@deeeed/metamask-harness 0.82.1 → 0.84.0

package/dist/performance-observation.js

@@ -1,11 +1,17 @@
+import { createRequire } from "node:module";
 import path from "node:path";
 import { promisify } from "node:util";
 import { gzip } from "node:zlib";
 import { getAdapterSurface } from "./adapters/surface.js";
-import { createExtensionPerformanceBackend } from "./adapters/extension/performance-observer.js";
-import { TRACE_KINDS } from "./adapters/performance/cdp-trace.js";
-import { summarizeFrames } from "@farmslot/adapter-rn";
-import { summarizeJavaScriptTasks } from "./adapters/performance/js-task-metrics.js";
+import { resolveExtensionId } from "./adapters/extension/extension-id.js";
+import {
+  TRACE_KINDS,
+  TRACE_MARKER_PREFIX
+} from "./adapters/performance/trace-kinds.js";
+import {
+  summarizeFrames,
+  summarizeJavaScriptTasks
+} from "@farmslot/recipe-runner/runtime/cdp-trace";
 import {
   indexArtifactManifest,
   readContainedJsonArtifact,
@@ -512,7 +518,24 @@ function unavailableCapture(session, window, reason) {
   );
 }
 async function createExtensionPerformanceObserver(target, env) {
-  return createExtensionPerformanceBackend(extensionCdpPort(env), target);
+  const cdpPort = extensionCdpPort(env);
+  const extensionId = (await resolveExtensionId(target, { cdpPort })).extensionId;
+  if (!extensionId) {
+    throw new Error("Extension performance observation could not resolve the MetaMask extension id.");
+  }
+  const { createExtensionPerformanceBackend } = createRequire(import.meta.url)(
+    "@farmslot/adapter-web/performance-observer"
+  );
+  return createExtensionPerformanceBackend({
+    cdpPort,
+    extensionId,
+    uiPaths: ["/home.html", "/sidepanel.html"],
+    kind: TRACE_KINDS.extension,
+    platform: "extension",
+    markerPrefix: TRACE_MARKER_PREFIX,
+    connectTimeoutMs: 1e4,
+    commandTimeoutMs: 1e4
+  });
 }
 function extensionCdpPort(env) {
   const port = Number(env.CDP_PORT ?? env.RECIPE_CDP_PORT);

package/docs/CONTRIBUTING.md

@@ -67,9 +67,11 @@ in the registry, so a platform registered the same way is reached by the
 commands that take `--adapter` with no edit to shared code
 (`tests/fixtures/example-adapter.ts`); `status` detects the adapter from the
 checkout.
-The CLI contract (`src/command-contract.ts`) still lists the four built-ins for
-`--adapter`, so a new platform reaches `bin/mm-harness` once a plugin loader
-registers it and extends that list.
+The public command table (`src/command-contract.ts`) reads the `--adapter`
+choices when a command is validated: the registered adapters, then the adapters
+the libraries on `RECIPE_LIBRARY_PATH` and the command's `--library` entries
+declare. A new platform or library plugin reaches `bin/mm-harness` with no edit
+to the table.
 
 Extend `AdapterSurface` when a platform owns the behavior; members a platform
 does not need are optional, and Core reports headless/N/A explicitly. Put each
@@ -82,7 +84,7 @@ command-local platform ladders for surface-owned behavior:
 - `run`/`call` come from `@farmslot/recipe-cli/harness` and read `run`,
   `recording`, `diagnostics`, `observation` and `sourceFingerprint`;
   mm-harness hands them its engine (`src/engine.ts`) and its device targeting
-  and plan steps (`src/cli.ts`);
+  and plan steps (`src/mm-harness-cli.ts`);
 - the runner reads `actions` (manifest, bundled semantic actions, live adapter
   scripts, `cdp.target`, the `ui.*` transport, adapter wrappers, input checks);
 - `install`/`verify`/`cleanup` read `harness`, `agentic-runtime.json` reads

package/docs/cli-contract.md

@@ -94,7 +94,7 @@ These are real farm bugs. The goldens freeze the current rejections, so fixing e
 
 `goldens-terminal` freezes the `va-mmcx-terminal-farm` hooks with their exact argv (`recipe_action_manifest`, `recipe_doctor`, `recipe_harness_{install,verify,cleanup}`, `recipe_run`, the browser `boot`/`shutdown` resources and `teardown`), against a fresh fixture slot: no slot dev server, no Extension dist, and the farm's wallet fixture outside the slot, so `install` copies it in. `launch` is frozen on its cold path: it refuses at the missing dist before any browser starts. The slot's CDP port is the one port no port holder reserves: a farm slot with no browser has it free, and the Terminal's port checks probe it.
 
-`terminal` is the plugin the `experimental-metamask-recipe-terminal` library declares (`adapters.terminal`, extends the built-in `web-dapp`), so the family loads it: set `GOLDENS_TERMINAL_LIBRARY` to a checkout of that library, which the family copies into its sandbox and puts on `RECIPE_LIBRARY_PATH`. CI has no access to the private library and skips the family (`CI` set); local runs need the variable, and without it outside CI the family fails. A release gate must set it too (proposed for the release checklist). `goldens-discovery` covers the built-in `web-dapp` in its per-adapter loop.
+`terminal` is the plugin the `experimental-metamask-recipe-terminal` library declares (`adapters.terminal`, extends the built-in `web-dapp`), so the family loads it: set `GOLDENS_TERMINAL_LIBRARY` to a checkout of that library. The family copies one pinned commit of it (`GOLDENS_TERMINAL_LIBRARY_REV` in `goldens-terminal.test.sh`) into its sandbox with `git archive` and puts it on `RECIPE_LIBRARY_PATH`, so the goldens don't move when the checkout does. The checkout must contain that commit (`git fetch`); moving the pin and regenerating the goldens is one change. CI has no access to the private library and skips the family (`CI` set); local runs need the variable, and without it outside CI the family fails. A release gate must set it too (proposed for the release checklist). `goldens-discovery` covers the built-in `web-dapp` in its per-adapter loop.
 
 Outside this boundary: a successful `launch` and the `temp/recipe/runtime/terminal/` layout (`browser.pid`), the library's recipes, `run terminal.perps.<name> --plan`, and the recipe-terminal `console-guard.mjs` import paths.
 

package/docs/feature-guard.md

@@ -74,7 +74,7 @@ Captures are normalized (paths, versions, pids, timestamps, durations, epoch num
 
 What the normaliser deliberately masks, and so cannot catch: any semver under a key ending in `version` other than the harness's own, numbers under keys ending in `Ms`/`Seconds`/`duration`/`elapsed` (so a changed timeout value), epoch-millisecond numbers, and the `volatile` paths (a new product warning during a live run). Each varies run to run on real slots; the goldens freeze the static values.
 
-Machine rules: on macwork, headless only and no focus stealing (`TERMINAL_HEADLESS=1` is in the matrix). Headful runs and the Extension wallet popup fail while macwork's screen is locked (`Page.captureScreenshot` timeout). Mobile and the Extension run on free macpro or mini slots, never mini-mm-3. The differential stops and cleans the slot runtime it used; reinstall the farm's overlay afterwards if the slot is handed back to the farm.
+Machine rules: on macwork, headless only and no focus stealing (`TERMINAL_HEADLESS=1` is in the matrix). A headful `run`/`call` (Extension, including its wallet popup, or a headful web-dapp) can't proceed while macwork's screen is locked: it refuses with `SESSION_LOCKED` at its runtime check (it used to stall until a `Page.captureScreenshot` timeout). Mobile and the Extension run on free macpro or mini slots, never mini-mm-3. The differential stops and cleans the slot runtime it used; reinstall the farm's overlay afterwards if the slot is handed back to the farm.
 
 ## 3. Release smoke
 

package/library/actions/core/perps/_controller.mjs

@@ -904,6 +904,16 @@ export async function runAdapter(callback) {
       // Surface the failure; still tear down so a half-open WebSocket from a
       // failed write doesn't leave the process wedged open.
       process.stderr.write(`[core/perps] adapter failed: ${fmtError(error)}\n`);
+      // A module the checkout cannot resolve is its environment (a partial
+      // workspace build), not app logic: say so on its own line, with the
+      // build step, for the runner's environment classification to match.
+      if (error?.code === 'ERR_MODULE_NOT_FOUND' || error?.code === 'MODULE_NOT_FOUND') {
+        const root = input.context?.projectRoot ?? process.cwd();
+        const missing = error.url ?? String(error.message ?? '').split('\n')[0];
+        process.stderr.write(
+          `[core/perps] environment: cannot resolve ${missing}\n  Next: cd '${root.replace(/'/gu, `'\\''`)}' && yarn build\n`,
+        );
+      }
     }
   } finally {
     await disconnectController(exitCode);

package/library/actions/extension/wallet/import.mjs

@@ -100,6 +100,23 @@ async function unlockProfile(page, credentials, timeoutMs) {
   await waitForSelectorToDisappear(page, SELECTORS.unlockPassword, timeoutMs);
 }
 
+// A locked profile is unlocked before the account proof. A fresh profile can
+// also lock right after onboarding while the sidepanel attaches, stranding the
+// proof on #/unlock: that relock is recovered once with the fixture password and
+// reported as relockRecovered; a further lock fails with the route error.
+async function ensureUnlockedSelectedAccount(page, credentials, timeoutMs) {
+  if (await hasVisibleSelector(page, SELECTORS.unlockPassword)) await unlockProfile(page, credentials, timeoutMs);
+  try {
+    const visibleSession = await ensureVisibleSelectedAccount(page, credentials.expectedAddress, timeoutMs);
+    return { ...visibleSession, relockRecovered: false };
+  } catch (error) {
+    if (!(await hasVisibleSelector(page, SELECTORS.unlockPassword))) throw error;
+    await unlockProfile(page, credentials, timeoutMs);
+    const visibleSession = await ensureVisibleSelectedAccount(page, credentials.expectedAddress, timeoutMs);
+    return { ...visibleSession, relockRecovered: true };
+  }
+}
+
 async function importThroughUi(page, input, timeoutMs) {
   const credentials = await resolveWalletImportCredentials(input);
   const metametricsEnabled = input.node?.metametrics === true || input.node?.metametrics === 'true';
@@ -149,7 +166,7 @@ async function importThroughUi(page, input, timeoutMs) {
   await waitForSelector(page, SELECTORS.complete, timeoutMs);
   await page.click(SELECTORS.complete);
 
-  const visibleSession = await ensureVisibleSelectedAccount(page, credentials.expectedAddress, timeoutMs);
+  const visibleSession = await ensureUnlockedSelectedAccount(page, credentials, timeoutMs);
   return { credentials, visibleSession, metametricsEnabled };
 }
 
@@ -168,9 +185,7 @@ runAdapter((input) => withExtensionPage(input, async (page) => {
     if (!onboarding) {
       const credentials = await resolveWalletImportCredentials(input);
       const completionTriggered = await dismissVisibleOnboardingCompletion(page);
-      const locked = await hasVisibleSelector(page, SELECTORS.unlockPassword);
-      if (locked) await unlockProfile(page, credentials, timeoutMs);
-      const visibleSession = await ensureVisibleSelectedAccount(page, credentials.expectedAddress, timeoutMs);
+      const visibleSession = await ensureUnlockedSelectedAccount(page, credentials, timeoutMs);
       return {
         action: input.action,
         method: 'ui-visible-session',
@@ -191,6 +206,7 @@ runAdapter((input) => withExtensionPage(input, async (page) => {
       selectedIdentitySha256: imported.visibleSession.selectedIdentitySha256,
       selectedAddressMatched: imported.visibleSession.selectedAddressMatched,
       selectionPerformed: imported.visibleSession.selectionPerformed,
+      relockRecovered: imported.visibleSession.relockRecovered,
       completedOnboarding: true,
       metametricsEnabled: imported.metametricsEnabled,
       interests: [],
@@ -213,6 +229,7 @@ runAdapter((input) => withExtensionPage(input, async (page) => {
       selectedIdentitySha256: imported.visibleSession.selectedIdentitySha256,
       selectedAddressMatched: imported.visibleSession.selectedAddressMatched,
       selectionPerformed: imported.visibleSession.selectionPerformed,
+      relockRecovered: imported.visibleSession.relockRecovered,
       completedOnboarding: true,
       metametricsEnabled: imported.metametricsEnabled,
       interests: [],

package/library/actions/extension/wallet/visible-session.mjs

@@ -44,7 +44,7 @@ async function currentRoute(page, deadline) {
   return route.replace(/0x[0-9a-f]{40}/giu, '<redacted-address>').slice(0, 200);
 }
 
-async function routeError(page, message, deadline) {
+async function routeError(page, message, deadline, cause) {
   let route = '<deadline-expired>';
   if (Date.now() < deadline) {
     try {
@@ -53,7 +53,35 @@ async function routeError(page, message, deadline) {
       route = '<unavailable>';
     }
   }
-  return new Error(`${message} (route ${JSON.stringify(route)}).`);
+  const detail = cause
+    ? `; last input error: ${String(cause.message ?? cause).replace(/0x[0-9a-f]{40}/giu, '<redacted-address>').slice(0, 200)}`
+    : '';
+  return new Error(`${message} (route ${JSON.stringify(route)})${detail}.`);
+}
+
+// Entry can fail transiently while the account list settles after onboarding,
+// so it is retried in place until the shared deadline; leaving the list (a
+// lock, a redirect) fails at once with the last input error. Callers still
+// assert the rendered result, so a retry can never pass a wrong account.
+async function enterAccountSearch(page, value, deadline, message) {
+  let lastError;
+  while (Date.now() <= deadline) {
+    try {
+      await withinDeadline(page.setInput(ACCOUNT_SEARCH, value), deadline);
+      return;
+    } catch (error) {
+      lastError = error;
+    }
+    let route;
+    try {
+      route = await currentRoute(page, deadline);
+    } catch {
+      break;
+    }
+    if (route !== '#/account-list') break;
+    await new Promise((resolve) => setTimeout(resolve, 100));
+  }
+  throw await routeError(page, message, deadline, lastError);
 }
 
 async function visibleAccountMatch(page, deadline) {
@@ -140,11 +168,7 @@ async function openAccountList(page, deadline) {
 
 async function proveAddressSearchControl(page, expectedAddress, deadline) {
   const probeAddress = accountProbeAddress(expectedAddress);
-  try {
-    await withinDeadline(page.setInput(ACCOUNT_SEARCH, probeAddress), deadline);
-  } catch {
-    throw await routeError(page, 'Visible wallet account search could not enter the alternate-address control', deadline);
-  }
+  await enterAccountSearch(page, probeAddress, deadline, 'Visible wallet account search could not enter the alternate-address control');
   let consecutiveEmpty = 0;
   while (Date.now() <= deadline) {
     let observed;
@@ -166,11 +190,7 @@ async function proveAddressSearchControl(page, expectedAddress, deadline) {
 
 async function queryExpectedAccount(page, expectedAddress, deadline, requireSelected) {
   await proveAddressSearchControl(page, expectedAddress, deadline);
-  try {
-    await withinDeadline(page.setInput(ACCOUNT_SEARCH, expectedAddress), deadline);
-  } catch {
-    throw await routeError(page, 'Visible wallet account search could not enter the derived release identity', deadline);
-  }
+  await enterAccountSearch(page, expectedAddress, deadline, 'Visible wallet account search could not enter the derived release identity');
   let observed;
   while (Date.now() <= deadline) {
     try {

package/library/actions/shared/console-collector.mjs

@@ -15,7 +15,7 @@ export const COLLECTOR_SCRIPT_NAME = 'console-tail.mjs';
 export const CAPTURE_CONTROL_MARK = '[mm-harness-capture-control]';
 
 // Same derivation as ownerMarker('console-collector', …) in
-// adapters/web-dapp/lib/processes.mjs, so the web-dapp stop path finds it.
+// @farmslot/adapter-web/web-dapp, so the web-dapp stop path finds it.
 export function collectorOwnerMarker(runtimeDir) {
   const id = createHash('sha256').update(path.resolve(runtimeDir)).digest('hex').slice(0, 32);
   return `--mm-harness-owner=console-collector-${id}`;

package/library/actions/web-dapp/app/launch.mjs

@@ -4,7 +4,7 @@
 // start forgets the app's stored agent key and the extension's dapp permission.
 
 import { appPort, cdpPort, isDirectRun, resolveSigner, runAdapter, webDappPolicy } from '../platform/runtime.mjs';
-import { launchWebDappBrowser } from '../../../../adapters/web-dapp/launch.mjs';
+import { launchWebDappBrowser } from '@farmslot/adapter-web/web-dapp';
 
 export async function launch(input) {
   const node = input.node ?? {};

package/library/actions/web-dapp/platform/adapter-web-lib.mjs

@@ -0,0 +1,18 @@
+// Helpers from @farmslot/adapter-web's web-dapp lib that its public
+// `./web-dapp` entry does not export, loaded from the installed package, never
+// copied: the display and HUD helpers the actions share with the launcher and
+// wallet host (one hud.json format), and the fixture and readiness helpers the
+// MetaMask signer module uses. The signer module cannot import `./web-dapp`
+// itself: the launch leaf loads it while that entry is still evaluating.
+
+import { createRequire } from 'node:module';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const packageRoot = path.dirname(createRequire(import.meta.url).resolve('@farmslot/adapter-web/package.json'));
+const lib = (name) => import(pathToFileURL(path.join(packageRoot, 'src/web-dapp/lib', name)).href);
+
+export const { resolveHeadless, resolveSlowMo } = await lib('display.mjs');
+export const { HUD_ELEMENT, clearHudState, hudRenderExpression, nextHudState, readHudState, writeHudState } = await lib('hud.mjs');
+export const { fixtureEntry } = await lib('runtime.mjs');
+export const { check: readinessCheck } = await lib('readiness.mjs');

package/library/actions/web-dapp/platform/hud.mjs

@@ -5,7 +5,7 @@
 
 import { isAppUrl } from '@farmslot/adapter-web/origin';
 
-import { clearHudState, hudRenderExpression, nextHudState, readHudState, writeHudState } from '../../../../adapters/web-dapp/lib/hud.mjs';
+import { clearHudState, hudRenderExpression, nextHudState, readHudState, writeHudState } from './adapter-web-lib.mjs';
 import { appOrigin, cdpPort, readBrowserState, webDappRuntimeDir } from './runtime.mjs';
 import { importRecipeHarnessRuntimeCdp } from '../../harness-exports.mjs';
 

package/library/actions/web-dapp/platform/page.mjs

@@ -7,10 +7,9 @@
 // so it stays the window's active tab and keeps painting without it.
 
 import { isAppUrl } from '@farmslot/adapter-web/origin';
+import { cdpListenerPids } from '@farmslot/adapter-web/web-dapp';
 
-import { resolveSlowMo } from '../../../../adapters/web-dapp/lib/display.mjs';
-import { HUD_ELEMENT } from '../../../../adapters/web-dapp/lib/hud.mjs';
-import { cdpListenerPids } from '../../../../adapters/web-dapp/lib/processes.mjs';
+import { HUD_ELEMENT, resolveSlowMo } from './adapter-web-lib.mjs';
 import { appOrigin, cdpPort, readBrowserState } from './runtime.mjs';
 import { importRecipeHarnessRuntimeCdp } from '../../harness-exports.mjs';
 

package/library/actions/web-dapp/platform/runtime.mjs

@@ -1,186 +1,37 @@
 // Resolve the web-dapp slot runtime: the venue policy, ports, runtime paths,
-// browser state and wallet-fixture accounts. Key material is only ever
-// returned as a viem account object; callers must never log or persist it.
+// browser state and wallet-fixture accounts, from @farmslot/adapter-web; plus
+// the live-action plumbing (input, direct run, output). Key material is only
+// ever returned as a viem account object; callers must never log or persist it.
 
-import { realpathSync } from 'node:fs';
 import { readFile, writeFile } from 'node:fs/promises';
-import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 
-import { mnemonicToAccount, privateKeyToAccount } from 'viem/accounts';
-
-import { recipeRuntimeDir } from '@farmslot/recipe-cli/harness';
-import { walletFixturePath } from '../../harness-exports.mjs';
-import { POLICY_ENV, webDappAdapterId, webDappPolicy } from '../../../../adapters/web-dapp/lib/policy.mjs';
-
-export { POLICY_ENV, webDappAdapterId, webDappPolicy };
-
-export const SIGNER_MODES = Object.freeze(['extension', 'injected']);
-export const DEFAULT_ACCOUNT = 'dev1';
-
-// The checkout's canonical path: a symlinked or /tmp-vs-/private/tmp spelling
-// of the same slot must name the same runtime dir, profile and pid owners.
-export function canonicalPath(target) {
-  const resolved = path.resolve(target);
-  try {
-    return realpathSync(resolved);
-  } catch {
-    return resolved;
-  }
-}
-
-// <checkout>/<runtime>/<adapter id>, e.g. temp/recipe/runtime/terminal.
-export function webDappRuntimeDir(projectRoot) {
-  return path.join(canonicalPath(projectRoot), recipeRuntimeDir(), webDappPolicy().adapterId);
-}
-
-export function webDappRuntimePath(projectRoot, ...segments) {
-  return path.join(webDappRuntimeDir(projectRoot), ...segments);
-}
-
-function portFrom(raw, label) {
-  if (raw === undefined || raw === null || raw === '') return undefined;
-  const port = Number(raw);
-  if (!Number.isInteger(port) || port <= 0 || port > 65535) {
-    throw new Error(`${label} must be a TCP port, got ${JSON.stringify(raw)}.`);
-  }
-  return port;
-}
-
-// The slot's Next.js dev server. Farmslot passes it as --watcher-port {{port}};
-// TERMINAL_APP_PORT is the explicit override.
-export function appPort(input = {}, env = process.env) {
-  const port =
-    portFrom(input.node?.app_port, 'app_port') ??
-    portFrom(env.TERMINAL_APP_PORT, 'TERMINAL_APP_PORT') ??
-    portFrom(env.RECIPE_WATCHER_PORT, 'RECIPE_WATCHER_PORT') ??
-    portFrom(env.WATCHER_PORT, 'WATCHER_PORT');
-  if (!port) {
-    throw new Error(
-      `${webDappPolicy().adapterId} adapter requires the slot dev-server port.\n` +
-      'Next: pass --watcher-port <port> (Farmslot: {{port}}) or set TERMINAL_APP_PORT.',
-    );
-  }
-  return port;
-}
-
-export function appOrigin(input = {}, env = process.env) {
-  return `http://localhost:${appPort(input, env)}`;
-}
-
-export function cdpPort(input = {}, env = process.env) {
-  const port =
-    portFrom(input.node?.cdp_port, 'cdp_port') ??
-    portFrom(env.RECIPE_CDP_PORT, 'RECIPE_CDP_PORT') ??
-    portFrom(env.CDP_PORT, 'CDP_PORT');
-  if (!port) {
-    throw new Error(
-      `${webDappPolicy().adapterId} adapter requires a per-slot browser CDP port.\n` +
-      'Next: pass --cdp-port <port> (Farmslot: {{cdp_port}}).',
-    );
-  }
-  return port;
-}
-
-export async function readJsonFile(file) {
-  try {
-    return JSON.parse(await readFile(file, 'utf8'));
-  } catch (error) {
-    if (error?.code === 'ENOENT') return null;
-    throw error;
-  }
-}
-
-export async function writePrivateJson(file, value) {
-  await writeFile(file, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
-}
-
-export async function readBrowserState(projectRoot) {
-  return readJsonFile(webDappRuntimePath(projectRoot, 'browser.json'));
-}
-
-export function resolveSigner(raw) {
-  const signer = raw == null || raw === '' ? 'extension' : String(raw);
-  if (!SIGNER_MODES.includes(signer)) {
-    throw new Error(`signer must be one of ${SIGNER_MODES.join(' | ')}, got ${JSON.stringify(raw)}.`);
-  }
-  return signer;
-}
-
-// Account name precedence: node.account_name → node.account (when not an
-// address) → the running browser's account → dev1.
-export function accountName(input = {}, browserState = null) {
-  const explicit = input.node?.account_name ?? input.node?.account;
-  if (typeof explicit === 'string' && explicit.trim() && !/^0x[0-9a-fA-F]{40}$/u.test(explicit.trim())) {
-    return explicit.trim();
-  }
-  return browserState?.account?.name ?? DEFAULT_ACCOUNT;
-}
-
-export function fixturePath(projectRoot, env = process.env) {
-  return env.RECIPE_WALLET_FIXTURE ? path.resolve(env.RECIPE_WALLET_FIXTURE) : walletFixturePath(projectRoot);
-}
-
-export async function loadWalletFixture(projectRoot, env = process.env) {
-  const file = fixturePath(projectRoot, env);
-  const fixture = await readJsonFile(file);
-  if (!fixture) {
-    throw new Error(
-      `wallet fixture not found at ${file}.\n` +
-      `Next: mm-harness install --adapter ${webDappPolicy().adapterId} --target <checkout> with RECIPE_WALLET_FIXTURE set, or copy the fixture there (0600).`,
-    );
-  }
-  if (!Array.isArray(fixture.accounts) || fixture.accounts.length === 0) {
-    throw new Error(`wallet fixture at ${file} has no accounts.`);
-  }
-  return { file, fixture };
-}
-
-export function fixtureEntry(fixture, name) {
-  const entry = fixture.accounts.find((account) => account?.name === name);
-  if (!entry) {
-    const names = fixture.accounts.map((account) => account?.name).filter(Boolean).join(', ');
-    throw new Error(`wallet fixture has no account named "${name}". Available: ${names}.`);
-  }
-  if (entry.type !== 'mnemonic' && entry.type !== 'privateKey') {
-    throw new Error(`wallet fixture account "${name}" must be mnemonic or privateKey, got "${entry.type}".`);
-  }
-  if (typeof entry.value !== 'string' || !entry.value.trim()) {
-    throw new Error(`wallet fixture account "${name}" has no value.`);
-  }
-  return entry;
-}
-
-// Mnemonics use BIP-44 index 0, the MetaMask default and the derivation the
-// Extension fixture flow imports.
-export function viemAccountFromEntry(entry) {
-  if (entry.type === 'mnemonic') return mnemonicToAccount(entry.value.trim(), { addressIndex: 0 });
-  const raw = entry.value.trim();
-  const key = raw.startsWith('0x') ? raw : `0x${raw}`;
-  if (!/^0x[0-9a-fA-F]{64}$/u.test(key)) {
-    throw new Error(`wallet fixture privateKey account "${entry.name}" is not a 32-byte hex key.`);
-  }
-  return privateKeyToAccount(key);
-}
-
-export async function fixtureAccount(projectRoot, name, env = process.env) {
-  const { fixture } = await loadWalletFixture(projectRoot, env);
-  return viemAccountFromEntry(fixtureEntry(fixture, name));
-}
-
-// Address-only view of the account a node targets: an explicit address wins
-// (read-only use), otherwise the fixture account is derived.
-export async function resolveAccountAddress(input, env = process.env) {
-  const raw = input.node?.account;
-  if (typeof raw === 'string' && /^0x[0-9a-fA-F]{40}$/u.test(raw.trim())) {
-    return { name: null, address: raw.trim() };
-  }
-  const projectRoot = input.context?.projectRoot;
-  const browserState = projectRoot ? await readBrowserState(projectRoot) : null;
-  const name = accountName(input, browserState);
-  const account = await fixtureAccount(projectRoot, name, env);
-  return { name, address: account.address };
-}
+import { webDappAdapterId } from '@farmslot/adapter-web/web-dapp';
+
+export {
+  accountName,
+  appOrigin,
+  appPort,
+  canonicalPath,
+  cdpPort,
+  DEFAULT_ACCOUNT,
+  fixtureAccount,
+  fixtureEntry,
+  fixturePath,
+  loadWalletFixture,
+  POLICY_ENV,
+  readBrowserState,
+  readJsonFile,
+  resolveAccountAddress,
+  resolveSigner,
+  SIGNER_MODES,
+  viemAccountFromEntry,
+  webDappAdapterId,
+  webDappPolicy,
+  webDappRuntimeDir,
+  webDappRuntimePath,
+  writePrivateJson,
+} from '@farmslot/adapter-web/web-dapp';
 
 export async function loadInput() {
   const inputPath = process.argv[2] || process.env.METAMASK_RECIPE_ADAPTER_INPUT;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.82.1",
+  "version": "0.84.0",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,14 +21,15 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-rn": "0.17.1",
-    "@farmslot/adapter-sdk": "0.5.0",
-    "@farmslot/adapter-web": "0.3.1",
+    "@farmslot/adapter-node": "0.1.4",
+    "@farmslot/adapter-rn": "0.19.1",
+    "@farmslot/adapter-sdk": "0.7.1",
+    "@farmslot/adapter-web": "0.6.2",
     "@farmslot/agent-runtime": "0.17.0",
     "@farmslot/handoff": "^0.3.1",
     "@farmslot/protocol": "0.34.0",
-    "@farmslot/recipe-cli": "0.6.0",
-    "@farmslot/recipe-runner": "0.25.0",
+    "@farmslot/recipe-cli": "0.10.0",
+    "@farmslot/recipe-runner": "0.27.0",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",

package/scripts/completions.sh

@@ -45,7 +45,7 @@ _mmh_flags_for() {
     execution-template) printf '%s' "--dir --domain-dir --project-worker --project-name --package-templates --package-id --flow --run-mode --platform --domain --id --provenance --include-shadowed --no-include-shadowed --title --force --json" ;;
     recipe-quality) printf '%s' "--input --output --recipe --task --evidence --params --adapter --library --advisor --advisor-model --advisor-stages --json" ;;
     actions)  printf '%s' "--adapter --action --kind --raw --action-manifest --target --json" ;;
-    call)     printf '%s' "--list --domain --source --sort --arg --adapter --target --artifacts-dir --action-manifest --heal --json" ;;
+    call)     printf '%s' "--list --domain --source --sort --adapter --target --artifacts-dir --action-manifest --heal --json" ;;
     run)      printf '%s' "--list --domain --source --sort --describe --plan --adapter --artifacts-dir --target --library --cdp-port --heal --record-video --json" ;;
     doctor)   printf '%s' "--adapter --target --fix --json" ;;
     install|verify|cleanup) printf '%s' "--adapter --target --json" ;;

package/adapters/web-dapp/cleanup.mjs

@@ -1,69 +0,0 @@
-#!/usr/bin/env node
-// cleanup.mjs — `mm-harness cleanup --adapter <web-dapp adapter>`: stop the slot
-// browser and wallet host, then remove the slot's runtime state and the installed
-// wallet fixture. Browser profiles are kept unless --reset-profile.
-//
-// Inputs: --target <checkout> [--cdp-port <port>] [--reset-profile]
-// Outputs: JSON summary on stdout. Exit 0 cleaned; 1 the CDP port stayed busy.
-// Never touches: product source files, the Next.js dev server.
-
-import { existsSync, readdirSync, rmSync } from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import { recipeHarnessPath } from '@farmslot/recipe-cli/harness';
-import { walletFixturePath } from '../../library/actions/harness-exports.mjs';
-import { webDappPolicy, webDappRuntimeDir } from '../../library/actions/web-dapp/platform/runtime.mjs';
-import { stopConsoleCollector, stopWebDappBrowser } from './lib/processes.mjs';
-
-const usage = 'Usage: cleanup.mjs --target <checkout> [--cdp-port <port>] [--reset-profile]';
-
-export async function cleanupWebDappRuntime({ target, cdpPort, resetProfile = false }) {
-  const root = path.resolve(target);
-  const stop = await stopWebDappBrowser(root, { cdpPort });
-  await stopConsoleCollector(root);
-  const runtime = webDappRuntimeDir(root);
-  const removed = [];
-  if (existsSync(runtime)) {
-    for (const entry of readdirSync(runtime)) {
-      if (entry.startsWith('profile-') && !resetProfile) continue;
-      rmSync(path.join(runtime, entry), { recursive: true, force: true });
-      removed.push(entry);
-    }
-  }
-  const overlay = recipeHarnessPath(root, webDappPolicy().adapterId);
-  if (existsSync(overlay)) {
-    rmSync(overlay, { recursive: true, force: true });
-    removed.push(path.relative(root, overlay));
-  }
-  const fixture = walletFixturePath(root);
-  if (existsSync(fixture)) {
-    rmSync(fixture, { force: true });
-    removed.push(path.relative(root, fixture));
-  }
-  return { status: 'pass', target: root, stopped: stop.stopped, cdpPortFree: stop.cdpPortFree, removed };
-}
-
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  const argv = process.argv.slice(2);
-  if (argv.includes('--help') || argv.includes('-h')) {
-    process.stdout.write(`${usage}\n`);
-    process.exit(0);
-  }
-  const value = (flag) => {
-    const index = argv.indexOf(flag);
-    return index >= 0 ? argv[index + 1] : undefined;
-  };
-  const rawPort = value('--cdp-port') ?? process.env.RECIPE_CDP_PORT ?? process.env.CDP_PORT;
-  try {
-    const result = await cleanupWebDappRuntime({
-      target: value('--target') ?? process.cwd(),
-      cdpPort: rawPort ? Number(rawPort) : undefined,
-      resetProfile: argv.includes('--reset-profile'),
-    });
-    process.stdout.write(`${JSON.stringify(result)}\n`);
-  } catch (error) {
-    process.stdout.write(`${JSON.stringify({ status: 'fail', error: error.message })}\n`);
-    process.exit(1);
-  }
-}