@deeeed/metamask-harness 0.2.0

package/library/recipes/perps-lifecycle.recipe.json

@@ -0,0 +1,194 @@
+{
+  "schema_version": 1,
+  "title": "MetaMask Perps lifecycle smoke",
+  "description": "Reusable Recipe v1 smoke that proves a deterministic Perps prestate, opens a small ETH testnet position, verifies it, closes it, and tears down to a clean state.",
+  "validate": {
+    "workflow": {
+      "entry": "status",
+      "nodes": {
+        "status": {
+          "action": "app.status",
+          "intent": "Read runner compatibility status",
+          "detail": "Confirm the selected MetaMask adapter is connected before trading.",
+          "flow": "setup",
+          "next": "fixture"
+        },
+        "fixture": {
+          "action": "metamask.wallet.fixture_status",
+          "intent": "Verify wallet fixture availability",
+          "detail": "Check the preseeded wallet fixture required for deterministic Perps validation.",
+          "flow": "setup",
+          "next": "wallet-setup"
+        },
+        "wallet-setup": {
+          "action": "metamask.wallet.setup",
+          "intent": "Ensure wallet fixture setup is ready",
+          "detail": "Confirm onboarding and fixture state before controlling the app.",
+          "flow": "wallet",
+          "next": "wallet-unlock"
+        },
+        "wallet-unlock": {
+          "action": "metamask.wallet.ensure_unlocked",
+          "intent": "Ensure the wallet is unlocked",
+          "detail": "Unlock only if the app is currently locked.",
+          "flow": "wallet",
+          "next": "select-account"
+        },
+        "select-account": {
+          "action": "metamask.wallet.select_account",
+          "address": "0x8dc623e964475d4d669da601fd15ea9125469003",
+          "intent": "Select the validation account",
+          "detail": "Use the deterministic testnet account shared by mobile and extension.",
+          "flow": "wallet",
+          "next": "wallet-read-state"
+        },
+        "wallet-read-state": {
+          "action": "metamask.wallet.read_state",
+          "intent": "Capture wallet state proof",
+          "detail": "Record selected account/network state before the Perps lifecycle.",
+          "flow": "wallet",
+          "next": "navigate-perps"
+        },
+        "navigate-perps": {
+          "action": "ui.navigate",
+          "intent": "Navigate to Perps with raw platform routing",
+          "detail": "Mobile consumes route=PerpsMarketListView; extension consumes hash=#/?tab=perps.",
+          "flow": "perps setup",
+          "next": "navigate-market",
+          "route": "PerpsMarketListView",
+          "hash": "#/?tab=perps"
+        },
+        "navigate-market": {
+          "action": "ui.navigate",
+          "intent": "Open the ETH Perps market with raw platform routing",
+          "detail": "Mobile consumes route=params; extension consumes hash=#/perps/market/ETH.",
+          "flow": "perps setup",
+          "next": "start-state",
+          "route": "PerpsMarketDetails",
+          "params": {
+            "market": {
+              "symbol": "ETH"
+            }
+          },
+          "hash": "#/perps/market/ETH"
+        },
+        "start-state": {
+          "action": "metamask.perps.start_state",
+          "profile": "clean_market_testnet",
+          "market": "ETH",
+          "positions": {
+            "state": "none",
+            "mode": "matching"
+          },
+          "orders": {
+            "state": "none",
+            "mode": "matching"
+          },
+          "page": "market",
+          "intent": "Prepare clean ETH testnet Perps state",
+          "detail": "Close existing ETH testnet positions and orders before the smoke lifecycle starts.",
+          "flow": "perps setup",
+          "next": "assert-clean-position",
+          "tutorial": {
+            "completed": true
+          }
+        },
+        "assert-clean-position": {
+          "action": "metamask.perps.assert_positions",
+          "market": "ETH",
+          "state": "none",
+          "intent": "Confirm ETH position state is clean",
+          "detail": "Assert lifecycle starts with no ETH Perps position.",
+          "flow": "perps setup",
+          "next": "assert-clean-orders"
+        },
+        "assert-clean-orders": {
+          "action": "metamask.perps.assert_orders",
+          "market": "ETH",
+          "state": "none",
+          "intent": "Confirm ETH order state is clean",
+          "detail": "Assert lifecycle starts with no ETH Perps orders.",
+          "flow": "perps setup",
+          "next": "place-order"
+        },
+        "place-order": {
+          "action": "metamask.perps.place_order",
+          "market": "ETH",
+          "side": "long",
+          "amount": "11",
+          "leverage": 3,
+          "intent": "Open a small ETH 3x long position",
+          "detail": "Place an approximately $11 real testnet market order through the Perps controller.",
+          "flow": "perps lifecycle",
+          "next": "assert-open"
+        },
+        "assert-open": {
+          "action": "metamask.perps.assert_positions",
+          "market": "ETH",
+          "state": "open",
+          "intent": "Confirm the ETH position opened",
+          "detail": "Verify the lifecycle created a real position before cleanup.",
+          "flow": "perps lifecycle",
+          "next": "read-orders"
+        },
+        "read-orders": {
+          "action": "metamask.perps.read_orders",
+          "market": "ETH",
+          "intent": "Read ETH orders before cleanup",
+          "detail": "Collect order state proof before lifecycle teardown.",
+          "flow": "perps lifecycle",
+          "next": "close-orders"
+        },
+        "close-orders": {
+          "action": "metamask.perps.close_orders",
+          "market": "ETH",
+          "intent": "Close ETH orders from the lifecycle",
+          "detail": "Cancel any open ETH orders selected by the recipe parameters.",
+          "flow": "perps teardown",
+          "next": "close-position"
+        },
+        "close-position": {
+          "action": "metamask.perps.close_positions",
+          "market": "ETH",
+          "intent": "Close the ETH lifecycle position",
+          "detail": "Close the position created by this smoke and wait for clean state.",
+          "flow": "perps teardown",
+          "next": "assert-closed"
+        },
+        "assert-closed": {
+          "action": "metamask.perps.assert_positions",
+          "market": "ETH",
+          "state": "none",
+          "intent": "Confirm ETH position cleanup completed",
+          "detail": "Assert no ETH position remains after lifecycle cleanup.",
+          "flow": "perps teardown",
+          "next": "teardown-state"
+        },
+        "teardown-state": {
+          "action": "metamask.perps.teardown_state",
+          "market": "ETH",
+          "positions": {
+            "state": "none",
+            "mode": "matching"
+          },
+          "orders": {
+            "state": "none",
+            "mode": "matching"
+          },
+          "page": "home",
+          "intent": "Return Perps to globally clean home state",
+          "detail": "Close remaining ETH positions and orders so the lifecycle leaves its selected market clean.",
+          "flow": "perps teardown",
+          "next": "done"
+        },
+        "done": {
+          "action": "end",
+          "status": "pass",
+          "intent": "Finish Perps lifecycle smoke",
+          "detail": "The recipe opened and closed a real ETH testnet position.",
+          "flow": "complete"
+        }
+      }
+    }
+  }
+}

package/library/recipes/read-markets.core.recipe.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "title": "MetaMask core headless Perps read",
+  "description": "Proves the headless `core` adapter instantiates @metamask/perps-controller against a resolved MetaMask/core checkout and reads live HyperLiquid testnet Perps state (positions, open orders, account state) over HTTP — no CDP, bridge, or UI.",
+  "validate": {
+    "workflow": {
+      "entry": "status",
+      "nodes": {
+        "status": {
+          "action": "app.status",
+          "next": "read_positions",
+          "intent": "Resolve the core checkout and report headless compatibility mode"
+        },
+        "read_positions": {
+          "action": "metamask.perps.read_positions",
+          "mode": "all",
+          "next": "read_orders",
+          "intent": "Read live Perps positions from the headless controller"
+        },
+        "read_orders": {
+          "action": "metamask.perps.read_orders",
+          "mode": "all",
+          "next": "read_account",
+          "intent": "Read live Perps open orders from the headless controller"
+        },
+        "read_account": {
+          "action": "metamask.perps.read_account",
+          "next": "done",
+          "intent": "Read live Perps account state from the headless controller"
+        },
+        "done": {
+          "action": "end",
+          "status": "pass"
+        }
+      }
+    }
+  }
+}

package/library/recipes/smoke.extension.recipe.json

@@ -0,0 +1,31 @@
+{
+  "schema_version": 1,
+  "title": "MetaMask Extension v1 runner smoke",
+  "description": "Proves the MetaMask Extension runner executes manifest-declared actions and writes a valid artifact package.",
+  "validate": {
+    "workflow": {
+      "entry": "status",
+      "nodes": {
+        "status": {
+          "action": "app.status",
+          "next": "fixture",
+          "intent": "Perform status for the recipe"
+        },
+        "fixture": {
+          "action": "metamask.wallet.fixture_status",
+          "next": "cdp",
+          "intent": "Perform fixture for the recipe"
+        },
+        "cdp": {
+          "action": "cdp.target",
+          "next": "done",
+          "intent": "Perform cdp for the recipe"
+        },
+        "done": {
+          "action": "end",
+          "status": "pass"
+        }
+      }
+    }
+  }
+}

package/library/recipes/smoke.mobile.recipe.json

@@ -0,0 +1,31 @@
+{
+  "schema_version": 1,
+  "title": "MetaMask Mobile v1 runner smoke",
+  "description": "Proves the MetaMask Mobile runner executes manifest-declared actions and writes a valid artifact package.",
+  "validate": {
+    "workflow": {
+      "entry": "status",
+      "nodes": {
+        "status": {
+          "action": "app.status",
+          "next": "fixture",
+          "intent": "Perform status for the recipe"
+        },
+        "fixture": {
+          "action": "metamask.wallet.fixture_status",
+          "next": "cdp",
+          "intent": "Perform fixture for the recipe"
+        },
+        "cdp": {
+          "action": "cdp.target",
+          "next": "done",
+          "intent": "Perform cdp for the recipe"
+        },
+        "done": {
+          "action": "end",
+          "status": "pass"
+        }
+      }
+    }
+  }
+}

package/library/recipes/trading-lifecycle.core.recipe.json

@@ -0,0 +1,76 @@
+{
+  "schema_version": 1,
+  "title": "MetaMask core headless Perps trading lifecycle",
+  "description": "Proves the headless `core` adapter places and closes a REAL Perps order on HyperLiquid testnet through the full signing path: a default viem signer backs the perps controller's wallet adapter, the active HyperLiquid testnet provider is initialized, and a small BTC long is opened then closed. Leaves the account FLAT. No CDP, bridge, or UI.",
+  "validate": {
+    "workflow": {
+      "entry": "status",
+      "nodes": {
+        "status": {
+          "action": "app.status",
+          "next": "start_flat",
+          "intent": "Resolve the core checkout and report headless compatibility mode"
+        },
+        "start_flat": {
+          "action": "metamask.perps.start_state",
+          "market": "BTC",
+          "positions": { "state": "none" },
+          "orders": { "state": "none" },
+          "network": "testnet",
+          "timeout_ms": 45000,
+          "next": "place_order",
+          "intent": "Converge BTC testnet baseline to flat (no positions, no orders) before the proof window"
+        },
+        "place_order": {
+          "action": "metamask.perps.place_order",
+          "market": "BTC",
+          "side": "long",
+          "notional": "11",
+          "leverage": 2,
+          "network": "testnet",
+          "timeout_ms": 45000,
+          "next": "assert_open",
+          "intent": "Place a small BTC long market order via the headless controller (real signed order to HL testnet)"
+        },
+        "assert_open": {
+          "action": "metamask.perps.assert_positions",
+          "market": "BTC",
+          "state": "open",
+          "timeout_ms": 30000,
+          "next": "close_position",
+          "intent": "Assert the BTC position opened"
+        },
+        "close_position": {
+          "action": "metamask.perps.close_positions",
+          "market": "BTC",
+          "network": "testnet",
+          "timeout_ms": 45000,
+          "next": "assert_flat",
+          "intent": "Close the BTC position via the headless controller (real signed close to HL testnet)"
+        },
+        "assert_flat": {
+          "action": "metamask.perps.assert_positions",
+          "market": "BTC",
+          "state": "none",
+          "timeout_ms": 30000,
+          "next": "teardown_flat",
+          "intent": "Assert the BTC position closed — account is flat"
+        },
+        "teardown_flat": {
+          "action": "metamask.perps.teardown_state",
+          "market": "BTC",
+          "positions": { "state": "none" },
+          "orders": { "state": "none" },
+          "network": "testnet",
+          "timeout_ms": 45000,
+          "next": "done",
+          "intent": "Restore BTC testnet baseline to flat after the proof (leave the shared account clean)"
+        },
+        "done": {
+          "action": "end",
+          "status": "pass"
+        }
+      }
+    }
+  }
+}

package/orchestration/compat-overlays/README.md

@@ -0,0 +1,19 @@
+# Compatibility overlays (historical-commit replay)
+
+NOT dead code. These overlays exist for replay/eval runs against OLD product
+commits — e.g. re-running a historical task on a fixed baseline to validate
+prompt or harness changes. A "zero current references" scan will always come
+up empty here by design: the feature's purpose is non-current checkouts.
+
+- Purpose: make historical product checkouts bootable/bridgeable under the
+  current local toolchain so Recipe v1 evals can replay against them.
+- When it applies: mobile checkouts predating React Native 0.81 polyfill
+  fixes (see mobile/README.md for the per-patch details).
+- How it is applied: MANUALLY (no automatic apply logic in this repo).
+  The operator or the `/recipe-harness` skill applies the patch reversibly
+  before a historical rebuild (`git apply <patch>` in the product checkout,
+  `git apply -R` to remove) and records the overlay path in validation
+  evidence. `orchestration/mobile/inject.sh` does NOT apply these.
+
+Listed in orchestration/manifest.json (kind: compat-overlay) so the doctor
+verifies the surface and this directory is never flagged as unused again.

package/orchestration/compat-overlays/mobile/README.md

@@ -0,0 +1,13 @@
+# Mobile historical compatibility overlays
+
+These patch files document temporary source overlays used by Recipe v1 historical
+injection evals when an older MetaMask Mobile checkout cannot boot under the
+current local Xcode/Hermes toolchain.
+
+They are intentionally kept in the external runner repository, not Farmslot root
+scripts, so a `/recipe-harness` skill can apply the same reversible overlay before
+a historical rebuild and record the overlay path in validation evidence.
+
+- `rn81-message-event-source.patch`: adds a read-only `MessageEvent.prototype.source`
+  getter for React Native 0.81 historical checkouts whose bundled polyfill omits
+  it while CDP websocket clients expect browser-compatible `MessageEvent` shape.

package/orchestration/compat-overlays/mobile/rn81-message-event-source.patch

@@ -0,0 +1,42 @@
+compat-overlay: rn81-message-event-source (historical-checkout replay support)
+
+What: patches metamask-mobile shim.js to add a read-only
+MessageEvent.prototype.source getter.
+Why: the harness CDP bridge expects browser-compatible MessageEvent shape;
+pre-RN-0.81 checkouts ship a polyfill that omits .source, so the bridge
+cannot attach when replaying tasks on those historical commits.
+When: only when replaying/evaluating against mobile checkouts older than the
+RN 0.81 upgrade (pre-RN-0.81 checkouts). Never needed on current main.
+How: applied MANUALLY in the historical product checkout —
+  git apply <this file>     (and `git apply -R` to remove)
+No automatic apply logic exists in this repo. See ../README.md.
+
+diff --git a/shim.js b/shim.js
+--- a/shim.js
++++ b/shim.js
+@@
+ if (typeof global.MessageEvent === 'undefined') {
+   global.MessageEvent =
+     require('react-native/src/private/webapis/html/events/MessageEvent').default;
+ }
+ 
++// Historical runner compatibility: React Native 0.81's MessageEvent polyfill
++// can omit the browser `source` getter expected by CDP websocket clients under
++// newer Xcode/Hermes toolchains. Keep the getter read-only and null, matching
++// browser MessageEvent semantics for non-window messages.
++if (
++  global.MessageEvent?.prototype &&
++  !Object.getOwnPropertyDescriptor(global.MessageEvent.prototype, 'source')
++) {
++  Object.defineProperty(global.MessageEvent.prototype, 'source', {
++    configurable: true,
++    enumerable: true,
++    get() {
++      return null;
++    },
++  });
++}
++
+ class AbortError extends Error {
+   constructor(message) {
+     super(message);

package/orchestration/core/cleanup.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+# cleanup.sh — remove the headless `core` adapter overlay.
+#
+# Inputs: --target <metamask-core> (default $PWD); env RECIPE_HARNESS_ROOT.
+# Outputs: removes <harness>/core. Exit 0 — cleaned (idempotent); 2 — bad args.
+# Never touches: product files (core install patches nothing).
+#
+# Core injects nothing into the product checkout, so cleanup only removes the
+# ignored overlay directory temp/recipe/harness/core. There are no backups to
+# restore and no patched product files. Idempotent: a missing overlay is a
+# success, not an error.
+set -euo pipefail
+
+TARGET="$PWD"
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --target) TARGET="$2"; shift 2 ;;
+    -h|--help) echo "Usage: cleanup.sh (core) [--target <metamask-core>]"; exit 0 ;;
+    *) echo "Unknown arg: $1" >&2; exit 2 ;;
+  esac
+done
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+TARGET="$(cd "$TARGET" && pwd)"
+# shellcheck disable=SC1091
+for _hp in "$SCRIPT_DIR/../lib/harness-path.sh"; do
+  [ -f "$_hp" ] && { . "$_hp"; break; }
+done
+unset _hp
+if ! command -v harness_root >/dev/null 2>&1; then
+  echo "mm-harness: shared lib orchestration/lib/harness-path.sh not found; reinstall the runner." >&2
+  exit 1
+fi
+HARNESS_DIR="$(harness_dir "$TARGET" core)"
+
+rm -rf "$HARNESS_DIR"
+echo "Cleaned core recipe harness from $TARGET"

package/orchestration/core/inject.sh

@@ -0,0 +1,154 @@
+#!/usr/bin/env bash
+# inject.sh — headless `core` adapter install.
+#
+# Inputs: --target <metamask-core> (default $PWD); env RECIPE_HARNESS_ROOT,
+#   METAMASK_RUNNER_PROTOCOL_ROOT > FARMSLOT_ROOT > <runner>/.farmslot-root.
+# Outputs: <harness>/core/{manifest.json,action-manifest.json,runner/}.
+#   Exit 0 — installed; 1 — symlink refusal/install failure; 2 — bad args.
+# Never touches: product checkout source (overlay metadata only).
+#
+# Core is a headless adapter: it instantiates @metamask/perps-controller against
+# a resolved MetaMask/core checkout and reads/writes HyperLiquid testnet over
+# HTTP. There is no app, CDP target, bridge, or UI. Unlike the mobile/extension
+# installs this writes NOTHING into the product checkout source: it only creates
+# the ignored harness overlay under temp/recipe/harness/core with a delegate
+# wrapper, the action manifests, recipe snapshots, and install metadata.
+set -euo pipefail
+
+TARGET="$PWD"
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --target) TARGET="$2"; shift 2 ;;
+    -h|--help) echo "Usage: inject.sh (core) [--target <metamask-core>]"; exit 0 ;;
+    *) echo "Unknown arg: $1" >&2; exit 2 ;;
+  esac
+done
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+RUNNER_DIR="$(cd "${SCRIPT_DIR}/../.." && pwd -P)"
+# shellcheck disable=SC1091
+for _hp in "$SCRIPT_DIR/../lib/harness-path.sh"; do
+  [ -f "$_hp" ] && { . "$_hp"; break; }
+done
+unset _hp
+if ! command -v harness_root >/dev/null 2>&1; then
+  echo "mm-harness: shared lib orchestration/lib/harness-path.sh not found; reinstall the runner." >&2
+  exit 1
+fi
+TARGET="$(cd "$TARGET" && pwd)"
+METAMASK_RUNNER_DIR="$RUNNER_DIR"
+METAMASK_RUNNER_SOURCE_KIND="runner-self"
+METAMASK_RUNNER_REVISION="$(git -C "$RUNNER_DIR" rev-parse HEAD 2>/dev/null || echo unknown)"
+METAMASK_RUNNER_PROTOCOL_ROOT="${METAMASK_RUNNER_PROTOCOL_ROOT:-${METAMASK_RUNNER_FARMSLOT_ROOT:-${FARMSLOT_ROOT:-}}}"
+if [ -z "$METAMASK_RUNNER_PROTOCOL_ROOT" ] && [ -f "$RUNNER_DIR/.farmslot-root" ]; then
+  METAMASK_RUNNER_PROTOCOL_ROOT="$(cat "$RUNNER_DIR/.farmslot-root")"
+fi
+export METAMASK_RUNNER_DIR METAMASK_RUNNER_SOURCE_KIND METAMASK_RUNNER_REVISION METAMASK_RUNNER_PROTOCOL_ROOT
+HARNESS_ROOT="$(harness_root)"
+HARNESS_REL="$HARNESS_ROOT/core"
+HARNESS_DIR="$(harness_dir "$TARGET" core)"
+
+refuse_symlink_destination() {
+  local rel="$1"
+  local path_so_far="$TARGET"
+  IFS='/' read -r -a parts <<< "$rel"
+  for part in "${parts[@]}"; do
+    [ -n "$part" ] || continue
+    path_so_far="$path_so_far/$part"
+    if [ -L "$path_so_far" ]; then
+      echo "Refusing core recipe harness install: $rel contains symlink component $path_so_far." >&2
+      return 1
+    fi
+  done
+}
+
+install_v1_runner_assets() {
+  # refuse_symlink_destination walks every path component, so the deepest paths
+  # also guard their parents ($HARNESS_REL covers the root segments).
+  refuse_symlink_destination "$HARNESS_REL"
+  refuse_symlink_destination "$HARNESS_REL/runner"
+  refuse_symlink_destination "$HARNESS_REL/action-manifest.json"
+  mkdir -p "$HARNESS_DIR"
+  rm -rf "$HARNESS_DIR/runner"
+  mkdir -p "$HARNESS_DIR/runner/bin" "$HARNESS_DIR/runner/manifests" "$HARNESS_DIR/runner/recipes"
+
+  # Install a harness-owned delegate that execs the reviewed external runner
+  # source recorded in manifest.json. The delegate keeps the overlay lightweight
+  # and never owns the runtime itself. Core is headless: no app, no .js.env, no
+  # simulator detection — the delegate only forwards FARMSLOT_ROOT (when set) and
+  # execs the real runner. Emit shell-safe lines: %q-quote the interpolated paths
+  # so a protocol/runner path containing a space — or $()/backtick/quote — cannot
+  # break the generated wrapper or inject at runtime.
+  local runner_protocol_root_q runner_exec_q
+  runner_protocol_root_q="$(printf '%q' "$METAMASK_RUNNER_PROTOCOL_ROOT")"
+  runner_exec_q="$(printf '%q' "$METAMASK_RUNNER_DIR/orchestration/porcelain/metamask-recipe")"
+  {
+    printf '%s\n' '#!/usr/bin/env bash'
+    printf '%s\n' 'set -euo pipefail'
+    if [ -n "$METAMASK_RUNNER_PROTOCOL_ROOT" ]; then
+      printf 'export FARMSLOT_ROOT=${FARMSLOT_ROOT:-%s}\n' "$runner_protocol_root_q"
+    fi
+    printf 'exec %s "$@"\n' "$runner_exec_q"
+  } > "$HARNESS_DIR/runner/bin/metamask-recipe"
+  chmod +x "$HARNESS_DIR/runner/bin/metamask-recipe"
+  if [ -n "$METAMASK_RUNNER_PROTOCOL_ROOT" ]; then
+    printf '%s\n' "$METAMASK_RUNNER_PROTOCOL_ROOT" > "$HARNESS_DIR/runner/.farmslot-root"
+  fi
+  printf '%s\n' "$METAMASK_RUNNER_DIR" > "$HARNESS_DIR/runner/.runner-source"
+  # resolve-runner-source.sh requires mobile + extension manifests to consider a
+  # runner valid, so the installed delegate must carry them alongside core's.
+  cp "$METAMASK_RUNNER_DIR/library/manifests/core.action-manifest.json" "$HARNESS_DIR/action-manifest.json"
+  cp "$METAMASK_RUNNER_DIR/library/manifests/core.action-manifest.json" "$HARNESS_DIR/runner/manifests/core.action-manifest.json"
+  cp "$METAMASK_RUNNER_DIR/library/manifests/mobile.action-manifest.json" "$HARNESS_DIR/runner/manifests/mobile.action-manifest.json"
+  cp "$METAMASK_RUNNER_DIR/library/manifests/extension.action-manifest.json" "$HARNESS_DIR/runner/manifests/extension.action-manifest.json"
+  if [ -d "$METAMASK_RUNNER_DIR/library/recipes" ]; then
+    rsync -a --delete "$METAMASK_RUNNER_DIR/library/recipes/" "$HARNESS_DIR/runner/recipes/"
+  fi
+  # Canonical recipe-library snapshot: flows/ + library.json so the installed
+  # harness mirrors the runner's library layout.
+  if [ -d "$METAMASK_RUNNER_DIR/library/flows" ]; then
+    mkdir -p "$HARNESS_DIR/runner/flows"
+    rsync -a --delete "$METAMASK_RUNNER_DIR/library/flows/" "$HARNESS_DIR/runner/flows/"
+  fi
+  if [ -f "$METAMASK_RUNNER_DIR/library/library.json" ]; then
+    cp "$METAMASK_RUNNER_DIR/library/library.json" "$HARNESS_DIR/runner/library.json"
+  fi
+  if [ ! -x "$HARNESS_DIR/runner/bin/metamask-recipe" ]; then
+    echo "Refusing core recipe harness install: failed to make runner executable." >&2
+    return 1
+  fi
+}
+
+install_v1_runner_assets
+
+ENSURE_DEPS="$SCRIPT_DIR/../lib/ensure-runner-deps.sh"
+if [ -f "$ENSURE_DEPS" ]; then
+  bash "$ENSURE_DEPS" "$RUNNER_DIR"
+fi
+
+SOURCE_REV="$(git -C "$RUNNER_DIR" rev-parse HEAD 2>/dev/null || echo unknown)"
+CLEANUP_COMMAND="RECIPE_HARNESS_ROOT=$HARNESS_ROOT $(printf '%q' "$SCRIPT_DIR/cleanup.sh") --target $(printf '%q' "$TARGET")"
+node -e '
+  const fs = require("fs");
+  const [runnerDir, runnerRevision, runnerSourceKind, target, manifestPath, harnessRel, cleanupCommand] = process.argv.slice(1);
+  const m = {
+    adapter: "core",
+    installedAt: new Date().toISOString(),
+    source: {
+      runnerDir,
+      runnerRevision,
+      runnerSourceKind,
+    },
+    target,
+    protocolVersion: "v1",
+    actionManifestPath: harnessRel + "/action-manifest.json",
+    runnerEntrypoint: harnessRel + "/runner/bin/metamask-recipe",
+    runtimeHelpers: {},
+    installedPaths: [harnessRel + "/runner"],
+    patchedFiles: [],
+    cleanupCommand,
+  };
+  fs.writeFileSync(manifestPath, JSON.stringify(m, null, 2) + "\n");
+' "$METAMASK_RUNNER_DIR" "$METAMASK_RUNNER_REVISION" "$METAMASK_RUNNER_SOURCE_KIND" "$TARGET" "$HARNESS_DIR/manifest.json" "$HARNESS_REL" "$CLEANUP_COMMAND"
+
+echo "Installed core recipe harness: $HARNESS_DIR/manifest.json"