feat(money): loosen money account api response validation

[ffmcgee725]

Explanation

• Loosen Money Account API response validation in @metamask/money-account-api-data-service by switching all ten superstruct schemas from object() to type().
• Additive backend fields no longer throw MoneyAccountApiResponseValidationError; unknown keys are passed through at runtime and are not part of the exported response types.
• Required fields, field types, and enum values are still validated as before.

Changelog

@metamask/money-account-api-data-service

[Unreleased]

Changed

• Response validation now tolerates unknown fields returned by the Money Account API instead of throwing MoneyAccountApiResponseValidationError, so additive backend changes no longer break clients (#0)
  • Unknown fields are passed through on the returned object but are not part of the exported response types.

Test plan

• yarn workspace @metamask/money-account-api-data-service run test --coverage (100% statements, branches, functions, lines)
• yarn workspace @metamask/money-account-api-data-service run changelog:validate
• yarn oxlint packages/money-account-api-data-service (Node 24+)

---

Note

Low Risk
Forward-compatible validation loosening only; malformed or missing required fields still fail validation as before.

Overview
@metamask/money-account-api-data-service now treats additive Money Account API JSON as valid instead of failing client fetches.

All response superstruct schemas in structs.ts switch from object() to type(), so extra keys no longer trigger MoneyAccountApiResponseValidationError. Unknown properties are returned on the parsed result (not stripped); exported TypeScript response types are unchanged. Required fields, types, and enum values are still enforced.

New integration tests cover positions, interest, history, rate-history, and vault-rate responses with nested unknown fields. The package changelog documents the behavior under [Unreleased] → Changed.

^{Reviewed by Cursor Bugbot for commit 8b2cfeb. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

No dependency changes detected. Learn more about Socket for GitHub.

👍 No dependency changes detected in pull request

[ffmcgee725]

@metamaskbot publish-preview