@deeeed/metamask-harness 0.80.0 → 0.82.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.80.0",
+  "version": "0.82.0",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,14 +21,14 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-rn": "0.17.0",
-    "@farmslot/adapter-sdk": "0.3.1",
-    "@farmslot/adapter-web": "0.2.0",
+    "@farmslot/adapter-rn": "0.17.1",
+    "@farmslot/adapter-sdk": "0.5.0",
+    "@farmslot/adapter-web": "0.3.1",
     "@farmslot/agent-runtime": "0.17.0",
     "@farmslot/handoff": "^0.3.1",
     "@farmslot/protocol": "0.34.0",
-    "@farmslot/recipe-cli": "0.4.1",
-    "@farmslot/recipe-runner": "0.24.0",
+    "@farmslot/recipe-cli": "0.6.0",
+    "@farmslot/recipe-runner": "0.25.0",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",

package/site/assets/help-recipes.json

@@ -173,6 +173,7 @@
         "Graph: no unconditional pass, generic intent, hidden start state, or opaque node that collapses preparation, action, assertion, evidence, and teardown.",
         "Assertion modes such as require_unchanged must fail before any corrective action. Verify the negative path leaves the inspected state untouched; an assertion must not repair the behavior it is supposed to test.",
         "Reuse structured reads with assert_output instead of adding a new domain action for every comparison: source names the earlier node, and assert can select $.matchingCount with operator eq and the expected parameter. A status-report action can succeed while reporting missing prerequisites; assert required values before the dependent action. Checking three rows exist does not prove there are exactly three, or that they belong to this task.",
+        "Test command nodes: assert_output on the literal pass count. An exit code alone is not proof: jest -t exits 0 when no test matches.",
         "Evidence: inspect the recipe resolution, summary, trace, manifest, logs, and actual artifacts. Verify the values and state required by the claim.",
         "For a change claim, compare the actual before/after values for the same subject. Two captures alone prove neither an update nor freshness. Preserve unchanged observations as unproven rather than retrying to obtain a pass.",
         {

package/adapters/terminal/lib/mainnet-guard.mjs

@@ -1,177 +0,0 @@
-// Testnet enforcement for the terminal slot browser. In testnet mode nothing
-// the browser runs may reach a mainnet venue (Hyperliquid, or Lighter when the
-// controller carries it), whatever the dev server happens to serve:
-//   - the network layer: --host-resolver-rules makes every mainnet venue host
-//     unresolvable for the whole browser (pages, workers, WebSockets), and
-//     the wallet host fails and logs each attempt it sees (blocked-mainnet);
-//   - the wallet layer: a typed-data request for a mainnet action is refused
-//     before MetaMask or the injected signer sees it (refused-mainnet).
-// The venue hosts are the endpoints the venue SDK, the perps controller and
-// the app's source in the checkout connect to.
-
-import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
-import { createRequire } from 'node:module';
-import path from 'node:path';
-
-const SDK_PACKAGE = '@nktkas/hyperliquid';
-const CONTROLLER_PACKAGE = '@metamask/perps-controller';
-// Venue API hosts of the perps providers the terminal can configure: the
-// Hyperliquid API/RPC hosts and Lighter's zkLighter API.
-const VENUE_HOST = /^(?:[a-z0-9-]+\.)*(?:hyperliquid(?:-testnet)?\.xyz|zklighter\.elliot\.ai)$/u;
-// A URL in source text, any case; it is then parsed (canonicalUrl).
-const URL_CANDIDATE = /\b(?:https?|wss?):\/\/[^\s'"`<>(){}\\]+/giu;
-// Any mention of a venue host, URL or not: the cross-check of the SDK scan.
-const VENUE_HOST_MENTION = /(?<![\w.-])(?:[a-z0-9-]+\.)*(?:hyperliquid(?:-testnet)?\.xyz|zklighter\.elliot\.ai)(?![\w-])/giu;
-// Request paths of the venue APIs (info, exchange, WebSocket, EVM RPC,
-// Lighter's stream and REST API).
-const API_PATH = /^\/(?:ws|info|exchange|evm|stream|api)(?:\/|$)/u;
-const SOURCE_FILE = /\.(?:m?js|cjs|tsx?)$/u;
-// The venues' web hosts: the Hyperliquid app, which serves the coin icons the
-// terminal shows and the explorer pages it links to. Never an API endpoint,
-// on either network, so never blocked and never proof of the served network.
-export const LINK_HOSTS = new Set(['app.hyperliquid.xyz', 'app.hyperliquid-testnet.xyz']);
-
-function packageRoot(checkout, name) {
-  try {
-    const require = createRequire(path.join(checkout, 'package.json'));
-    return path.dirname(require.resolve(`${name}/package.json`));
-  } catch {
-    const direct = path.join(checkout, 'node_modules', name);
-    return existsSync(path.join(direct, 'package.json')) ? direct : null;
-  }
-}
-
-function* sourceFiles(dir, depth = 0) {
-  if (depth > 12) return;
-  for (const entry of readdirSync(dir)) {
-    if (entry === 'node_modules') continue;
-    const file = path.join(dir, entry);
-    const stat = statSync(file);
-    if (stat.isDirectory()) yield* sourceFiles(file, depth + 1);
-    else if (SOURCE_FILE.test(entry)) yield file;
-  }
-}
-
-export function isTestnetHost(host) {
-  return /(?:^|[.-])testnet(?:[.-]|$)/u.test(host);
-}
-
-// Venue URLs in source text, by kind: hosts used with an API path, hosts
-// used bare (a base URL whose paths are appended elsewhere), and hosts with
-// any other path (/rpc, /health, /coins/BTC.svg). Link hosts are left out,
-// except that a link host with an API path is reported (linkApi).
-export function venueUrlHosts(text) {
-  const found = { api: new Set(), bare: new Set(), other: new Set(), linkApi: new Set() };
-  for (const [candidate] of text.matchAll(URL_CANDIDATE)) {
-    const url = canonicalUrl(candidate);
-    if (!url || !VENUE_HOST.test(url.hostname)) continue;
-    const { hostname: host, pathname } = url;
-    // The path as a server reads it: decoded, any case.
-    const apiPath = API_PATH.test(safeDecode(pathname).toLowerCase());
-    if (LINK_HOSTS.has(host)) {
-      // A link host used as an API: the exemption would hide an endpoint.
-      if (apiPath) found.linkApi.add(`${host}${pathname}`);
-      continue;
-    }
-    if (apiPath) found.api.add(host);
-    else if (pathname === '/') found.bare.add(host);
-    else found.other.add(host);
-  }
-  return found;
-}
-
-
-// Endpoint hosts in one text: with anyPath (the venue SDK) every venue host;
-// otherwise API URLs and base URLs.
-export function venueEndpointHosts(text, { anyPath = false } = {}) {
-  const { api, bare, other } = venueUrlHosts(text);
-  return new Set([...api, ...bare, ...(anyPath ? other : [])]);
-}
-
-// The venue hosts the checkout can connect to. { mainnet: [...], testnet: [...] }
-//   - the venue SDK: every venue host, whatever the path;
-//   - the perps controller and the app's own source: API URLs and base URLs.
-// Link hosts (LINK_HOSTS) are never on either list, and a link host with an
-// API path in any scanned source fails the launch. Every mainnet host the SDK
-// mentions (as a URL or not) must be on the list, or the launch fails.
-export function venueHosts(checkout) {
-  const sdk = packageRoot(checkout, SDK_PACKAGE);
-  if (!sdk) throw new Error(`${SDK_PACKAGE} is not installed in ${checkout}; the mainnet block list comes from it.`);
-  const sources = [
-    { root: sdk, anyPath: true },
-    { root: packageRoot(checkout, CONTROLLER_PACKAGE), anyPath: false },
-    { root: path.join(checkout, 'src'), anyPath: false },
-  ].filter(({ root }) => root && existsSync(root));
-  const hosts = new Set();
-  const sdkMentions = new Set();
-  for (const { root, anyPath } of sources) {
-    for (const file of sourceFiles(root)) {
-      const text = readFileSync(file, 'utf8');
-      const { linkApi } = venueUrlHosts(text);
-      if (linkApi.size > 0) throw new Error(`${file} uses the venue web host as an API (${[...linkApi].join(', ')}); it is exempt from the mainnet block, so refusing to launch.`);
-      for (const host of venueEndpointHosts(text, { anyPath })) hosts.add(host);
-      if (anyPath) {
-        for (const [mention] of text.matchAll(VENUE_HOST_MENTION)) {
-          const host = mention.toLowerCase();
-          if (!LINK_HOSTS.has(host)) sdkMentions.add(host);
-        }
-      }
-    }
-  }
-  const mainnet = [...hosts].filter((host) => !isTestnetHost(host)).sort();
-  const testnet = [...hosts].filter((host) => isTestnetHost(host)).sort();
-  if (mainnet.length === 0) throw new Error(`no mainnet venue host found in ${SDK_PACKAGE} at ${sdk}; refusing to launch without a block list.`);
-  const missing = [...sdkMentions].filter((host) => !isTestnetHost(host) && !mainnet.includes(host));
-  if (missing.length > 0) throw new Error(`the mainnet block list misses ${missing.join(', ')}, which ${SDK_PACKAGE} names; refusing to launch.`);
-  return { mainnet, testnet };
-}
-
-export function mainnetVenueHosts(checkout) {
-  return venueHosts(checkout).mainnet;
-}
-
-export function hostResolverRules(hosts) {
-  // The host and its fully qualified form (trailing dot) alike.
-  return `--host-resolver-rules=${hosts.flatMap((host) => [`MAP ${host} ~NOTFOUND`, `MAP ${host}. ~NOTFOUND`]).join(', ')}`;
-}
-
-// A URL as the network sees it: new URL() lowercases the host, drops a
-// default port and resolves dot segments; a trailing dot names the same host.
-// { hostname, pathname }, or null.
-export function canonicalUrl(value) {
-  try {
-    const url = new URL(String(value));
-    return { hostname: url.hostname.toLowerCase().replace(/\.$/u, ''), pathname: url.pathname };
-  } catch {
-    return null;
-  }
-}
-
-function safeDecode(value) {
-  try {
-    return decodeURIComponent(value);
-  } catch {
-    return value;
-  }
-}
-
-export function hostOf(url) {
-  return canonicalUrl(url)?.hostname ?? null;
-}
-
-export function isMainnetVenueUrl(url, hosts) {
-  const host = hostOf(url);
-  return host !== null && hosts.includes(host);
-}
-
-// A Hyperliquid action meant for mainnet: user-signed actions carry
-// hyperliquidChain "Mainnet"; L1 actions are signed as a phantom Agent whose
-// source is "a" on mainnet ("b" on testnet).
-export function mainnetTypedDataReason(data) {
-  const message = data?.message ?? {};
-  if (typeof message.hyperliquidChain === 'string' && message.hyperliquidChain.toLowerCase() === 'mainnet') {
-    return 'hyperliquidChain=Mainnet';
-  }
-  if (data?.primaryType === 'Agent' && message.source === 'a') return 'L1 Agent source=a';
-  return null;
-}

package/adapters/terminal/lib/origin.mjs

@@ -1,30 +0,0 @@
-// Exact app-origin checks for the terminal slot. A prefix match would let
-// http://localhost:30001 pass for http://localhost:3000, so every check parses
-// the URL and compares origins.
-
-export function originOf(url) {
-  try {
-    return new URL(String(url)).origin;
-  } catch {
-    return null;
-  }
-}
-
-export function isAppUrl(url, appOrigin) {
-  const origin = originOf(url);
-  return origin !== null && origin !== 'null' && origin === originOf(appOrigin);
-}
-
-// A wallet request (or log entry) is accepted only from the default execution
-// context of the tab's top frame, on the app origin, while that frame's
-// committed document is an app URL. The committed URL matters because an
-// about:blank document (a popup the app opened) inherits the app origin. For
-// a page target the main frame id equals the target id.
-export function isAppTopFrameContext(context, { targetId, appOrigin, committedUrl }) {
-  if (!context || !targetId) return false;
-  const aux = context.auxData ?? {};
-  return aux.isDefault === true &&
-    aux.frameId === targetId &&
-    isAppUrl(context.origin, appOrigin) &&
-    isAppUrl(committedUrl, appOrigin);
-}

package/adapters/terminal/lib/page-script.mjs

@@ -1,246 +0,0 @@
-// Source of the script the wallet host evaluates in every app document before
-// page scripts. It reports each wallet request the app makes (method, EIP-712
-// primary type, domain/active chain, outcome; no params or signatures) through
-// a CDP binding, and in injected mode also provides the strict test wallet
-// announced over EIP-6963 as io.metamask. It installs itself only in the top
-// frame of a document on the exact app origin: the CDP preload also runs in
-// iframes and after the tab navigates elsewhere. Errors are logged as a code
-// and a fixed category, never as provider text.
-
-import { mainnetTypedDataReason } from './mainnet-guard.mjs';
-
-export const LOG_BINDING = '__mmTerminalWalletLog';
-export const REQUEST_BINDING = '__mmTerminalWalletRequest';
-export const RESOLVE_FN = '__mmTerminalWalletResolve';
-
-export const LOGGED_METHODS = Object.freeze([
-  'eth_requestAccounts',
-  'wallet_requestPermissions',
-  'wallet_revokePermissions',
-  'wallet_switchEthereumChain',
-  'wallet_addEthereumChain',
-  'eth_signTypedData',
-  'eth_signTypedData_v3',
-  'eth_signTypedData_v4',
-  'personal_sign',
-  'eth_sign',
-  'eth_sendTransaction',
-]);
-
-export const ERROR_CATEGORIES = Object.freeze({
-  4001: 'user-rejected',
-  4100: 'unauthorized',
-  4200: 'unsupported-method',
-  4900: 'disconnected',
-  4901: 'chain-disconnected',
-  4902: 'unrecognized-chain',
-  [-32602]: 'invalid-params',
-  [-32603]: 'internal',
-});
-
-function pageMain(config, mainnetTypedDataReason) {
-  if (window.top !== window || location.origin !== config.appOrigin) return;
-  if (window.__mmTerminalHarness) return;
-  // The wallet host's ready check reads this marker on the committed document:
-  // the preload ran, and the page's provider is wrapped (covers).
-  const wrapped = new WeakSet();
-  const harness = {
-    signer: config.signer,
-    network: config.network,
-    wrapped: 0,
-    wrapFailures: [],
-    covers: (provider) => Boolean(provider) && wrapped.has(provider),
-  };
-  window.__mmTerminalHarness = harness;
-  const logged = new Set(config.loggedMethods);
-  // Without the host's binding a wallet request would go unrecorded, so it is
-  // refused (fail closed) rather than passed through.
-  const unrecorded = () => Object.assign(
-    new Error('The harness wallet host is not attached to this document; the request was refused so it cannot go unrecorded.'),
-    { code: 4100 },
-  );
-  const hasBinding = (binding) => typeof window[binding] === 'function';
-  const report = (entry) => {
-    try {
-      window[config.logBinding](JSON.stringify(entry));
-    } catch {
-      // Binding unavailable (host detached): the request still proceeds.
-    }
-  };
-  const describe = (method, params) => {
-    const entry = { kind: 'request', method, t: Date.now(), url: location.pathname };
-    if (/^eth_signTypedData/.test(method)) {
-      try {
-        const raw = params?.[1];
-        const data = typeof raw === 'string' ? JSON.parse(raw) : raw;
-        entry.primaryType = data?.primaryType ?? null;
-        entry.domainName = data?.domain?.name ?? null;
-        entry.domainChainId = data?.domain?.chainId == null ? null : Number(BigInt(data.domain.chainId));
-      } catch {
-        entry.primaryType = null;
-      }
-    }
-    if (method === 'wallet_switchEthereumChain' || method === 'wallet_addEthereumChain') {
-      try {
-        entry.toChainId = Number.parseInt(params[0].chainId, 16);
-      } catch {
-        entry.toChainId = null;
-      }
-    }
-    return entry;
-  };
-  const wrap = (provider, source) => {
-    if (!provider || typeof provider.request !== 'function' || wrapped.has(provider)) return provider;
-    const original = provider.request.bind(provider);
-    const request = async (args) => {
-      const method = args?.method;
-      if (!logged.has(method)) return original(args);
-      if (!hasBinding(config.logBinding)) throw unrecorded();
-      const entry = { ...describe(method, args?.params), source };
-      // Testnet runs never let a mainnet Hyperliquid action reach the signer.
-      if (config.network === 'testnet' && /^eth_signTypedData/.test(method)) {
-        let reason = null;
-        try {
-          const raw = args?.params?.[1];
-          reason = mainnetTypedDataReason(typeof raw === 'string' ? JSON.parse(raw) : raw);
-        } catch {
-          reason = null;
-        }
-        if (reason) {
-          report({ ...entry, kind: 'refused-mainnet', reason, outcome: 'refused', errorCode: 4100 });
-          throw Object.assign(new Error('Refused: this test run is held to Hyperliquid testnet and the request signs a mainnet action.'), { code: 4100 });
-        }
-      }
-      try {
-        entry.activeChainId = Number.parseInt(await original({ method: 'eth_chainId' }), 16);
-      } catch {
-        entry.activeChainId = null;
-      }
-      const started = Date.now();
-      try {
-        const result = await original(args);
-        entry.outcome = /sign/i.test(method) ? 'signed' : 'approved';
-        entry.durationMs = Date.now() - started;
-        report(entry);
-        return result;
-      } catch (error) {
-        const code = Number.isInteger(error?.code) ? error.code : null;
-        entry.outcome = code === 4001 ? 'rejected' : 'error';
-        entry.errorCode = code;
-        entry.errorCategory = config.errorCategories[code] ?? 'other';
-        entry.durationMs = Date.now() - started;
-        report(entry);
-        throw error;
-      }
-    };
-    try {
-      provider.request = request;
-    } catch {
-      // Read-only property: define it instead (below).
-    }
-    if (provider.request !== request) {
-      try {
-        Object.defineProperty(provider, 'request', { value: request, configurable: true, writable: true });
-      } catch {
-        // Frozen provider: recorded below.
-      }
-    }
-    // A provider whose request could not be replaced would sign unrecorded.
-    if (provider.request !== request) {
-      harness.wrapFailures.push(source);
-      return provider;
-    }
-    wrapped.add(provider);
-    harness.wrapped += 1;
-    return provider;
-  };
-
-  if (config.signer === 'injected') {
-    const listeners = {};
-    const emit = (event, ...args) => (listeners[event] ?? []).forEach((fn) => {
-      try { fn(...args); } catch { /* listener errors stay in the app */ }
-    });
-    const pending = new Map();
-    let nextId = 1;
-    window[config.resolveFn] = (id, outcome) => {
-      const entry = pending.get(id);
-      if (!entry) return;
-      pending.delete(id);
-      if (outcome.error) entry.reject(Object.assign(new Error(outcome.error.message), { code: outcome.error.code }));
-      else entry.resolve(outcome.result);
-    };
-    let lastChain = null;
-    const provider = {
-      isMetaMask: true,
-      _metamask: { isUnlocked: async () => true },
-      request: ({ method, params }) => new Promise((resolve, reject) => {
-        if (!hasBinding(config.requestBinding)) {
-          reject(unrecorded());
-          return;
-        }
-        const id = nextId++;
-        pending.set(id, { resolve, reject });
-        window[config.requestBinding](JSON.stringify({ id, method, params }));
-      }).then((result) => {
-        if (method === 'wallet_switchEthereumChain' && params?.[0]?.chainId !== lastChain) {
-          lastChain = params[0].chainId;
-          emit('chainChanged', lastChain);
-        }
-        if (method === 'eth_chainId') lastChain = result;
-        if (method === 'eth_requestAccounts') emit('connect', { chainId: lastChain ?? '0x1' });
-        return result;
-      }),
-      on: (event, fn) => { (listeners[event] ??= []).push(fn); return provider; },
-      removeListener: (event, fn) => { listeners[event] = (listeners[event] ?? []).filter((f) => f !== fn); return provider; },
-      enable: () => provider.request({ method: 'eth_requestAccounts' }),
-    };
-    wrap(provider, 'injected-strict-wallet');
-    window.ethereum = provider;
-    const info = {
-      uuid: '5d1e5b4e-e2e0-4c3f-9a1d-000000000001',
-      name: 'MetaMask (strict test wallet)',
-      icon: "data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg'/>",
-      rdns: 'io.metamask',
-    };
-    const announce = () => window.dispatchEvent(new CustomEvent('eip6963:announceProvider', { detail: Object.freeze({ info, provider }) }));
-    window.addEventListener('eip6963:requestProvider', announce);
-    announce();
-    return;
-  }
-
-  // Extension mode: wrap whatever provider MetaMask injects, however the app
-  // reaches it (window.ethereum or an EIP-6963 announcement).
-  let current = window.ethereum ? wrap(window.ethereum, 'window.ethereum') : undefined;
-  try {
-    Object.defineProperty(window, 'ethereum', {
-      configurable: true,
-      get: () => current,
-      set: (value) => { current = wrap(value, 'window.ethereum'); },
-    });
-  } catch {
-    // A non-configurable window.ethereum is still wrapped by the poll below.
-  }
-  window.addEventListener('eip6963:announceProvider', (event) => {
-    wrap(event.detail?.provider, `eip6963:${event.detail?.info?.rdns ?? 'unknown'}`);
-  }, true);
-  let polls = 0;
-  const poll = setInterval(() => {
-    if (window.ethereum) wrap(window.ethereum, 'window.ethereum');
-    if (++polls > 200) clearInterval(poll);
-  }, 50);
-}
-
-export function pageScriptSource({ signer, appOrigin, network = 'testnet' }) {
-  const origin = new URL(appOrigin).origin;
-  const config = {
-    signer,
-    network,
-    appOrigin: origin,
-    errorCategories: ERROR_CATEGORIES,
-    loggedMethods: LOGGED_METHODS,
-    logBinding: LOG_BINDING,
-    requestBinding: REQUEST_BINDING,
-    resolveFn: RESOLVE_FN,
-  };
-  return `(${pageMain.toString()})(${JSON.stringify(config)}, ${mainnetTypedDataReason.toString()});`;
-}

package/adapters/terminal/lib/strict-wallet.mjs

@@ -1,138 +0,0 @@
-// EIP-1193 test wallet that enforces MetaMask's typed-data rule: reject
-// eth_signTypedData_v4 whose domain chainId differs from the active chain.
-// Signs with a viem account held by the wallet host; never exposes key
-// material. Ported from the TAT-4032 migration e2e strict wallet.
-
-export const DEFAULT_KNOWN_CHAINS = Object.freeze([1, 10, 137, 8453, 42161, 421614, 59144, 59141, 11155111]);
-
-const READ_RPC = {
-  1: 'https://ethereum-rpc.publicnode.com',
-  42161: 'https://arbitrum-one-rpc.publicnode.com',
-  421614: 'https://arbitrum-sepolia-rpc.publicnode.com',
-  59144: 'https://linea-rpc.publicnode.com',
-};
-
-// Only these reads go to the public RPC. Anything else the wallet does not
-// answer itself (eth_sendRawTransaction, account or filter methods, unknown
-// wallet_* calls) is refused before any network request.
-export const READ_ONLY_RPC_METHODS = Object.freeze([
-  'eth_blockNumber',
-  'eth_call',
-  'eth_estimateGas',
-  'eth_feeHistory',
-  'eth_gasPrice',
-  'eth_getBalance',
-  'eth_getBlockByHash',
-  'eth_getBlockByNumber',
-  'eth_getCode',
-  'eth_getLogs',
-  'eth_getStorageAt',
-  'eth_getTransactionByHash',
-  'eth_getTransactionCount',
-  'eth_getTransactionReceipt',
-  'eth_maxPriorityFeePerGas',
-  'web3_clientVersion',
-]);
-const READ_ONLY = new Set(READ_ONLY_RPC_METHODS);
-
-function rpcError(message, code) {
-  return Object.assign(new Error(message), { code });
-}
-
-function toBigIntDeep(types, primaryType, message) {
-  const out = {};
-  for (const field of types[primaryType] ?? []) {
-    const value = message[field.name];
-    if (value === undefined) continue;
-    if (/^u?int\d*$/u.test(field.type)) out[field.name] = BigInt(value);
-    else if (types[field.type]) out[field.name] = toBigIntDeep(types, field.type, value);
-    else out[field.name] = value;
-  }
-  return out;
-}
-
-export function createStrictWallet({
-  account,
-  chainId = 42161,
-  knownChains = DEFAULT_KNOWN_CHAINS,
-  refuseSwitch = false,
-  fetchImpl = globalThis.fetch,
-}) {
-  let activeChain = chainId;
-  const known = new Set(knownChains);
-  let rpcId = 1;
-
-  async function request({ method, params = [] }) {
-    switch (method) {
-      case 'eth_chainId':
-        return `0x${activeChain.toString(16)}`;
-      case 'net_version':
-        return String(activeChain);
-      case 'eth_accounts':
-      case 'eth_requestAccounts':
-        return [account.address];
-      case 'wallet_requestPermissions':
-      case 'wallet_getPermissions':
-        return [{ parentCapability: 'eth_accounts', caveats: [{ type: 'restrictReturnedAccounts', value: [account.address.toLowerCase()] }] }];
-      case 'wallet_revokePermissions':
-        return null;
-      case 'metamask_getProviderState':
-        return { accounts: [account.address.toLowerCase()], chainId: `0x${activeChain.toString(16)}`, isUnlocked: true, networkVersion: String(activeChain) };
-      case 'wallet_switchEthereumChain': {
-        const id = Number.parseInt(params[0].chainId, 16);
-        if (refuseSwitch) throw rpcError('User rejected the request.', 4001);
-        if (!known.has(id)) throw rpcError(`Unrecognized chain ID ${params[0].chainId}`, 4902);
-        activeChain = id;
-        return null;
-      }
-      case 'wallet_addEthereumChain':
-        known.add(Number.parseInt(params[0].chainId, 16));
-        return null;
-      case 'eth_signTypedData_v4': {
-        const [from, raw] = params;
-        const data = typeof raw === 'string' ? JSON.parse(raw) : raw;
-        const domainChain = Number(BigInt(data.domain.chainId));
-        if (String(from).toLowerCase() !== account.address.toLowerCase()) throw rpcError('Unknown account', 4100);
-        if (domainChain !== activeChain) {
-          throw rpcError(`Provided chainId "${domainChain}" must match the active chainId "${activeChain}"`, -32602);
-        }
-        const types = { ...data.types };
-        delete types.EIP712Domain;
-        return account.signTypedData({
-          domain: { ...data.domain, chainId: domainChain },
-          types,
-          primaryType: data.primaryType,
-          message: toBigIntDeep(types, data.primaryType, data.message),
-        });
-      }
-      case 'personal_sign': {
-        const [message, from] = params;
-        if (String(from).toLowerCase() !== account.address.toLowerCase()) throw rpcError('Unknown account', 4100);
-        return account.signMessage({ message: { raw: message } });
-      }
-      case 'eth_sendTransaction':
-      case 'eth_sign':
-        throw rpcError(`${method} is not supported by the strict test wallet`, 4200);
-      default: {
-        if (!READ_ONLY.has(method)) throw rpcError(`${method} is not supported by the strict test wallet`, 4200);
-        const url = READ_RPC[activeChain];
-        if (!url) throw rpcError(`No read RPC for chain ${activeChain}`, 4200);
-        const response = await fetchImpl(url, {
-          method: 'POST',
-          headers: { 'content-type': 'application/json' },
-          body: JSON.stringify({ jsonrpc: '2.0', id: rpcId++, method, params }),
-        });
-        const body = await response.json();
-        if (body.error) throw rpcError(body.error.message, body.error.code);
-        return body.result;
-      }
-    }
-  }
-
-  return {
-    request,
-    get chainId() {
-      return activeChain;
-    },
-  };
-}