@deeeed/metamask-harness 0.81.0 → 0.82.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.81.0",
+  "version": "0.82.0",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,14 +21,14 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-rn": "0.17.0",
-    "@farmslot/adapter-sdk": "0.4.0",
+    "@farmslot/adapter-rn": "0.17.1",
+    "@farmslot/adapter-sdk": "0.5.0",
     "@farmslot/adapter-web": "0.3.1",
     "@farmslot/agent-runtime": "0.17.0",
     "@farmslot/handoff": "^0.3.1",
     "@farmslot/protocol": "0.34.0",
-    "@farmslot/recipe-cli": "0.5.0",
-    "@farmslot/recipe-runner": "0.24.0",
+    "@farmslot/recipe-cli": "0.6.0",
+    "@farmslot/recipe-runner": "0.25.0",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",

package/adapters/terminal/lib/mainnet-guard.mjs

@@ -1,186 +0,0 @@
-// Testnet enforcement for the terminal slot browser. In testnet mode nothing
-// the browser runs may reach a mainnet venue (Hyperliquid, or Lighter when the
-// controller carries it), whatever the dev server happens to serve:
-//   - the network layer: --host-resolver-rules makes every mainnet venue host
-//     unresolvable for the whole browser (pages, workers, WebSockets), and
-//     the wallet host fails and logs each attempt it sees (blocked-mainnet);
-//   - the wallet layer: a typed-data request for a mainnet action is refused
-//     before MetaMask or the injected signer sees it (refused-mainnet).
-// The venue hosts are the endpoints the venue SDK, the perps controller and
-// the app's source in the checkout connect to.
-
-import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
-import { createRequire } from 'node:module';
-import path from 'node:path';
-
-const SDK_PACKAGE = '@nktkas/hyperliquid';
-const CONTROLLER_PACKAGE = '@metamask/perps-controller';
-// Venue API hosts of the perps providers the terminal can configure: the
-// Hyperliquid API/RPC hosts and Lighter's zkLighter API.
-const VENUE_HOST = /^(?:[a-z0-9-]+\.)*(?:hyperliquid(?:-testnet)?\.xyz|zklighter\.elliot\.ai)$/u;
-// A URL in source text, any case; it is then parsed (canonicalUrl).
-const URL_CANDIDATE = /\b(?:https?|wss?):\/\/[^\s'"`<>(){}\\]+/giu;
-// Any mention of a venue host, URL or not: the cross-check of the SDK scan.
-const VENUE_HOST_MENTION = /(?<![\w.-])(?:[a-z0-9-]+\.)*(?:hyperliquid(?:-testnet)?\.xyz|zklighter\.elliot\.ai)(?![\w-])/giu;
-// Request paths of the venue APIs (info, exchange, WebSocket, EVM RPC,
-// Lighter's stream and REST API).
-const API_PATH = /^\/(?:ws|info|exchange|evm|stream|api)(?:\/|$)/u;
-const SOURCE_FILE = /\.(?:m?js|cjs|tsx?)$/u;
-// The venues' web hosts: the Hyperliquid app, which serves the coin icons the
-// terminal shows and the explorer pages it links to. Never an API endpoint,
-// on either network, so never blocked and never proof of the served network.
-export const LINK_HOSTS = new Set(['app.hyperliquid.xyz', 'app.hyperliquid-testnet.xyz']);
-
-function packageRoot(checkout, name) {
-  try {
-    const require = createRequire(path.join(checkout, 'package.json'));
-    return path.dirname(require.resolve(`${name}/package.json`));
-  } catch {
-    const direct = path.join(checkout, 'node_modules', name);
-    return existsSync(path.join(direct, 'package.json')) ? direct : null;
-  }
-}
-
-function* sourceFiles(dir, depth = 0) {
-  if (depth > 12) return;
-  for (const entry of readdirSync(dir)) {
-    if (entry === 'node_modules') continue;
-    const file = path.join(dir, entry);
-    const stat = statSync(file);
-    if (stat.isDirectory()) yield* sourceFiles(file, depth + 1);
-    else if (SOURCE_FILE.test(entry)) yield file;
-  }
-}
-
-export function isTestnetHost(host) {
-  return /(?:^|[.-])testnet(?:[.-]|$)/u.test(host);
-}
-
-// Venue URLs in source text, by kind: hosts used with an API path, hosts
-// used bare (a base URL whose paths are appended elsewhere), and hosts with
-// any other path (/rpc, /health, /coins/BTC.svg). Link hosts are left out,
-// except that a link host with an API path is reported (linkApi).
-export function venueUrlHosts(text) {
-  const found = { api: new Set(), bare: new Set(), other: new Set(), linkApi: new Set() };
-  for (const [candidate] of text.matchAll(URL_CANDIDATE)) {
-    const url = canonicalUrl(candidate);
-    if (!url || !VENUE_HOST.test(url.hostname)) continue;
-    const { hostname: host, pathname } = url;
-    // The path as a server reads it: decoded, any case.
-    const apiPath = API_PATH.test(safeDecode(pathname).toLowerCase());
-    if (LINK_HOSTS.has(host)) {
-      // A link host used as an API: the exemption would hide an endpoint.
-      if (apiPath) found.linkApi.add(`${host}${pathname}`);
-      continue;
-    }
-    if (apiPath) found.api.add(host);
-    else if (pathname === '/') found.bare.add(host);
-    else found.other.add(host);
-  }
-  return found;
-}
-
-
-// Endpoint hosts in one text: with anyPath (the venue SDK) every venue host;
-// otherwise API URLs and base URLs.
-export function venueEndpointHosts(text, { anyPath = false } = {}) {
-  const { api, bare, other } = venueUrlHosts(text);
-  return new Set([...api, ...bare, ...(anyPath ? other : [])]);
-}
-
-// The venue hosts the checkout can connect to. { mainnet: [...], testnet: [...] }
-//   - the venue SDK: every venue host, whatever the path;
-//   - the perps controller and the app's own source: API URLs and base URLs.
-// Link hosts (LINK_HOSTS) are never on either list, and a link host with an
-// API path in any scanned source fails the launch. Every mainnet host the SDK
-// mentions (as a URL or not) must be on the list, or the launch fails.
-export function venueHosts(checkout) {
-  const sdk = packageRoot(checkout, SDK_PACKAGE);
-  if (!sdk) throw new Error(`${SDK_PACKAGE} is not installed in ${checkout}; the mainnet block list comes from it.`);
-  const sources = [
-    { root: sdk, anyPath: true },
-    { root: packageRoot(checkout, CONTROLLER_PACKAGE), anyPath: false },
-    { root: path.join(checkout, 'src'), anyPath: false },
-  ].filter(({ root }) => root && existsSync(root));
-  const hosts = new Set();
-  const sdkMentions = new Set();
-  for (const { root, anyPath } of sources) {
-    for (const file of sourceFiles(root)) {
-      const text = readFileSync(file, 'utf8');
-      const { linkApi } = venueUrlHosts(text);
-      if (linkApi.size > 0) throw new Error(`${file} uses the venue web host as an API (${[...linkApi].join(', ')}); it is exempt from the mainnet block, so refusing to launch.`);
-      for (const host of venueEndpointHosts(text, { anyPath })) hosts.add(host);
-      if (anyPath) {
-        for (const [mention] of text.matchAll(VENUE_HOST_MENTION)) {
-          const host = mention.toLowerCase();
-          if (!LINK_HOSTS.has(host)) sdkMentions.add(host);
-        }
-      }
-    }
-  }
-  const mainnet = [...hosts].filter((host) => !isTestnetHost(host)).sort();
-  const testnet = [...hosts].filter((host) => isTestnetHost(host)).sort();
-  if (mainnet.length === 0) throw new Error(`no mainnet venue host found in ${SDK_PACKAGE} at ${sdk}; refusing to launch without a block list.`);
-  const missing = [...sdkMentions].filter((host) => !isTestnetHost(host) && !mainnet.includes(host));
-  if (missing.length > 0) throw new Error(`the mainnet block list misses ${missing.join(', ')}, which ${SDK_PACKAGE} names; refusing to launch.`);
-  return { mainnet, testnet };
-}
-
-export function mainnetVenueHosts(checkout) {
-  return venueHosts(checkout).mainnet;
-}
-
-export function hostResolverRules(hosts) {
-  // The host and its fully qualified form (trailing dot) alike.
-  return `--host-resolver-rules=${hosts.flatMap((host) => [`MAP ${host} ~NOTFOUND`, `MAP ${host}. ~NOTFOUND`]).join(', ')}`;
-}
-
-// A URL as the network sees it: new URL() lowercases the host, drops a
-// default port and resolves dot segments; a trailing dot names the same host.
-// { hostname, pathname }, or null.
-export function canonicalUrl(value) {
-  try {
-    const url = new URL(String(value));
-    return { hostname: url.hostname.toLowerCase().replace(/\.$/u, ''), pathname: url.pathname };
-  } catch {
-    return null;
-  }
-}
-
-function safeDecode(value) {
-  try {
-    return decodeURIComponent(value);
-  } catch {
-    return value;
-  }
-}
-
-export function hostOf(url) {
-  return canonicalUrl(url)?.hostname ?? null;
-}
-
-export function isMainnetVenueUrl(url, hosts) {
-  const host = hostOf(url);
-  return host !== null && hosts.includes(host);
-}
-
-// A Hyperliquid action meant for mainnet: user-signed actions carry
-// hyperliquidChain "Mainnet"; L1 actions are signed as a phantom Agent whose
-// source is "a" on mainnet ("b" on testnet).
-export function mainnetTypedDataReason(data) {
-  const message = data?.message ?? {};
-  if (typeof message.hyperliquidChain === 'string' && message.hyperliquidChain.toLowerCase() === 'mainnet') {
-    return 'hyperliquidChain=Mainnet';
-  }
-  if (data?.primaryType === 'Agent' && message.source === 'a') return 'L1 Agent source=a';
-  return null;
-}
-
-// The wallet refusal for testnet runs, as the @farmslot/adapter-web/dapp page
-// script and wallet-request binding take it: mainnetTypedDataReason runs in
-// the page too, so it stays self-contained.
-export const TESTNET_TYPED_DATA_POLICY = Object.freeze({
-  reason: mainnetTypedDataReason,
-  kind: 'refused-mainnet',
-  message: 'Refused: this test run is held to Hyperliquid testnet and the request signs a mainnet action.',
-});

package/adapters/terminal/policy.mjs

@@ -1,35 +0,0 @@
-// The Web Terminal's venue policy: what the generic web-dapp launch, wallet
-// host and readiness need to know about Hyperliquid. They take it as an
-// argument (the leaf scripts import it from --policy-module, reading its
-// `policy` export), so none of them names the venue. It becomes the terminal
-// plugin's `policy` once recipe libraries can declare adapters; the Terminal's
-// detection and its signature-log rules (_signature-log.mjs) move with it.
-
-import { fileURLToPath } from 'node:url';
-
-import { LINK_HOSTS, TESTNET_TYPED_DATA_POLICY, venueHosts } from './lib/mainnet-guard.mjs';
-
-export const policy = Object.freeze({
-  // network=testnet: the hosts the browser must never reach, and the hosts
-  // whose traffic proves the app serves testnet.
-  venueHosts(checkout) {
-    const { mainnet, testnet } = venueHosts(checkout);
-    return { blocked: mainnet, served: testnet };
-  },
-  // Venue web hosts (pages, coin icons): never blocked, never proof.
-  linkHosts: Object.freeze([...LINK_HOSTS]),
-  // The launch's proof that the block holds: requests to this blocked host
-  // (preferred; else the first blocked host) must fail.
-  probe: Object.freeze({ host: 'api.hyperliquid.xyz', httpPath: '/info', httpBody: '{"type":"meta"}', wsPath: '/ws' }),
-  // The chain the injected wallet starts on (Arbitrum One).
-  startChain: 42161,
-  // Typed data a testnet run never signs.
-  refuseTypedData: TESTNET_TYPED_DATA_POLICY,
-  // The app's first page: the launch opens it, readiness probes it.
-  startPath: '/order/BTC',
-  dependencies: Object.freeze(['next', '@nktkas/hyperliquid', '@metamask/perps-controller']),
-  // The dev-server environment variable that forces testnet (advisory check).
-  testnetVariable: 'NEXT_PUBLIC_HYPERLIQUID_FORCE_TESTNET',
-  // This module, for the wallet host (a separate process).
-  module: fileURLToPath(import.meta.url),
-});

package/dist/adapters/terminal/console-capture.js

@@ -1,59 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { recipeRuntimePath } from "@farmslot/recipe-cli/harness";
-import { verifyCapture } from "../../../library/actions/shared/console-collector.mjs";
-import { ensureConsoleCollector } from "../console-capture.js";
-const TERMINAL_CONSOLE_FILES = Object.freeze({
-  app: "app-console.log",
-  extension: "extension-console.log",
-  collectorLog: "console-tail.log",
-  pidFile: "console-tail.pid"
-});
-function terminalRuntimeFile(target, name) {
-  let root = path.resolve(target);
-  try {
-    root = fs.realpathSync(root);
-  } catch {
-  }
-  return recipeRuntimePath(root, "terminal", name);
-}
-function terminalCaptureFiles(target) {
-  return {
-    extensionLog: terminalRuntimeFile(target, TERMINAL_CONSOLE_FILES.extension),
-    pageLog: terminalRuntimeFile(target, TERMINAL_CONSOLE_FILES.app),
-    collectorLog: terminalRuntimeFile(target, TERMINAL_CONSOLE_FILES.collectorLog),
-    pidFile: terminalRuntimeFile(target, TERMINAL_CONSOLE_FILES.pidFile)
-  };
-}
-function terminalCdpPort() {
-  return process.env.RECIPE_CDP_PORT ?? process.env.CDP_PORT;
-}
-async function ensureTerminalConsoleCapture(target) {
-  const cdpPort = terminalCdpPort();
-  if (!cdpPort) throw new Error("Terminal console capture requires the slot CDP port.");
-  await ensureConsoleCollector({
-    cdpPort,
-    ...terminalCaptureFiles(target),
-    waitForAttachment: false,
-    cwd: target
-  });
-}
-async function verifyTerminalConsoleControl(capture) {
-  let browser = null;
-  try {
-    const value = JSON.parse(fs.readFileSync(terminalRuntimeFile(capture.projectRoot, "browser.json"), "utf8"));
-    browser = typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
-  } catch {
-    browser = null;
-  }
-  if (typeof browser?.appOrigin !== "string") return { ok: false, detail: "no slot browser state (browser.json) to verify the page console capture against" };
-  return verifyCapture({ cdpPort: capture.cdpPort, log: capture.pageLog, target: "page", appOrigin: browser.appOrigin });
-}
-export {
-  TERMINAL_CONSOLE_FILES,
-  ensureTerminalConsoleCapture,
-  terminalCaptureFiles,
-  terminalCdpPort,
-  terminalRuntimeFile,
-  verifyTerminalConsoleControl
-};

package/dist/adapters/terminal/doctor-checks.js

@@ -1,24 +0,0 @@
-import { terminalAppPort, terminalCdpPort } from "./surface.js";
-async function terminalDoctorChecks(target) {
-  const { terminalReadiness } = await import("../../../adapters/terminal/lib/readiness.mjs");
-  const { resolveBrowser } = await import("../../../adapters/terminal/launch.mjs");
-  const { policy } = await import("../../../adapters/terminal/policy.mjs");
-  const report = await terminalReadiness({
-    policy,
-    target,
-    appPort: terminalAppPort(),
-    cdpPort: terminalCdpPort(),
-    signer: process.env.TERMINAL_SIGNER || "extension",
-    account: process.env.TERMINAL_ACCOUNT || "dev1",
-    probeBrowser: resolveBrowser
-  });
-  return report.checks.map((check) => ({
-    id: `terminal-${check.id}`,
-    status: check.status === "pass" ? "pass" : "fail",
-    required: check.required,
-    message: check.detail
-  }));
-}
-export {
-  terminalDoctorChecks
-};

package/dist/adapters/terminal/overlay.js

@@ -1,25 +0,0 @@
-import path from "node:path";
-import { runnerDir } from "../../paths.js";
-const terminalHarness = {
-  install: { entry: "adapters/terminal/inject.mjs", fallback: "adapters/terminal/inject.mjs", node: true },
-  cleanup: { entry: "adapters/terminal/cleanup.mjs", fallback: "adapters/terminal/cleanup.mjs", node: true },
-  verify: () => ({
-    command: process.execPath,
-    prefixArgs: [
-      path.join(runnerDir, "adapters", "terminal", "verify.mjs"),
-      "--policy-module",
-      path.join(runnerDir, "adapters", "terminal", "policy.mjs")
-    ]
-  }),
-  restart: "mm-harness launch"
-};
-const terminalRuntimeContext = {
-  forbiddenFields: ["metroPort", "simulator", "simulatorUdid", "adbSerial", "extensionId"],
-  resources: ({ existing, defaults, envPort }) => ({
-    cdpPort: envPort("RECIPE_CDP_PORT", "CDP_PORT") ?? existing.cdpPort ?? defaults.cdpPort
-  })
-};
-export {
-  terminalHarness,
-  terminalRuntimeContext
-};

package/dist/adapters/terminal/readiness.js

@@ -1,11 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-const terminalReadiness = {
-  compatibilityMode: (target) => fs.existsSync(path.join(target, "src/features/perpetuals")) ? "slot browser over CDP (website; no product bridge)" : "unsupported/no bridge",
-  liveChecks: async (target) => (await import("./doctor-checks.js")).terminalDoctorChecks(target),
-  // Screenshots come from the slot browser over CDP.
-  captureProviders: ["cdp"]
-};
-export {
-  terminalReadiness
-};

package/dist/adapters/terminal/surface.js

@@ -1,135 +0,0 @@
-import { shellQuote } from "@farmslot/recipe-cli/harness";
-import path from "node:path";
-import { defineAdapter } from "@farmslot/adapter-sdk";
-import fs from "node:fs";
-import { TERMINAL_CONSOLE_FILES, terminalRuntimeFile } from "./console-capture.js";
-import { stopTerminalBrowserSync } from "./stop.js";
-import { adapterRegistry } from "../registry.js";
-import { terminalActions } from "./actions.js";
-import { terminalHarness, terminalRuntimeContext } from "./overlay.js";
-import { terminalReadiness } from "./readiness.js";
-import { terminalDiagnostics, terminalObservation } from "./run.js";
-import { checkoutHas, checkoutHasDir } from "../checkout-files.js";
-function portFromEnv(...names) {
-  for (const name of names) {
-    const raw = process.env[name];
-    if (raw && /^\d+$/u.test(raw)) return Number(raw);
-  }
-  return void 0;
-}
-function terminalAppPort() {
-  return portFromEnv("TERMINAL_APP_PORT", "RECIPE_WATCHER_PORT", "WATCHER_PORT");
-}
-function terminalCdpPort() {
-  return portFromEnv("RECIPE_CDP_PORT", "CDP_PORT");
-}
-function terminalSignerFor(target) {
-  try {
-    const state = JSON.parse(fs.readFileSync(terminalRuntimeFile(target, "browser.json"), "utf8"));
-    if (typeof state.signer === "string") return state.signer;
-  } catch {
-  }
-  return process.env.TERMINAL_SIGNER || "extension";
-}
-const terminalSurface = defineAdapter({
-  id: "terminal",
-  sdkVersion: 1,
-  headless: false,
-  resolveSlotPorts() {
-  },
-  async runtimeStatus(target) {
-    const { terminalReadiness: terminalReadiness2 } = await import("../../../adapters/terminal/lib/readiness.mjs");
-    const { policy } = await import("../../../adapters/terminal/policy.mjs");
-    const report = await terminalReadiness2({
-      policy,
-      target: path.resolve(target),
-      appPort: terminalAppPort(),
-      cdpPort: terminalCdpPort(),
-      signer: process.env.TERMINAL_SIGNER || "extension"
-    });
-    const blocking = report.checks.filter((check) => check.required && check.status === "fail");
-    const devServer = report.checks.find((check) => check.id === "app-dev-server");
-    return {
-      decision: blocking.length === 0 ? "ready" : "blocked",
-      reasonCode: blocking[0]?.id,
-      reasons: (blocking.length ? blocking : report.checks).map((check) => `${check.id}: ${check.detail}`),
-      nextAction: blocking.length === 0 ? void 0 : blocking[0].id === "app-dev-server" || blocking[0].id === "testnet-forced" ? "start the slot dev server with testnet forced (Farmslot preflight), then retry" : `mm-harness doctor --adapter terminal --target ${shellQuote(path.resolve(target))} --json`,
-      deps: report.checks.find((check) => check.id === "dependencies")?.status === "pass" ? "current" : "missing",
-      devServer: {
-        label: "next",
-        status: devServer?.status === "pass" ? "up" : "down"
-      }
-    };
-  },
-  runwayProvision: {
-    async run(target, options) {
-      return {
-        schemaVersion: 1,
-        command: "provision",
-        adapter: "terminal",
-        target: path.resolve(target),
-        status: "fail",
-        exitCode: 2,
-        error: {
-          code: "UNSUPPORTED_ADAPTER",
-          message: "the Web Terminal is a website; there is no simulator or build to provision.",
-          userAction: options.rerunCommand || "mm-harness launch --adapter terminal"
-        }
-      };
-    }
-  },
-  devServer: {
-    label: "browser",
-    describe: () => "terminal slot browser and wallet host (the Next.js dev server belongs to the slot)",
-    stop(target) {
-      const result = stopTerminalBrowserSync(target);
-      return { kind: "stopped", status: result.status, summary: result.summary, output: result.output };
-    }
-  },
-  logSources(target) {
-    return [
-      { label: "app-console", path: terminalRuntimeFile(target, TERMINAL_CONSOLE_FILES.app) },
-      ...terminalSignerFor(target) === "extension" ? [{ label: "extension-console", path: terminalRuntimeFile(target, TERMINAL_CONSOLE_FILES.extension) }] : [],
-      { label: "wallet-requests", path: terminalRuntimeFile(target, "wallet-requests.jsonl") },
-      { label: "wallet-host", path: terminalRuntimeFile(target, "wallet-host.log") },
-      { label: "browser", path: terminalRuntimeFile(target, "browser.log") },
-      { label: "next", path: path.join(target, "temp/farmslot/next-dev.log") }
-    ];
-  },
-  // The terminal page's console and uncaught exceptions, as the Extension's
-  // diagnostics read the extension console: errors make a run REVIEW.
-  appLogSource(target) {
-    return { label: "app-console", path: terminalRuntimeFile(target, TERMINAL_CONSOLE_FILES.app) };
-  },
-  detect: {
-    remote: (url) => url.includes("va-mmcx-terminal"),
-    files: (target) => checkoutHasDir(target, "src/features/perpetuals") && ["next.config.ts", "next.config.mjs", "next.config.js"].some((file) => checkoutHas(target, file))
-  },
-  flags: { launch: ["freshProfile", "headless", "headful"] },
-  hints: {
-    launch: "mm-harness launch --adapter terminal --cdp-port <port> --watcher-port <app port>",
-    relaunch: "mm-harness launch --adapter terminal --fresh-profile",
-    runtimeProbeRecovery: (target) => `mm-harness doctor --adapter terminal --target ${shellQuote(path.resolve(target))}`
-  },
-  launch: async (context) => (await import("./launch.js")).launchTerminal(context),
-  actions: terminalActions,
-  harness: terminalHarness,
-  runtimeContext: terminalRuntimeContext,
-  readiness: terminalReadiness,
-  fixtures: { operations: ["init", "sync", "set"] },
-  debug: {
-    args: ({ devMenu }) => [
-      ...process.env.WATCHER_PORT ? ["--port", process.env.WATCHER_PORT] : [],
-      "--action",
-      devMenu ? "dev-menu" : "debug"
-    ]
-  },
-  diagnostics: terminalDiagnostics,
-  observation: terminalObservation
-});
-adapterRegistry.register(terminalSurface);
-export {
-  terminalAppPort,
-  terminalCdpPort,
-  terminalSurface
-};