feat(wallet): Add split persistence backed by better-sqlite3

[rekmarks]

Summary

• Add synchronous, per-property SQLite persistence to the wallet package using better-sqlite3
• Each controller state property with persist: true metadata gets its own row in a kv table (key format: ControllerName.propertyName)
• Writes happen synchronously within the same call stack as controller.update() via stateChanged event subscriptions, eliminating data loss windows
• Defaults to :memory: when no database path is provided

Test plan

• yarn workspace @metamask/wallet exec jest --no-coverage --watchman=false src/persistence/ — 22 unit tests covering KeyValueStore CRUD, loadState grouping, persist filtering, StateDeriver application, patch-based diffing, unsubscribe, and multi-controller scenarios
• yarn workspace @metamask/wallet exec tsc --noEmit — no new type errors
• Integration test with file-backed DB: create Wallet with a file path, perform operations, create second Wallet from same path, verify state restoration

🤖 Generated with Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​better-sqlite3@​7.6.13
	better-sqlite3@​12.9.0
	better-sqlite3@​11.10.0

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• @types/better-sqlite3@7.6.13
• better-sqlite3@12.9.0
• better-sqlite3@11.10.0
• bindings@1.5.0
• bl@4.1.0
• decompress-response@6.0.0
• deep-extend@0.6.0
• detect-libc@2.1.2
• end-of-stream@1.4.5
• expand-template@2.0.3
• file-uri-to-path@1.0.0
• fs-constants@1.0.0
• github-from-package@0.0.0
• mimic-response@3.1.0
• mkdirp-classic@0.5.3
• napi-build-utils@2.0.0
• node-abi@3.89.0
• prebuild-install@7.1.3
• pump@3.0.4
• rc@1.2.8
• simple-concat@1.0.1
• simple-get@4.0.1
• tar-fs@2.1.4
• tunnel-agent@0.6.0
• chownr@1.1.4
• strip-json-comments@2.0.1
• tar-stream@2.2.0
• buffer@5.7.1

View full report

[rekmarks]

@SocketSecurity ignore npm/better-sqlite3@11.10.0

Yes, it has native binaries.

[rekmarks]

@SocketSecurity ignore-all

All alerts are due to better-sqlite3 or its transitives. It is a reputable package that we use elsewhere.