chore: bump @metamask/mobile-wallet-protocol-core & @metamask/mobile-wallet-protocol-wallet-client to latest versions and absorb breaking changes (MetaMask#27215)

<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

## Summary

- Update the mobile SDKConnect integration to match the latest
`mobile-wallet-protocol` APIs.
- Switch connection setup to `SessionStore.create(...)` and add peer
public key validation support in the mobile `KeyManager`.
- Align the SDKConnect unit tests with the new async session store
factory and key validation behavior.

## Test plan

- [ ] Run `yarn jest app/core/SDKConnectV2/services/connection.test.ts
app/core/SDKConnectV2/services/key-manager.test.ts --runInBand`
- [ ] Verify SDKConnect deeplink connection flow still initializes and
resumes sessions correctly
- [ ] Smoke test trusted and untrusted connection flows if needed

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?
-->

## **Changelog**

<!--
If this PR is not End-User-Facing and should not show up in the
CHANGELOG, you can choose to either:
1. Write `CHANGELOG entry: null`
2. Label with `no-changelog`

If this PR is End-User-Facing, please write a short User-Facing
description in the past tense like:
`CHANGELOG entry: Added a new tab for users to see their NFTs`
`CHANGELOG entry: Fixed a bug that was causing some NFTs to flicker`

(This helps the Release Engineer do their job more quickly and
accurately)
-->

CHANGELOG entry: null

MetaMask Connect not released to public officially yet

## **Related issues**

Fixes:

## **Manual testing steps**

```gherkin
Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]
```

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask Mobile
Coding
Standards](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I've included tests if applicable
- [ ] I've documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I've applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Medium risk due to a breaking dependency upgrade in the Mobile Wallet
Protocol stack and changes to connection/session-store initialization
and peer key validation that could affect SDKConnect session persistence
or handshake failures.
> 
> **Overview**
> Updates SDKConnectV2 to the latest
`@metamask/mobile-wallet-protocol-core`/`wallet-client` versions and
absorbs API breaking changes.
> 
> `Connection.create` now initializes the session store via async
`SessionStore.create(...)` (instead of `new SessionStore(...)`), with
unit tests updated to mock/expect the factory call.
> 
> Adds `KeyManager.validatePeerKey` (using `eciesjs` `PublicKey`
parsing) plus new tests covering acceptance/rejection of peer public
keys.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
9d63dbd. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: adonesky1

app/core/SDKConnectV2/services/connection.test.ts

@@ -23,7 +23,9 @@ jest.mock('@metamask/mobile-wallet-protocol-core', () => ({
   WebSocketTransport: {
     create: jest.fn(),
   },
-  SessionStore: jest.fn(),
+  SessionStore: Object.assign(jest.fn(), {
+    create: jest.fn(),
+  }),
 }));
 jest.mock('../store/kv-store');
 jest.mock('../adapters/rpc-bridge-adapter');
@@ -47,6 +49,9 @@ const MockedWalletClient = WalletClient as jest.MockedClass<
 const MockedWebSocketTransport = WebSocketTransport as jest.Mocked<
   typeof WebSocketTransport
 >;
+const MockedSessionStore = SessionStore as jest.Mocked<typeof SessionStore> & {
+  create: jest.Mock;
+};
 const MockedRPCBridgeAdapter = RPCBridgeAdapter as jest.MockedClass<
   typeof RPCBridgeAdapter
 >;
@@ -139,6 +144,7 @@ describe('Connection', () => {
 
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     (MockedWebSocketTransport.create as jest.Mock).mockResolvedValue({} as any);
+    MockedSessionStore.create.mockResolvedValue({} as SessionStore);
   });
 
   describe('create', () => {
@@ -155,7 +161,7 @@ describe('Connection', () => {
         kvstore: expect.any(KVStore),
         useSharedConnection: true,
       });
-      expect(SessionStore).toHaveBeenCalledWith(expect.any(KVStore));
+      expect(SessionStore.create).toHaveBeenCalledWith(expect.any(KVStore));
       expect(WalletClient).toHaveBeenCalledWith({
         transport: expect.anything(),
         sessionstore: expect.anything(),

app/core/SDKConnectV2/services/connection.ts

@@ -180,7 +180,7 @@ export class Connection {
       kvstore: new KVStore(`mwp/transport/${connInfo.id}`),
       useSharedConnection: true,
     });
-    const sessionstore = new SessionStore(
+    const sessionstore = await SessionStore.create(
       new KVStore(`mwp/session-store/${connInfo.id}`),
     );
     const client = new WalletClient({ transport, sessionstore, keymanager });

app/core/SDKConnectV2/services/key-manager.test.ts

@@ -39,4 +39,16 @@ describe('KeyManager', () => {
     // Verify the round-trip encryption/decryption
     expect(decryptedMessage).toBe(originalMessage);
   });
+
+  it('should accept a valid peer public key', () => {
+    const keyPair = keyManager.generateKeyPair();
+
+    expect(() => keyManager.validatePeerKey(keyPair.publicKey)).not.toThrow();
+  });
+
+  it('should reject an invalid peer public key', () => {
+    const invalidKey = new Uint8Array([1, 2, 3]);
+
+    expect(() => keyManager.validatePeerKey(invalidKey)).toThrow();
+  });
 });

app/core/SDKConnectV2/services/key-manager.ts

@@ -1,5 +1,5 @@
 import { IKeyManager, KeyPair } from '@metamask/mobile-wallet-protocol-core';
-import { PrivateKey, encrypt, decrypt } from 'eciesjs';
+import { PrivateKey, PublicKey, encrypt, decrypt } from 'eciesjs';
 
 export class KeyManager implements IKeyManager {
   generateKeyPair(): KeyPair {
@@ -10,6 +10,10 @@ export class KeyManager implements IKeyManager {
     };
   }
 
+  validatePeerKey(key: Uint8Array): void {
+    PublicKey.fromHex(Buffer.from(key).toString('hex'));
+  }
+
   async encrypt(
     plaintext: string,
     theirPublicKey: Uint8Array,

package.json

@@ -252,8 +252,8 @@
     "@metamask/message-signing-snap": "^1.1.2",
     "@metamask/messenger": "^0.3.0",
     "@metamask/metamask-eth-abis": "3.1.1",
-    "@metamask/mobile-wallet-protocol-core": "^0.3.1",
-    "@metamask/mobile-wallet-protocol-wallet-client": "^0.2.1",
+    "@metamask/mobile-wallet-protocol-core": "^0.4.0",
+    "@metamask/mobile-wallet-protocol-wallet-client": "^0.3.0",
     "@metamask/multichain-account-service": "^7.0.0",
     "@metamask/multichain-api-client": "^0.10.1",
     "@metamask/multichain-api-middleware": "1.2.5",

yarn.lock

@@ -8987,36 +8987,26 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@metamask/mobile-wallet-protocol-core@npm:^0.2.0":
-  version: 0.2.0
-  resolution: "@metamask/mobile-wallet-protocol-core@npm:0.2.0"
-  dependencies:
-    centrifuge: "npm:^5.3.5"
-    eventemitter3: "npm:^5.0.1"
-    uuid: "npm:^11.1.0"
-  checksum: 10/55bbdf85f6231b6f11a0156e0db878ebe33bb9e8aa13445d111853d153a85c0e7e621b05a74d76e58bba6c3c0c3d8961c2dad89393af1b0ddfb2f2b9c7694f07
-  languageName: node
-  linkType: hard
-
-"@metamask/mobile-wallet-protocol-core@npm:^0.3.1":
-  version: 0.3.1
-  resolution: "@metamask/mobile-wallet-protocol-core@npm:0.3.1"
+"@metamask/mobile-wallet-protocol-core@npm:^0.4.0":
+  version: 0.4.0
+  resolution: "@metamask/mobile-wallet-protocol-core@npm:0.4.0"
   dependencies:
+    async-mutex: "npm:^0.5.0"
     centrifuge: "npm:^5.3.5"
     eventemitter3: "npm:^5.0.1"
     uuid: "npm:^11.1.0"
-  checksum: 10/2de5aab19913c31f6cfcd6dd97c8217207a511c20535fc2b44c91fdd4b553f63cb96d12bcfc248a9f1c357ddb1e29dd996752be89aa77a64229c52aba8d34625
+  checksum: 10/f81523ebc0c37ab548891df1a2bb65e41c13cacb6d1034f5ea63e4ef251d2783bc2d2216a3ee7542a87240be612d97dc7c4ab6105c8632818c6c9f5e77463815
   languageName: node
   linkType: hard
 
-"@metamask/mobile-wallet-protocol-wallet-client@npm:^0.2.1":
-  version: 0.2.1
-  resolution: "@metamask/mobile-wallet-protocol-wallet-client@npm:0.2.1"
+"@metamask/mobile-wallet-protocol-wallet-client@npm:^0.3.0":
+  version: 0.3.0
+  resolution: "@metamask/mobile-wallet-protocol-wallet-client@npm:0.3.0"
   dependencies:
-    "@metamask/mobile-wallet-protocol-core": "npm:^0.2.0"
+    "@metamask/mobile-wallet-protocol-core": "npm:^0.4.0"
     "@metamask/utils": "npm:^9.1.0"
     uuid: "npm:^11.1.0"
-  checksum: 10/e3a82e7bf4673940ef433a0b16d8622a3d74cf69aa2c236c47b60f5f6e71d3da99c8ea8845a2635be592fd4ec5805d05a69bb31a2e13a00333c3ec455e18b9da
+  checksum: 10/0d44efb8b066517d61139eef7b047e68d92210c3db4bb9add8f51733d88aaaa2ddff3d766036f8e55361229216188772556a3c1fb46a8bdd1d8fc49a63023adf
   languageName: node
   linkType: hard
 
@@ -35466,8 +35456,8 @@ __metadata:
     "@metamask/messenger": "npm:^0.3.0"
     "@metamask/metamask-eth-abis": "npm:3.1.1"
     "@metamask/mobile-provider": "npm:^3.0.0"
-    "@metamask/mobile-wallet-protocol-core": "npm:^0.3.1"
-    "@metamask/mobile-wallet-protocol-wallet-client": "npm:^0.2.1"
+    "@metamask/mobile-wallet-protocol-core": "npm:^0.4.0"
+    "@metamask/mobile-wallet-protocol-wallet-client": "npm:^0.3.0"
     "@metamask/multichain-account-service": "npm:^7.0.0"
     "@metamask/multichain-api-client": "npm:^0.10.1"
     "@metamask/multichain-api-middleware": "npm:1.2.5"