tsx'],\n  };\n}\n"]}
+{"version":3,"file":"daemon-spawn.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":";;;AAAA,2DAA2C;AAC3C,qCAA0D;AAC1D,yCAAiC;AAEjC,uDAA6C;AAC7C,6CAAsD;AACtD,uCAAyC;AAGzC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,aAAa;AAgBpC;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,YAAY,CAChC,MAAyB;IAEzB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAA,sBAAc,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG,MAAM,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC;IACjD,QAAQ,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;QAClD,KAAK,aAAa;YAChB,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,6BAA6B;oBACzE,wFAAwF;oBACxF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wDAAwD,UAAU,wBAAwB;gBACxF,gFAAgF;gBAChF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;QACJ,KAAK,QAAQ;YACX,MAAM;QACR,gGAAgG;QAChG,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,WAAW,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,eAAe,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAE7C,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAElE,8EAA8E;IAC9E,2EAA2E;IAC3E,oCAAoC;IACpC,MAAM,IAAA,mCAAwB,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/C,oEAAoE;IACpE,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,iBAAiB,GAAG,IAAA,kBAAQ,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAsB;QAClC,GAAG,OAAO,CAAC,GAAG;QACd,kBAAkB,EAAE,MAAM,CAAC,OAAO;QAClC,qBAAqB,EAAE,UAAU;QACjC,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;KACnC,CAAC;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,SAAS;IACT,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,kBAAkB,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE;QAC1D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IACH,4EAA4E;IAC5E,2EAA2E;IAC3E,kCAAkC;IAClC,IAAA,mBAAS,EAAC,iBAAiB,CAAC,CAAC;IAO7B,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,OAAO,GAAgC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAE9E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI;gBAC1D,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;gBACvG,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,+BAA+B,CAAC,SAAS,GAAG,gBAAgB,CAAC,GAAG,IAAI,GAAG,CACxE,CAAC;AACJ,CAAC;AAzHD,oCAyHC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAI5C,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACvE,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { closeSync, existsSync, openSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport type { DaemonSpawnConfig } from './types';\n\nconst POLL_INTERVAL_MS = 100;\nconst MAX_POLLS = 300; // 30 seconds\n\n/**\n * Outcome of {@link ensureDaemon}.\n *\n * - `'already-running'`: a responsive daemon was found at the configured\n *   socket path. The supplied flags (`infuraProjectId`, `password`, `srp`)\n *   were NOT applied to that daemon; the caller should surface this so a\n *   user who is trying to change them isn't silently ignored.\n * - `'started'`: a new daemon was spawned and is now responsive.\n */\nexport type EnsureDaemonResult = {\n  state: 'already-running' | 'started';\n  socketPath: string;\n};\n\n/**\n * Ensure the daemon is running. If a responsive daemon already exists, return\n * `'already-running'` (caller decides how to surface that). Otherwise spawn\n * one as a detached process and wait until the socket becomes responsive.\n *\n * Refuses to spawn when pinging the existing socket fails with anything other\n * than `ENOENT` (wedged or foreign daemon) — taking over could orphan the\n * existing process and corrupt its PID file.\n *\n * @param config - Spawn configuration.\n * @returns The state of the daemon and the socket path it's listening on.\n */\nexport async function ensureDaemon(\n  config: DaemonSpawnConfig,\n): Promise<EnsureDaemonResult> {\n  const { socketPath, logPath } = getDaemonPaths(config.dataDir);\n\n  const initialPing = await pingDaemon(socketPath);\n  switch (initialPing.status) {\n    case 'responsive':\n      return { state: 'already-running', socketPath };\n    case 'unreachable':\n      if (initialPing.reason === 'permission') {\n        throw new Error(\n          `Refusing to start: the socket at ${socketPath} is owned by another user. ` +\n            `Choose a different data directory (MM_DAEMON_DATA_DIR) or remove the socket manually. ` +\n            `(${initialPing.error.message})`,\n        );\n      }\n      throw new Error(\n        `Refusing to start: a daemon socket already exists at ${socketPath} but is unresponsive. ` +\n          `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon. ` +\n          `(${initialPing.error.message})`,\n      );\n    case 'absent':\n      break;\n    /* istanbul ignore next -- exhaustiveness guard; unreachable for the current PingResult union */\n    default: {\n      const exhaustiveCheck: never = initialPing;\n      throw new Error(\n        `Unexpected daemon ping status: ${String(exhaustiveCheck)}`,\n      );\n    }\n  }\n\n  process.stderr.write('Starting daemon...\\n');\n\n  const { entryPath, args } = resolveEntryPoint(config.packageRoot);\n\n  // Create the data directory before opening the log file inside it. The daemon\n  // entry also does this, but only after spawn — opening the log first would\n  // ENOENT on a fresh data directory.\n  await ensureOwnerOnlyDirectory(config.dataDir);\n\n  // Redirect the detached daemon's stderr to its log file rather than\n  // discarding it, so a crash after startup stays diagnosable. stdout stays\n  // ignored — structured status goes through the file logger.\n  const logFileDescriptor = openSync(logPath, 'a');\n\n  const childEnv: NodeJS.ProcessEnv = {\n    ...process.env,\n    MM_DAEMON_DATA_DIR: config.dataDir,\n    MM_DAEMON_SOCKET_PATH: socketPath,\n    INFURA_PROJECT_ID: config.infuraProjectId,\n    MM_WALLET_SRP: config.srp.unwrap(),\n  };\n  // `childEnv` spreads `process.env`, so an inherited `MM_WALLET_PASSWORD`\n  // would otherwise leak into the child and unlock a daemon the caller meant\n  // to start locked. When no password was supplied, delete the inherited key\n  // so the daemon comes up locked; otherwise overwrite it with the supplied\n  // value.\n  if (config.password === undefined) {\n    delete childEnv.MM_WALLET_PASSWORD;\n  } else {\n    childEnv.MM_WALLET_PASSWORD = config.password.unwrap();\n  }\n\n  const child = spawn(process.execPath, [...args, entryPath], {\n    detached: true,\n    stdio: ['ignore', 'ignore', logFileDescriptor],\n    env: childEnv,\n  });\n  // The child dup'd the file descriptor into its stderr, so drop the parent's\n  // copy. Safe on the success path: `spawn` reports failures via the 'error'\n  // event, not a synchronous throw.\n  closeSync(logFileDescriptor);\n\n  type StartupOutcome =\n    | { kind: 'pending' }\n    | { kind: 'error'; error: Error }\n    | { kind: 'exited'; code: number | null; signal: NodeJS.Signals | null };\n\n  // A failed spawn (bad interpreter, EACCES, ENOENT) emits 'error' and may\n  // never emit 'exit', so 'error' is recorded first and not overwritten by a\n  // later 'exit' — the loop surfaces the real cause instead of hanging.\n  const outcome: { current: StartupOutcome } = { current: { kind: 'pending' } };\n\n  child.on('error', (error: Error) => {\n    process.stderr.write(`Failed to spawn daemon process: ${String(error)}\\n`);\n    outcome.current = { kind: 'error', error };\n  });\n  child.on('exit', (code, signal) => {\n    if (outcome.current.kind === 'pending') {\n      outcome.current = { kind: 'exited', code, signal };\n    }\n  });\n  child.unref();\n\n  for (let i = 0; i < MAX_POLLS; i++) {\n    await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));\n    const settled = outcome.current;\n    if (settled.kind === 'error') {\n      throw new Error(\n        `Failed to spawn daemon process: ${settled.error.message}. ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    if (settled.kind === 'exited') {\n      throw new Error(\n        `Daemon process exited during startup (code=${String(settled.code)}, signal=${String(settled.signal)}). ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    const ping = await pingDaemon(socketPath);\n    if (ping.status === 'responsive') {\n      process.stderr.write('Daemon ready.\\n');\n      return { state: 'started', socketPath };\n    }\n  }\n\n  throw new Error(\n    `Daemon did not start within ${(MAX_POLLS * POLL_INTERVAL_MS) / 1000}s`,\n  );\n}\n\n/**\n * Resolve the daemon entry point path and any extra Node.js args needed.\n *\n * In production, uses the compiled dist output. In development, uses tsx\n * to run TypeScript source directly.\n *\n * @param packageRoot - The root directory of the wallet-cli package.\n * @returns The entry path and any extra node args.\n */\nfunction resolveEntryPoint(packageRoot: string): {\n  entryPath: string;\n  args: string[];\n} {\n  const distEntry = join(packageRoot, 'dist', 'daemon', 'daemon-entry.mjs');\n  if (existsSync(distEntry)) {\n    return { entryPath: distEntry, args: [] };\n  }\n\n  const srcEntry = join(packageRoot, 'src', 'daemon', 'daemon-entry.ts');\n  return {\n    entryPath: srcEntry,\n    args: ['--import', 'tsx'],\n  };\n}\n"]}

package/dist/daemon/daemon-spawn.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-spawn.d.cts","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAgB;AAKjD;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA2G7B"}
+{"version":3,"file":"daemon-spawn.d.cts","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAgB;AAKjD;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAuH7B"}

package/dist/daemon/daemon-spawn.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-spawn.d.mts","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAgB;AAKjD;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA2G7B"}
+{"version":3,"file":"daemon-spawn.d.mts","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAgB;AAKjD;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAuH7B"}

package/dist/daemon/daemon-spawn.mjs

@@ -51,17 +51,28 @@ export async function ensureDaemon(config) {
     // discarding it, so a crash after startup stays diagnosable. stdout stays
     // ignored — structured status goes through the file logger.
     const logFileDescriptor = openSync(logPath, 'a');
+    const childEnv = {
+        ...process.env,
+        MM_DAEMON_DATA_DIR: config.dataDir,
+        MM_DAEMON_SOCKET_PATH: socketPath,
+        INFURA_PROJECT_ID: config.infuraProjectId,
+        MM_WALLET_SRP: config.srp.unwrap(),
+    };
+    // `childEnv` spreads `process.env`, so an inherited `MM_WALLET_PASSWORD`
+    // would otherwise leak into the child and unlock a daemon the caller meant
+    // to start locked. When no password was supplied, delete the inherited key
+    // so the daemon comes up locked; otherwise overwrite it with the supplied
+    // value.
+    if (config.password === undefined) {
+        delete childEnv.MM_WALLET_PASSWORD;
+    }
+    else {
+        childEnv.MM_WALLET_PASSWORD = config.password.unwrap();
+    }
     const child = spawn(process.execPath, [...args, entryPath], {
         detached: true,
         stdio: ['ignore', 'ignore', logFileDescriptor],
-        env: {
-            ...process.env,
-            MM_DAEMON_DATA_DIR: config.dataDir,
-            MM_DAEMON_SOCKET_PATH: socketPath,
-            INFURA_PROJECT_ID: config.infuraProjectId,
-            MM_WALLET_PASSWORD: config.password,
-            MM_WALLET_SRP: config.srp,
-        },
+        env: childEnv,
     });
     // The child dup'd the file descriptor into its stderr, so drop the parent's
     // copy. Safe on the success path: `spawn` reports failures via the 'error'

package/dist/daemon/daemon-spawn.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-spawn.mjs","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,2BAA2B;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB;AAC1D,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAEjC,OAAO,EAAE,UAAU,EAAE,4BAAwB;AAC7C,OAAO,EAAE,wBAAwB,EAAE,uBAAmB;AACtD,OAAO,EAAE,cAAc,EAAE,oBAAgB;AAGzC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,aAAa;AAgBpC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAyB;IAEzB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IACjD,QAAQ,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;QAClD,KAAK,aAAa;YAChB,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,6BAA6B;oBACzE,wFAAwF;oBACxF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wDAAwD,UAAU,wBAAwB;gBACxF,gFAAgF;gBAChF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;QACJ,KAAK,QAAQ;YACX,MAAM;QACR,gGAAgG;QAChG,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,WAAW,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,eAAe,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAE7C,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAElE,8EAA8E;IAC9E,2EAA2E;IAC3E,oCAAoC;IACpC,MAAM,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/C,oEAAoE;IACpE,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE;QAC1D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,kBAAkB,EAAE,MAAM,CAAC,OAAO;YAClC,qBAAqB,EAAE,UAAU;YACjC,iBAAiB,EAAE,MAAM,CAAC,eAAe;YACzC,kBAAkB,EAAE,MAAM,CAAC,QAAQ;YACnC,aAAa,EAAE,MAAM,CAAC,GAAG;SAC1B;KACF,CAAC,CAAC;IACH,4EAA4E;IAC5E,2EAA2E;IAC3E,kCAAkC;IAClC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAO7B,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,OAAO,GAAgC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAE9E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI;gBAC1D,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;gBACvG,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,+BAA+B,CAAC,SAAS,GAAG,gBAAgB,CAAC,GAAG,IAAI,GAAG,CACxE,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAI5C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACvE,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { closeSync, existsSync, openSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport type { DaemonSpawnConfig } from './types';\n\nconst POLL_INTERVAL_MS = 100;\nconst MAX_POLLS = 300; // 30 seconds\n\n/**\n * Outcome of {@link ensureDaemon}.\n *\n * - `'already-running'`: a responsive daemon was found at the configured\n *   socket path. The supplied flags (`infuraProjectId`, `password`, `srp`)\n *   were NOT applied to that daemon; the caller should surface this so a\n *   user who is trying to change them isn't silently ignored.\n * - `'started'`: a new daemon was spawned and is now responsive.\n */\nexport type EnsureDaemonResult = {\n  state: 'already-running' | 'started';\n  socketPath: string;\n};\n\n/**\n * Ensure the daemon is running. If a responsive daemon already exists, return\n * `'already-running'` (caller decides how to surface that). Otherwise spawn\n * one as a detached process and wait until the socket becomes responsive.\n *\n * Refuses to spawn when pinging the existing socket fails with anything other\n * than `ENOENT` (wedged or foreign daemon) — taking over could orphan the\n * existing process and corrupt its PID file.\n *\n * @param config - Spawn configuration.\n * @returns The state of the daemon and the socket path it's listening on.\n */\nexport async function ensureDaemon(\n  config: DaemonSpawnConfig,\n): Promise<EnsureDaemonResult> {\n  const { socketPath, logPath } = getDaemonPaths(config.dataDir);\n\n  const initialPing = await pingDaemon(socketPath);\n  switch (initialPing.status) {\n    case 'responsive':\n      return { state: 'already-running', socketPath };\n    case 'unreachable':\n      if (initialPing.reason === 'permission') {\n        throw new Error(\n          `Refusing to start: the socket at ${socketPath} is owned by another user. ` +\n            `Choose a different data directory (MM_DAEMON_DATA_DIR) or remove the socket manually. ` +\n            `(${initialPing.error.message})`,\n        );\n      }\n      throw new Error(\n        `Refusing to start: a daemon socket already exists at ${socketPath} but is unresponsive. ` +\n          `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon. ` +\n          `(${initialPing.error.message})`,\n      );\n    case 'absent':\n      break;\n    /* istanbul ignore next -- exhaustiveness guard; unreachable for the current PingResult union */\n    default: {\n      const exhaustiveCheck: never = initialPing;\n      throw new Error(\n        `Unexpected daemon ping status: ${String(exhaustiveCheck)}`,\n      );\n    }\n  }\n\n  process.stderr.write('Starting daemon...\\n');\n\n  const { entryPath, args } = resolveEntryPoint(config.packageRoot);\n\n  // Create the data directory before opening the log file inside it. The daemon\n  // entry also does this, but only after spawn — opening the log first would\n  // ENOENT on a fresh data directory.\n  await ensureOwnerOnlyDirectory(config.dataDir);\n\n  // Redirect the detached daemon's stderr to its log file rather than\n  // discarding it, so a crash after startup stays diagnosable. stdout stays\n  // ignored — structured status goes through the file logger.\n  const logFileDescriptor = openSync(logPath, 'a');\n  const child = spawn(process.execPath, [...args, entryPath], {\n    detached: true,\n    stdio: ['ignore', 'ignore', logFileDescriptor],\n    env: {\n      ...process.env,\n      MM_DAEMON_DATA_DIR: config.dataDir,\n      MM_DAEMON_SOCKET_PATH: socketPath,\n      INFURA_PROJECT_ID: config.infuraProjectId,\n      MM_WALLET_PASSWORD: config.password,\n      MM_WALLET_SRP: config.srp,\n    },\n  });\n  // The child dup'd the file descriptor into its stderr, so drop the parent's\n  // copy. Safe on the success path: `spawn` reports failures via the 'error'\n  // event, not a synchronous throw.\n  closeSync(logFileDescriptor);\n\n  type StartupOutcome =\n    | { kind: 'pending' }\n    | { kind: 'error'; error: Error }\n    | { kind: 'exited'; code: number | null; signal: NodeJS.Signals | null };\n\n  // A failed spawn (bad interpreter, EACCES, ENOENT) emits 'error' and may\n  // never emit 'exit', so 'error' is recorded first and not overwritten by a\n  // later 'exit' — the loop surfaces the real cause instead of hanging.\n  const outcome: { current: StartupOutcome } = { current: { kind: 'pending' } };\n\n  child.on('error', (error: Error) => {\n    process.stderr.write(`Failed to spawn daemon process: ${String(error)}\\n`);\n    outcome.current = { kind: 'error', error };\n  });\n  child.on('exit', (code, signal) => {\n    if (outcome.current.kind === 'pending') {\n      outcome.current = { kind: 'exited', code, signal };\n    }\n  });\n  child.unref();\n\n  for (let i = 0; i < MAX_POLLS; i++) {\n    await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));\n    const settled = outcome.current;\n    if (settled.kind === 'error') {\n      throw new Error(\n        `Failed to spawn daemon process: ${settled.error.message}. ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    if (settled.kind === 'exited') {\n      throw new Error(\n        `Daemon process exited during startup (code=${String(settled.code)}, signal=${String(settled.signal)}). ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    const ping = await pingDaemon(socketPath);\n    if (ping.status === 'responsive') {\n      process.stderr.write('Daemon ready.\\n');\n      return { state: 'started', socketPath };\n    }\n  }\n\n  throw new Error(\n    `Daemon did not start within ${(MAX_POLLS * POLL_INTERVAL_MS) / 1000}s`,\n  );\n}\n\n/**\n * Resolve the daemon entry point path and any extra Node.js args needed.\n *\n * In production, uses the compiled dist output. In development, uses tsx\n * to run TypeScript source directly.\n *\n * @param packageRoot - The root directory of the wallet-cli package.\n * @returns The entry path and any extra node args.\n */\nfunction resolveEntryPoint(packageRoot: string): {\n  entryPath: string;\n  args: string[];\n} {\n  const distEntry = join(packageRoot, 'dist', 'daemon', 'daemon-entry.mjs');\n  if (existsSync(distEntry)) {\n    return { entryPath: distEntry, args: [] };\n  }\n\n  const srcEntry = join(packageRoot, 'src', 'daemon', 'daemon-entry.ts');\n  return {\n    entryPath: srcEntry,\n    args: ['--import', 'tsx'],\n  };\n}\n"]}
+{"version":3,"file":"daemon-spawn.mjs","sourceRoot":"","sources":["../../src/daemon/daemon-spawn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,2BAA2B;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB;AAC1D,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAEjC,OAAO,EAAE,UAAU,EAAE,4BAAwB;AAC7C,OAAO,EAAE,wBAAwB,EAAE,uBAAmB;AACtD,OAAO,EAAE,cAAc,EAAE,oBAAgB;AAGzC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,aAAa;AAgBpC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAyB;IAEzB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IACjD,QAAQ,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;QAClD,KAAK,aAAa;YAChB,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,6BAA6B;oBACzE,wFAAwF;oBACxF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wDAAwD,UAAU,wBAAwB;gBACxF,gFAAgF;gBAChF,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CACnC,CAAC;QACJ,KAAK,QAAQ;YACX,MAAM;QACR,gGAAgG;QAChG,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,WAAW,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,eAAe,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAE7C,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAElE,8EAA8E;IAC9E,2EAA2E;IAC3E,oCAAoC;IACpC,MAAM,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/C,oEAAoE;IACpE,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAsB;QAClC,GAAG,OAAO,CAAC,GAAG;QACd,kBAAkB,EAAE,MAAM,CAAC,OAAO;QAClC,qBAAqB,EAAE,UAAU;QACjC,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;KACnC,CAAC;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,SAAS;IACT,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,kBAAkB,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE;QAC1D,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IACH,4EAA4E;IAC5E,2EAA2E;IAC3E,kCAAkC;IAClC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAO7B,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,OAAO,GAAgC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAE9E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI;gBAC1D,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;gBACvG,2BAA2B,OAAO,GAAG,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,+BAA+B,CAAC,SAAS,GAAG,gBAAgB,CAAC,GAAG,IAAI,GAAG,CACxE,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAI5C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACvE,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { closeSync, existsSync, openSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport type { DaemonSpawnConfig } from './types';\n\nconst POLL_INTERVAL_MS = 100;\nconst MAX_POLLS = 300; // 30 seconds\n\n/**\n * Outcome of {@link ensureDaemon}.\n *\n * - `'already-running'`: a responsive daemon was found at the configured\n *   socket path. The supplied flags (`infuraProjectId`, `password`, `srp`)\n *   were NOT applied to that daemon; the caller should surface this so a\n *   user who is trying to change them isn't silently ignored.\n * - `'started'`: a new daemon was spawned and is now responsive.\n */\nexport type EnsureDaemonResult = {\n  state: 'already-running' | 'started';\n  socketPath: string;\n};\n\n/**\n * Ensure the daemon is running. If a responsive daemon already exists, return\n * `'already-running'` (caller decides how to surface that). Otherwise spawn\n * one as a detached process and wait until the socket becomes responsive.\n *\n * Refuses to spawn when pinging the existing socket fails with anything other\n * than `ENOENT` (wedged or foreign daemon) — taking over could orphan the\n * existing process and corrupt its PID file.\n *\n * @param config - Spawn configuration.\n * @returns The state of the daemon and the socket path it's listening on.\n */\nexport async function ensureDaemon(\n  config: DaemonSpawnConfig,\n): Promise<EnsureDaemonResult> {\n  const { socketPath, logPath } = getDaemonPaths(config.dataDir);\n\n  const initialPing = await pingDaemon(socketPath);\n  switch (initialPing.status) {\n    case 'responsive':\n      return { state: 'already-running', socketPath };\n    case 'unreachable':\n      if (initialPing.reason === 'permission') {\n        throw new Error(\n          `Refusing to start: the socket at ${socketPath} is owned by another user. ` +\n            `Choose a different data directory (MM_DAEMON_DATA_DIR) or remove the socket manually. ` +\n            `(${initialPing.error.message})`,\n        );\n      }\n      throw new Error(\n        `Refusing to start: a daemon socket already exists at ${socketPath} but is unresponsive. ` +\n          `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon. ` +\n          `(${initialPing.error.message})`,\n      );\n    case 'absent':\n      break;\n    /* istanbul ignore next -- exhaustiveness guard; unreachable for the current PingResult union */\n    default: {\n      const exhaustiveCheck: never = initialPing;\n      throw new Error(\n        `Unexpected daemon ping status: ${String(exhaustiveCheck)}`,\n      );\n    }\n  }\n\n  process.stderr.write('Starting daemon...\\n');\n\n  const { entryPath, args } = resolveEntryPoint(config.packageRoot);\n\n  // Create the data directory before opening the log file inside it. The daemon\n  // entry also does this, but only after spawn — opening the log first would\n  // ENOENT on a fresh data directory.\n  await ensureOwnerOnlyDirectory(config.dataDir);\n\n  // Redirect the detached daemon's stderr to its log file rather than\n  // discarding it, so a crash after startup stays diagnosable. stdout stays\n  // ignored — structured status goes through the file logger.\n  const logFileDescriptor = openSync(logPath, 'a');\n\n  const childEnv: NodeJS.ProcessEnv = {\n    ...process.env,\n    MM_DAEMON_DATA_DIR: config.dataDir,\n    MM_DAEMON_SOCKET_PATH: socketPath,\n    INFURA_PROJECT_ID: config.infuraProjectId,\n    MM_WALLET_SRP: config.srp.unwrap(),\n  };\n  // `childEnv` spreads `process.env`, so an inherited `MM_WALLET_PASSWORD`\n  // would otherwise leak into the child and unlock a daemon the caller meant\n  // to start locked. When no password was supplied, delete the inherited key\n  // so the daemon comes up locked; otherwise overwrite it with the supplied\n  // value.\n  if (config.password === undefined) {\n    delete childEnv.MM_WALLET_PASSWORD;\n  } else {\n    childEnv.MM_WALLET_PASSWORD = config.password.unwrap();\n  }\n\n  const child = spawn(process.execPath, [...args, entryPath], {\n    detached: true,\n    stdio: ['ignore', 'ignore', logFileDescriptor],\n    env: childEnv,\n  });\n  // The child dup'd the file descriptor into its stderr, so drop the parent's\n  // copy. Safe on the success path: `spawn` reports failures via the 'error'\n  // event, not a synchronous throw.\n  closeSync(logFileDescriptor);\n\n  type StartupOutcome =\n    | { kind: 'pending' }\n    | { kind: 'error'; error: Error }\n    | { kind: 'exited'; code: number | null; signal: NodeJS.Signals | null };\n\n  // A failed spawn (bad interpreter, EACCES, ENOENT) emits 'error' and may\n  // never emit 'exit', so 'error' is recorded first and not overwritten by a\n  // later 'exit' — the loop surfaces the real cause instead of hanging.\n  const outcome: { current: StartupOutcome } = { current: { kind: 'pending' } };\n\n  child.on('error', (error: Error) => {\n    process.stderr.write(`Failed to spawn daemon process: ${String(error)}\\n`);\n    outcome.current = { kind: 'error', error };\n  });\n  child.on('exit', (code, signal) => {\n    if (outcome.current.kind === 'pending') {\n      outcome.current = { kind: 'exited', code, signal };\n    }\n  });\n  child.unref();\n\n  for (let i = 0; i < MAX_POLLS; i++) {\n    await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));\n    const settled = outcome.current;\n    if (settled.kind === 'error') {\n      throw new Error(\n        `Failed to spawn daemon process: ${settled.error.message}. ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    if (settled.kind === 'exited') {\n      throw new Error(\n        `Daemon process exited during startup (code=${String(settled.code)}, signal=${String(settled.signal)}). ` +\n          `Check the daemon log at ${logPath}.`,\n      );\n    }\n    const ping = await pingDaemon(socketPath);\n    if (ping.status === 'responsive') {\n      process.stderr.write('Daemon ready.\\n');\n      return { state: 'started', socketPath };\n    }\n  }\n\n  throw new Error(\n    `Daemon did not start within ${(MAX_POLLS * POLL_INTERVAL_MS) / 1000}s`,\n  );\n}\n\n/**\n * Resolve the daemon entry point path and any extra Node.js args needed.\n *\n * In production, uses the compiled dist output. In development, uses tsx\n * to run TypeScript source directly.\n *\n * @param packageRoot - The root directory of the wallet-cli package.\n * @returns The entry path and any extra node args.\n */\nfunction resolveEntryPoint(packageRoot: string): {\n  entryPath: string;\n  args: string[];\n} {\n  const distEntry = join(packageRoot, 'dist', 'daemon', 'daemon-entry.mjs');\n  if (existsSync(distEntry)) {\n    return { entryPath: distEntry, args: [] };\n  }\n\n  const srcEntry = join(packageRoot, 'src', 'daemon', 'daemon-entry.ts');\n  return {\n    entryPath: srcEntry,\n    args: ['--import', 'tsx'],\n  };\n}\n"]}

package/dist/daemon/prompts.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.confirmPurge = void 0;
+exports.promptPassword = exports.confirmPurge = void 0;
 /**
  * Ask the user to confirm the destructive `daemon purge` operation.
  *
@@ -18,4 +18,20 @@ async function confirmPurge() {
     });
 }
 exports.confirmPurge = confirmPurge;
+/**
+ * Prompt the user for the wallet password, with input masked. Used by
+ * `mm wallet unlock` when the user did not pass `--password` or set the
+ * `MM_WALLET_PASSWORD` env var. Same dynamic-import + ESM-interop pattern
+ * as {@link confirmPurge}.
+ *
+ * @returns The password the user typed.
+ */
+async function promptPassword() {
+    const { default: password } = await import("@inquirer/password");
+    return password({
+        message: 'Wallet password:',
+        mask: true,
+    });
+}
+exports.promptPassword = promptPassword;
 //# sourceMappingURL=prompts.cjs.map

package/dist/daemon/prompts.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.cjs","sourceRoot":"","sources":["../../src/daemon/prompts.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACI,KAAK,UAAU,YAAY;IAChC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,qBAAqB,CAAC;IAC/D,OAAO,OAAO,CAAC;QACb,OAAO,EAAE,2DAA2D;QACpE,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;AACL,CAAC;AAND,oCAMC","sourcesContent":["/**\n * Ask the user to confirm the destructive `daemon purge` operation.\n *\n * Wraps `@inquirer/confirm` in a dynamic import so this CommonJS-compiled\n * package can interop with that ESM-only dependency, and so tests can mock\n * the prompt without going through jest's ESM mock machinery.\n *\n * @returns True if the user confirmed.\n */\nexport async function confirmPurge(): Promise<boolean> {\n  const { default: confirm } = await import('@inquirer/confirm');\n  return confirm({\n    message: 'This will stop the daemon and delete all state. Continue?',\n    default: false,\n  });\n}\n"]}
+{"version":3,"file":"prompts.cjs","sourceRoot":"","sources":["../../src/daemon/prompts.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACI,KAAK,UAAU,YAAY;IAChC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,qBAAqB,CAAC;IAC/D,OAAO,OAAO,CAAC;QACb,OAAO,EAAE,2DAA2D;QACpE,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;AACL,CAAC;AAND,oCAMC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc;IAClC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,sBAAsB,CAAC;IACjE,OAAO,QAAQ,CAAC;QACd,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;AACL,CAAC;AAND,wCAMC","sourcesContent":["/**\n * Ask the user to confirm the destructive `daemon purge` operation.\n *\n * Wraps `@inquirer/confirm` in a dynamic import so this CommonJS-compiled\n * package can interop with that ESM-only dependency, and so tests can mock\n * the prompt without going through jest's ESM mock machinery.\n *\n * @returns True if the user confirmed.\n */\nexport async function confirmPurge(): Promise<boolean> {\n  const { default: confirm } = await import('@inquirer/confirm');\n  return confirm({\n    message: 'This will stop the daemon and delete all state. Continue?',\n    default: false,\n  });\n}\n\n/**\n * Prompt the user for the wallet password, with input masked. Used by\n * `mm wallet unlock` when the user did not pass `--password` or set the\n * `MM_WALLET_PASSWORD` env var. Same dynamic-import + ESM-interop pattern\n * as {@link confirmPurge}.\n *\n * @returns The password the user typed.\n */\nexport async function promptPassword(): Promise<string> {\n  const { default: password } = await import('@inquirer/password');\n  return password({\n    message: 'Wallet password:',\n    mask: true,\n  });\n}\n"]}

package/dist/daemon/prompts.d.cts

@@ -8,4 +8,13 @@
  * @returns True if the user confirmed.
  */
 export declare function confirmPurge(): Promise<boolean>;
+/**
+ * Prompt the user for the wallet password, with input masked. Used by
+ * `mm wallet unlock` when the user did not pass `--password` or set the
+ * `MM_WALLET_PASSWORD` env var. Same dynamic-import + ESM-interop pattern
+ * as {@link confirmPurge}.
+ *
+ * @returns The password the user typed.
+ */
+export declare function promptPassword(): Promise<string>;
 //# sourceMappingURL=prompts.d.cts.map

package/dist/daemon/prompts.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.d.cts","sourceRoot":"","sources":["../../src/daemon/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAMrD"}
+{"version":3,"file":"prompts.d.cts","sourceRoot":"","sources":["../../src/daemon/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAMrD;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAMtD"}

package/dist/daemon/prompts.d.mts

@@ -8,4 +8,13 @@
  * @returns True if the user confirmed.
  */
 export declare function confirmPurge(): Promise<boolean>;
+/**
+ * Prompt the user for the wallet password, with input masked. Used by
+ * `mm wallet unlock` when the user did not pass `--password` or set the
+ * `MM_WALLET_PASSWORD` env var. Same dynamic-import + ESM-interop pattern
+ * as {@link confirmPurge}.
+ *
+ * @returns The password the user typed.
+ */
+export declare function promptPassword(): Promise<string>;
 //# sourceMappingURL=prompts.d.mts.map

package/dist/daemon/prompts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.d.mts","sourceRoot":"","sources":["../../src/daemon/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAMrD"}
+{"version":3,"file":"prompts.d.mts","sourceRoot":"","sources":["../../src/daemon/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAMrD;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAMtD"}

package/dist/daemon/prompts.mjs

@@ -14,4 +14,19 @@ export async function confirmPurge() {
         default: false,
     });
 }
+/**
+ * Prompt the user for the wallet password, with input masked. Used by
+ * `mm wallet unlock` when the user did not pass `--password` or set the
+ * `MM_WALLET_PASSWORD` env var. Same dynamic-import + ESM-interop pattern
+ * as {@link confirmPurge}.
+ *
+ * @returns The password the user typed.
+ */
+export async function promptPassword() {
+    const { default: password } = await import("@inquirer/password");
+    return password({
+        message: 'Wallet password:',
+        mask: true,
+    });
+}
 //# sourceMappingURL=prompts.mjs.map