feat: Add snaps-sandbox package and integrate into CLI

[Mrtenz]

This adds a new package, @metamask/snaps-sandbox, which is a tool to interact with Snaps through a web app. It's a replacement for the Snaps Simulator, but doesn't simulate any functionality. Instead, it calls MetaMask through the usual JSON-RPC methods.

The sandbox can be used from the Snaps CLI by running mm-snap sandbox.

[Mrtenz]

This source map doesn't exist, and Vite was complaining about it.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​vitest/​coverage-istanbul@​3.0.8 ⏵ 3.1.1				+1
	@​types/​express@​5.0.1
	@​types/​debug@​4.1.7 ⏵ 4.1.12			-2
	agent-base@​7.1.1 ⏵ 7.1.3	+1		+1
	https-proxy-agent@​7.0.4 ⏵ 7.0.6	+1		+1
	react@​19.1.0
	@​emotion/​react@​11.14.0
	pirates@​4.0.6 ⏵ 4.0.7	+1		+2
	@​monaco-editor/​react@​4.7.0
	@​tanstack/​react-query@​5.74.3
	happy-dom@​17.4.4
	react-icons@​5.5.0
	@​testing-library/​jest-dom@​6.6.3
	react-dom@​18.3.1 ⏵ 19.1.0	+1		+1
	@​testing-library/​react@​16.3.0
	@​vitejs/​plugin-react@​4.4.0
	jotai@​2.12.3
	@​chakra-ui/​react@​3.16.0

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• negotiator@1.0.0
• accepts@2.0.0
• content-disposition@1.0.0
• monaco-editor@0.52.2
• happy-dom@17.4.4
• mime-types@3.0.1
• type-is@2.0.1

View full report

[Mrtenz]

@SocketSecurity ignore npm/package-manager-detector@0.1.2

False positive.

@SocketSecurity ignore npm/mz@2.7.0
@SocketSecurity ignore npm/node-eval@2.0.0
@SocketSecurity ignore npm/negotiator@1.0.0
@SocketSecurity ignore npm/accepts@2.0.0
@SocketSecurity ignore npm/content-disposition@1.0.0
@SocketSecurity ignore npm/happy-dom@17.4.4
@SocketSecurity ignore npm/type-is@2.0.1
@SocketSecurity ignore npm/@chakra-ui/cli@3.15.1
@SocketSecurity ignore npm/monaco-editor@0.52.2

These seem fine.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 98.03%. Comparing base (8589b4e) to head (f3b2a66).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3306      +/-   ##
==========================================
+ Coverage   97.80%   98.03%   +0.23%     
==========================================
  Files         364      402      +38     
  Lines        9911    11111    +1200     
  Branches     1616     1754     +138     
==========================================
+ Hits         9693    10893    +1200     
  Misses        218      218              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Mrtenz]

@SocketSecurity ignore mime-types@3.0.1

New author is ok.