@metamask-previews/wallet-cli 0.0.0-preview-ec4680201 → 0.0.0-preview-40d5fb1e2

package/dist/commands/wallet/unlock.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"unlock.mjs","sourceRoot":"","sources":["../../../src/commands/wallet/unlock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,wBAAwB;AACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB;AAE7C,OAAO,EAAE,WAAW,EAAE,uCAAsC;AAC5D,OAAO,EAAE,cAAc,EAAE,+BAA8B;AACvD,OAAO,EAAE,cAAc,EAAE,iCAAgC;AACzD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EAC1B,+BAA8B;AAE/B,MAAqB,YAAa,SAAQ,OAAO;IA2BxC,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAErC,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,0EAA0E;YAC1E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,WAAW,CAAC;gBAC3B,UAAU;gBACV,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,CAAC,kCAAkC,EAAE,QAAQ,CAAC;gBACtD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;YAC/C,+DAA+D;YAC/D,sCAAsC;YACtC,MAAM,UAAU,GACd,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CACR,qBAAqB,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/B,CAAC;;AAzEe,wBAAW,GACzB,iEAAiE;IACjE,oEAAoE;IACpE,iEAAiE,CAAC;AAEpD,qBAAQ,GAAG;IACzB,iDAAiD;IACjD,yDAAyD;IACzD,2DAA2D;CAC5D,CAAC;AAEc,kBAAK,GAAG;IACtB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QACrB,WAAW,EACT,iFAAiF;YACjF,kDAAkD;QACpD,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,KAAK;KAChB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QACrB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,KAAK;KAChB,CAAC;CACH,CAAC;eAzBiB,YAAY","sourcesContent":["import { isJsonRpcFailure } from '@metamask/utils';\nimport { Command, Flags } from '@oclif/core';\n\nimport { sendCommand } from '../../daemon/daemon-client.js';\nimport { getDaemonPaths } from '../../daemon/paths.js';\nimport { promptPassword } from '../../daemon/prompts.js';\nimport {\n  emptyToUndefined,\n  makeDaemonConnectionError,\n} from '../../daemon/utils.js';\n\nexport default class WalletUnlock extends Command {\n  static override description =\n    'Unlock the wallet (submits the password to KeyringController). ' +\n    'Use this after `mm daemon start` was run without `--password`, or ' +\n    'after the keyring was locked via `KeyringController:setLocked`.';\n\n  static override examples = [\n    '<%= config.bin %> wallet unlock --password <pw>',\n    'MM_WALLET_PASSWORD=<pw> <%= config.bin %> wallet unlock',\n    '<%= config.bin %> wallet unlock   # prompts interactively',\n  ];\n\n  static override flags = {\n    password: Flags.string({\n      description:\n        'Wallet password (testing only — use MM_WALLET_PASSWORD env var in production). ' +\n        'When omitted, the command prompts interactively.',\n      env: 'MM_WALLET_PASSWORD',\n      required: false,\n    }),\n    timeout: Flags.integer({\n      char: 't',\n      description: 'Response timeout in milliseconds',\n      required: false,\n    }),\n  };\n\n  public async run(): Promise<void> {\n    const { flags } = await this.parse(WalletUnlock);\n    const { timeout: timeoutMs } = flags;\n\n    // `emptyToUndefined` collapses `--password ''` and `MM_WALLET_PASSWORD=''`\n    // to undefined so the prompt fires instead of sending an empty string.\n    const flagPassword = emptyToUndefined(flags.password);\n    let password: string;\n    try {\n      password = flagPassword ?? (await promptPassword());\n    } catch (error) {\n      // Only swallow ExitPromptError (@inquirer/core's Ctrl+C signal); any\n      // other rejection (import failure, internal prompt crash) should surface.\n      if (error instanceof Error && error.name === 'ExitPromptError') {\n        return;\n      }\n      throw error;\n    }\n\n    const { socketPath } = getDaemonPaths(this.config.dataDir);\n\n    let response;\n    try {\n      response = await sendCommand({\n        socketPath,\n        method: 'call',\n        params: ['KeyringController:submitPassword', password],\n        ...(timeoutMs === undefined ? {} : { timeoutMs }),\n      });\n    } catch (error) {\n      this.error(makeDaemonConnectionError(error));\n    }\n\n    if (isJsonRpcFailure(response)) {\n      const { code, message, data } = response.error;\n      // `isJsonRpcFailure` already validates that `data` is JSON, so\n      // `JSON.stringify` cannot throw here.\n      const dataSuffix =\n        data === undefined || data === null\n          ? ''\n          : ` data=${JSON.stringify(data)}`;\n      this.error(\n        `Failed to unlock: ${message} (code ${String(code)})${dataSuffix}`,\n      );\n    }\n\n    this.log('Wallet unlocked.');\n  }\n}\n"]}
+{"version":3,"file":"unlock.mjs","sourceRoot":"","sources":["../../../src/commands/wallet/unlock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,wBAAwB;AACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB;AAE7C,OAAO,EAAE,WAAW,EAAE,uCAAmC;AACzD,OAAO,EAAE,cAAc,EAAE,+BAA2B;AACpD,OAAO,EAAE,cAAc,EAAE,iCAA6B;AACtD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EAC1B,+BAA2B;AAE5B,MAAqB,YAAa,SAAQ,OAAO;IA2BxC,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAErC,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,0EAA0E;YAC1E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,WAAW,CAAC;gBAC3B,UAAU;gBACV,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,CAAC,kCAAkC,EAAE,QAAQ,CAAC;gBACtD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;YAC/C,+DAA+D;YAC/D,sCAAsC;YACtC,MAAM,UAAU,GACd,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CACR,qBAAqB,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/B,CAAC;;AAzEe,wBAAW,GACzB,iEAAiE;IACjE,oEAAoE;IACpE,iEAAiE,CAAC;AAEpD,qBAAQ,GAAG;IACzB,iDAAiD;IACjD,yDAAyD;IACzD,2DAA2D;CAC5D,CAAC;AAEc,kBAAK,GAAG;IACtB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QACrB,WAAW,EACT,iFAAiF;YACjF,kDAAkD;QACpD,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,KAAK;KAChB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QACrB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,KAAK;KAChB,CAAC;CACH,CAAC;eAzBiB,YAAY","sourcesContent":["import { isJsonRpcFailure } from '@metamask/utils';\nimport { Command, Flags } from '@oclif/core';\n\nimport { sendCommand } from '../../daemon/daemon-client';\nimport { getDaemonPaths } from '../../daemon/paths';\nimport { promptPassword } from '../../daemon/prompts';\nimport {\n  emptyToUndefined,\n  makeDaemonConnectionError,\n} from '../../daemon/utils';\n\nexport default class WalletUnlock extends Command {\n  static override description =\n    'Unlock the wallet (submits the password to KeyringController). ' +\n    'Use this after `mm daemon start` was run without `--password`, or ' +\n    'after the keyring was locked via `KeyringController:setLocked`.';\n\n  static override examples = [\n    '<%= config.bin %> wallet unlock --password <pw>',\n    'MM_WALLET_PASSWORD=<pw> <%= config.bin %> wallet unlock',\n    '<%= config.bin %> wallet unlock   # prompts interactively',\n  ];\n\n  static override flags = {\n    password: Flags.string({\n      description:\n        'Wallet password (testing only — use MM_WALLET_PASSWORD env var in production). ' +\n        'When omitted, the command prompts interactively.',\n      env: 'MM_WALLET_PASSWORD',\n      required: false,\n    }),\n    timeout: Flags.integer({\n      char: 't',\n      description: 'Response timeout in milliseconds',\n      required: false,\n    }),\n  };\n\n  public async run(): Promise<void> {\n    const { flags } = await this.parse(WalletUnlock);\n    const { timeout: timeoutMs } = flags;\n\n    // `emptyToUndefined` collapses `--password ''` and `MM_WALLET_PASSWORD=''`\n    // to undefined so the prompt fires instead of sending an empty string.\n    const flagPassword = emptyToUndefined(flags.password);\n    let password: string;\n    try {\n      password = flagPassword ?? (await promptPassword());\n    } catch (error) {\n      // Only swallow ExitPromptError (@inquirer/core's Ctrl+C signal); any\n      // other rejection (import failure, internal prompt crash) should surface.\n      if (error instanceof Error && error.name === 'ExitPromptError') {\n        return;\n      }\n      throw error;\n    }\n\n    const { socketPath } = getDaemonPaths(this.config.dataDir);\n\n    let response;\n    try {\n      response = await sendCommand({\n        socketPath,\n        method: 'call',\n        params: ['KeyringController:submitPassword', password],\n        ...(timeoutMs === undefined ? {} : { timeoutMs }),\n      });\n    } catch (error) {\n      this.error(makeDaemonConnectionError(error));\n    }\n\n    if (isJsonRpcFailure(response)) {\n      const { code, message, data } = response.error;\n      // `isJsonRpcFailure` already validates that `data` is JSON, so\n      // `JSON.stringify` cannot throw here.\n      const dataSuffix =\n        data === undefined || data === null\n          ? ''\n          : ` data=${JSON.stringify(data)}`;\n      this.error(\n        `Failed to unlock: ${message} (code ${String(code)})${dataSuffix}`,\n      );\n    }\n\n    this.log('Wallet unlocked.');\n  }\n}\n"]}

package/dist/daemon/daemon-client.cjs

@@ -4,8 +4,8 @@ exports.pingDaemon = exports.sendCommand = void 0;
 const utils_1 = require("@metamask/utils");
 const node_crypto_1 = require("node:crypto");
 const node_net_1 = require("node:net");
-const socket_line_js_1 = require("./socket-line.cjs");
-const utils_js_1 = require("./utils.cjs");
+const socket_line_1 = require("./socket-line.cjs");
+const utils_2 = require("./utils.cjs");
 const DEFAULT_TIMEOUT_MS = 30000;
 async function connectSocket(socketPath) {
     return new Promise((resolve, reject) => {
@@ -27,12 +27,8 @@ async function connectSocket(socketPath) {
  *
  * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC
  * response line, then closes the connection. Retries once after a short delay
- * only on `ECONNREFUSED` — the connection was never established, so the daemon
- * provably never received the request and re-sending is safe. Does not retry
- * on `ECONNRESET`, which can drop after the daemon has already received and
- * acted on the request: blindly re-sending could execute a non-idempotent
- * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller
- * instead. Verifies that the response `id` matches the outgoing request `id`.
+ * on transient connection errors (ECONNREFUSED, ECONNRESET). Verifies that the
+ * response `id` matches the outgoing request `id`.
  *
  * @param options - Command options.
  * @param options.socketPath - The Unix socket path.
@@ -53,8 +49,8 @@ async function sendCommand({ socketPath, method, params, timeoutMs, }) {
     const attempt = async () => {
         const socket = await connectSocket(socketPath);
         try {
-            await (0, socket_line_js_1.writeLine)(socket, JSON.stringify(request));
-            const responseLine = await (0, socket_line_js_1.readLine)(socket, effectiveTimeout);
+            await (0, socket_line_1.writeLine)(socket, JSON.stringify(request));
+            const responseLine = await (0, socket_line_1.readLine)(socket, effectiveTimeout);
             const parsed = JSON.parse(responseLine);
             (0, utils_1.assertIsJsonRpcResponse)(parsed);
             if (parsed.id !== id) {
@@ -70,13 +66,8 @@ async function sendCommand({ socketPath, method, params, timeoutMs, }) {
         return await attempt();
     }
     catch (error) {
-        // Only retry on ECONNREFUSED: the connection was never established, so the
-        // daemon provably never received the request and re-sending is safe.
-        // ECONNRESET can drop *after* the daemon received and began (or finished)
-        // processing the request, so blindly re-sending a non-idempotent request
-        // (e.g. a transaction broadcast) could execute it twice. Surface it to the
-        // caller instead of retrying.
-        if (!(0, utils_js_1.isErrorWithCode)(error, 'ECONNREFUSED')) {
+        if (!(0, utils_2.isErrorWithCode)(error, 'ECONNREFUSED') &&
+            !(0, utils_2.isErrorWithCode)(error, 'ECONNRESET')) {
             throw error;
         }
         await new Promise((resolve) => setTimeout(resolve, 100));
@@ -102,11 +93,11 @@ function toError(error) {
  * @returns A {@link PingUnreachableReason} label.
  */
 function classifyUnreachable(error) {
-    if ((0, utils_js_1.isErrorWithCode)(error, 'ECONNREFUSED') ||
-        (0, utils_js_1.isErrorWithCode)(error, 'ECONNRESET')) {
+    if ((0, utils_2.isErrorWithCode)(error, 'ECONNREFUSED') ||
+        (0, utils_2.isErrorWithCode)(error, 'ECONNRESET')) {
         return 'refused';
     }
-    if ((0, utils_js_1.isErrorWithCode)(error, 'EACCES') || (0, utils_js_1.isErrorWithCode)(error, 'EPERM')) {
+    if ((0, utils_2.isErrorWithCode)(error, 'EACCES') || (0, utils_2.isErrorWithCode)(error, 'EPERM')) {
         return 'permission';
     }
     if (error instanceof Error && error.message === 'Socket read timed out') {
@@ -135,7 +126,7 @@ async function pingDaemon(socketPath) {
         return { status: 'responsive' };
     }
     catch (error) {
-        if ((0, utils_js_1.isErrorWithCode)(error, 'ENOENT')) {
+        if ((0, utils_2.isErrorWithCode)(error, 'ENOENT')) {
             return { status: 'absent' };
         }
         return {

package/dist/daemon/daemon-client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-client.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":";;;AACA,2CAA0D;AAC1D,6CAAyC;AACzC,uCAA4C;AAG5C,sDAAuD;AACvD,0CAA6C;AAE7C,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAgBlC,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAA,2BAAgB,EAAC,UAAU,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,wEAAwE;YACxE,wCAAwC;YACxC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACU;IACnB,MAAM,EAAE,GAAG,IAAA,wBAAU,GAAE,CAAC;IACxB,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IAEF,MAAM,gBAAgB,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAEzD,MAAM,OAAO,GAAG,KAAK,IAA8B,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,IAAA,0BAAS,EAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,IAAA,yBAAQ,EAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,IAAA,+BAAuB,EAAC,MAAM,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CACpG,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,8BAA8B;QAC9B,IAAI,CAAC,IAAA,0BAAe,EAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAjDD,kCAiDC;AAyCD;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IACE,IAAA,0BAAe,EAAC,KAAK,EAAE,cAAc,CAAC;QACtC,IAAA,0BAAe,EAAC,KAAK,EAAE,YAAY,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAA,0BAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAA,0BAAe,EAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC7C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3C,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAC/B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAK,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,IAAA,0BAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;SACtB,CAAC;IACJ,CAAC;AACH,CAAC;AAdD,gCAcC","sourcesContent":["import type { JsonRpcParams, JsonRpcResponse } from '@metamask/utils';\nimport { assertIsJsonRpcResponse } from '@metamask/utils';\nimport { randomUUID } from 'node:crypto';\nimport { createConnection } from 'node:net';\nimport type { Socket } from 'node:net';\n\nimport { readLine, writeLine } from './socket-line.js';\nimport { isErrorWithCode } from './utils.js';\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options for {@link sendCommand}.\n */\ntype SendCommandOptions = {\n  /** The Unix socket path. */\n  socketPath: string;\n  /** The RPC method name. */\n  method: string;\n  /** Optional method parameters (object or positional array). */\n  params?: JsonRpcParams | undefined;\n  /** Response read timeout in milliseconds (default: 30 000). */\n  timeoutMs?: number | undefined;\n};\n\nasync function connectSocket(socketPath: string): Promise<Socket> {\n  return new Promise((resolve, reject) => {\n    const socket = createConnection(socketPath, () => {\n      socket.removeAllListeners('error');\n      resolve(socket);\n    });\n    socket.on('error', (error) => {\n      // A failed connect never reaches the caller, so destroy the socket here\n      // to avoid leaking its file descriptor.\n      socket.destroy();\n      reject(error);\n    });\n  });\n}\n\n/**\n * Send a JSON-RPC request to the daemon over a Unix socket and return the\n * response.\n *\n * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC\n * response line, then closes the connection. Retries once after a short delay\n * only on `ECONNREFUSED` — the connection was never established, so the daemon\n * provably never received the request and re-sending is safe. Does not retry\n * on `ECONNRESET`, which can drop after the daemon has already received and\n * acted on the request: blindly re-sending could execute a non-idempotent\n * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller\n * instead. Verifies that the response `id` matches the outgoing request `id`.\n *\n * @param options - Command options.\n * @param options.socketPath - The Unix socket path.\n * @param options.method - The RPC method name.\n * @param options.params - Optional method parameters.\n * @param options.timeoutMs - Read timeout in milliseconds.\n * @returns The parsed JSON-RPC response.\n */\nexport async function sendCommand({\n  socketPath,\n  method,\n  params,\n  timeoutMs,\n}: SendCommandOptions): Promise<JsonRpcResponse> {\n  const id = randomUUID();\n  const request = {\n    jsonrpc: '2.0',\n    id,\n    method,\n    ...(params === undefined ? {} : { params }),\n  };\n\n  const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  const attempt = async (): Promise<JsonRpcResponse> => {\n    const socket = await connectSocket(socketPath);\n    try {\n      await writeLine(socket, JSON.stringify(request));\n      const responseLine = await readLine(socket, effectiveTimeout);\n      const parsed: unknown = JSON.parse(responseLine);\n      assertIsJsonRpcResponse(parsed);\n      if (parsed.id !== id) {\n        throw new Error(\n          `JSON-RPC response id ${JSON.stringify(parsed.id)} does not match request id ${JSON.stringify(id)}`,\n        );\n      }\n      return parsed;\n    } finally {\n      socket.destroy();\n    }\n  };\n\n  try {\n    return await attempt();\n  } catch (error: unknown) {\n    // Only retry on ECONNREFUSED: the connection was never established, so the\n    // daemon provably never received the request and re-sending is safe.\n    // ECONNRESET can drop *after* the daemon received and began (or finished)\n    // processing the request, so blindly re-sending a non-idempotent request\n    // (e.g. a transaction broadcast) could execute it twice. Surface it to the\n    // caller instead of retrying.\n    if (!isErrorWithCode(error, 'ECONNREFUSED')) {\n      throw error;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 100));\n    return attempt();\n  }\n}\n\n/**\n * Why an unreachable daemon cannot be queried.\n *\n * - `'refused'`: the connection could not be completed — `ECONNREFUSED`\n *   (retried once) or `ECONNRESET` (a mid-request drop, not retried). Typical\n *   of a daemon that has crashed or is mid-restart.\n * - `'timeout'`: the daemon accepted the connection but did not respond within\n *   the read timeout — most likely wedged on a long-running operation.\n * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).\n *   The daemon almost certainly belongs to another user.\n * - `'protocol'`: the daemon responded but the response did not parse as a\n *   valid JSON-RPC response, or the response id did not match.\n * - `'other'`: anything else.\n */\nexport type PingUnreachableReason =\n  | 'refused'\n  | 'timeout'\n  | 'permission'\n  | 'protocol'\n  | 'other';\n\n/**\n * Outcome of a daemon health check.\n *\n * - `'responsive'`: the daemon answered a `getStatus` RPC.\n * - `'absent'`: the socket connect attempt failed with `ENOENT`, i.e. no\n *   socket file exists at the path. No daemon present.\n * - `'unreachable'`: any other non-success outcome. The daemon may still be\n *   alive but is not responding. Callers should not silently take over the\n *   slot or assume the daemon is dead. The `reason` field categorises the\n *   failure so callers can distinguish a wedged sibling daemon from a\n *   foreign-user daemon from a transient crash. User-initiated stop / purge\n *   flows may still escalate to signals against the recorded PID.\n */\nexport type PingResult =\n  | { status: 'responsive' }\n  | { status: 'absent' }\n  | { status: 'unreachable'; reason: PingUnreachableReason; error: Error };\n\n/**\n * Normalize an unknown throw into a real Error instance so that downstream\n * consumers (which read `.message`) cannot crash on string/object throws.\n *\n * @param error - The caught value.\n * @returns An Error mirroring the caught value.\n */\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\n/**\n * Categorise an unreachable error by Node errno / message shape so callers can\n * make decisions per failure mode rather than parsing message strings.\n *\n * @param error - The caught value.\n * @returns A {@link PingUnreachableReason} label.\n */\nfunction classifyUnreachable(error: unknown): PingUnreachableReason {\n  if (\n    isErrorWithCode(error, 'ECONNREFUSED') ||\n    isErrorWithCode(error, 'ECONNRESET')\n  ) {\n    return 'refused';\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return 'permission';\n  }\n  if (error instanceof Error && error.message === 'Socket read timed out') {\n    return 'timeout';\n  }\n  if (\n    error instanceof Error &&\n    (error.message.includes('JSON-RPC response id') ||\n      /Expected .* JSON-RPC/u.test(error.message) ||\n      error.name === 'SyntaxError')\n  ) {\n    return 'protocol';\n  }\n  return 'other';\n}\n\n/**\n * Check whether the daemon is running by sending a lightweight `getStatus`\n * RPC call. Distinguishes \"no daemon present\" (socket file missing) from\n * \"daemon present but unreachable\" (socket file exists but the daemon is\n * wedged, mid-shutdown, or owned by a different user).\n *\n * @param socketPath - The Unix socket path.\n * @returns A {@link PingResult} describing the daemon's reachability.\n */\nexport async function pingDaemon(socketPath: string): Promise<PingResult> {\n  try {\n    await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3_000 });\n    return { status: 'responsive' };\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return { status: 'absent' };\n    }\n    return {\n      status: 'unreachable',\n      reason: classifyUnreachable(error),\n      error: toError(error),\n    };\n  }\n}\n"]}
+{"version":3,"file":"daemon-client.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":";;;AACA,2CAA0D;AAC1D,6CAAyC;AACzC,uCAA4C;AAG5C,mDAAoD;AACpD,uCAA0C;AAE1C,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAgBlC,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAA,2BAAgB,EAAC,UAAU,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,wEAAwE;YACxE,wCAAwC;YACxC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACU;IACnB,MAAM,EAAE,GAAG,IAAA,wBAAU,GAAE,CAAC;IACxB,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IAEF,MAAM,gBAAgB,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAEzD,MAAM,OAAO,GAAG,KAAK,IAA8B,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,IAAA,uBAAS,EAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,IAAA,sBAAQ,EAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,IAAA,+BAAuB,EAAC,MAAM,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CACpG,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IACE,CAAC,IAAA,uBAAe,EAAC,KAAK,EAAE,cAAc,CAAC;YACvC,CAAC,IAAA,uBAAe,EAAC,KAAK,EAAE,YAAY,CAAC,EACrC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AA9CD,kCA8CC;AAwCD;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IACE,IAAA,uBAAe,EAAC,KAAK,EAAE,cAAc,CAAC;QACtC,IAAA,uBAAe,EAAC,KAAK,EAAE,YAAY,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAA,uBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAA,uBAAe,EAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC7C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3C,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAC/B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAK,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,IAAA,uBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;SACtB,CAAC;IACJ,CAAC;AACH,CAAC;AAdD,gCAcC","sourcesContent":["import type { JsonRpcParams, JsonRpcResponse } from '@metamask/utils';\nimport { assertIsJsonRpcResponse } from '@metamask/utils';\nimport { randomUUID } from 'node:crypto';\nimport { createConnection } from 'node:net';\nimport type { Socket } from 'node:net';\n\nimport { readLine, writeLine } from './socket-line';\nimport { isErrorWithCode } from './utils';\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options for {@link sendCommand}.\n */\ntype SendCommandOptions = {\n  /** The Unix socket path. */\n  socketPath: string;\n  /** The RPC method name. */\n  method: string;\n  /** Optional method parameters (object or positional array). */\n  params?: JsonRpcParams | undefined;\n  /** Response read timeout in milliseconds (default: 30 000). */\n  timeoutMs?: number | undefined;\n};\n\nasync function connectSocket(socketPath: string): Promise<Socket> {\n  return new Promise((resolve, reject) => {\n    const socket = createConnection(socketPath, () => {\n      socket.removeAllListeners('error');\n      resolve(socket);\n    });\n    socket.on('error', (error) => {\n      // A failed connect never reaches the caller, so destroy the socket here\n      // to avoid leaking its file descriptor.\n      socket.destroy();\n      reject(error);\n    });\n  });\n}\n\n/**\n * Send a JSON-RPC request to the daemon over a Unix socket and return the\n * response.\n *\n * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC\n * response line, then closes the connection. Retries once after a short delay\n * on transient connection errors (ECONNREFUSED, ECONNRESET). Verifies that the\n * response `id` matches the outgoing request `id`.\n *\n * @param options - Command options.\n * @param options.socketPath - The Unix socket path.\n * @param options.method - The RPC method name.\n * @param options.params - Optional method parameters.\n * @param options.timeoutMs - Read timeout in milliseconds.\n * @returns The parsed JSON-RPC response.\n */\nexport async function sendCommand({\n  socketPath,\n  method,\n  params,\n  timeoutMs,\n}: SendCommandOptions): Promise<JsonRpcResponse> {\n  const id = randomUUID();\n  const request = {\n    jsonrpc: '2.0',\n    id,\n    method,\n    ...(params === undefined ? {} : { params }),\n  };\n\n  const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  const attempt = async (): Promise<JsonRpcResponse> => {\n    const socket = await connectSocket(socketPath);\n    try {\n      await writeLine(socket, JSON.stringify(request));\n      const responseLine = await readLine(socket, effectiveTimeout);\n      const parsed: unknown = JSON.parse(responseLine);\n      assertIsJsonRpcResponse(parsed);\n      if (parsed.id !== id) {\n        throw new Error(\n          `JSON-RPC response id ${JSON.stringify(parsed.id)} does not match request id ${JSON.stringify(id)}`,\n        );\n      }\n      return parsed;\n    } finally {\n      socket.destroy();\n    }\n  };\n\n  try {\n    return await attempt();\n  } catch (error: unknown) {\n    if (\n      !isErrorWithCode(error, 'ECONNREFUSED') &&\n      !isErrorWithCode(error, 'ECONNRESET')\n    ) {\n      throw error;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 100));\n    return attempt();\n  }\n}\n\n/**\n * Why an unreachable daemon cannot be queried.\n *\n * - `'refused'`: connection refused after retry (`ECONNREFUSED` / `ECONNRESET`).\n *   Typical of a daemon that has crashed or is mid-restart.\n * - `'timeout'`: the daemon accepted the connection but did not respond within\n *   the read timeout — most likely wedged on a long-running operation.\n * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).\n *   The daemon almost certainly belongs to another user.\n * - `'protocol'`: the daemon responded but the response did not parse as a\n *   valid JSON-RPC response, or the response id did not match.\n * - `'other'`: anything else.\n */\nexport type PingUnreachableReason =\n  | 'refused'\n  | 'timeout'\n  | 'permission'\n  | 'protocol'\n  | 'other';\n\n/**\n * Outcome of a daemon health check.\n *\n * - `'responsive'`: the daemon answered a `getStatus` RPC.\n * - `'absent'`: the socket connect attempt failed with `ENOENT`, i.e. no\n *   socket file exists at the path. No daemon present.\n * - `'unreachable'`: any other non-success outcome. The daemon may still be\n *   alive but is not responding. Callers should not silently take over the\n *   slot or assume the daemon is dead. The `reason` field categorises the\n *   failure so callers can distinguish a wedged sibling daemon from a\n *   foreign-user daemon from a transient crash. User-initiated stop / purge\n *   flows may still escalate to signals against the recorded PID.\n */\nexport type PingResult =\n  | { status: 'responsive' }\n  | { status: 'absent' }\n  | { status: 'unreachable'; reason: PingUnreachableReason; error: Error };\n\n/**\n * Normalize an unknown throw into a real Error instance so that downstream\n * consumers (which read `.message`) cannot crash on string/object throws.\n *\n * @param error - The caught value.\n * @returns An Error mirroring the caught value.\n */\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\n/**\n * Categorise an unreachable error by Node errno / message shape so callers can\n * make decisions per failure mode rather than parsing message strings.\n *\n * @param error - The caught value.\n * @returns A {@link PingUnreachableReason} label.\n */\nfunction classifyUnreachable(error: unknown): PingUnreachableReason {\n  if (\n    isErrorWithCode(error, 'ECONNREFUSED') ||\n    isErrorWithCode(error, 'ECONNRESET')\n  ) {\n    return 'refused';\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return 'permission';\n  }\n  if (error instanceof Error && error.message === 'Socket read timed out') {\n    return 'timeout';\n  }\n  if (\n    error instanceof Error &&\n    (error.message.includes('JSON-RPC response id') ||\n      /Expected .* JSON-RPC/u.test(error.message) ||\n      error.name === 'SyntaxError')\n  ) {\n    return 'protocol';\n  }\n  return 'other';\n}\n\n/**\n * Check whether the daemon is running by sending a lightweight `getStatus`\n * RPC call. Distinguishes \"no daemon present\" (socket file missing) from\n * \"daemon present but unreachable\" (socket file exists but the daemon is\n * wedged, mid-shutdown, or owned by a different user).\n *\n * @param socketPath - The Unix socket path.\n * @returns A {@link PingResult} describing the daemon's reachability.\n */\nexport async function pingDaemon(socketPath: string): Promise<PingResult> {\n  try {\n    await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3_000 });\n    return { status: 'responsive' };\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return { status: 'absent' };\n    }\n    return {\n      status: 'unreachable',\n      reason: classifyUnreachable(error),\n      error: toError(error),\n    };\n  }\n}\n"]}

package/dist/daemon/daemon-client.d.cts

@@ -18,12 +18,8 @@ type SendCommandOptions = {
  *
  * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC
  * response line, then closes the connection. Retries once after a short delay
- * only on `ECONNREFUSED` — the connection was never established, so the daemon
- * provably never received the request and re-sending is safe. Does not retry
- * on `ECONNRESET`, which can drop after the daemon has already received and
- * acted on the request: blindly re-sending could execute a non-idempotent
- * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller
- * instead. Verifies that the response `id` matches the outgoing request `id`.
+ * on transient connection errors (ECONNREFUSED, ECONNRESET). Verifies that the
+ * response `id` matches the outgoing request `id`.
  *
  * @param options - Command options.
  * @param options.socketPath - The Unix socket path.
@@ -36,9 +32,8 @@ export declare function sendCommand({ socketPath, method, params, timeoutMs, }:
 /**
  * Why an unreachable daemon cannot be queried.
  *
- * - `'refused'`: the connection could not be completed — `ECONNREFUSED`
- *   (retried once) or `ECONNRESET` (a mid-request drop, not retried). Typical
- *   of a daemon that has crashed or is mid-restart.
+ * - `'refused'`: connection refused after retry (`ECONNREFUSED` / `ECONNRESET`).
+ *   Typical of a daemon that has crashed or is mid-restart.
  * - `'timeout'`: the daemon accepted the connection but did not respond within
  *   the read timeout — most likely wedged on a long-running operation.
  * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).

package/dist/daemon/daemon-client.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-client.d.cts","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB;AAWtE;;GAEG;AACH,KAAK,kBAAkB,GAAG;IACxB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CA4C/C;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AA4C3E;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAcxE"}
+{"version":3,"file":"daemon-client.d.cts","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB;AAWtE;;GAEG;AACH,KAAK,kBAAkB,GAAG;IACxB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAiBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyC/C;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AA4C3E;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAcxE"}

package/dist/daemon/daemon-client.d.mts

@@ -18,12 +18,8 @@ type SendCommandOptions = {
  *
  * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC
  * response line, then closes the connection. Retries once after a short delay
- * only on `ECONNREFUSED` — the connection was never established, so the daemon
- * provably never received the request and re-sending is safe. Does not retry
- * on `ECONNRESET`, which can drop after the daemon has already received and
- * acted on the request: blindly re-sending could execute a non-idempotent
- * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller
- * instead. Verifies that the response `id` matches the outgoing request `id`.
+ * on transient connection errors (ECONNREFUSED, ECONNRESET). Verifies that the
+ * response `id` matches the outgoing request `id`.
  *
  * @param options - Command options.
  * @param options.socketPath - The Unix socket path.
@@ -36,9 +32,8 @@ export declare function sendCommand({ socketPath, method, params, timeoutMs, }:
 /**
  * Why an unreachable daemon cannot be queried.
  *
- * - `'refused'`: the connection could not be completed — `ECONNREFUSED`
- *   (retried once) or `ECONNRESET` (a mid-request drop, not retried). Typical
- *   of a daemon that has crashed or is mid-restart.
+ * - `'refused'`: connection refused after retry (`ECONNREFUSED` / `ECONNRESET`).
+ *   Typical of a daemon that has crashed or is mid-restart.
  * - `'timeout'`: the daemon accepted the connection but did not respond within
  *   the read timeout — most likely wedged on a long-running operation.
  * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).

package/dist/daemon/daemon-client.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-client.d.mts","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB;AAWtE;;GAEG;AACH,KAAK,kBAAkB,GAAG;IACxB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CA4C/C;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AA4C3E;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAcxE"}
+{"version":3,"file":"daemon-client.d.mts","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB;AAWtE;;GAEG;AACH,KAAK,kBAAkB,GAAG;IACxB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAiBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyC/C;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AA4C3E;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAcxE"}

package/dist/daemon/daemon-client.mjs

@@ -24,12 +24,8 @@ async function connectSocket(socketPath) {
  *
  * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC
  * response line, then closes the connection. Retries once after a short delay
- * only on `ECONNREFUSED` — the connection was never established, so the daemon
- * provably never received the request and re-sending is safe. Does not retry
- * on `ECONNRESET`, which can drop after the daemon has already received and
- * acted on the request: blindly re-sending could execute a non-idempotent
- * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller
- * instead. Verifies that the response `id` matches the outgoing request `id`.
+ * on transient connection errors (ECONNREFUSED, ECONNRESET). Verifies that the
+ * response `id` matches the outgoing request `id`.
  *
  * @param options - Command options.
  * @param options.socketPath - The Unix socket path.
@@ -67,13 +63,8 @@ export async function sendCommand({ socketPath, method, params, timeoutMs, }) {
         return await attempt();
     }
     catch (error) {
-        // Only retry on ECONNREFUSED: the connection was never established, so the
-        // daemon provably never received the request and re-sending is safe.
-        // ECONNRESET can drop *after* the daemon received and began (or finished)
-        // processing the request, so blindly re-sending a non-idempotent request
-        // (e.g. a transaction broadcast) could execute it twice. Surface it to the
-        // caller instead of retrying.
-        if (!isErrorWithCode(error, 'ECONNREFUSED')) {
+        if (!isErrorWithCode(error, 'ECONNREFUSED') &&
+            !isErrorWithCode(error, 'ECONNRESET')) {
             throw error;
         }
         await new Promise((resolve) => setTimeout(resolve, 100));

package/dist/daemon/daemon-client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-client.mjs","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB;AAC1D,OAAO,EAAE,UAAU,EAAE,oBAAoB;AACzC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB;AAG5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,0BAAyB;AACvD,OAAO,EAAE,eAAe,EAAE,oBAAmB;AAE7C,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAgBlC,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,wEAAwE;YACxE,wCAAwC;YACxC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACU;IACnB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IAEF,MAAM,gBAAgB,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAEzD,MAAM,OAAO,GAAG,KAAK,IAA8B,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CACpG,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,8BAA8B;QAC9B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAyCD;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IACE,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC;QACtC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC7C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3C,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAC/B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAK,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;SACtB,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type { JsonRpcParams, JsonRpcResponse } from '@metamask/utils';\nimport { assertIsJsonRpcResponse } from '@metamask/utils';\nimport { randomUUID } from 'node:crypto';\nimport { createConnection } from 'node:net';\nimport type { Socket } from 'node:net';\n\nimport { readLine, writeLine } from './socket-line.js';\nimport { isErrorWithCode } from './utils.js';\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options for {@link sendCommand}.\n */\ntype SendCommandOptions = {\n  /** The Unix socket path. */\n  socketPath: string;\n  /** The RPC method name. */\n  method: string;\n  /** Optional method parameters (object or positional array). */\n  params?: JsonRpcParams | undefined;\n  /** Response read timeout in milliseconds (default: 30 000). */\n  timeoutMs?: number | undefined;\n};\n\nasync function connectSocket(socketPath: string): Promise<Socket> {\n  return new Promise((resolve, reject) => {\n    const socket = createConnection(socketPath, () => {\n      socket.removeAllListeners('error');\n      resolve(socket);\n    });\n    socket.on('error', (error) => {\n      // A failed connect never reaches the caller, so destroy the socket here\n      // to avoid leaking its file descriptor.\n      socket.destroy();\n      reject(error);\n    });\n  });\n}\n\n/**\n * Send a JSON-RPC request to the daemon over a Unix socket and return the\n * response.\n *\n * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC\n * response line, then closes the connection. Retries once after a short delay\n * only on `ECONNREFUSED` — the connection was never established, so the daemon\n * provably never received the request and re-sending is safe. Does not retry\n * on `ECONNRESET`, which can drop after the daemon has already received and\n * acted on the request: blindly re-sending could execute a non-idempotent\n * action (e.g. a transaction broadcast) twice, so it is surfaced to the caller\n * instead. Verifies that the response `id` matches the outgoing request `id`.\n *\n * @param options - Command options.\n * @param options.socketPath - The Unix socket path.\n * @param options.method - The RPC method name.\n * @param options.params - Optional method parameters.\n * @param options.timeoutMs - Read timeout in milliseconds.\n * @returns The parsed JSON-RPC response.\n */\nexport async function sendCommand({\n  socketPath,\n  method,\n  params,\n  timeoutMs,\n}: SendCommandOptions): Promise<JsonRpcResponse> {\n  const id = randomUUID();\n  const request = {\n    jsonrpc: '2.0',\n    id,\n    method,\n    ...(params === undefined ? {} : { params }),\n  };\n\n  const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  const attempt = async (): Promise<JsonRpcResponse> => {\n    const socket = await connectSocket(socketPath);\n    try {\n      await writeLine(socket, JSON.stringify(request));\n      const responseLine = await readLine(socket, effectiveTimeout);\n      const parsed: unknown = JSON.parse(responseLine);\n      assertIsJsonRpcResponse(parsed);\n      if (parsed.id !== id) {\n        throw new Error(\n          `JSON-RPC response id ${JSON.stringify(parsed.id)} does not match request id ${JSON.stringify(id)}`,\n        );\n      }\n      return parsed;\n    } finally {\n      socket.destroy();\n    }\n  };\n\n  try {\n    return await attempt();\n  } catch (error: unknown) {\n    // Only retry on ECONNREFUSED: the connection was never established, so the\n    // daemon provably never received the request and re-sending is safe.\n    // ECONNRESET can drop *after* the daemon received and began (or finished)\n    // processing the request, so blindly re-sending a non-idempotent request\n    // (e.g. a transaction broadcast) could execute it twice. Surface it to the\n    // caller instead of retrying.\n    if (!isErrorWithCode(error, 'ECONNREFUSED')) {\n      throw error;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 100));\n    return attempt();\n  }\n}\n\n/**\n * Why an unreachable daemon cannot be queried.\n *\n * - `'refused'`: the connection could not be completed — `ECONNREFUSED`\n *   (retried once) or `ECONNRESET` (a mid-request drop, not retried). Typical\n *   of a daemon that has crashed or is mid-restart.\n * - `'timeout'`: the daemon accepted the connection but did not respond within\n *   the read timeout — most likely wedged on a long-running operation.\n * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).\n *   The daemon almost certainly belongs to another user.\n * - `'protocol'`: the daemon responded but the response did not parse as a\n *   valid JSON-RPC response, or the response id did not match.\n * - `'other'`: anything else.\n */\nexport type PingUnreachableReason =\n  | 'refused'\n  | 'timeout'\n  | 'permission'\n  | 'protocol'\n  | 'other';\n\n/**\n * Outcome of a daemon health check.\n *\n * - `'responsive'`: the daemon answered a `getStatus` RPC.\n * - `'absent'`: the socket connect attempt failed with `ENOENT`, i.e. no\n *   socket file exists at the path. No daemon present.\n * - `'unreachable'`: any other non-success outcome. The daemon may still be\n *   alive but is not responding. Callers should not silently take over the\n *   slot or assume the daemon is dead. The `reason` field categorises the\n *   failure so callers can distinguish a wedged sibling daemon from a\n *   foreign-user daemon from a transient crash. User-initiated stop / purge\n *   flows may still escalate to signals against the recorded PID.\n */\nexport type PingResult =\n  | { status: 'responsive' }\n  | { status: 'absent' }\n  | { status: 'unreachable'; reason: PingUnreachableReason; error: Error };\n\n/**\n * Normalize an unknown throw into a real Error instance so that downstream\n * consumers (which read `.message`) cannot crash on string/object throws.\n *\n * @param error - The caught value.\n * @returns An Error mirroring the caught value.\n */\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\n/**\n * Categorise an unreachable error by Node errno / message shape so callers can\n * make decisions per failure mode rather than parsing message strings.\n *\n * @param error - The caught value.\n * @returns A {@link PingUnreachableReason} label.\n */\nfunction classifyUnreachable(error: unknown): PingUnreachableReason {\n  if (\n    isErrorWithCode(error, 'ECONNREFUSED') ||\n    isErrorWithCode(error, 'ECONNRESET')\n  ) {\n    return 'refused';\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return 'permission';\n  }\n  if (error instanceof Error && error.message === 'Socket read timed out') {\n    return 'timeout';\n  }\n  if (\n    error instanceof Error &&\n    (error.message.includes('JSON-RPC response id') ||\n      /Expected .* JSON-RPC/u.test(error.message) ||\n      error.name === 'SyntaxError')\n  ) {\n    return 'protocol';\n  }\n  return 'other';\n}\n\n/**\n * Check whether the daemon is running by sending a lightweight `getStatus`\n * RPC call. Distinguishes \"no daemon present\" (socket file missing) from\n * \"daemon present but unreachable\" (socket file exists but the daemon is\n * wedged, mid-shutdown, or owned by a different user).\n *\n * @param socketPath - The Unix socket path.\n * @returns A {@link PingResult} describing the daemon's reachability.\n */\nexport async function pingDaemon(socketPath: string): Promise<PingResult> {\n  try {\n    await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3_000 });\n    return { status: 'responsive' };\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return { status: 'absent' };\n    }\n    return {\n      status: 'unreachable',\n      reason: classifyUnreachable(error),\n      error: toError(error),\n    };\n  }\n}\n"]}
+{"version":3,"file":"daemon-client.mjs","sourceRoot":"","sources":["../../src/daemon/daemon-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB;AAC1D,OAAO,EAAE,UAAU,EAAE,oBAAoB;AACzC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB;AAG5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,0BAAsB;AACpD,OAAO,EAAE,eAAe,EAAE,oBAAgB;AAE1C,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAgBlC,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,wEAAwE;YACxE,wCAAwC;YACxC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACU;IACnB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IAEF,MAAM,gBAAgB,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAEzD,MAAM,OAAO,GAAG,KAAK,IAA8B,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CACpG,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IACE,CAAC,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC;YACvC,CAAC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EACrC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAwCD;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IACE,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC;QACtC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,YAAY,KAAK;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC7C,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3C,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAC/B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAK,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;SACtB,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type { JsonRpcParams, JsonRpcResponse } from '@metamask/utils';\nimport { assertIsJsonRpcResponse } from '@metamask/utils';\nimport { randomUUID } from 'node:crypto';\nimport { createConnection } from 'node:net';\nimport type { Socket } from 'node:net';\n\nimport { readLine, writeLine } from './socket-line';\nimport { isErrorWithCode } from './utils';\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\n/**\n * Options for {@link sendCommand}.\n */\ntype SendCommandOptions = {\n  /** The Unix socket path. */\n  socketPath: string;\n  /** The RPC method name. */\n  method: string;\n  /** Optional method parameters (object or positional array). */\n  params?: JsonRpcParams | undefined;\n  /** Response read timeout in milliseconds (default: 30 000). */\n  timeoutMs?: number | undefined;\n};\n\nasync function connectSocket(socketPath: string): Promise<Socket> {\n  return new Promise((resolve, reject) => {\n    const socket = createConnection(socketPath, () => {\n      socket.removeAllListeners('error');\n      resolve(socket);\n    });\n    socket.on('error', (error) => {\n      // A failed connect never reaches the caller, so destroy the socket here\n      // to avoid leaking its file descriptor.\n      socket.destroy();\n      reject(error);\n    });\n  });\n}\n\n/**\n * Send a JSON-RPC request to the daemon over a Unix socket and return the\n * response.\n *\n * Opens a connection, writes one JSON-RPC request line, reads one JSON-RPC\n * response line, then closes the connection. Retries once after a short delay\n * on transient connection errors (ECONNREFUSED, ECONNRESET). Verifies that the\n * response `id` matches the outgoing request `id`.\n *\n * @param options - Command options.\n * @param options.socketPath - The Unix socket path.\n * @param options.method - The RPC method name.\n * @param options.params - Optional method parameters.\n * @param options.timeoutMs - Read timeout in milliseconds.\n * @returns The parsed JSON-RPC response.\n */\nexport async function sendCommand({\n  socketPath,\n  method,\n  params,\n  timeoutMs,\n}: SendCommandOptions): Promise<JsonRpcResponse> {\n  const id = randomUUID();\n  const request = {\n    jsonrpc: '2.0',\n    id,\n    method,\n    ...(params === undefined ? {} : { params }),\n  };\n\n  const effectiveTimeout = timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  const attempt = async (): Promise<JsonRpcResponse> => {\n    const socket = await connectSocket(socketPath);\n    try {\n      await writeLine(socket, JSON.stringify(request));\n      const responseLine = await readLine(socket, effectiveTimeout);\n      const parsed: unknown = JSON.parse(responseLine);\n      assertIsJsonRpcResponse(parsed);\n      if (parsed.id !== id) {\n        throw new Error(\n          `JSON-RPC response id ${JSON.stringify(parsed.id)} does not match request id ${JSON.stringify(id)}`,\n        );\n      }\n      return parsed;\n    } finally {\n      socket.destroy();\n    }\n  };\n\n  try {\n    return await attempt();\n  } catch (error: unknown) {\n    if (\n      !isErrorWithCode(error, 'ECONNREFUSED') &&\n      !isErrorWithCode(error, 'ECONNRESET')\n    ) {\n      throw error;\n    }\n    await new Promise((resolve) => setTimeout(resolve, 100));\n    return attempt();\n  }\n}\n\n/**\n * Why an unreachable daemon cannot be queried.\n *\n * - `'refused'`: connection refused after retry (`ECONNREFUSED` / `ECONNRESET`).\n *   Typical of a daemon that has crashed or is mid-restart.\n * - `'timeout'`: the daemon accepted the connection but did not respond within\n *   the read timeout — most likely wedged on a long-running operation.\n * - `'permission'`: the socket exists but cannot be opened (`EACCES` / `EPERM`).\n *   The daemon almost certainly belongs to another user.\n * - `'protocol'`: the daemon responded but the response did not parse as a\n *   valid JSON-RPC response, or the response id did not match.\n * - `'other'`: anything else.\n */\nexport type PingUnreachableReason =\n  | 'refused'\n  | 'timeout'\n  | 'permission'\n  | 'protocol'\n  | 'other';\n\n/**\n * Outcome of a daemon health check.\n *\n * - `'responsive'`: the daemon answered a `getStatus` RPC.\n * - `'absent'`: the socket connect attempt failed with `ENOENT`, i.e. no\n *   socket file exists at the path. No daemon present.\n * - `'unreachable'`: any other non-success outcome. The daemon may still be\n *   alive but is not responding. Callers should not silently take over the\n *   slot or assume the daemon is dead. The `reason` field categorises the\n *   failure so callers can distinguish a wedged sibling daemon from a\n *   foreign-user daemon from a transient crash. User-initiated stop / purge\n *   flows may still escalate to signals against the recorded PID.\n */\nexport type PingResult =\n  | { status: 'responsive' }\n  | { status: 'absent' }\n  | { status: 'unreachable'; reason: PingUnreachableReason; error: Error };\n\n/**\n * Normalize an unknown throw into a real Error instance so that downstream\n * consumers (which read `.message`) cannot crash on string/object throws.\n *\n * @param error - The caught value.\n * @returns An Error mirroring the caught value.\n */\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\n/**\n * Categorise an unreachable error by Node errno / message shape so callers can\n * make decisions per failure mode rather than parsing message strings.\n *\n * @param error - The caught value.\n * @returns A {@link PingUnreachableReason} label.\n */\nfunction classifyUnreachable(error: unknown): PingUnreachableReason {\n  if (\n    isErrorWithCode(error, 'ECONNREFUSED') ||\n    isErrorWithCode(error, 'ECONNRESET')\n  ) {\n    return 'refused';\n  }\n  if (isErrorWithCode(error, 'EACCES') || isErrorWithCode(error, 'EPERM')) {\n    return 'permission';\n  }\n  if (error instanceof Error && error.message === 'Socket read timed out') {\n    return 'timeout';\n  }\n  if (\n    error instanceof Error &&\n    (error.message.includes('JSON-RPC response id') ||\n      /Expected .* JSON-RPC/u.test(error.message) ||\n      error.name === 'SyntaxError')\n  ) {\n    return 'protocol';\n  }\n  return 'other';\n}\n\n/**\n * Check whether the daemon is running by sending a lightweight `getStatus`\n * RPC call. Distinguishes \"no daemon present\" (socket file missing) from\n * \"daemon present but unreachable\" (socket file exists but the daemon is\n * wedged, mid-shutdown, or owned by a different user).\n *\n * @param socketPath - The Unix socket path.\n * @returns A {@link PingResult} describing the daemon's reachability.\n */\nexport async function pingDaemon(socketPath: string): Promise<PingResult> {\n  try {\n    await sendCommand({ socketPath, method: 'getStatus', timeoutMs: 3_000 });\n    return { status: 'responsive' };\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return { status: 'absent' };\n    }\n    return {\n      status: 'unreachable',\n      reason: classifyUnreachable(error),\n      error: toError(error),\n    };\n  }\n}\n"]}

package/dist/daemon/daemon-entry.cjs

@@ -2,14 +2,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const superstruct_1 = require("@metamask/superstruct");
 const promises_1 = require("node:fs/promises");
-const daemon_client_js_1 = require("./daemon-client.cjs");
-const data_dir_js_1 = require("./data-dir.cjs");
-const paths_js_1 = require("./paths.cjs");
-const rpc_socket_server_js_1 = require("./rpc-socket-server.cjs");
-const secrets_js_1 = require("./secrets.cjs");
-const types_js_1 = require("./types.cjs");
-const utils_js_1 = require("./utils.cjs");
-const wallet_factory_js_1 = require("./wallet-factory.cjs");
+const daemon_client_1 = require("./daemon-client.cjs");
+const data_dir_1 = require("./data-dir.cjs");
+const paths_1 = require("./paths.cjs");
+const rpc_socket_server_1 = require("./rpc-socket-server.cjs");
+const secrets_1 = require("./secrets.cjs");
+const types_1 = require("./types.cjs");
+const utils_1 = require("./utils.cjs");
+const wallet_factory_1 = require("./wallet-factory.cjs");
 /**
  * Params struct for the `call` RPC method. `params` must be a non-empty array
  * whose first element is the messenger action name; remaining elements are
@@ -55,10 +55,10 @@ async function main() {
     // value) does not leave the raw secrets in the long-lived daemon's env.
     delete process.env.MM_WALLET_PASSWORD;
     delete process.env.MM_WALLET_SRP;
-    const password = passwordRaw ? secrets_js_1.Password.from(passwordRaw) : undefined;
-    const srp = secrets_js_1.Srp.from(srpRaw);
-    await (0, data_dir_js_1.ensureOwnerOnlyDirectory)(dataDir);
-    const { socketPath: defaultSocketPath, pidPath, logPath, dbPath, } = (0, paths_js_1.getDaemonPaths)(dataDir);
+    const password = passwordRaw ? secrets_1.Password.from(passwordRaw) : undefined;
+    const srp = secrets_1.Srp.from(srpRaw);
+    await (0, data_dir_1.ensureOwnerOnlyDirectory)(dataDir);
+    const { socketPath: defaultSocketPath, pidPath, logPath, dbPath, } = (0, paths_1.getDaemonPaths)(dataDir);
     const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;
     const log = makeLogger(logPath);
     log('Starting daemon...');
@@ -87,7 +87,7 @@ async function main() {
     let dispose;
     let handle;
     try {
-        ({ wallet, dispose } = await (0, wallet_factory_js_1.createWallet)({
+        ({ wallet, dispose } = await (0, wallet_factory_1.createWallet)({
             databasePath: dbPath,
             password,
             srp,
@@ -104,23 +104,23 @@ async function main() {
         // once here to the RpcDispatcher shape the `call` handler needs.
         const dispatch = constructedWallet.messenger.call.bind(constructedWallet.messenger);
         const handlers = {
-            getStatus: (0, types_js_1.defineHandler)((0, superstruct_1.literal)(null), async () => ({
+            getStatus: (0, types_1.defineHandler)((0, superstruct_1.literal)(null), async () => ({
                 pid: process.pid,
                 uptime: Math.floor((Date.now() - startTime) / 1000),
             })),
-            call: (0, types_js_1.defineHandler)(callParamsStruct, async (params) => {
+            call: (0, types_1.defineHandler)(callParamsStruct, async (params) => {
                 const [action, ...args] = params;
                 return await dispatch(action, ...args);
             }),
             // Exposes the callable surface for discovery: it grows silently as
             // controllers are wired, so consumers need a way to see it without a
             // hand-kept catalog that would rot.
-            listActions: (0, types_js_1.defineHandler)((0, superstruct_1.literal)(null), async () => constructedWallet.messenger.getRegisteredActionTypes()),
+            listActions: (0, types_1.defineHandler)((0, superstruct_1.literal)(null), async () => constructedWallet.messenger.getRegisteredActionTypes()),
         };
         // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)
         // on bind and never leaves a live server/socket behind if it rejects, so
         // the catch below has nothing of its own to close.
-        handle = await (0, rpc_socket_server_js_1.startRpcSocketServer)({
+        handle = await (0, rpc_socket_server_1.startRpcSocketServer)({
             socketPath,
             handlers,
             onShutdown: async () => shutdown('RPC shutdown'),
@@ -199,8 +199,8 @@ async function main() {
  * @param log - Logger for diagnostic messages.
  */
 async function claimDaemonSlot(pidPath, socketPath, log) {
-    const existingPid = await (0, utils_js_1.readPidFile)(pidPath);
-    const ping = await (0, daemon_client_js_1.pingDaemon)(socketPath);
+    const existingPid = await (0, utils_1.readPidFile)(pidPath);
+    const ping = await (0, daemon_client_1.pingDaemon)(socketPath);
     if (ping.status === 'responsive') {
         const pidPart = existingPid === undefined
             ? '(no PID file present)'
@@ -214,7 +214,7 @@ async function claimDaemonSlot(pidPath, socketPath, log) {
     // - `absent`: a sibling daemon that hasn't yet bound its socket, or one
     //   whose socket was manually removed. In either case, removing its PID
     //   file would orphan it from `daemon stop`.
-    if (existingPid !== undefined && (0, utils_js_1.isProcessAlive)(existingPid)) {
+    if (existingPid !== undefined && (0, utils_1.isProcessAlive)(existingPid)) {
         const detail = ping.status === 'unreachable'
             ? `socket at ${socketPath} is unresponsive (${ping.error.message})`
             : `no socket at ${socketPath}, but pid is still alive`;
@@ -247,7 +247,7 @@ async function removeOwnedPidFile(pidPath, expectedContents) {
         actual = await (0, promises_1.readFile)(pidPath, 'utf-8');
     }
     catch (error) {
-        if ((0, utils_js_1.isErrorWithCode)(error, 'ENOENT')) {
+        if ((0, utils_1.isErrorWithCode)(error, 'ENOENT')) {
             return;
         }
         throw error;

package/dist/daemon/daemon-entry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-entry.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-entry.ts"],"names":[],"mappings":";;AAAA,uDAAwD;AAGxD,+CAAuE;AAEvE,0DAAgD;AAChD,gDAAyD;AACzD,0CAA4C;AAC5C,kEAA8D;AAE9D,8CAA6C;AAC7C,0CAA2C;AAO3C,0CAA0E;AAC1E,4DAAmD;AAEnD;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAA,oBAAM,EAC7B,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE;IACR,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE7B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,uEAAuE;IACvE,mCAAmC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAEjC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,qBAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,gBAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,IAAA,sCAAwB,EAAC,OAAO,CAAC,CAAC;IAExC,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EACP,OAAO,EACP,MAAM,GACP,GAAG,IAAA,yBAAc,EAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,iBAAiB,CAAC;IAE1E,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE1B,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAEhD,MAAM,eAAe,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC;IAEzD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,CAAC;QACH,MAAM,IAAA,oBAAS,EAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,OAAO,EAAE,kCAAkC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;aACvE,CAAC;YACJ,CAAC,CAAC,2EAA2E;gBAC3E,IAAI,KAAK,CACP,kCAAkC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACR,CAAC;IAED,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA0C,CAAC;IAC/C,IAAI,MAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gCAAY,EAAC;YACxC,YAAY,EAAE,MAAM;YACpB,QAAQ;YACR,GAAG;YACH,eAAe;YACf,GAAG;SACJ,CAAC,CAAC,CAAC;QAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACpD,iBAAiB,CAAC,SAAS,CACA,CAAC;QAE9B,MAAM,QAAQ,GAAkB;YAC9B,SAAS,EAAE,IAAA,wBAAa,EACtB,IAAA,qBAAO,EAAC,IAAI,CAAC,EACb,KAAK,IAA+B,EAAE,CAAC,CAAC;gBACtC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;aACpD,CAAC,CACH;YACD,IAAI,EAAE,IAAA,wBAAa,EAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;gBACjC,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAI,IAAe,CAAC,CAAC;YACrD,CAAC,CAAC;YACF,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,WAAW,EAAE,IAAA,wBAAa,EACxB,IAAA,qBAAO,EAAC,IAAI,CAAC,EACb,KAAK,IAAmB,EAAE,CACxB,iBAAiB,CAAC,SAAS,CAAC,wBAAwB,EAAE,CACzD;SACF,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,GAAG,MAAM,IAAA,2CAAoB,EAAC;YAClC,UAAU;YACV,QAAQ;YACR,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CACtD,CAAC,OAAgB,EAAE,EAAE;YACnB,GAAG,CAAC,6CAA6C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAO,CAAC;IAE9B,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAE7C,IAAI,eAA0C,CAAC;IAE/C;;;;;OAKG;IACH,KAAK,UAAU,QAAQ,CAAC,MAAc;QACpC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,kBAAkB,MAAM,MAAM,CAAC,CAAC;YACpC,eAAe,GAAG,CAAC,KAAK,IAAmB,EAAE;gBAC3C,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC7B,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,GAAG,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,aAAa,EAAE,CAAC;gBACxB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,GAAG,CAAC,qCAAqC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CAChD,CAAC,OAAgB,EAAE,EAAE;wBACnB,GAAG,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvD,CAAC,CACF;oBACD,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;wBACzD,GAAG,CAAC,iCAAiC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,CAAC,CAAC;iBACH,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,iJAAiJ;QACjJ,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,iJAAiJ;QACjJ,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,UAAkB,EAClB,GAAW;IAEX,MAAM,WAAW,GAAG,MAAM,IAAA,sBAAW,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,IAAA,6BAAU,EAAC,UAAU,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ,WAAW,GAAG,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,iDAAiD;IACjD,wEAAwE;IACxE,qCAAqC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,6CAA6C;IAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,IAAA,yBAAc,EAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,aAAa;YAC3B,CAAC,CAAC,aAAa,UAAU,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;YACnE,CAAC,CAAC,gBAAgB,UAAU,0BAA0B,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,MAAM,MAAM,IAAI;YAC7D,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,4BAA4B,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5B,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAwB;IAExB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,IAAA,0BAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,OAAe,EAAQ,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC;QAC1D,IAAA,qBAAU,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { define, literal } from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport type { Wallet } from '@metamask/wallet';\nimport { appendFile, readFile, rm, writeFile } from 'node:fs/promises';\n\nimport { pingDaemon } from './daemon-client.js';\nimport { ensureOwnerOnlyDirectory } from './data-dir.js';\nimport { getDaemonPaths } from './paths.js';\nimport { startRpcSocketServer } from './rpc-socket-server.js';\nimport type { RpcSocketServerHandle } from './rpc-socket-server.js';\nimport { Password, Srp } from './secrets.js';\nimport { defineHandler } from './types.js';\nimport type {\n  DaemonStatusInfo,\n  Logger,\n  RpcDispatcher,\n  RpcHandlerMap,\n} from './types.js';\nimport { isErrorWithCode, isProcessAlive, readPidFile } from './utils.js';\nimport { createWallet } from './wallet-factory.js';\n\n/**\n * Params struct for the `call` RPC method. `params` must be a non-empty array\n * whose first element is the messenger action name; remaining elements are\n * positional action arguments forwarded as-is to `messenger.call`.\n */\nconst callParamsStruct = define<[string, ...unknown[]]>(\n  'CallParams',\n  (value) => {\n    if (!Array.isArray(value)) {\n      return 'Expected an array';\n    }\n    if (value.length === 0) {\n      return 'Expected a non-empty array';\n    }\n    if (typeof value[0] !== 'string') {\n      return 'Expected the first element to be a string action name';\n    }\n    return true;\n  },\n);\n\nconst startTime = Date.now();\n\nmain().catch((error: unknown) => {\n  process.stderr.write(`Daemon fatal: ${String(error)}\\n`);\n  process.exitCode = 1;\n});\n\nasync function main(): Promise<void> {\n  const dataDir = process.env.MM_DAEMON_DATA_DIR;\n  if (!dataDir) {\n    throw new Error('MM_DAEMON_DATA_DIR environment variable is required');\n  }\n\n  const infuraProjectId = process.env.INFURA_PROJECT_ID;\n  if (!infuraProjectId) {\n    throw new Error('INFURA_PROJECT_ID environment variable is required');\n  }\n\n  // Password is optional: when absent, the daemon starts without unlocking\n  // the keyring (e.g. when the user prefers to call `mm wallet unlock`\n  // interactively rather than embed the password in their environment).\n  // First-run startup still requires a password; wallet-factory enforces\n  // that and surfaces a clear error.\n  const passwordRaw = process.env.MM_WALLET_PASSWORD;\n\n  const srpRaw = process.env.MM_WALLET_SRP;\n  if (!srpRaw) {\n    throw new Error('MM_WALLET_SRP environment variable is required');\n  }\n\n  // Scrub before validation so a throw from Password.from / Srp.from (bad\n  // value) does not leave the raw secrets in the long-lived daemon's env.\n  delete process.env.MM_WALLET_PASSWORD;\n  delete process.env.MM_WALLET_SRP;\n\n  const password = passwordRaw ? Password.from(passwordRaw) : undefined;\n  const srp = Srp.from(srpRaw);\n\n  await ensureOwnerOnlyDirectory(dataDir);\n\n  const {\n    socketPath: defaultSocketPath,\n    pidPath,\n    logPath,\n    dbPath,\n  } = getDaemonPaths(dataDir);\n  const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;\n\n  const log = makeLogger(logPath);\n  log('Starting daemon...');\n\n  // Pre-flight: refuse to take over if a responsive daemon already owns this\n  // socket. If the existing PID file is stale (or the socket is dead), clean\n  // it up so the exclusive PID-file write below has a chance to succeed.\n  await claimDaemonSlot(pidPath, socketPath, log);\n\n  const pidFileContents = `${process.pid}\\n${startTime}\\n`;\n\n  // Claim the slot atomically BEFORE opening the SQLite database or\n  // constructing the Wallet. Two concurrent `daemon start` invocations can\n  // both pass `claimDaemonSlot` (the gap between its preflight and the slot\n  // write is racy); without this ordering, both would open `wallet.db` and\n  // both would run first-run SRP import before one loses the wx race.\n  try {\n    await writeFile(pidPath, pidFileContents, { flag: 'wx' });\n  } catch (error) {\n    throw error instanceof Error\n      ? Object.assign(error, {\n          message: `Failed to claim daemon slot at ${pidPath}: ${error.message}`,\n        })\n      : /* istanbul ignore next -- node:fs/promises always rejects with an Error */\n        new Error(\n          `Failed to claim daemon slot at ${pidPath}: ${String(error)}`,\n        );\n  }\n\n  let wallet: Wallet | undefined;\n  let dispose: (() => Promise<void>) | undefined;\n  let handle: RpcSocketServerHandle | undefined;\n\n  try {\n    ({ wallet, dispose } = await createWallet({\n      databasePath: dbPath,\n      password,\n      srp,\n      infuraProjectId,\n      log,\n    }));\n\n    const constructedWallet = wallet;\n    // Arbitrary messenger dispatch is intentional: the CLI exposes the full\n    // messenger surface over a Unix socket inside the per-user oclif data\n    // directory. The dataDir is chmodded to 0o700 above and the socket to\n    // 0o600 by the RPC server on bind, so only the owning user can open them,\n    // but there is no in-process auth check beyond that filesystem-permission\n    // barrier. The messenger is strongly typed by action name; we narrow it\n    // once here to the RpcDispatcher shape the `call` handler needs.\n    const dispatch = constructedWallet.messenger.call.bind(\n      constructedWallet.messenger,\n    ) as unknown as RpcDispatcher;\n\n    const handlers: RpcHandlerMap = {\n      getStatus: defineHandler(\n        literal(null),\n        async (): Promise<DaemonStatusInfo> => ({\n          pid: process.pid,\n          uptime: Math.floor((Date.now() - startTime) / 1000),\n        }),\n      ),\n      call: defineHandler(callParamsStruct, async (params) => {\n        const [action, ...args] = params;\n        return await dispatch(action, ...(args as Json[]));\n      }),\n      // Exposes the callable surface for discovery: it grows silently as\n      // controllers are wired, so consumers need a way to see it without a\n      // hand-kept catalog that would rot.\n      listActions: defineHandler(\n        literal(null),\n        async (): Promise<Json> =>\n          constructedWallet.messenger.getRegisteredActionTypes(),\n      ),\n    };\n\n    // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)\n    // on bind and never leaves a live server/socket behind if it rejects, so\n    // the catch below has nothing of its own to close.\n    handle = await startRpcSocketServer({\n      socketPath,\n      handlers,\n      onShutdown: async () => shutdown('RPC shutdown'),\n      log,\n    });\n  } catch (error) {\n    // `dispose` is undefined only when `createWallet` itself threw — it has\n    // already torn down its own store in that case.\n    if (dispose) {\n      await dispose();\n    }\n    // Only remove the PID file if it's still ours (we may have lost the race\n    // and the file now belongs to another daemon).\n    await removeOwnedPidFile(pidPath, pidFileContents).catch(\n      (rmError: unknown) => {\n        log(`Failed to remove PID file during cleanup: ${String(rmError)}`);\n      },\n    );\n    throw error;\n  }\n\n  // Stable non-undefined refs for the shutdown closures (TS won't narrow the\n  // outer `let`s across closure escape).\n  const activeHandle = handle;\n  const activeDispose = dispose;\n\n  log(`Daemon started. Socket: ${socketPath}`);\n\n  let shutdownPromise: Promise<void> | undefined;\n\n  /**\n   * Shut down the daemon idempotently. Concurrent calls coalesce.\n   *\n   * @param reason - A label describing why shutdown was triggered.\n   * @returns A promise that resolves when shutdown completes.\n   */\n  async function shutdown(reason: string): Promise<void> {\n    if (shutdownPromise === undefined) {\n      log(`Shutting down (${reason})...`);\n      shutdownPromise = (async (): Promise<void> => {\n        try {\n          await activeHandle.close();\n        } catch (closeError) {\n          log(`handle.close() failed: ${String(closeError)}`);\n        }\n        try {\n          await activeDispose();\n        } catch (disposeError) {\n          log(`dispose() failed during shutdown: ${String(disposeError)}`);\n        }\n        await Promise.all([\n          removeOwnedPidFile(pidPath, pidFileContents).catch(\n            (rmError: unknown) => {\n              log(`Failed to remove PID file: ${String(rmError)}`);\n            },\n          ),\n          rm(socketPath, { force: true }).catch((rmError: unknown) => {\n            log(`Failed to remove socket file: ${String(rmError)}`);\n          }),\n        ]);\n      })();\n    }\n    return shutdownPromise;\n  }\n\n  process.on('SIGTERM', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGTERM').catch(() => undefined);\n  });\n  process.on('SIGINT', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGINT').catch(() => undefined);\n  });\n}\n\n/**\n * Refuse to start if a responsive daemon already owns the socket. Otherwise\n * clear any stale PID/socket files so the exclusive PID-file write can\n * proceed.\n *\n * @param pidPath - The PID file path.\n * @param socketPath - The socket path.\n * @param log - Logger for diagnostic messages.\n */\nasync function claimDaemonSlot(\n  pidPath: string,\n  socketPath: string,\n  log: Logger,\n): Promise<void> {\n  const existingPid = await readPidFile(pidPath);\n  const ping = await pingDaemon(socketPath);\n\n  if (ping.status === 'responsive') {\n    const pidPart =\n      existingPid === undefined\n        ? '(no PID file present)'\n        : `(pid ${existingPid})`;\n    throw new Error(`A daemon is already running on ${socketPath} ${pidPart}`);\n  }\n\n  // Refuse to clobber when the recorded PID is still alive, regardless of\n  // whether the socket exists. Possible scenarios:\n  // - `unreachable`: wedged or mid-startup sibling daemon (socket present\n  //   but not responding to JSON-RPC).\n  // - `absent`: a sibling daemon that hasn't yet bound its socket, or one\n  //   whose socket was manually removed. In either case, removing its PID\n  //   file would orphan it from `daemon stop`.\n  if (existingPid !== undefined && isProcessAlive(existingPid)) {\n    const detail =\n      ping.status === 'unreachable'\n        ? `socket at ${socketPath} is unresponsive (${ping.error.message})`\n        : `no socket at ${socketPath}, but pid is still alive`;\n    throw new Error(\n      `A daemon is already running (pid ${existingPid}): ${detail}. ` +\n        `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon.`,\n    );\n  }\n\n  if (ping.status === 'unreachable') {\n    log(`Removing stale socket at ${socketPath} (${ping.error.message}).`);\n  }\n  // Always clear both files before claiming the slot. The PID file may be\n  // corrupt (truncated, partial write from a crashed run); without this, the\n  // exclusive `wx` write below would fail with EEXIST and the daemon could\n  // not start until a human manually deleted the file.\n  await Promise.all([\n    rm(pidPath, { force: true }),\n    rm(socketPath, { force: true }),\n  ]);\n}\n\n/**\n * Remove the PID file only if it still contains our exact contents. Guards\n * against a racing daemon's PID file being removed by this daemon during\n * cleanup.\n *\n * @param pidPath - Path to the PID file.\n * @param expectedContents - The contents we wrote when claiming the slot.\n */\nasync function removeOwnedPidFile(\n  pidPath: string,\n  expectedContents: string,\n): Promise<void> {\n  let actual: string;\n  try {\n    actual = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return;\n    }\n    throw error;\n  }\n  if (actual === expectedContents) {\n    await rm(pidPath, { force: true });\n  }\n}\n\n/**\n * Create a file logger that appends timestamped lines to `logPath`, falling\n * back to stderr if the append fails.\n *\n * @param logPath - The log file path.\n * @returns A logging function.\n */\nfunction makeLogger(logPath: string): Logger {\n  return (message: string): void => {\n    const line = `[${new Date().toISOString()}] ${message}\\n`;\n    appendFile(logPath, line).catch((error: unknown) => {\n      process.stderr.write(`[log write failed: ${String(error)}] ${message}\\n`);\n    });\n  };\n}\n"]}
+{"version":3,"file":"daemon-entry.cjs","sourceRoot":"","sources":["../../src/daemon/daemon-entry.ts"],"names":[],"mappings":";;AAAA,uDAAwD;AAGxD,+CAAuE;AAEvE,uDAA6C;AAC7C,6CAAsD;AACtD,uCAAyC;AACzC,+DAA2D;AAE3D,2CAA0C;AAC1C,uCAAwC;AAOxC,uCAAuE;AACvE,yDAAgD;AAEhD;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAA,oBAAM,EAC7B,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE;IACR,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE7B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,uEAAuE;IACvE,mCAAmC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAEjC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,aAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC;IAExC,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EACP,OAAO,EACP,MAAM,GACP,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,iBAAiB,CAAC;IAE1E,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE1B,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAEhD,MAAM,eAAe,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC;IAEzD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,CAAC;QACH,MAAM,IAAA,oBAAS,EAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,OAAO,EAAE,kCAAkC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;aACvE,CAAC;YACJ,CAAC,CAAC,2EAA2E;gBAC3E,IAAI,KAAK,CACP,kCAAkC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACR,CAAC;IAED,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAA0C,CAAC;IAC/C,IAAI,MAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,6BAAY,EAAC;YACxC,YAAY,EAAE,MAAM;YACpB,QAAQ;YACR,GAAG;YACH,eAAe;YACf,GAAG;SACJ,CAAC,CAAC,CAAC;QAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC;QACjC,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACpD,iBAAiB,CAAC,SAAS,CACA,CAAC;QAE9B,MAAM,QAAQ,GAAkB;YAC9B,SAAS,EAAE,IAAA,qBAAa,EACtB,IAAA,qBAAO,EAAC,IAAI,CAAC,EACb,KAAK,IAA+B,EAAE,CAAC,CAAC;gBACtC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;aACpD,CAAC,CACH;YACD,IAAI,EAAE,IAAA,qBAAa,EAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;gBACjC,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAI,IAAe,CAAC,CAAC;YACrD,CAAC,CAAC;YACF,mEAAmE;YACnE,qEAAqE;YACrE,oCAAoC;YACpC,WAAW,EAAE,IAAA,qBAAa,EACxB,IAAA,qBAAO,EAAC,IAAI,CAAC,EACb,KAAK,IAAmB,EAAE,CACxB,iBAAiB,CAAC,SAAS,CAAC,wBAAwB,EAAE,CACzD;SACF,CAAC;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,GAAG,MAAM,IAAA,wCAAoB,EAAC;YAClC,UAAU;YACV,QAAQ;YACR,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CACtD,CAAC,OAAgB,EAAE,EAAE;YACnB,GAAG,CAAC,6CAA6C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAO,CAAC;IAE9B,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;IAE7C,IAAI,eAA0C,CAAC;IAE/C;;;;;OAKG;IACH,KAAK,UAAU,QAAQ,CAAC,MAAc;QACpC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,kBAAkB,MAAM,MAAM,CAAC,CAAC;YACpC,eAAe,GAAG,CAAC,KAAK,IAAmB,EAAE;gBAC3C,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC7B,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,GAAG,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,aAAa,EAAE,CAAC;gBACxB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,GAAG,CAAC,qCAAqC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,CAChD,CAAC,OAAgB,EAAE,EAAE;wBACnB,GAAG,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACvD,CAAC,CACF;oBACD,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAgB,EAAE,EAAE;wBACzD,GAAG,CAAC,iCAAiC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,CAAC,CAAC;iBACH,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,iJAAiJ;QACjJ,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,iJAAiJ;QACjJ,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,UAAkB,EAClB,GAAW;IAEX,MAAM,WAAW,GAAG,MAAM,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ,WAAW,GAAG,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,iDAAiD;IACjD,wEAAwE;IACxE,qCAAqC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,6CAA6C;IAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,IAAA,sBAAc,EAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,aAAa;YAC3B,CAAC,CAAC,aAAa,UAAU,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;YACnE,CAAC,CAAC,gBAAgB,UAAU,0BAA0B,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,MAAM,MAAM,IAAI;YAC7D,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,4BAA4B,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5B,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,gBAAwB;IAExB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,IAAA,uBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,CAAC,OAAe,EAAQ,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC;QAC1D,IAAA,qBAAU,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { define, literal } from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport type { Wallet } from '@metamask/wallet';\nimport { appendFile, readFile, rm, writeFile } from 'node:fs/promises';\n\nimport { pingDaemon } from './daemon-client';\nimport { ensureOwnerOnlyDirectory } from './data-dir';\nimport { getDaemonPaths } from './paths';\nimport { startRpcSocketServer } from './rpc-socket-server';\nimport type { RpcSocketServerHandle } from './rpc-socket-server';\nimport { Password, Srp } from './secrets';\nimport { defineHandler } from './types';\nimport type {\n  DaemonStatusInfo,\n  Logger,\n  RpcDispatcher,\n  RpcHandlerMap,\n} from './types';\nimport { isErrorWithCode, isProcessAlive, readPidFile } from './utils';\nimport { createWallet } from './wallet-factory';\n\n/**\n * Params struct for the `call` RPC method. `params` must be a non-empty array\n * whose first element is the messenger action name; remaining elements are\n * positional action arguments forwarded as-is to `messenger.call`.\n */\nconst callParamsStruct = define<[string, ...unknown[]]>(\n  'CallParams',\n  (value) => {\n    if (!Array.isArray(value)) {\n      return 'Expected an array';\n    }\n    if (value.length === 0) {\n      return 'Expected a non-empty array';\n    }\n    if (typeof value[0] !== 'string') {\n      return 'Expected the first element to be a string action name';\n    }\n    return true;\n  },\n);\n\nconst startTime = Date.now();\n\nmain().catch((error: unknown) => {\n  process.stderr.write(`Daemon fatal: ${String(error)}\\n`);\n  process.exitCode = 1;\n});\n\nasync function main(): Promise<void> {\n  const dataDir = process.env.MM_DAEMON_DATA_DIR;\n  if (!dataDir) {\n    throw new Error('MM_DAEMON_DATA_DIR environment variable is required');\n  }\n\n  const infuraProjectId = process.env.INFURA_PROJECT_ID;\n  if (!infuraProjectId) {\n    throw new Error('INFURA_PROJECT_ID environment variable is required');\n  }\n\n  // Password is optional: when absent, the daemon starts without unlocking\n  // the keyring (e.g. when the user prefers to call `mm wallet unlock`\n  // interactively rather than embed the password in their environment).\n  // First-run startup still requires a password; wallet-factory enforces\n  // that and surfaces a clear error.\n  const passwordRaw = process.env.MM_WALLET_PASSWORD;\n\n  const srpRaw = process.env.MM_WALLET_SRP;\n  if (!srpRaw) {\n    throw new Error('MM_WALLET_SRP environment variable is required');\n  }\n\n  // Scrub before validation so a throw from Password.from / Srp.from (bad\n  // value) does not leave the raw secrets in the long-lived daemon's env.\n  delete process.env.MM_WALLET_PASSWORD;\n  delete process.env.MM_WALLET_SRP;\n\n  const password = passwordRaw ? Password.from(passwordRaw) : undefined;\n  const srp = Srp.from(srpRaw);\n\n  await ensureOwnerOnlyDirectory(dataDir);\n\n  const {\n    socketPath: defaultSocketPath,\n    pidPath,\n    logPath,\n    dbPath,\n  } = getDaemonPaths(dataDir);\n  const socketPath = process.env.MM_DAEMON_SOCKET_PATH ?? defaultSocketPath;\n\n  const log = makeLogger(logPath);\n  log('Starting daemon...');\n\n  // Pre-flight: refuse to take over if a responsive daemon already owns this\n  // socket. If the existing PID file is stale (or the socket is dead), clean\n  // it up so the exclusive PID-file write below has a chance to succeed.\n  await claimDaemonSlot(pidPath, socketPath, log);\n\n  const pidFileContents = `${process.pid}\\n${startTime}\\n`;\n\n  // Claim the slot atomically BEFORE opening the SQLite database or\n  // constructing the Wallet. Two concurrent `daemon start` invocations can\n  // both pass `claimDaemonSlot` (the gap between its preflight and the slot\n  // write is racy); without this ordering, both would open `wallet.db` and\n  // both would run first-run SRP import before one loses the wx race.\n  try {\n    await writeFile(pidPath, pidFileContents, { flag: 'wx' });\n  } catch (error) {\n    throw error instanceof Error\n      ? Object.assign(error, {\n          message: `Failed to claim daemon slot at ${pidPath}: ${error.message}`,\n        })\n      : /* istanbul ignore next -- node:fs/promises always rejects with an Error */\n        new Error(\n          `Failed to claim daemon slot at ${pidPath}: ${String(error)}`,\n        );\n  }\n\n  let wallet: Wallet | undefined;\n  let dispose: (() => Promise<void>) | undefined;\n  let handle: RpcSocketServerHandle | undefined;\n\n  try {\n    ({ wallet, dispose } = await createWallet({\n      databasePath: dbPath,\n      password,\n      srp,\n      infuraProjectId,\n      log,\n    }));\n\n    const constructedWallet = wallet;\n    // Arbitrary messenger dispatch is intentional: the CLI exposes the full\n    // messenger surface over a Unix socket inside the per-user oclif data\n    // directory. The dataDir is chmodded to 0o700 above and the socket to\n    // 0o600 by the RPC server on bind, so only the owning user can open them,\n    // but there is no in-process auth check beyond that filesystem-permission\n    // barrier. The messenger is strongly typed by action name; we narrow it\n    // once here to the RpcDispatcher shape the `call` handler needs.\n    const dispatch = constructedWallet.messenger.call.bind(\n      constructedWallet.messenger,\n    ) as unknown as RpcDispatcher;\n\n    const handlers: RpcHandlerMap = {\n      getStatus: defineHandler(\n        literal(null),\n        async (): Promise<DaemonStatusInfo> => ({\n          pid: process.pid,\n          uptime: Math.floor((Date.now() - startTime) / 1000),\n        }),\n      ),\n      call: defineHandler(callParamsStruct, async (params) => {\n        const [action, ...args] = params;\n        return await dispatch(action, ...(args as Json[]));\n      }),\n      // Exposes the callable surface for discovery: it grows silently as\n      // controllers are wired, so consumers need a way to see it without a\n      // hand-kept catalog that would rot.\n      listActions: defineHandler(\n        literal(null),\n        async (): Promise<Json> =>\n          constructedWallet.messenger.getRegisteredActionTypes(),\n      ),\n    };\n\n    // `startRpcSocketServer` restricts the socket to the owner (chmod 0o600)\n    // on bind and never leaves a live server/socket behind if it rejects, so\n    // the catch below has nothing of its own to close.\n    handle = await startRpcSocketServer({\n      socketPath,\n      handlers,\n      onShutdown: async () => shutdown('RPC shutdown'),\n      log,\n    });\n  } catch (error) {\n    // `dispose` is undefined only when `createWallet` itself threw — it has\n    // already torn down its own store in that case.\n    if (dispose) {\n      await dispose();\n    }\n    // Only remove the PID file if it's still ours (we may have lost the race\n    // and the file now belongs to another daemon).\n    await removeOwnedPidFile(pidPath, pidFileContents).catch(\n      (rmError: unknown) => {\n        log(`Failed to remove PID file during cleanup: ${String(rmError)}`);\n      },\n    );\n    throw error;\n  }\n\n  // Stable non-undefined refs for the shutdown closures (TS won't narrow the\n  // outer `let`s across closure escape).\n  const activeHandle = handle;\n  const activeDispose = dispose;\n\n  log(`Daemon started. Socket: ${socketPath}`);\n\n  let shutdownPromise: Promise<void> | undefined;\n\n  /**\n   * Shut down the daemon idempotently. Concurrent calls coalesce.\n   *\n   * @param reason - A label describing why shutdown was triggered.\n   * @returns A promise that resolves when shutdown completes.\n   */\n  async function shutdown(reason: string): Promise<void> {\n    if (shutdownPromise === undefined) {\n      log(`Shutting down (${reason})...`);\n      shutdownPromise = (async (): Promise<void> => {\n        try {\n          await activeHandle.close();\n        } catch (closeError) {\n          log(`handle.close() failed: ${String(closeError)}`);\n        }\n        try {\n          await activeDispose();\n        } catch (disposeError) {\n          log(`dispose() failed during shutdown: ${String(disposeError)}`);\n        }\n        await Promise.all([\n          removeOwnedPidFile(pidPath, pidFileContents).catch(\n            (rmError: unknown) => {\n              log(`Failed to remove PID file: ${String(rmError)}`);\n            },\n          ),\n          rm(socketPath, { force: true }).catch((rmError: unknown) => {\n            log(`Failed to remove socket file: ${String(rmError)}`);\n          }),\n        ]);\n      })();\n    }\n    return shutdownPromise;\n  }\n\n  process.on('SIGTERM', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGTERM').catch(() => undefined);\n  });\n  process.on('SIGINT', () => {\n    /* istanbul ignore next -- `shutdown` logs each step internally; the catch only guards against an unhandled rejection from the signal handler. */\n    shutdown('SIGINT').catch(() => undefined);\n  });\n}\n\n/**\n * Refuse to start if a responsive daemon already owns the socket. Otherwise\n * clear any stale PID/socket files so the exclusive PID-file write can\n * proceed.\n *\n * @param pidPath - The PID file path.\n * @param socketPath - The socket path.\n * @param log - Logger for diagnostic messages.\n */\nasync function claimDaemonSlot(\n  pidPath: string,\n  socketPath: string,\n  log: Logger,\n): Promise<void> {\n  const existingPid = await readPidFile(pidPath);\n  const ping = await pingDaemon(socketPath);\n\n  if (ping.status === 'responsive') {\n    const pidPart =\n      existingPid === undefined\n        ? '(no PID file present)'\n        : `(pid ${existingPid})`;\n    throw new Error(`A daemon is already running on ${socketPath} ${pidPart}`);\n  }\n\n  // Refuse to clobber when the recorded PID is still alive, regardless of\n  // whether the socket exists. Possible scenarios:\n  // - `unreachable`: wedged or mid-startup sibling daemon (socket present\n  //   but not responding to JSON-RPC).\n  // - `absent`: a sibling daemon that hasn't yet bound its socket, or one\n  //   whose socket was manually removed. In either case, removing its PID\n  //   file would orphan it from `daemon stop`.\n  if (existingPid !== undefined && isProcessAlive(existingPid)) {\n    const detail =\n      ping.status === 'unreachable'\n        ? `socket at ${socketPath} is unresponsive (${ping.error.message})`\n        : `no socket at ${socketPath}, but pid is still alive`;\n    throw new Error(\n      `A daemon is already running (pid ${existingPid}): ${detail}. ` +\n        `Run \\`mm daemon stop\\` (or \\`mm daemon purge\\`) before starting a new daemon.`,\n    );\n  }\n\n  if (ping.status === 'unreachable') {\n    log(`Removing stale socket at ${socketPath} (${ping.error.message}).`);\n  }\n  // Always clear both files before claiming the slot. The PID file may be\n  // corrupt (truncated, partial write from a crashed run); without this, the\n  // exclusive `wx` write below would fail with EEXIST and the daemon could\n  // not start until a human manually deleted the file.\n  await Promise.all([\n    rm(pidPath, { force: true }),\n    rm(socketPath, { force: true }),\n  ]);\n}\n\n/**\n * Remove the PID file only if it still contains our exact contents. Guards\n * against a racing daemon's PID file being removed by this daemon during\n * cleanup.\n *\n * @param pidPath - Path to the PID file.\n * @param expectedContents - The contents we wrote when claiming the slot.\n */\nasync function removeOwnedPidFile(\n  pidPath: string,\n  expectedContents: string,\n): Promise<void> {\n  let actual: string;\n  try {\n    actual = await readFile(pidPath, 'utf-8');\n  } catch (error: unknown) {\n    if (isErrorWithCode(error, 'ENOENT')) {\n      return;\n    }\n    throw error;\n  }\n  if (actual === expectedContents) {\n    await rm(pidPath, { force: true });\n  }\n}\n\n/**\n * Create a file logger that appends timestamped lines to `logPath`, falling\n * back to stderr if the append fails.\n *\n * @param logPath - The log file path.\n * @returns A logging function.\n */\nfunction makeLogger(logPath: string): Logger {\n  return (message: string): void => {\n    const line = `[${new Date().toISOString()}] ${message}\\n`;\n    appendFile(logPath, line).catch((error: unknown) => {\n      process.stderr.write(`[log write failed: ${String(error)}] ${message}\\n`);\n    });\n  };\n}\n"]}