feat(analytics): add sanitized origin to sentinel metadata (MetaMask#25612)

Add sanitized origin to sentinel metadata

<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

## **Description**

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?
-->

## **Changelog**

<!--
If this PR is not End-User-Facing and should not show up in the
CHANGELOG, you can choose to either:
1. Write `CHANGELOG entry: null`
2. Label with `no-changelog`

If this PR is End-User-Facing, please write a short User-Facing
description in the past tense like:
`CHANGELOG entry: Added a new tab for users to see their NFTs`
`CHANGELOG entry: Fixed a bug that was causing some NFTs to flicker`

(This helps the Release Engineer do their job more quickly and
accurately)
-->

CHANGELOG entry: Add sanitized origin to sentinel metadata

## **Related issues**

Fixes:

## **Manual testing steps**

```gherkin
Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]
```

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask Mobile
Coding
Standards](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I've included tests if applicable
- [ ] I've documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I've applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Adds a new `origin` field to smart-transaction/relay metadata and
bumps `@metamask/smart-transactions-controller`, which could affect
downstream ingestion or controller behavior if payload expectations
differ.
> 
> **Overview**
> Adds `sanitizeOrigin` to normalize transaction origins for analytics
(URL origins reduced to hostname; internal origins preserved).
> 
> Smart transaction submission (`smart-publish-hook`) and the EIP-7702
relay publish hook now attach `origin:
sanitizeOrigin(transactionMeta.origin)` alongside existing
`txType`/`client` metadata, with new unit tests covering
URL/internal/empty cases. Also bumps
`@metamask/smart-transactions-controller` to `^22.4.0`.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
7c6d2ef. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: rarquevaux

app/constants/smartTransactions.test.ts

@@ -1,6 +1,9 @@
 import { NETWORKS_CHAIN_ID } from './network';
 import { isProduction } from '../util/environment';
-import { getAllowedSmartTransactionsChainIds } from './smartTransactions';
+import {
+  getAllowedSmartTransactionsChainIds,
+  sanitizeOrigin,
+} from './smartTransactions';
 
 jest.mock('../util/environment', () => ({
   isProduction: jest.fn(() => false), // Initially mock isProduction to return false
@@ -42,4 +45,50 @@ describe('smartTransactions', () => {
       ]);
     });
   });
+
+  describe('sanitizeOrigin', () => {
+    it('extracts hostname from URL with path', () => {
+      expect(sanitizeOrigin('https://uniswap.org/swap?token=0x123')).toBe(
+        'uniswap.org',
+      );
+    });
+
+    it('extracts hostname from URL with subdomain', () => {
+      expect(sanitizeOrigin('https://app.aave.com/#/markets')).toBe(
+        'app.aave.com',
+      );
+    });
+
+    it('extracts hostname from URL with port', () => {
+      expect(sanitizeOrigin('http://localhost:3000/test')).toBe('localhost');
+    });
+
+    it('returns internal origin as-is', () => {
+      expect(sanitizeOrigin('metamask')).toBe('metamask');
+    });
+
+    it('returns MetaMask Mobile origin as-is', () => {
+      expect(sanitizeOrigin('MetaMask Mobile')).toBe('MetaMask Mobile');
+    });
+
+    it('returns RAMPS_SEND origin as-is', () => {
+      expect(sanitizeOrigin('RAMPS_SEND')).toBe('RAMPS_SEND');
+    });
+
+    it('returns WalletConnect origin as-is', () => {
+      expect(sanitizeOrigin('wc::')).toBe('wc::');
+    });
+
+    it('returns SDK origin as-is', () => {
+      expect(sanitizeOrigin('MMSDKREMOTE::abc123')).toBe('MMSDKREMOTE::abc123');
+    });
+
+    it('returns undefined for undefined input', () => {
+      expect(sanitizeOrigin(undefined)).toBeUndefined();
+    });
+
+    it('returns empty string for empty string input', () => {
+      expect(sanitizeOrigin('')).toBeUndefined();
+    });
+  });
 });

app/constants/smartTransactions.ts

@@ -10,6 +10,31 @@ const CLIENT_ID_ANDROID = 'mobileAndroid';
 export const getClientForTransactionMetadata = (): string =>
   Device.isIos() ? CLIENT_ID_IOS : CLIENT_ID_ANDROID;
 
+/**
+ * Sanitizes transaction origin for smart transaction analytics.
+ * - For URL origins (dApps): extracts hostname only
+ * - For internal origins: returns as-is
+ * NOTE: This is temporary and will be deprecated once we have a proper feature tracking system.
+ *
+ * @param origin - The transaction origin to sanitize
+ * @returns The sanitized origin (hostname for URLs, original value otherwise)
+ */
+export const sanitizeOrigin = (origin?: string): string | undefined => {
+  if (!origin) {
+    return undefined;
+  }
+
+  try {
+    // Attempt to parse as URL - will throw for non-URL strings
+    const url = new URL(origin);
+    // If hostname is empty, the input wasn't a real URL (e.g., 'wc::', 'MMSDKREMOTE::')
+    return url.hostname || origin;
+  } catch {
+    // Not a valid URL (internal origins like 'metamask', 'RAMPS_SEND')
+    return origin;
+  }
+};
+
 // TODO: deprecate this and use the feature flags instead
 const ALLOWED_SMART_TRANSACTIONS_CHAIN_IDS_DEVELOPMENT: Hex[] = [
   NETWORKS_CHAIN_ID.MAINNET,

app/util/smart-transactions/smart-publish-hook.ts

@@ -30,7 +30,10 @@ import { addSwapsTransaction } from '../swaps/swaps-transactions';
 import { Hex } from '@metamask/utils';
 import { getTransactionById, isLegacyTransaction } from '../transactions';
 import { ORIGIN_METAMASK } from '@metamask/controller-utils';
-import { getClientForTransactionMetadata } from '../../constants/smartTransactions';
+import {
+  getClientForTransactionMetadata,
+  sanitizeOrigin,
+} from '../../constants/smartTransactions';
 
 type AllowedActions = never;
 
@@ -447,6 +450,7 @@ class SmartTransactionHook {
             signedTx.metadata = {
               txType: transactionMeta.type,
               client: getClientForTransactionMetadata(),
+              origin: sanitizeOrigin(transactionMeta.origin),
             };
           }
           return signedTx;
@@ -459,6 +463,7 @@ class SmartTransactionHook {
           metadata: {
             txType: this.#transactionMeta.type,
             client: getClientForTransactionMetadata(),
+            origin: sanitizeOrigin(this.#transactionMeta.origin),
           },
         },
       ];
@@ -472,6 +477,7 @@ class SmartTransactionHook {
         metadata: {
           txType: this.#transactionMeta.type,
           client: getClientForTransactionMetadata(),
+          origin: sanitizeOrigin(this.#transactionMeta.origin),
         },
       }));
     }

app/util/transactions/hooks/delegation-7702-publish.ts

@@ -40,7 +40,10 @@ import {
 import { NetworkClientId } from '@metamask/network-controller';
 import { toHex } from '@metamask/controller-utils';
 import { isE2ETest, stripSingleLeadingZero } from '../util';
-import { getClientForTransactionMetadata } from '../../../constants/smartTransactions';
+import {
+  getClientForTransactionMetadata,
+  sanitizeOrigin,
+} from '../../../constants/smartTransactions';
 
 // Test chain ID (Sepolia) used in E2E tests to match the delegation package's test contract configuration
 const SEPOLIA_CHAIN_ID = '0xaa36a7';
@@ -197,6 +200,7 @@ export class Delegation7702PublishHook {
       metadata: {
         txType: transactionMeta.type,
         client: getClientForTransactionMetadata(),
+        origin: sanitizeOrigin(transactionMeta.origin),
       },
     };
 

package.json

@@ -285,7 +285,7 @@
     "@metamask/selected-network-controller": "^25.0.0",
     "@metamask/signature-controller": "^35.0.0",
     "@metamask/slip44": "^4.2.0",
-    "@metamask/smart-transactions-controller": "^22.3.0",
+    "@metamask/smart-transactions-controller": "^22.4.0",
     "@metamask/snaps-controllers": "^17.2.1",
     "@metamask/snaps-execution-environments": "^10.4.1",
     "@metamask/snaps-rpc-methods": "^14.2.0",

yarn.lock

@@ -9308,9 +9308,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@metamask/smart-transactions-controller@npm:^22.3.0":
-  version: 22.3.0
-  resolution: "@metamask/smart-transactions-controller@npm:22.3.0"
+"@metamask/smart-transactions-controller@npm:^22.4.0":
+  version: 22.4.0
+  resolution: "@metamask/smart-transactions-controller@npm:22.4.0"
   dependencies:
     "@babel/runtime": "npm:^7.24.1"
     "@ethereumjs/tx": "npm:^5.2.1"
@@ -9344,7 +9344,7 @@ __metadata:
       optional: true
     "@metamask/gas-fee-controller":
       optional: true
-  checksum: 10/a803add4124e964c7eb39aad5f4aac3e49a4da4eb0a52f1c99509b6edd66fdc72821268c697d511d4635d02ca72fdf3ca1eb7d599a483beb030920c4e9832bf0
+  checksum: 10/e1cad73e890c5ce2d6f9422d4ac7bd248ac853d10ecf4d96d5092ff5ae911d18db3a851ca800e492613db44c8b4f8a325543a6fe06c10aab5ae1774c75259455
   languageName: node
   linkType: hard
 
@@ -34756,7 +34756,7 @@ __metadata:
     "@metamask/selected-network-controller": "npm:^25.0.0"
     "@metamask/signature-controller": "npm:^35.0.0"
     "@metamask/slip44": "npm:^4.2.0"
-    "@metamask/smart-transactions-controller": "npm:^22.3.0"
+    "@metamask/smart-transactions-controller": "npm:^22.4.0"
     "@metamask/snaps-controllers": "npm:^17.2.1"
     "@metamask/snaps-execution-environments": "npm:^10.4.1"
     "@metamask/snaps-rpc-methods": "npm:^14.2.0"