Handle initial connections for preinstalled Snaps

packages/snaps-controllers/coverage.json

@@ -1,5 +1,5 @@
 {
-  "branches": 92.46,
+  "branches": 92.5,
   "functions": 96.91,
   "lines": 98.01,
   "statements": 97.7

packages/snaps-controllers/src/snaps/SnapController.test.tsx

@@ -1848,7 +1848,7 @@
   });
 
   // This isn't stable in CI unfortunately
   it.skip('throws if the Snap is terminated while executing', async () => {
     const { manifest, sourceCode, svgIcon } =
       await getMockSnapFilesWithUpdatedChecksum({
         sourceCode: `
@@ -4695,6 +4695,81 @@
       snapController.destroy();
     });
 
+    it('supports preinstalled snaps with initial connections', async () => {
+      const rootMessenger = getControllerMessenger();
+      jest.spyOn(rootMessenger, 'call');
+
+      // The snap should not have permission initially
+      rootMessenger.registerActionHandler(
+        'PermissionController:getPermissions',
+        () => ({}),
+      );
+
+      const initialConnections = {
+        'npm:filsnap': {},
+        'https://snaps.metamask.io': {},
+      };
+
+      const preinstalledSnaps = [
+        {
+          snapId: MOCK_SNAP_ID,
+          manifest: getSnapManifest({
+            initialConnections,
+          }),
+          files: [
+            {
+              path: DEFAULT_SOURCE_PATH,
+              value: stringToBytes(DEFAULT_SNAP_BUNDLE),
+            },
+            {
+              path: DEFAULT_ICON_PATH,
+              value: stringToBytes(DEFAULT_SNAP_ICON),
+            },
+          ],
+        },
+      ];
+
+      const snapControllerOptions = getSnapControllerWithEESOptions({
+        preinstalledSnaps,
+        rootMessenger,
+      });
+      const [snapController] = getSnapControllerWithEES(snapControllerOptions);
+
+      const approvedPermissions = {
+        [WALLET_SNAP_PERMISSION_KEY]: {
+          caveats: [
+            {
+              type: SnapCaveatType.SnapIds,
+              value: {
+                [MOCK_SNAP_ID]: {},
+              },
+            },
+          ],
+        },
+      };
+
+      // After install the snap should have permissions
+      rootMessenger.registerActionHandler(
+        'PermissionController:getPermissions',
+        () => MOCK_SNAP_PERMISSIONS,
+      );
+
+      expect(rootMessenger.call).toHaveBeenCalledWith(
+        'PermissionController:grantPermissions',
+        { approvedPermissions, subject: { origin: 'npm:filsnap' } },
+      );
+
+      expect(rootMessenger.call).toHaveBeenCalledWith(
+        'PermissionController:grantPermissions',
+        {
+          approvedPermissions,
+          subject: { origin: 'https://snaps.metamask.io' },
+        },
+      );
+
+      snapController.destroy();
+    });
+
     it('supports preinstalled snaps when Snap installation is disabled', async () => {
       const rootMessenger = getControllerMessenger();
       jest.spyOn(rootMessenger, 'call');

packages/snaps-controllers/src/snaps/SnapController.ts

@@ -1180,6 +1180,14 @@ export class SnapController extends BaseController<
 
       this.#updatePermissions({ snapId, newPermissions, unusedPermissions });
 
+      if (manifest.initialConnections) {
+        this.#handleInitialConnections(
+          snapId,
+          existingSnap?.initialConnections ?? null,
+          manifest.initialConnections,
+        );
+      }
+
       // Set status
       this.update((state) => {
         state.snaps[snapId].status = SnapStatus.Stopped;