@metamask-previews/wallet-cli 0.0.0-preview-b8d04f274 → 0.0.0-preview-1ccf11bcb

package/dist/daemon/secrets.mjs

@@ -0,0 +1,132 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _Password_value, _Srp_value;
+import { validateMnemonic } from "@metamask/scure-bip39";
+import { wordlist } from "@metamask/scure-bip39/dist/wordlists/english.js";
+const REDACTED = '[redacted]';
+const VALID_SRP_WORD_COUNTS = [12, 15, 18, 21, 24];
+const INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');
+const WORDLIST_SET = new Set(wordlist);
+/**
+ * Opaque wrapper around a wallet password.
+ *
+ * Constructed via {@link Password.from}, which validates the input. The
+ * underlying string is only reachable through {@link Password.unwrap}; every
+ * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal
+ * interpolation) yields `[redacted]`. This makes accidental logging produce a
+ * harmless placeholder instead of leaking the secret.
+ */
+export class Password {
+    // See .from() for why this is private.
+    // eslint-disable-next-line no-restricted-syntax
+    constructor(value) {
+        _Password_value.set(this, void 0);
+        __classPrivateFieldSet(this, _Password_value, value, "f");
+    }
+    /**
+     * Wrap a non-empty string as a {@link Password}.
+     *
+     * Matches the `@metamask/keyring-controller` convention: any non-empty
+     * string is acceptable; minimum-length policy is left to the keyring.
+     *
+     * @param value - The raw password string.
+     * @returns A redacting {@link Password} wrapper.
+     * @throws If `value` is empty.
+     */
+    static from(value) {
+        if (value.length === 0) {
+            throw new Error('Password must be a non-empty string');
+        }
+        return new Password(value);
+    }
+    /**
+     * Reveal the underlying password string. Call this only at trust boundaries
+     * (e.g. handing the value to the keyring or to a child-process env var).
+     *
+     * @returns The original password string.
+     */
+    unwrap() {
+        return __classPrivateFieldGet(this, _Password_value, "f");
+    }
+    toString() {
+        return REDACTED;
+    }
+    toJSON() {
+        return REDACTED;
+    }
+    [(_Password_value = new WeakMap(), INSPECT_CUSTOM)]() {
+        return REDACTED;
+    }
+}
+/**
+ * Opaque wrapper around a BIP-39 secret recovery phrase.
+ *
+ * Constructed via {@link Srp.from}, which validates the word count
+ * (12/15/18/21/24) and that every word is present in the BIP-39 English
+ * wordlist. The underlying string is only reachable through {@link Srp.unwrap};
+ * every other path yields `[redacted]`.
+ */
+export class Srp {
+    // See .from() for why this is private.
+    // eslint-disable-next-line no-restricted-syntax
+    constructor(value) {
+        _Srp_value.set(this, void 0);
+        __classPrivateFieldSet(this, _Srp_value, value, "f");
+    }
+    /**
+     * Validate and wrap a BIP-39 mnemonic phrase.
+     *
+     * Whitespace is normalized (trimmed and collapsed) before validation so that
+     * copy-pasted phrases with accidental leading/trailing/extra spaces are
+     * accepted. Catching malformed input here (rather than letting it reach
+     * `KeyringController:createNewVaultAndRestore`) produces a clearer error.
+     *
+     * @param value - The raw mnemonic string.
+     * @returns A redacting {@link Srp} wrapper containing the normalized phrase.
+     * @throws If the word count is not one of 12/15/18/21/24, if any word is
+     * not present in the BIP-39 English wordlist, or if the checksum is invalid.
+     */
+    static from(value) {
+        const words = value.trim().split(/\s+/u);
+        if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {
+            throw new Error(`Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`);
+        }
+        for (const word of words) {
+            if (!WORDLIST_SET.has(word)) {
+                throw new Error('Secret recovery phrase contains a word not in the BIP-39 English wordlist');
+            }
+        }
+        const normalized = words.join(' ');
+        if (!validateMnemonic(normalized, wordlist)) {
+            throw new Error('Secret recovery phrase has an invalid checksum');
+        }
+        return new Srp(normalized);
+    }
+    /**
+     * Reveal the underlying mnemonic string. Call this only at trust boundaries.
+     *
+     * @returns The original mnemonic string.
+     */
+    unwrap() {
+        return __classPrivateFieldGet(this, _Srp_value, "f");
+    }
+    toString() {
+        return REDACTED;
+    }
+    toJSON() {
+        return REDACTED;
+    }
+    [(_Srp_value = new WeakMap(), INSPECT_CUSTOM)]() {
+        return REDACTED;
+    }
+}
+//# sourceMappingURL=secrets.mjs.map

package/dist/daemon/secrets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.mjs","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,8BAA8B;AACzD,OAAO,EAAE,QAAQ,EAAE,wDAAqD;AAExE,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,qBAAqB,GAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAEtE,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAEhE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAQ;IAGnB,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,kCAAe;QAKtB,uBAAA,IAAI,mBAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,uBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG;IAGd,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,6BAAe;QAKtB,uBAAA,IAAI,cAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,MAAM,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,kBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8BAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { validateMnemonic } from '@metamask/scure-bip39';\nimport { wordlist } from '@metamask/scure-bip39/dist/wordlists/english';\n\nconst REDACTED = '[redacted]';\n\nconst VALID_SRP_WORD_COUNTS: readonly number[] = [12, 15, 18, 21, 24];\n\nconst INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');\n\nconst WORDLIST_SET: ReadonlySet<string> = new Set(wordlist);\n\n/**\n * Opaque wrapper around a wallet password.\n *\n * Constructed via {@link Password.from}, which validates the input. The\n * underlying string is only reachable through {@link Password.unwrap}; every\n * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal\n * interpolation) yields `[redacted]`. This makes accidental logging produce a\n * harmless placeholder instead of leaking the secret.\n */\nexport class Password {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Wrap a non-empty string as a {@link Password}.\n   *\n   * Matches the `@metamask/keyring-controller` convention: any non-empty\n   * string is acceptable; minimum-length policy is left to the keyring.\n   *\n   * @param value - The raw password string.\n   * @returns A redacting {@link Password} wrapper.\n   * @throws If `value` is empty.\n   */\n  static from(value: string): Password {\n    if (value.length === 0) {\n      throw new Error('Password must be a non-empty string');\n    }\n    return new Password(value);\n  }\n\n  /**\n   * Reveal the underlying password string. Call this only at trust boundaries\n   * (e.g. handing the value to the keyring or to a child-process env var).\n   *\n   * @returns The original password string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n\n/**\n * Opaque wrapper around a BIP-39 secret recovery phrase.\n *\n * Constructed via {@link Srp.from}, which validates the word count\n * (12/15/18/21/24) and that every word is present in the BIP-39 English\n * wordlist. The underlying string is only reachable through {@link Srp.unwrap};\n * every other path yields `[redacted]`.\n */\nexport class Srp {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Validate and wrap a BIP-39 mnemonic phrase.\n   *\n   * Whitespace is normalized (trimmed and collapsed) before validation so that\n   * copy-pasted phrases with accidental leading/trailing/extra spaces are\n   * accepted. Catching malformed input here (rather than letting it reach\n   * `KeyringController:createNewVaultAndRestore`) produces a clearer error.\n   *\n   * @param value - The raw mnemonic string.\n   * @returns A redacting {@link Srp} wrapper containing the normalized phrase.\n   * @throws If the word count is not one of 12/15/18/21/24, if any word is\n   * not present in the BIP-39 English wordlist, or if the checksum is invalid.\n   */\n  static from(value: string): Srp {\n    const words = value.trim().split(/\\s+/u);\n    if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {\n      throw new Error(\n        `Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`,\n      );\n    }\n    for (const word of words) {\n      if (!WORDLIST_SET.has(word)) {\n        throw new Error(\n          'Secret recovery phrase contains a word not in the BIP-39 English wordlist',\n        );\n      }\n    }\n\n    const normalized = words.join(' ');\n    if (!validateMnemonic(normalized, wordlist)) {\n      throw new Error('Secret recovery phrase has an invalid checksum');\n    }\n    return new Srp(normalized);\n  }\n\n  /**\n   * Reveal the underlying mnemonic string. Call this only at trust boundaries.\n   *\n   * @returns The original mnemonic string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n"]}

package/dist/daemon/types.cjs

@@ -1,3 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineHandler = void 0;
+/**
+ * Bundle a params struct with the handler that runs once `params` is
+ * validated. The server invokes `run` only after `paramsStruct` accepts the
+ * value, so `run` can trust the type of its argument.
+ *
+ * The returned definition erases `TParams` to `unknown` so heterogeneous
+ * handlers can share an {@link RpcHandlerMap}.
+ *
+ * @param paramsStruct - Struct that validates `params` for this method.
+ * @param run - Handler invoked with the validated params.
+ * @returns An {@link RpcHandlerDefinition} suitable for an {@link RpcHandlerMap}.
+ */
+function defineHandler(paramsStruct, run) {
+    return { paramsStruct, run };
+}
+exports.defineHandler = defineHandler;
 //# sourceMappingURL=types.cjs.map

package/dist/daemon/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Json } from '@metamask/utils';\n\n/**\n * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be\n * discarded, so hosts supply a logger that writes somewhere durable.\n */\nexport type Logger = (message: string) => void;\n\n/**\n * A function that handles a JSON-RPC method call.\n *\n * The `params` argument will be `null` if the client did not provide params.\n */\nexport type RpcHandler = (params: Json) => Promise<Json | void>;\n\n/**\n * A map of RPC method names to their handler functions.\n */\nexport type RpcHandlerMap = Record<string, RpcHandler>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password: string;\n  srp: string;\n  packageRoot: string;\n};\n"]}
+{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":";;;AAiDA;;;;;;;;;;;GAWG;AACH,SAAgB,aAAa,CAC3B,YAA6B,EAC7B,GAAiC;IAEjC,OAAO,EAAE,YAAY,EAAE,GAAG,EAGzB,CAAC;AACJ,CAAC;AARD,sCAQC","sourcesContent":["import type { Struct } from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\n\nimport type { Password, Srp } from './secrets';\n\n/**\n * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be\n * discarded, so hosts supply a logger that writes somewhere durable.\n */\nexport type Logger = (message: string) => void;\n\n/**\n * A function that handles a JSON-RPC method call after its params have been\n * validated by the corresponding {@link RpcHandlerDefinition.paramsStruct}.\n */\nexport type RpcHandler<TParams, TResult> = (\n  params: TParams,\n) => Promise<TResult>;\n\n/**\n * Definition for a single JSON-RPC method: the struct that validates\n * incoming `params` plus the handler that runs once `params` is known to\n * match.\n *\n * The server (see `rpc-socket-server.ts`) validates the raw `params` against\n * `paramsStruct` before invoking `run`, so each handler body can trust the\n * shape of its input without re-checking.\n */\nexport type RpcHandlerDefinition<TParams, TResult extends Json | void> = {\n  paramsStruct: Struct<TParams>;\n  run: RpcHandler<TParams, TResult>;\n};\n\n/**\n * A map of RPC method names to their handler definitions.\n *\n * `TParams` is erased to `unknown` here so definitions with different narrow\n * params types (e.g. `null` vs. a tuple) can coexist in the same map. Consumers\n * therefore see each `run` as accepting `unknown` and must validate `params`\n * against the paired `paramsStruct` before invoking it — which is exactly what\n * the server (see `rpc-socket-server.ts`) does. The concrete `TParams` is\n * captured inside {@link defineHandler}, where the struct and handler are bound\n * together.\n */\nexport type RpcHandlerMap = Record<\n  string,\n  RpcHandlerDefinition<unknown, Json | void>\n>;\n\n/**\n * Bundle a params struct with the handler that runs once `params` is\n * validated. The server invokes `run` only after `paramsStruct` accepts the\n * value, so `run` can trust the type of its argument.\n *\n * The returned definition erases `TParams` to `unknown` so heterogeneous\n * handlers can share an {@link RpcHandlerMap}.\n *\n * @param paramsStruct - Struct that validates `params` for this method.\n * @param run - Handler invoked with the validated params.\n * @returns An {@link RpcHandlerDefinition} suitable for an {@link RpcHandlerMap}.\n */\nexport function defineHandler<TParams, TResult extends Json | void>(\n  paramsStruct: Struct<TParams>,\n  run: RpcHandler<TParams, TResult>,\n): RpcHandlerDefinition<unknown, TResult> {\n  return { paramsStruct, run } as unknown as RpcHandlerDefinition<\n    unknown,\n    TResult\n  >;\n}\n\n/**\n * Typed wrapper around `wallet.messenger.call` used by the `call` RPC.\n *\n * The messenger is strongly typed by action name; the daemon exposes the full\n * messenger surface over the socket and dispatches by string, so we consolidate\n * the unsafe cast into a single, documented escape hatch instead of repeating\n * it at each call site.\n */\nexport type RpcDispatcher = (action: string, ...args: Json[]) => Promise<Json>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n *\n * `password` is optional: when omitted, the daemon starts without unlocking\n * the keyring, and the caller is expected to use `mm wallet unlock` before\n * any keyring-bound operation. First-run startup still requires both\n * `password` and `srp`; without `password`, the daemon will exit during\n * startup with a clear error. `srp` is always required by the type and\n * forwarded to the daemon; it is only consumed on first run.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password?: Password;\n  srp: Srp;\n  packageRoot: string;\n};\n"]}

package/dist/daemon/types.d.cts

@@ -1,19 +1,63 @@
+import type { Struct } from "@metamask/superstruct";
 import type { Json } from "@metamask/utils";
+import type { Password, Srp } from "./secrets.cjs";
 /**
  * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be
  * discarded, so hosts supply a logger that writes somewhere durable.
  */
 export type Logger = (message: string) => void;
 /**
- * A function that handles a JSON-RPC method call.
+ * A function that handles a JSON-RPC method call after its params have been
+ * validated by the corresponding {@link RpcHandlerDefinition.paramsStruct}.
+ */
+export type RpcHandler<TParams, TResult> = (params: TParams) => Promise<TResult>;
+/**
+ * Definition for a single JSON-RPC method: the struct that validates
+ * incoming `params` plus the handler that runs once `params` is known to
+ * match.
+ *
+ * The server (see `rpc-socket-server.ts`) validates the raw `params` against
+ * `paramsStruct` before invoking `run`, so each handler body can trust the
+ * shape of its input without re-checking.
+ */
+export type RpcHandlerDefinition<TParams, TResult extends Json | void> = {
+    paramsStruct: Struct<TParams>;
+    run: RpcHandler<TParams, TResult>;
+};
+/**
+ * A map of RPC method names to their handler definitions.
  *
- * The `params` argument will be `null` if the client did not provide params.
+ * `TParams` is erased to `unknown` here so definitions with different narrow
+ * params types (e.g. `null` vs. a tuple) can coexist in the same map. Consumers
+ * therefore see each `run` as accepting `unknown` and must validate `params`
+ * against the paired `paramsStruct` before invoking it — which is exactly what
+ * the server (see `rpc-socket-server.ts`) does. The concrete `TParams` is
+ * captured inside {@link defineHandler}, where the struct and handler are bound
+ * together.
  */
-export type RpcHandler = (params: Json) => Promise<Json | void>;
+export type RpcHandlerMap = Record<string, RpcHandlerDefinition<unknown, Json | void>>;
 /**
- * A map of RPC method names to their handler functions.
+ * Bundle a params struct with the handler that runs once `params` is
+ * validated. The server invokes `run` only after `paramsStruct` accepts the
+ * value, so `run` can trust the type of its argument.
+ *
+ * The returned definition erases `TParams` to `unknown` so heterogeneous
+ * handlers can share an {@link RpcHandlerMap}.
+ *
+ * @param paramsStruct - Struct that validates `params` for this method.
+ * @param run - Handler invoked with the validated params.
+ * @returns An {@link RpcHandlerDefinition} suitable for an {@link RpcHandlerMap}.
+ */
+export declare function defineHandler<TParams, TResult extends Json | void>(paramsStruct: Struct<TParams>, run: RpcHandler<TParams, TResult>): RpcHandlerDefinition<unknown, TResult>;
+/**
+ * Typed wrapper around `wallet.messenger.call` used by the `call` RPC.
+ *
+ * The messenger is strongly typed by action name; the daemon exposes the full
+ * messenger surface over the socket and dispatches by string, so we consolidate
+ * the unsafe cast into a single, documented escape hatch instead of repeating
+ * it at each call site.
  */
-export type RpcHandlerMap = Record<string, RpcHandler>;
+export type RpcDispatcher = (action: string, ...args: Json[]) => Promise<Json>;
 /**
  * Resolved paths for daemon state files.
  */
@@ -32,12 +76,19 @@ export type DaemonStatusInfo = {
 };
 /**
  * Configuration passed to the daemon spawner.
+ *
+ * `password` is optional: when omitted, the daemon starts without unlocking
+ * the keyring, and the caller is expected to use `mm wallet unlock` before
+ * any keyring-bound operation. First-run startup still requires both
+ * `password` and `srp`; without `password`, the daemon will exit during
+ * startup with a clear error. `srp` is always required by the type and
+ * forwarded to the daemon; it is only consumed on first run.
  */
 export type DaemonSpawnConfig = {
     dataDir: string;
     infuraProjectId: string;
-    password: string;
-    srp: string;
+    password?: Password;
+    srp: Srp;
     packageRoot: string;
 };
 //# sourceMappingURL=types.d.cts.map

package/dist/daemon/types.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.cts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}
+{"version":3,"file":"types.d.cts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,8BAA8B;AACpD,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAkB;AAE/C;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE/C;;;GAGG;AACH,MAAM,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,IAAI,CACzC,MAAM,EAAE,OAAO,KACZ,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,SAAS,IAAI,GAAG,IAAI,IAAI;IACvE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAChC,MAAM,EACN,oBAAoB,CAAC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC,CAC3C,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,SAAS,IAAI,GAAG,IAAI,EAChE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,EAC7B,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAChC,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAKxC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,GAAG,EAAE,GAAG,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}

package/dist/daemon/types.d.mts

@@ -1,19 +1,63 @@
+import type { Struct } from "@metamask/superstruct";
 import type { Json } from "@metamask/utils";
+import type { Password, Srp } from "./secrets.mjs";
 /**
  * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be
  * discarded, so hosts supply a logger that writes somewhere durable.
  */
 export type Logger = (message: string) => void;
 /**
- * A function that handles a JSON-RPC method call.
+ * A function that handles a JSON-RPC method call after its params have been
+ * validated by the corresponding {@link RpcHandlerDefinition.paramsStruct}.
+ */
+export type RpcHandler<TParams, TResult> = (params: TParams) => Promise<TResult>;
+/**
+ * Definition for a single JSON-RPC method: the struct that validates
+ * incoming `params` plus the handler that runs once `params` is known to
+ * match.
+ *
+ * The server (see `rpc-socket-server.ts`) validates the raw `params` against
+ * `paramsStruct` before invoking `run`, so each handler body can trust the
+ * shape of its input without re-checking.
+ */
+export type RpcHandlerDefinition<TParams, TResult extends Json | void> = {
+    paramsStruct: Struct<TParams>;
+    run: RpcHandler<TParams, TResult>;
+};
+/**
+ * A map of RPC method names to their handler definitions.
  *
- * The `params` argument will be `null` if the client did not provide params.
+ * `TParams` is erased to `unknown` here so definitions with different narrow
+ * params types (e.g. `null` vs. a tuple) can coexist in the same map. Consumers
+ * therefore see each `run` as accepting `unknown` and must validate `params`
+ * against the paired `paramsStruct` before invoking it — which is exactly what
+ * the server (see `rpc-socket-server.ts`) does. The concrete `TParams` is
+ * captured inside {@link defineHandler}, where the struct and handler are bound
+ * together.
  */
-export type RpcHandler = (params: Json) => Promise<Json | void>;
+export type RpcHandlerMap = Record<string, RpcHandlerDefinition<unknown, Json | void>>;
 /**
- * A map of RPC method names to their handler functions.
+ * Bundle a params struct with the handler that runs once `params` is
+ * validated. The server invokes `run` only after `paramsStruct` accepts the
+ * value, so `run` can trust the type of its argument.
+ *
+ * The returned definition erases `TParams` to `unknown` so heterogeneous
+ * handlers can share an {@link RpcHandlerMap}.
+ *
+ * @param paramsStruct - Struct that validates `params` for this method.
+ * @param run - Handler invoked with the validated params.
+ * @returns An {@link RpcHandlerDefinition} suitable for an {@link RpcHandlerMap}.
+ */
+export declare function defineHandler<TParams, TResult extends Json | void>(paramsStruct: Struct<TParams>, run: RpcHandler<TParams, TResult>): RpcHandlerDefinition<unknown, TResult>;
+/**
+ * Typed wrapper around `wallet.messenger.call` used by the `call` RPC.
+ *
+ * The messenger is strongly typed by action name; the daemon exposes the full
+ * messenger surface over the socket and dispatches by string, so we consolidate
+ * the unsafe cast into a single, documented escape hatch instead of repeating
+ * it at each call site.
  */
-export type RpcHandlerMap = Record<string, RpcHandler>;
+export type RpcDispatcher = (action: string, ...args: Json[]) => Promise<Json>;
 /**
  * Resolved paths for daemon state files.
  */
@@ -32,12 +76,19 @@ export type DaemonStatusInfo = {
 };
 /**
  * Configuration passed to the daemon spawner.
+ *
+ * `password` is optional: when omitted, the daemon starts without unlocking
+ * the keyring, and the caller is expected to use `mm wallet unlock` before
+ * any keyring-bound operation. First-run startup still requires both
+ * `password` and `srp`; without `password`, the daemon will exit during
+ * startup with a clear error. `srp` is always required by the type and
+ * forwarded to the daemon; it is only consumed on first run.
  */
 export type DaemonSpawnConfig = {
     dataDir: string;
     infuraProjectId: string;
-    password: string;
-    srp: string;
+    password?: Password;
+    srp: Srp;
     packageRoot: string;
 };
 //# sourceMappingURL=types.d.mts.map

package/dist/daemon/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}
+{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,8BAA8B;AACpD,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAE5C,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAkB;AAE/C;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE/C;;;GAGG;AACH,MAAM,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,IAAI,CACzC,MAAM,EAAE,OAAO,KACZ,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,SAAS,IAAI,GAAG,IAAI,IAAI;IACvE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAChC,MAAM,EACN,oBAAoB,CAAC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC,CAC3C,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,SAAS,IAAI,GAAG,IAAI,EAChE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,EAC7B,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAChC,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAKxC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,GAAG,EAAE,GAAG,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC"}

package/dist/daemon/types.mjs

@@ -1,2 +1,16 @@
-export {};
+/**
+ * Bundle a params struct with the handler that runs once `params` is
+ * validated. The server invokes `run` only after `paramsStruct` accepts the
+ * value, so `run` can trust the type of its argument.
+ *
+ * The returned definition erases `TParams` to `unknown` so heterogeneous
+ * handlers can share an {@link RpcHandlerMap}.
+ *
+ * @param paramsStruct - Struct that validates `params` for this method.
+ * @param run - Handler invoked with the validated params.
+ * @returns An {@link RpcHandlerDefinition} suitable for an {@link RpcHandlerMap}.
+ */
+export function defineHandler(paramsStruct, run) {
+    return { paramsStruct, run };
+}
 //# sourceMappingURL=types.mjs.map

package/dist/daemon/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Json } from '@metamask/utils';\n\n/**\n * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be\n * discarded, so hosts supply a logger that writes somewhere durable.\n */\nexport type Logger = (message: string) => void;\n\n/**\n * A function that handles a JSON-RPC method call.\n *\n * The `params` argument will be `null` if the client did not provide params.\n */\nexport type RpcHandler = (params: Json) => Promise<Json | void>;\n\n/**\n * A map of RPC method names to their handler functions.\n */\nexport type RpcHandlerMap = Record<string, RpcHandler>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password: string;\n  srp: string;\n  packageRoot: string;\n};\n"]}
+{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAiDA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,YAA6B,EAC7B,GAAiC;IAEjC,OAAO,EAAE,YAAY,EAAE,GAAG,EAGzB,CAAC;AACJ,CAAC","sourcesContent":["import type { Struct } from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\n\nimport type { Password, Srp } from './secrets';\n\n/**\n * Sink for daemon diagnostic messages. A backgrounded daemon's stdio may be\n * discarded, so hosts supply a logger that writes somewhere durable.\n */\nexport type Logger = (message: string) => void;\n\n/**\n * A function that handles a JSON-RPC method call after its params have been\n * validated by the corresponding {@link RpcHandlerDefinition.paramsStruct}.\n */\nexport type RpcHandler<TParams, TResult> = (\n  params: TParams,\n) => Promise<TResult>;\n\n/**\n * Definition for a single JSON-RPC method: the struct that validates\n * incoming `params` plus the handler that runs once `params` is known to\n * match.\n *\n * The server (see `rpc-socket-server.ts`) validates the raw `params` against\n * `paramsStruct` before invoking `run`, so each handler body can trust the\n * shape of its input without re-checking.\n */\nexport type RpcHandlerDefinition<TParams, TResult extends Json | void> = {\n  paramsStruct: Struct<TParams>;\n  run: RpcHandler<TParams, TResult>;\n};\n\n/**\n * A map of RPC method names to their handler definitions.\n *\n * `TParams` is erased to `unknown` here so definitions with different narrow\n * params types (e.g. `null` vs. a tuple) can coexist in the same map. Consumers\n * therefore see each `run` as accepting `unknown` and must validate `params`\n * against the paired `paramsStruct` before invoking it — which is exactly what\n * the server (see `rpc-socket-server.ts`) does. The concrete `TParams` is\n * captured inside {@link defineHandler}, where the struct and handler are bound\n * together.\n */\nexport type RpcHandlerMap = Record<\n  string,\n  RpcHandlerDefinition<unknown, Json | void>\n>;\n\n/**\n * Bundle a params struct with the handler that runs once `params` is\n * validated. The server invokes `run` only after `paramsStruct` accepts the\n * value, so `run` can trust the type of its argument.\n *\n * The returned definition erases `TParams` to `unknown` so heterogeneous\n * handlers can share an {@link RpcHandlerMap}.\n *\n * @param paramsStruct - Struct that validates `params` for this method.\n * @param run - Handler invoked with the validated params.\n * @returns An {@link RpcHandlerDefinition} suitable for an {@link RpcHandlerMap}.\n */\nexport function defineHandler<TParams, TResult extends Json | void>(\n  paramsStruct: Struct<TParams>,\n  run: RpcHandler<TParams, TResult>,\n): RpcHandlerDefinition<unknown, TResult> {\n  return { paramsStruct, run } as unknown as RpcHandlerDefinition<\n    unknown,\n    TResult\n  >;\n}\n\n/**\n * Typed wrapper around `wallet.messenger.call` used by the `call` RPC.\n *\n * The messenger is strongly typed by action name; the daemon exposes the full\n * messenger surface over the socket and dispatches by string, so we consolidate\n * the unsafe cast into a single, documented escape hatch instead of repeating\n * it at each call site.\n */\nexport type RpcDispatcher = (action: string, ...args: Json[]) => Promise<Json>;\n\n/**\n * Resolved paths for daemon state files.\n */\nexport type DaemonPaths = {\n  socketPath: string;\n  pidPath: string;\n  logPath: string;\n  dbPath: string;\n};\n\n/**\n * Status information returned by the daemon's `getStatus` RPC method.\n */\nexport type DaemonStatusInfo = {\n  pid: number;\n  uptime: number;\n};\n\n/**\n * Configuration passed to the daemon spawner.\n *\n * `password` is optional: when omitted, the daemon starts without unlocking\n * the keyring, and the caller is expected to use `mm wallet unlock` before\n * any keyring-bound operation. First-run startup still requires both\n * `password` and `srp`; without `password`, the daemon will exit during\n * startup with a clear error. `srp` is always required by the type and\n * forwarded to the daemon; it is only consumed on first run.\n */\nexport type DaemonSpawnConfig = {\n  dataDir: string;\n  infuraProjectId: string;\n  password?: Password;\n  srp: Srp;\n  packageRoot: string;\n};\n"]}

package/dist/daemon/utils.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.waitFor = exports.sendSignal = exports.isProcessAlive = exports.readPidFile = exports.isStringArray = exports.formatJsonRpcError = exports.makeDaemonConnectionError = exports.isErrorWithCode = void 0;
+exports.waitFor = exports.sendSignal = exports.isProcessAlive = exports.readPidFile = exports.isStringArray = exports.emptyToUndefined = exports.formatJsonRpcError = exports.makeDaemonConnectionError = exports.isErrorWithCode = void 0;
 const utils_1 = require("@metamask/utils");
 const promises_1 = require("node:fs/promises");
 /**
@@ -37,7 +37,7 @@ function makeDaemonConnectionError(error) {
     }
     if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {
         return ('Cannot connect to the daemon socket: permission denied. ' +
-            'The socket may be owned by another user, or MM_DATA_DIR ' +
+            'The socket may be owned by another user, or MM_DAEMON_DATA_DIR ' +
             'may point to a directory you cannot access.');
     }
     return error instanceof Error ? error.message : String(error);
@@ -54,6 +54,18 @@ function formatJsonRpcError(error) {
     return `${error.message} (code ${String(error.code)})`;
 }
 exports.formatJsonRpcError = formatJsonRpcError;
+/**
+ * Treat an empty string the same as `undefined` — "no value supplied". Used
+ * to normalise `--password ''` and `MM_WALLET_PASSWORD=''` so they trigger
+ * the interactive prompt rather than sending an empty string to the keyring.
+ *
+ * @param value - The value to normalise.
+ * @returns `undefined` if `value` is `undefined` or `''`; `value` otherwise.
+ */
+function emptyToUndefined(value) {
+    return value === '' ? undefined : value;
+}
+exports.emptyToUndefined = emptyToUndefined;
 /**
  * Check whether a value is an array of strings. Used to validate untyped RPC
  * results (e.g. the daemon's `listActions`) before treating them as `string[]`.

package/dist/daemon/utils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.cjs","sourceRoot":"","sources":["../../src/daemon/utils.ts"],"names":[],"mappings":";;;AACA,2CAAkE;AAClE,+CAA4C;AAE5C;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,KAAc,EAAE,IAAY;IAC1D,OAAO,IAAA,uBAAY,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AACpD,CAAC;AAFD,0CAEC;AAED;;;;;;;;;GASG;AACH,SAAgB,yBAAyB,CAAC,KAAc;IACtD,IACE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;QAChC,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,EACtC,CAAC;QACD,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QACzC,OAAO,CACL,+DAA+D;YAC/D,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,CACL,0DAA0D;YAC1D,0DAA0D;YAC1D,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAvBD,8DAuBC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,KAAmB;IACpD,OAAO,GAAG,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;AACzD,CAAC;AAFD,gDAEC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAJD,sCAIC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAe;IAEf,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,8EAA8E;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAfD,kCAeC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAbD,wCAaC;AAED;;;;;;;;GAQG;AACH,SAAgB,UAAU,CAAC,GAAW,EAAE,MAAsB;IAC5D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAVD,gCAUC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,OAAO,CAC3B,KAAuC,EACvC,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAZD,0BAYC","sourcesContent":["import type { JsonRpcError } from '@metamask/utils';\nimport { isErrorWithCode as hasErrorCode } from '@metamask/utils';\nimport { readFile } from 'node:fs/promises';\n\n/**\n * Check whether an unknown error is a Node.js system error with the given code.\n *\n * @param error - The error to check.\n * @param code - The expected error code (e.g. 'ENOENT', 'EPERM').\n * @returns True if the error matches the code.\n */\nexport function isErrorWithCode(error: unknown, code: string): boolean {\n  return hasErrorCode(error) && error.code === code;\n}\n\n/**\n * Turn an error thrown while contacting the daemon socket into a user-facing\n * message for `Command.error`, so every command reports the same failure the\n * same way. Distinguishes a stopped daemon (`ENOENT`/`ECONNREFUSED`), a\n * connection dropped mid-request (`ECONNRESET`), and a permission problem\n * (`EACCES`/`EPERM`), falling back to the raw error message.\n *\n * @param error - The value thrown while contacting the daemon.\n * @returns A human-readable explanation of the failure.\n */\nexport function makeDaemonConnectionError(error: unknown): string {\n  if (\n    isErrorWithCode(error, 'ENOENT') ||\n    isErrorWithCode(error, 'ECONNREFUSED')\n  ) {\n    return 'Daemon is not running. Start it with `mm daemon start`.';\n  }\n  // A reset drops an already-established connection, so the daemon was running\n  // — most likely it crashed mid-request. Don't tell the user to start it.\n  if (isErrorWithCode(error, 'ECONNRESET')) {\n    return (\n      'Lost the connection to the daemon; it may have crashed while ' +\n      'handling the request. Check `mm daemon status` and the daemon log.'\n    );\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return (\n      'Cannot connect to the daemon socket: permission denied. ' +\n      'The socket may be owned by another user, or MM_DATA_DIR ' +\n      'may point to a directory you cannot access.'\n    );\n  }\n  return error instanceof Error ? error.message : String(error);\n}\n\n/**\n * Format the error of a JSON-RPC failure response into a user-facing message\n * for `Command.error`, so every command reports RPC failures the same way.\n *\n * @param error - The `error` field of a JSON-RPC failure response.\n * @returns The error message annotated with its numeric code.\n */\nexport function formatJsonRpcError(error: JsonRpcError): string {\n  return `${error.message} (code ${String(error.code)})`;\n}\n\n/**\n * Check whether a value is an array of strings. Used to validate untyped RPC\n * results (e.g. the daemon's `listActions`) before treating them as `string[]`.\n *\n * @param value - The value to check.\n * @returns True if the value is an array whose every element is a string.\n */\nexport function isStringArray(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) && value.every((item) => typeof item === 'string')\n  );\n}\n\n/**\n * Read a PID from a file. The file may contain just the PID, or the PID on\n * the first line followed by additional metadata (e.g. start time written by\n * the daemon).\n *\n * @param pidPath - The PID file path.\n * @returns The PID, or undefined if the file is missing or its first line is\n * not a positive integer.\n */\nexport async function readPidFile(\n  pidPath: string,\n): Promise<number | undefined> {\n  let contents: string;\n  try {\n    contents = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return undefined;\n    }\n    throw error;\n  }\n  // String.prototype.split always returns at least one element, so [0] is safe.\n  const pid = Number(contents.split('\\n')[0].trim());\n  return Number.isInteger(pid) && pid > 0 ? pid : undefined;\n}\n\n/**\n * Check whether a process is alive by sending signal 0.\n *\n * Treats `ESRCH` as \"process is gone\", `EPERM` as \"process exists but we\n * cannot signal it\" (still alive from our perspective), and rethrows\n * anything else so the caller can surface unexpected failures rather than\n * silently assuming the process is dead.\n *\n * @param pid - The process ID to check.\n * @returns True if the process exists.\n */\nexport function isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ESRCH')) {\n      return false;\n    }\n    if (isErrorWithCode(error, 'EPERM')) {\n      return true;\n    }\n    throw error;\n  }\n}\n\n/**\n * Send a signal to a process. Returns true if the signal was sent, false if\n * the process does not exist (ESRCH). Re-throws on permission errors and\n * other failures.\n *\n * @param pid - The process ID.\n * @param signal - The signal to send.\n * @returns True if the signal was delivered, false if the process is gone.\n */\nexport function sendSignal(pid: number, signal: NodeJS.Signals): boolean {\n  try {\n    process.kill(pid, signal);\n    return true;\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ESRCH')) {\n      return false;\n    }\n    throw error;\n  }\n}\n\n/**\n * Poll until a condition is met or the timeout elapses.\n *\n * @param check - A function that returns true when the condition is met.\n * @param timeoutMs - Maximum time to wait in milliseconds.\n * @returns True if the condition was met, false on timeout.\n */\nexport async function waitFor(\n  check: () => boolean | Promise<boolean>,\n  timeoutMs: number,\n): Promise<boolean> {\n  const deadline = Date.now() + timeoutMs;\n  while (Date.now() < deadline) {\n    if (await check()) {\n      return true;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 250));\n  }\n  return false;\n}\n"]}
+{"version":3,"file":"utils.cjs","sourceRoot":"","sources":["../../src/daemon/utils.ts"],"names":[],"mappings":";;;AACA,2CAAkE;AAClE,+CAA4C;AAE5C;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,KAAc,EAAE,IAAY;IAC1D,OAAO,IAAA,uBAAY,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AACpD,CAAC;AAFD,0CAEC;AAED;;;;;;;;;GASG;AACH,SAAgB,yBAAyB,CAAC,KAAc;IACtD,IACE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;QAChC,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,EACtC,CAAC;QACD,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QACzC,OAAO,CACL,+DAA+D;YAC/D,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,CACL,0DAA0D;YAC1D,iEAAiE;YACjE,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAvBD,8DAuBC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,KAAmB;IACpD,OAAO,GAAG,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;AACzD,CAAC;AAFD,gDAEC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,KAAyB;IAEzB,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC;AAJD,4CAIC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAJD,sCAIC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAe;IAEf,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,8EAA8E;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAfD,kCAeC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAbD,wCAaC;AAED;;;;;;;;GAQG;AACH,SAAgB,UAAU,CAAC,GAAW,EAAE,MAAsB;IAC5D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAVD,gCAUC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,OAAO,CAC3B,KAAuC,EACvC,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAZD,0BAYC","sourcesContent":["import type { JsonRpcError } from '@metamask/utils';\nimport { isErrorWithCode as hasErrorCode } from '@metamask/utils';\nimport { readFile } from 'node:fs/promises';\n\n/**\n * Check whether an unknown error is a Node.js system error with the given code.\n *\n * @param error - The error to check.\n * @param code - The expected error code (e.g. 'ENOENT', 'EPERM').\n * @returns True if the error matches the code.\n */\nexport function isErrorWithCode(error: unknown, code: string): boolean {\n  return hasErrorCode(error) && error.code === code;\n}\n\n/**\n * Turn an error thrown while contacting the daemon socket into a user-facing\n * message for `Command.error`, so every command reports the same failure the\n * same way. Distinguishes a stopped daemon (`ENOENT`/`ECONNREFUSED`), a\n * connection dropped mid-request (`ECONNRESET`), and a permission problem\n * (`EACCES`/`EPERM`), falling back to the raw error message.\n *\n * @param error - The value thrown while contacting the daemon.\n * @returns A human-readable explanation of the failure.\n */\nexport function makeDaemonConnectionError(error: unknown): string {\n  if (\n    isErrorWithCode(error, 'ENOENT') ||\n    isErrorWithCode(error, 'ECONNREFUSED')\n  ) {\n    return 'Daemon is not running. Start it with `mm daemon start`.';\n  }\n  // A reset drops an already-established connection, so the daemon was running\n  // — most likely it crashed mid-request. Don't tell the user to start it.\n  if (isErrorWithCode(error, 'ECONNRESET')) {\n    return (\n      'Lost the connection to the daemon; it may have crashed while ' +\n      'handling the request. Check `mm daemon status` and the daemon log.'\n    );\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return (\n      'Cannot connect to the daemon socket: permission denied. ' +\n      'The socket may be owned by another user, or MM_DAEMON_DATA_DIR ' +\n      'may point to a directory you cannot access.'\n    );\n  }\n  return error instanceof Error ? error.message : String(error);\n}\n\n/**\n * Format the error of a JSON-RPC failure response into a user-facing message\n * for `Command.error`, so every command reports RPC failures the same way.\n *\n * @param error - The `error` field of a JSON-RPC failure response.\n * @returns The error message annotated with its numeric code.\n */\nexport function formatJsonRpcError(error: JsonRpcError): string {\n  return `${error.message} (code ${String(error.code)})`;\n}\n\n/**\n * Treat an empty string the same as `undefined` — \"no value supplied\". Used\n * to normalise `--password ''` and `MM_WALLET_PASSWORD=''` so they trigger\n * the interactive prompt rather than sending an empty string to the keyring.\n *\n * @param value - The value to normalise.\n * @returns `undefined` if `value` is `undefined` or `''`; `value` otherwise.\n */\nexport function emptyToUndefined(\n  value: string | undefined,\n): string | undefined {\n  return value === '' ? undefined : value;\n}\n\n/**\n * Check whether a value is an array of strings. Used to validate untyped RPC\n * results (e.g. the daemon's `listActions`) before treating them as `string[]`.\n *\n * @param value - The value to check.\n * @returns True if the value is an array whose every element is a string.\n */\nexport function isStringArray(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) && value.every((item) => typeof item === 'string')\n  );\n}\n\n/**\n * Read a PID from a file. The file may contain just the PID, or the PID on\n * the first line followed by additional metadata (e.g. start time written by\n * the daemon).\n *\n * @param pidPath - The PID file path.\n * @returns The PID, or undefined if the file is missing or its first line is\n * not a positive integer.\n */\nexport async function readPidFile(\n  pidPath: string,\n): Promise<number | undefined> {\n  let contents: string;\n  try {\n    contents = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return undefined;\n    }\n    throw error;\n  }\n  // String.prototype.split always returns at least one element, so [0] is safe.\n  const pid = Number(contents.split('\\n')[0].trim());\n  return Number.isInteger(pid) && pid > 0 ? pid : undefined;\n}\n\n/**\n * Check whether a process is alive by sending signal 0.\n *\n * Treats `ESRCH` as \"process is gone\", `EPERM` as \"process exists but we\n * cannot signal it\" (still alive from our perspective), and rethrows\n * anything else so the caller can surface unexpected failures rather than\n * silently assuming the process is dead.\n *\n * @param pid - The process ID to check.\n * @returns True if the process exists.\n */\nexport function isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ESRCH')) {\n      return false;\n    }\n    if (isErrorWithCode(error, 'EPERM')) {\n      return true;\n    }\n    throw error;\n  }\n}\n\n/**\n * Send a signal to a process. Returns true if the signal was sent, false if\n * the process does not exist (ESRCH). Re-throws on permission errors and\n * other failures.\n *\n * @param pid - The process ID.\n * @param signal - The signal to send.\n * @returns True if the signal was delivered, false if the process is gone.\n */\nexport function sendSignal(pid: number, signal: NodeJS.Signals): boolean {\n  try {\n    process.kill(pid, signal);\n    return true;\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ESRCH')) {\n      return false;\n    }\n    throw error;\n  }\n}\n\n/**\n * Poll until a condition is met or the timeout elapses.\n *\n * @param check - A function that returns true when the condition is met.\n * @param timeoutMs - Maximum time to wait in milliseconds.\n * @returns True if the condition was met, false on timeout.\n */\nexport async function waitFor(\n  check: () => boolean | Promise<boolean>,\n  timeoutMs: number,\n): Promise<boolean> {\n  const deadline = Date.now() + timeoutMs;\n  while (Date.now() < deadline) {\n    if (await check()) {\n      return true;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 250));\n  }\n  return false;\n}\n"]}

package/dist/daemon/utils.d.cts

@@ -27,6 +27,15 @@ export declare function makeDaemonConnectionError(error: unknown): string;
  * @returns The error message annotated with its numeric code.
  */
 export declare function formatJsonRpcError(error: JsonRpcError): string;
+/**
+ * Treat an empty string the same as `undefined` — "no value supplied". Used
+ * to normalise `--password ''` and `MM_WALLET_PASSWORD=''` so they trigger
+ * the interactive prompt rather than sending an empty string to the keyring.
+ *
+ * @param value - The value to normalise.
+ * @returns `undefined` if `value` is `undefined` or `''`; `value` otherwise.
+ */
+export declare function emptyToUndefined(value: string | undefined): string | undefined;
 /**
  * Check whether a value is an array of strings. Used to validate untyped RPC
  * results (e.g. the daemon's `listActions`) before treating them as `string[]`.

package/dist/daemon/utils.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.cts","sourceRoot":"","sources":["../../src/daemon/utils.ts"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB;AAIpD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErE;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAuBhE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAI/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAa7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAanD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAUvE;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CASlB"}
+{"version":3,"file":"utils.d.cts","sourceRoot":"","sources":["../../src/daemon/utils.ts"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB;AAIpD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErE;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAuBhE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAEpB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAI/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAa7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAanD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAUvE;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CASlB"}

package/dist/daemon/utils.d.mts

@@ -27,6 +27,15 @@ export declare function makeDaemonConnectionError(error: unknown): string;
  * @returns The error message annotated with its numeric code.
  */
 export declare function formatJsonRpcError(error: JsonRpcError): string;
+/**
+ * Treat an empty string the same as `undefined` — "no value supplied". Used
+ * to normalise `--password ''` and `MM_WALLET_PASSWORD=''` so they trigger
+ * the interactive prompt rather than sending an empty string to the keyring.
+ *
+ * @param value - The value to normalise.
+ * @returns `undefined` if `value` is `undefined` or `''`; `value` otherwise.
+ */
+export declare function emptyToUndefined(value: string | undefined): string | undefined;
 /**
  * Check whether a value is an array of strings. Used to validate untyped RPC
  * results (e.g. the daemon's `listActions`) before treating them as `string[]`.

package/dist/daemon/utils.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.mts","sourceRoot":"","sources":["../../src/daemon/utils.ts"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB;AAIpD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErE;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAuBhE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAI/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAa7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAanD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAUvE;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CASlB"}
+{"version":3,"file":"utils.d.mts","sourceRoot":"","sources":["../../src/daemon/utils.ts"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB;AAIpD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErE;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAuBhE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAEpB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAI/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAa7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAanD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAUvE;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACvC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CASlB"}

package/dist/daemon/utils.mjs

@@ -33,7 +33,7 @@ export function makeDaemonConnectionError(error) {
     }
     if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {
         return ('Cannot connect to the daemon socket: permission denied. ' +
-            'The socket may be owned by another user, or MM_DATA_DIR ' +
+            'The socket may be owned by another user, or MM_DAEMON_DATA_DIR ' +
             'may point to a directory you cannot access.');
     }
     return error instanceof Error ? error.message : String(error);
@@ -48,6 +48,17 @@ export function makeDaemonConnectionError(error) {
 export function formatJsonRpcError(error) {
     return `${error.message} (code ${String(error.code)})`;
 }
+/**
+ * Treat an empty string the same as `undefined` — "no value supplied". Used
+ * to normalise `--password ''` and `MM_WALLET_PASSWORD=''` so they trigger
+ * the interactive prompt rather than sending an empty string to the keyring.
+ *
+ * @param value - The value to normalise.
+ * @returns `undefined` if `value` is `undefined` or `''`; `value` otherwise.
+ */
+export function emptyToUndefined(value) {
+    return value === '' ? undefined : value;
+}
 /**
  * Check whether a value is an array of strings. Used to validate untyped RPC
  * results (e.g. the daemon's `listActions`) before treating them as `string[]`.