@deeeed/metamask-harness 0.83.0 → 0.84.0

package/docs/CONTRIBUTING.md

@@ -67,9 +67,11 @@ in the registry, so a platform registered the same way is reached by the
 commands that take `--adapter` with no edit to shared code
 (`tests/fixtures/example-adapter.ts`); `status` detects the adapter from the
 checkout.
-The CLI contract (`src/command-contract.ts`) still lists the four built-ins for
-`--adapter`, so a new platform reaches `bin/mm-harness` once a plugin loader
-registers it and extends that list.
+The public command table (`src/command-contract.ts`) reads the `--adapter`
+choices when a command is validated: the registered adapters, then the adapters
+the libraries on `RECIPE_LIBRARY_PATH` and the command's `--library` entries
+declare. A new platform or library plugin reaches `bin/mm-harness` with no edit
+to the table.
 
 Extend `AdapterSurface` when a platform owns the behavior; members a platform
 does not need are optional, and Core reports headless/N/A explicitly. Put each
@@ -82,7 +84,7 @@ command-local platform ladders for surface-owned behavior:
 - `run`/`call` come from `@farmslot/recipe-cli/harness` and read `run`,
   `recording`, `diagnostics`, `observation` and `sourceFingerprint`;
   mm-harness hands them its engine (`src/engine.ts`) and its device targeting
-  and plan steps (`src/cli.ts`);
+  and plan steps (`src/mm-harness-cli.ts`);
 - the runner reads `actions` (manifest, bundled semantic actions, live adapter
   scripts, `cdp.target`, the `ui.*` transport, adapter wrappers, input checks);
 - `install`/`verify`/`cleanup` read `harness`, `agentic-runtime.json` reads

package/docs/cli-contract.md

@@ -94,7 +94,7 @@ These are real farm bugs. The goldens freeze the current rejections, so fixing e
 
 `goldens-terminal` freezes the `va-mmcx-terminal-farm` hooks with their exact argv (`recipe_action_manifest`, `recipe_doctor`, `recipe_harness_{install,verify,cleanup}`, `recipe_run`, the browser `boot`/`shutdown` resources and `teardown`), against a fresh fixture slot: no slot dev server, no Extension dist, and the farm's wallet fixture outside the slot, so `install` copies it in. `launch` is frozen on its cold path: it refuses at the missing dist before any browser starts. The slot's CDP port is the one port no port holder reserves: a farm slot with no browser has it free, and the Terminal's port checks probe it.
 
-`terminal` is the plugin the `experimental-metamask-recipe-terminal` library declares (`adapters.terminal`, extends the built-in `web-dapp`), so the family loads it: set `GOLDENS_TERMINAL_LIBRARY` to a checkout of that library, which the family copies into its sandbox and puts on `RECIPE_LIBRARY_PATH`. CI has no access to the private library and skips the family (`CI` set); local runs need the variable, and without it outside CI the family fails. A release gate must set it too (proposed for the release checklist). `goldens-discovery` covers the built-in `web-dapp` in its per-adapter loop.
+`terminal` is the plugin the `experimental-metamask-recipe-terminal` library declares (`adapters.terminal`, extends the built-in `web-dapp`), so the family loads it: set `GOLDENS_TERMINAL_LIBRARY` to a checkout of that library. The family copies one pinned commit of it (`GOLDENS_TERMINAL_LIBRARY_REV` in `goldens-terminal.test.sh`) into its sandbox with `git archive` and puts it on `RECIPE_LIBRARY_PATH`, so the goldens don't move when the checkout does. The checkout must contain that commit (`git fetch`); moving the pin and regenerating the goldens is one change. CI has no access to the private library and skips the family (`CI` set); local runs need the variable, and without it outside CI the family fails. A release gate must set it too (proposed for the release checklist). `goldens-discovery` covers the built-in `web-dapp` in its per-adapter loop.
 
 Outside this boundary: a successful `launch` and the `temp/recipe/runtime/terminal/` layout (`browser.pid`), the library's recipes, `run terminal.perps.<name> --plan`, and the recipe-terminal `console-guard.mjs` import paths.
 

package/docs/feature-guard.md

@@ -74,7 +74,7 @@ Captures are normalized (paths, versions, pids, timestamps, durations, epoch num
 
 What the normaliser deliberately masks, and so cannot catch: any semver under a key ending in `version` other than the harness's own, numbers under keys ending in `Ms`/`Seconds`/`duration`/`elapsed` (so a changed timeout value), epoch-millisecond numbers, and the `volatile` paths (a new product warning during a live run). Each varies run to run on real slots; the goldens freeze the static values.
 
-Machine rules: on macwork, headless only and no focus stealing (`TERMINAL_HEADLESS=1` is in the matrix). Headful runs and the Extension wallet popup fail while macwork's screen is locked (`Page.captureScreenshot` timeout). Mobile and the Extension run on free macpro or mini slots, never mini-mm-3. The differential stops and cleans the slot runtime it used; reinstall the farm's overlay afterwards if the slot is handed back to the farm.
+Machine rules: on macwork, headless only and no focus stealing (`TERMINAL_HEADLESS=1` is in the matrix). A headful `run`/`call` (Extension, including its wallet popup, or a headful web-dapp) can't proceed while macwork's screen is locked: it refuses with `SESSION_LOCKED` at its runtime check (it used to stall until a `Page.captureScreenshot` timeout). Mobile and the Extension run on free macpro or mini slots, never mini-mm-3. The differential stops and cleans the slot runtime it used; reinstall the farm's overlay afterwards if the slot is handed back to the farm.
 
 ## 3. Release smoke
 

package/library/actions/shared/console-collector.mjs

@@ -15,7 +15,7 @@ export const COLLECTOR_SCRIPT_NAME = 'console-tail.mjs';
 export const CAPTURE_CONTROL_MARK = '[mm-harness-capture-control]';
 
 // Same derivation as ownerMarker('console-collector', …) in
-// adapters/web-dapp/lib/processes.mjs, so the web-dapp stop path finds it.
+// @farmslot/adapter-web/web-dapp, so the web-dapp stop path finds it.
 export function collectorOwnerMarker(runtimeDir) {
   const id = createHash('sha256').update(path.resolve(runtimeDir)).digest('hex').slice(0, 32);
   return `--mm-harness-owner=console-collector-${id}`;

package/library/actions/web-dapp/app/launch.mjs

@@ -4,7 +4,7 @@
 // start forgets the app's stored agent key and the extension's dapp permission.
 
 import { appPort, cdpPort, isDirectRun, resolveSigner, runAdapter, webDappPolicy } from '../platform/runtime.mjs';
-import { launchWebDappBrowser } from '../../../../adapters/web-dapp/launch.mjs';
+import { launchWebDappBrowser } from '@farmslot/adapter-web/web-dapp';
 
 export async function launch(input) {
   const node = input.node ?? {};

package/library/actions/web-dapp/platform/adapter-web-lib.mjs

@@ -0,0 +1,18 @@
+// Helpers from @farmslot/adapter-web's web-dapp lib that its public
+// `./web-dapp` entry does not export, loaded from the installed package, never
+// copied: the display and HUD helpers the actions share with the launcher and
+// wallet host (one hud.json format), and the fixture and readiness helpers the
+// MetaMask signer module uses. The signer module cannot import `./web-dapp`
+// itself: the launch leaf loads it while that entry is still evaluating.
+
+import { createRequire } from 'node:module';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const packageRoot = path.dirname(createRequire(import.meta.url).resolve('@farmslot/adapter-web/package.json'));
+const lib = (name) => import(pathToFileURL(path.join(packageRoot, 'src/web-dapp/lib', name)).href);
+
+export const { resolveHeadless, resolveSlowMo } = await lib('display.mjs');
+export const { HUD_ELEMENT, clearHudState, hudRenderExpression, nextHudState, readHudState, writeHudState } = await lib('hud.mjs');
+export const { fixtureEntry } = await lib('runtime.mjs');
+export const { check: readinessCheck } = await lib('readiness.mjs');

package/library/actions/web-dapp/platform/hud.mjs

@@ -5,7 +5,7 @@
 
 import { isAppUrl } from '@farmslot/adapter-web/origin';
 
-import { clearHudState, hudRenderExpression, nextHudState, readHudState, writeHudState } from '../../../../adapters/web-dapp/lib/hud.mjs';
+import { clearHudState, hudRenderExpression, nextHudState, readHudState, writeHudState } from './adapter-web-lib.mjs';
 import { appOrigin, cdpPort, readBrowserState, webDappRuntimeDir } from './runtime.mjs';
 import { importRecipeHarnessRuntimeCdp } from '../../harness-exports.mjs';
 

package/library/actions/web-dapp/platform/page.mjs

@@ -7,10 +7,9 @@
 // so it stays the window's active tab and keeps painting without it.
 
 import { isAppUrl } from '@farmslot/adapter-web/origin';
+import { cdpListenerPids } from '@farmslot/adapter-web/web-dapp';
 
-import { resolveSlowMo } from '../../../../adapters/web-dapp/lib/display.mjs';
-import { HUD_ELEMENT } from '../../../../adapters/web-dapp/lib/hud.mjs';
-import { cdpListenerPids } from '../../../../adapters/web-dapp/lib/processes.mjs';
+import { HUD_ELEMENT, resolveSlowMo } from './adapter-web-lib.mjs';
 import { appOrigin, cdpPort, readBrowserState } from './runtime.mjs';
 import { importRecipeHarnessRuntimeCdp } from '../../harness-exports.mjs';
 

package/library/actions/web-dapp/platform/runtime.mjs

@@ -1,186 +1,37 @@
 // Resolve the web-dapp slot runtime: the venue policy, ports, runtime paths,
-// browser state and wallet-fixture accounts. Key material is only ever
-// returned as a viem account object; callers must never log or persist it.
+// browser state and wallet-fixture accounts, from @farmslot/adapter-web; plus
+// the live-action plumbing (input, direct run, output). Key material is only
+// ever returned as a viem account object; callers must never log or persist it.
 
-import { realpathSync } from 'node:fs';
 import { readFile, writeFile } from 'node:fs/promises';
-import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 
-import { mnemonicToAccount, privateKeyToAccount } from 'viem/accounts';
-
-import { recipeRuntimeDir } from '@farmslot/recipe-cli/harness';
-import { walletFixturePath } from '../../harness-exports.mjs';
-import { POLICY_ENV, webDappAdapterId, webDappPolicy } from '../../../../adapters/web-dapp/lib/policy.mjs';
-
-export { POLICY_ENV, webDappAdapterId, webDappPolicy };
-
-export const SIGNER_MODES = Object.freeze(['extension', 'injected']);
-export const DEFAULT_ACCOUNT = 'dev1';
-
-// The checkout's canonical path: a symlinked or /tmp-vs-/private/tmp spelling
-// of the same slot must name the same runtime dir, profile and pid owners.
-export function canonicalPath(target) {
-  const resolved = path.resolve(target);
-  try {
-    return realpathSync(resolved);
-  } catch {
-    return resolved;
-  }
-}
-
-// <checkout>/<runtime>/<adapter id>, e.g. temp/recipe/runtime/terminal.
-export function webDappRuntimeDir(projectRoot) {
-  return path.join(canonicalPath(projectRoot), recipeRuntimeDir(), webDappPolicy().adapterId);
-}
-
-export function webDappRuntimePath(projectRoot, ...segments) {
-  return path.join(webDappRuntimeDir(projectRoot), ...segments);
-}
-
-function portFrom(raw, label) {
-  if (raw === undefined || raw === null || raw === '') return undefined;
-  const port = Number(raw);
-  if (!Number.isInteger(port) || port <= 0 || port > 65535) {
-    throw new Error(`${label} must be a TCP port, got ${JSON.stringify(raw)}.`);
-  }
-  return port;
-}
-
-// The slot's Next.js dev server. Farmslot passes it as --watcher-port {{port}};
-// TERMINAL_APP_PORT is the explicit override.
-export function appPort(input = {}, env = process.env) {
-  const port =
-    portFrom(input.node?.app_port, 'app_port') ??
-    portFrom(env.TERMINAL_APP_PORT, 'TERMINAL_APP_PORT') ??
-    portFrom(env.RECIPE_WATCHER_PORT, 'RECIPE_WATCHER_PORT') ??
-    portFrom(env.WATCHER_PORT, 'WATCHER_PORT');
-  if (!port) {
-    throw new Error(
-      `${webDappPolicy().adapterId} adapter requires the slot dev-server port.\n` +
-      'Next: pass --watcher-port <port> (Farmslot: {{port}}) or set TERMINAL_APP_PORT.',
-    );
-  }
-  return port;
-}
-
-export function appOrigin(input = {}, env = process.env) {
-  return `http://localhost:${appPort(input, env)}`;
-}
-
-export function cdpPort(input = {}, env = process.env) {
-  const port =
-    portFrom(input.node?.cdp_port, 'cdp_port') ??
-    portFrom(env.RECIPE_CDP_PORT, 'RECIPE_CDP_PORT') ??
-    portFrom(env.CDP_PORT, 'CDP_PORT');
-  if (!port) {
-    throw new Error(
-      `${webDappPolicy().adapterId} adapter requires a per-slot browser CDP port.\n` +
-      'Next: pass --cdp-port <port> (Farmslot: {{cdp_port}}).',
-    );
-  }
-  return port;
-}
-
-export async function readJsonFile(file) {
-  try {
-    return JSON.parse(await readFile(file, 'utf8'));
-  } catch (error) {
-    if (error?.code === 'ENOENT') return null;
-    throw error;
-  }
-}
-
-export async function writePrivateJson(file, value) {
-  await writeFile(file, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
-}
-
-export async function readBrowserState(projectRoot) {
-  return readJsonFile(webDappRuntimePath(projectRoot, 'browser.json'));
-}
-
-export function resolveSigner(raw) {
-  const signer = raw == null || raw === '' ? 'extension' : String(raw);
-  if (!SIGNER_MODES.includes(signer)) {
-    throw new Error(`signer must be one of ${SIGNER_MODES.join(' | ')}, got ${JSON.stringify(raw)}.`);
-  }
-  return signer;
-}
-
-// Account name precedence: node.account_name → node.account (when not an
-// address) → the running browser's account → dev1.
-export function accountName(input = {}, browserState = null) {
-  const explicit = input.node?.account_name ?? input.node?.account;
-  if (typeof explicit === 'string' && explicit.trim() && !/^0x[0-9a-fA-F]{40}$/u.test(explicit.trim())) {
-    return explicit.trim();
-  }
-  return browserState?.account?.name ?? DEFAULT_ACCOUNT;
-}
-
-export function fixturePath(projectRoot, env = process.env) {
-  return env.RECIPE_WALLET_FIXTURE ? path.resolve(env.RECIPE_WALLET_FIXTURE) : walletFixturePath(projectRoot);
-}
-
-export async function loadWalletFixture(projectRoot, env = process.env) {
-  const file = fixturePath(projectRoot, env);
-  const fixture = await readJsonFile(file);
-  if (!fixture) {
-    throw new Error(
-      `wallet fixture not found at ${file}.\n` +
-      `Next: mm-harness install --adapter ${webDappPolicy().adapterId} --target <checkout> with RECIPE_WALLET_FIXTURE set, or copy the fixture there (0600).`,
-    );
-  }
-  if (!Array.isArray(fixture.accounts) || fixture.accounts.length === 0) {
-    throw new Error(`wallet fixture at ${file} has no accounts.`);
-  }
-  return { file, fixture };
-}
-
-export function fixtureEntry(fixture, name) {
-  const entry = fixture.accounts.find((account) => account?.name === name);
-  if (!entry) {
-    const names = fixture.accounts.map((account) => account?.name).filter(Boolean).join(', ');
-    throw new Error(`wallet fixture has no account named "${name}". Available: ${names}.`);
-  }
-  if (entry.type !== 'mnemonic' && entry.type !== 'privateKey') {
-    throw new Error(`wallet fixture account "${name}" must be mnemonic or privateKey, got "${entry.type}".`);
-  }
-  if (typeof entry.value !== 'string' || !entry.value.trim()) {
-    throw new Error(`wallet fixture account "${name}" has no value.`);
-  }
-  return entry;
-}
-
-// Mnemonics use BIP-44 index 0, the MetaMask default and the derivation the
-// Extension fixture flow imports.
-export function viemAccountFromEntry(entry) {
-  if (entry.type === 'mnemonic') return mnemonicToAccount(entry.value.trim(), { addressIndex: 0 });
-  const raw = entry.value.trim();
-  const key = raw.startsWith('0x') ? raw : `0x${raw}`;
-  if (!/^0x[0-9a-fA-F]{64}$/u.test(key)) {
-    throw new Error(`wallet fixture privateKey account "${entry.name}" is not a 32-byte hex key.`);
-  }
-  return privateKeyToAccount(key);
-}
-
-export async function fixtureAccount(projectRoot, name, env = process.env) {
-  const { fixture } = await loadWalletFixture(projectRoot, env);
-  return viemAccountFromEntry(fixtureEntry(fixture, name));
-}
-
-// Address-only view of the account a node targets: an explicit address wins
-// (read-only use), otherwise the fixture account is derived.
-export async function resolveAccountAddress(input, env = process.env) {
-  const raw = input.node?.account;
-  if (typeof raw === 'string' && /^0x[0-9a-fA-F]{40}$/u.test(raw.trim())) {
-    return { name: null, address: raw.trim() };
-  }
-  const projectRoot = input.context?.projectRoot;
-  const browserState = projectRoot ? await readBrowserState(projectRoot) : null;
-  const name = accountName(input, browserState);
-  const account = await fixtureAccount(projectRoot, name, env);
-  return { name, address: account.address };
-}
+import { webDappAdapterId } from '@farmslot/adapter-web/web-dapp';
+
+export {
+  accountName,
+  appOrigin,
+  appPort,
+  canonicalPath,
+  cdpPort,
+  DEFAULT_ACCOUNT,
+  fixtureAccount,
+  fixtureEntry,
+  fixturePath,
+  loadWalletFixture,
+  POLICY_ENV,
+  readBrowserState,
+  readJsonFile,
+  resolveAccountAddress,
+  resolveSigner,
+  SIGNER_MODES,
+  viemAccountFromEntry,
+  webDappAdapterId,
+  webDappPolicy,
+  webDappRuntimeDir,
+  webDappRuntimePath,
+  writePrivateJson,
+} from '@farmslot/adapter-web/web-dapp';
 
 export async function loadInput() {
   const inputPath = process.argv[2] || process.env.METAMASK_RECIPE_ADAPTER_INPUT;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.83.0",
+  "version": "0.84.0",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,15 +21,15 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-node": "0.1.2",
-    "@farmslot/adapter-rn": "0.18.0",
-    "@farmslot/adapter-sdk": "0.6.0",
-    "@farmslot/adapter-web": "0.4.1",
+    "@farmslot/adapter-node": "0.1.4",
+    "@farmslot/adapter-rn": "0.19.1",
+    "@farmslot/adapter-sdk": "0.7.1",
+    "@farmslot/adapter-web": "0.6.2",
     "@farmslot/agent-runtime": "0.17.0",
     "@farmslot/handoff": "^0.3.1",
     "@farmslot/protocol": "0.34.0",
-    "@farmslot/recipe-cli": "0.8.0",
-    "@farmslot/recipe-runner": "0.26.0",
+    "@farmslot/recipe-cli": "0.10.0",
+    "@farmslot/recipe-runner": "0.27.0",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",

package/scripts/completions.sh

@@ -45,7 +45,7 @@ _mmh_flags_for() {
     execution-template) printf '%s' "--dir --domain-dir --project-worker --project-name --package-templates --package-id --flow --run-mode --platform --domain --id --provenance --include-shadowed --no-include-shadowed --title --force --json" ;;
     recipe-quality) printf '%s' "--input --output --recipe --task --evidence --params --adapter --library --advisor --advisor-model --advisor-stages --json" ;;
     actions)  printf '%s' "--adapter --action --kind --raw --action-manifest --target --json" ;;
-    call)     printf '%s' "--list --domain --source --sort --arg --adapter --target --artifacts-dir --action-manifest --heal --json" ;;
+    call)     printf '%s' "--list --domain --source --sort --adapter --target --artifacts-dir --action-manifest --heal --json" ;;
     run)      printf '%s' "--list --domain --source --sort --describe --plan --adapter --artifacts-dir --target --library --cdp-port --heal --record-video --json" ;;
     doctor)   printf '%s' "--adapter --target --fix --json" ;;
     install|verify|cleanup) printf '%s' "--adapter --target --json" ;;

package/adapters/web-dapp/cleanup.mjs

@@ -1,69 +0,0 @@
-#!/usr/bin/env node
-// cleanup.mjs — `mm-harness cleanup --adapter <web-dapp adapter>`: stop the slot
-// browser and wallet host, then remove the slot's runtime state and the installed
-// wallet fixture. Browser profiles are kept unless --reset-profile.
-//
-// Inputs: --target <checkout> [--cdp-port <port>] [--reset-profile]
-// Outputs: JSON summary on stdout. Exit 0 cleaned; 1 the CDP port stayed busy.
-// Never touches: product source files, the Next.js dev server.
-
-import { existsSync, readdirSync, rmSync } from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import { recipeHarnessPath } from '@farmslot/recipe-cli/harness';
-import { walletFixturePath } from '../../library/actions/harness-exports.mjs';
-import { webDappPolicy, webDappRuntimeDir } from '../../library/actions/web-dapp/platform/runtime.mjs';
-import { stopConsoleCollector, stopWebDappBrowser } from './lib/processes.mjs';
-
-const usage = 'Usage: cleanup.mjs --target <checkout> [--cdp-port <port>] [--reset-profile]';
-
-export async function cleanupWebDappRuntime({ target, cdpPort, resetProfile = false }) {
-  const root = path.resolve(target);
-  const stop = await stopWebDappBrowser(root, { cdpPort });
-  await stopConsoleCollector(root);
-  const runtime = webDappRuntimeDir(root);
-  const removed = [];
-  if (existsSync(runtime)) {
-    for (const entry of readdirSync(runtime)) {
-      if (entry.startsWith('profile-') && !resetProfile) continue;
-      rmSync(path.join(runtime, entry), { recursive: true, force: true });
-      removed.push(entry);
-    }
-  }
-  const overlay = recipeHarnessPath(root, webDappPolicy().adapterId);
-  if (existsSync(overlay)) {
-    rmSync(overlay, { recursive: true, force: true });
-    removed.push(path.relative(root, overlay));
-  }
-  const fixture = walletFixturePath(root);
-  if (existsSync(fixture)) {
-    rmSync(fixture, { force: true });
-    removed.push(path.relative(root, fixture));
-  }
-  return { status: 'pass', target: root, stopped: stop.stopped, cdpPortFree: stop.cdpPortFree, removed };
-}
-
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  const argv = process.argv.slice(2);
-  if (argv.includes('--help') || argv.includes('-h')) {
-    process.stdout.write(`${usage}\n`);
-    process.exit(0);
-  }
-  const value = (flag) => {
-    const index = argv.indexOf(flag);
-    return index >= 0 ? argv[index + 1] : undefined;
-  };
-  const rawPort = value('--cdp-port') ?? process.env.RECIPE_CDP_PORT ?? process.env.CDP_PORT;
-  try {
-    const result = await cleanupWebDappRuntime({
-      target: value('--target') ?? process.cwd(),
-      cdpPort: rawPort ? Number(rawPort) : undefined,
-      resetProfile: argv.includes('--reset-profile'),
-    });
-    process.stdout.write(`${JSON.stringify(result)}\n`);
-  } catch (error) {
-    process.stdout.write(`${JSON.stringify({ status: 'fail', error: error.message })}\n`);
-    process.exit(1);
-  }
-}

package/adapters/web-dapp/inject.mjs

@@ -1,75 +0,0 @@
-#!/usr/bin/env node
-// inject.mjs — `mm-harness install --adapter <web-dapp adapter>`: prepare the slot
-// runtime directory and install the wallet fixture the web-dapp actions read.
-//
-// Inputs: --target <checkout> [--fixture <wallet-fixture.json>] [--force]
-//   env RECIPE_WALLET_FIXTURE (fixture source when --fixture is absent)
-// Outputs: <target>/<harness root>/<adapter id>/install.json (overlay marker),
-//   <target>/<runtime>/<adapter id>/ (0700), <runtime>/wallet-fixture.json (0600);
-//   JSON summary on stdout (account names only). Exit 0 installed; 1 failure; 2 usage.
-// Never touches: product source files; never prints key material.
-
-import { copyFileSync, chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import { recipeHarnessPath, recipeRuntimeDir } from '@farmslot/recipe-cli/harness';
-import { walletFixturePath } from '../../library/actions/harness-exports.mjs';
-import { webDappPolicy, webDappRuntimeDir } from '../../library/actions/web-dapp/platform/runtime.mjs';
-
-const usage = 'Usage: inject.mjs --target <checkout> [--fixture <wallet-fixture.json>] [--force]';
-
-export function installWebDappRuntime({ target, fixture, force = false }) {
-  const root = path.resolve(target);
-  const { adapterId, checkout } = webDappPolicy();
-  if (!checkout.matches(root)) throw new Error(`${root} is not a ${checkout.name} checkout (needs ${checkout.needs}).`);
-  mkdirSync(path.join(root, recipeRuntimeDir()), { recursive: true, mode: 0o700 });
-  mkdirSync(webDappRuntimeDir(root), { recursive: true, mode: 0o700 });
-  const destination = walletFixturePath(root);
-  let fixtureAction = 'kept';
-  if (fixture && (force || !existsSync(destination))) {
-    const parsed = JSON.parse(readFileSync(fixture, 'utf8'));
-    if (!Array.isArray(parsed.accounts) || parsed.accounts.length === 0) throw new Error(`${fixture} has no accounts.`);
-    copyFileSync(fixture, destination);
-    chmodSync(destination, 0o600);
-    fixtureAction = 'installed';
-  } else if (!existsSync(destination)) {
-    fixtureAction = 'missing';
-  }
-  const accounts = existsSync(destination)
-    ? JSON.parse(readFileSync(destination, 'utf8')).accounts.map((account) => account?.name).filter(Boolean)
-    : [];
-  const marker = { schemaVersion: 1, adapter: adapterId, installedAt: new Date().toISOString(), fixture: fixtureAction };
-  // The overlay directory is the install marker run/call auto-ensure checks.
-  const overlay = recipeHarnessPath(root, adapterId);
-  mkdirSync(overlay, { recursive: true, mode: 0o700 });
-  writeFileSync(path.join(overlay, 'install.json'), `${JSON.stringify(marker, null, 2)}\n`, { mode: 0o600 });
-  return { status: fixtureAction === 'missing' ? 'fail' : 'pass', target: root, fixture: fixtureAction, fixturePath: destination, accounts };
-}
-
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  const argv = process.argv.slice(2);
-  if (argv.includes('--help') || argv.includes('-h')) {
-    process.stdout.write(`${usage}\n`);
-    process.exit(0);
-  }
-  const value = (flag) => {
-    const index = argv.indexOf(flag);
-    return index >= 0 ? argv[index + 1] : undefined;
-  };
-  try {
-    const result = installWebDappRuntime({
-      target: value('--target') ?? process.cwd(),
-      fixture: value('--fixture') ?? process.env.RECIPE_WALLET_FIXTURE,
-      force: argv.includes('--force'),
-    });
-    process.stdout.write(`${JSON.stringify(result)}\n`);
-    if (result.status !== 'pass') {
-      process.stderr.write('No wallet fixture installed. Next: set RECIPE_WALLET_FIXTURE or pass --fixture <wallet-fixture.json>.\n');
-      process.exit(1);
-    }
-  } catch (error) {
-    process.stderr.write(`${error.message}\n`);
-    process.exit(1);
-  }
-}