fix: Wait for unlock before handling manageAccounts requests (#3686)

`getSnapKeyring` fails when the client is locked since we cannot access
the `KeyringController`. As with every other Snaps API, we want to wait
for the client to be unlocked before allowing use of functionality that
accesses the vault.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Adds `getUnlockPromise` to `manageAccounts` and awaits unlock before
routing requests to the snap keyring, with tests updated accordingly.
> 
> - **RPC method `snap_manageAccounts`**:
> - Add `getUnlockPromise` to method hooks and await
`getUnlockPromise(true)` before calling `getSnapKeyring` and routing to
`handleKeyringSnapMessage` in `manageAccounts.ts`.
> - Update `specificationBuilder` and
`manageAccountsBuilder.methodHooks` to include `getUnlockPromise`.
> - **Tests**:
> - Update `manageAccounts.test.ts` to include `getUnlockPromise` in
hooks and mocks; maintain validation and routing assertions.
> - **Misc**:
>   - Slightly adjust coverage threshold for lines in `jest.config.js`.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
ba55813. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: FrederikBolding

packages/snaps-rpc-methods/jest.config.js

@@ -12,7 +12,7 @@ module.exports = deepmerge(baseConfig, {
     global: {
       branches: 95.68,
       functions: 98.75,
-      lines: 98.98,
+      lines: 98.99,
       statements: 98.69,
     },
   },

packages/snaps-rpc-methods/src/restricted/manageAccounts.test.ts

@@ -28,6 +28,7 @@ describe('specification', () => {
   it('builds specification', () => {
     const methodHooks = {
       getSnapKeyring: jest.fn(),
+      getUnlockPromise: jest.fn(),
     };
 
     expect(
@@ -61,6 +62,7 @@ describe('builder', () => {
       manageAccountsBuilder.specificationBuilder({
         methodHooks: {
           getSnapKeyring: jest.fn(),
+          getUnlockPromise: jest.fn(),
         },
       }),
     ).toMatchObject({
@@ -83,9 +85,11 @@ describe('manageAccountsImplementation', () => {
   it('should throw params are not set', async () => {
     const mockKeyring = new SnapKeyringMock();
     const getSnapKeyring = jest.fn().mockResolvedValue(mockKeyring);
+    const getUnlockPromise = jest.fn();
 
     const manageAccounts = manageAccountsImplementation({
       getSnapKeyring,
+      getUnlockPromise,
     });
 
     await expect(
@@ -105,9 +109,11 @@ describe('manageAccountsImplementation', () => {
   it('should throw params accountId is not set', async () => {
     const mockKeyring = new SnapKeyringMock();
     const getSnapKeyring = jest.fn().mockResolvedValue(mockKeyring);
+    const getUnlockPromise = jest.fn();
 
     const manageAccounts = manageAccountsImplementation({
       getSnapKeyring,
+      getUnlockPromise,
     });
 
     await expect(
@@ -127,13 +133,15 @@ describe('manageAccountsImplementation', () => {
   it('should route request to snap keyring', async () => {
     const mockKeyring = new SnapKeyringMock();
     const getSnapKeyring = jest.fn().mockResolvedValue(mockKeyring);
+    const getUnlockPromise = jest.fn();
 
     const createAccountSpy = jest
       .spyOn(mockKeyring, 'handleKeyringSnapMessage')
       .mockResolvedValue(true);
 
     const manageAccounts = manageAccountsImplementation({
       getSnapKeyring,
+      getUnlockPromise,
     });
 
     const requestResponse = await manageAccounts({

packages/snaps-rpc-methods/src/restricted/manageAccounts.ts

@@ -44,6 +44,13 @@ export type ManageAccountsMethodHooks = {
       message: Message,
     ) => Promise<Json>;
   }>;
+
+  /**
+   * Wait for the client to be unlocked.
+   *
+   * @returns A promise that resolves once the client is unlocked.
+   */
+  getUnlockPromise: (shouldShowUnlockRequest: boolean) => Promise<void>;
 };
 
 type ManageAccountsSpecificationBuilderOptions = {
@@ -89,12 +96,14 @@ export const specificationBuilder: PermissionSpecificationBuilder<
  *
  * @param hooks - The RPC method hooks.
  * @param hooks.getSnapKeyring - A function to get the snap keyring.
+ * @param hooks.getUnlockPromise - The function to get the unlock promise.
  * @returns The method implementation which either returns `null` for a
  * successful state update/deletion or returns the decrypted state.
  * @throws If the params are invalid.
  */
 export function manageAccountsImplementation({
   getSnapKeyring,
+  getUnlockPromise,
 }: ManageAccountsMethodHooks) {
   return async function manageAccounts(
     options: RestrictedMethodOptions<ManageAccountsParams>,
@@ -105,6 +114,9 @@ export function manageAccountsImplementation({
     } = options;
 
     assert(params, SnapMessageStruct);
+
+    await getUnlockPromise(true);
+
     const keyring = await getSnapKeyring(origin);
     return await keyring.handleKeyringSnapMessage(origin, params);
   };
@@ -115,5 +127,6 @@ export const manageAccountsBuilder = Object.freeze({
   specificationBuilder,
   methodHooks: {
     getSnapKeyring: true,
+    getUnlockPromise: true,
   },
 } as const);