@deeeed/metamask-harness 0.83.0 → 0.85.0

package/adapters/web-dapp/lib/processes.mjs

@@ -1,187 +0,0 @@
-// Stop the web-dapp slot browser and wallet host by their pid files and prove
-// the slot CDP port is released. A pid is signalled only when its command line
-// carries this slot's owner marker for that process kind. A pid file naming a
-// dead process is removed; one naming a live process without the marker is
-// kept and reported, never signalled.
-
-import { execFileSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import { existsSync, readFileSync, rmSync } from 'node:fs';
-import net from 'node:net';
-import path from 'node:path';
-
-import { webDappPolicy, webDappRuntimeDir } from '../../../library/actions/web-dapp/platform/runtime.mjs';
-
-export function pidAlive(pid) {
-  if (!Number.isInteger(Number(pid)) || Number(pid) <= 0) return false;
-  try {
-    process.kill(Number(pid), 0);
-    return true;
-  } catch (error) {
-    return error.code === 'EPERM';
-  }
-}
-
-function groupAlive(pgid) {
-  try {
-    process.kill(-pgid, 0);
-    return true;
-  } catch (error) {
-    return error.code === 'EPERM';
-  }
-}
-
-function readPid(file) {
-  if (!existsSync(file)) return null;
-  const pid = Number(readFileSync(file, 'utf8').trim());
-  return Number.isInteger(pid) && pid > 0 ? pid : null;
-}
-
-function psField(pid, field) {
-  try {
-    return execFileSync('ps', ['-ww', '-o', `${field}=`, '-p', String(pid)], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
-  } catch {
-    return '';
-  }
-}
-
-export function processCommand(pid) {
-  return pidAlive(pid) ? psField(pid, 'command') : '';
-}
-
-// Each process the slot starts carries `--mm-harness-owner=<kind>-<id>`, where
-// <id> is derived from the canonical runtime dir. Ownership is that exact
-// argument, compared as a whole whitespace-free token, so a runtime dir that
-// shares a prefix with this one (".../terminal backup", ".../terminal2")
-// never matches.
-export const OWNER_FLAG = '--mm-harness-owner';
-export const OWNER_KINDS = Object.freeze(['browser', 'wallet-host', 'console-collector']);
-
-export function ownerMarker(kind, runtimeDir) {
-  if (!OWNER_KINDS.includes(kind)) throw new Error(`unknown web-dapp process kind ${kind}`);
-  const id = createHash('sha256').update(path.resolve(runtimeDir)).digest('hex').slice(0, 32);
-  return `${OWNER_FLAG}=${kind}-${id}`;
-}
-
-export function ownsProcess(kind, pid, runtimeDir, command = processCommand(pid)) {
-  if (!command) return false;
-  return command.split(/\s+/u).includes(ownerMarker(kind, runtimeDir));
-}
-
-export function portFree(port) {
-  return new Promise((resolve) => {
-    const socket = net.connect({ host: '127.0.0.1', port }, () => {
-      socket.destroy();
-      resolve(false);
-    });
-    socket.on('error', () => resolve(true));
-  });
-}
-
-// Browsers and hosts are spawned detached, each leading its own process group.
-// When the pid leads its group the whole group is signalled and waited for,
-// so children that outlive the leader (renderers, a child ignoring SIGTERM)
-// are killed too; otherwise only the pid.
-export async function terminate(pid, graceMs = 8000) {
-  if (!pidAlive(pid)) return false;
-  const group = Number(psField(pid, 'pgid')) === pid;
-  const alive = () => (group ? groupAlive(pid) : pidAlive(pid));
-  const signal = (name) => {
-    try {
-      process.kill(group ? -pid : pid, name);
-    } catch {
-      // Already gone.
-    }
-  };
-  signal('SIGTERM');
-  const deadline = Date.now() + graceMs;
-  while (alive() && Date.now() < deadline) await new Promise((resolve) => setTimeout(resolve, 200));
-  if (alive()) {
-    signal('SIGKILL');
-    const killDeadline = Date.now() + 5000;
-    while (alive() && Date.now() < killDeadline) await new Promise((resolve) => setTimeout(resolve, 100));
-  }
-  return true;
-}
-
-// The console collector a run started (src/adapters/web-dapp/console-capture.ts)
-// outlives browser relaunches inside the run; stop and cleanup end it.
-export async function stopConsoleCollector(target, { log = () => {}, runtimeDir } = {}) {
-  const runtime = runtimeDir ?? webDappRuntimeDir(target);
-  const pidFile = path.join(runtime, 'console-tail.pid');
-  const pid = readPid(pidFile);
-  if (!pid) return { stopped: null };
-  if (ownsProcess('console-collector', pid, runtime)) {
-    await terminate(pid, 3000);
-    rmSync(pidFile, { force: true });
-    log(`stopped console collector pid ${pid}`);
-    return { stopped: pid };
-  }
-  if (pidAlive(pid)) {
-    log(`console collector pid ${pid} is alive but is not this slot's collector; left it alone`);
-    return { stopped: null, foreign: pid };
-  }
-  rmSync(pidFile, { force: true });
-  return { stopped: null, stale: pid };
-}
-
-// Every live process that proves it is a browser on this slot's profiles,
-// found by command line: a browser started through LaunchServices has no
-// child handle, and its pid is only known once it owns the CDP port.
-export function ownedBrowserPids(runtimeDir) {
-  const runtime = path.resolve(runtimeDir);
-  let lines = '';
-  try {
-    // `--` ends pgrep's options: the pattern itself starts with dashes.
-    lines = execFileSync('pgrep', ['-f', '--', ownerMarker('browser', runtime)], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
-  } catch {
-    return [];
-  }
-  return lines.split('\n').map(Number).filter((pid) => pid > 0 && ownsProcess('browser', pid, runtime));
-}
-
-export function cdpListenerPids(port) {
-  try {
-    return execFileSync('lsof', ['-nP', `-iTCP:${port}`, '-sTCP:LISTEN', '-t'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] })
-      .split('\n').map(Number).filter((pid) => pid > 0);
-  } catch {
-    return [];
-  }
-}
-
-export async function stopWebDappBrowser(target, { cdpPort, log = () => {}, runtimeDir } = {}) {
-  const runtime = runtimeDir ?? webDappRuntimeDir(target);
-  const stopped = [];
-  const stale = [];
-  const foreign = [];
-  for (const name of ['wallet-host', 'browser']) {
-    const pidFile = path.join(runtime, `${name}.pid`);
-    const pid = readPid(pidFile);
-    if (pid && ownsProcess(name, pid, runtime)) {
-      if (await terminate(pid)) {
-        stopped.push({ name, pid });
-        log(`stopped ${name} pid ${pid}`);
-      }
-      rmSync(pidFile, { force: true });
-    } else if (pid && pidAlive(pid)) {
-      foreign.push({ name, pid });
-      log(`${name} pid ${pid} is alive but is not this slot's ${name}; left it and its pid file alone`);
-    } else {
-      if (pid) stale.push({ name, pid });
-      rmSync(pidFile, { force: true });
-    }
-  }
-  rmSync(path.join(runtime, 'wallet-host.ready'), { force: true });
-  rmSync(path.join(runtime, 'browser.json'), { force: true });
-  let free = null;
-  if (cdpPort) {
-    const deadline = Date.now() + 10000;
-    free = await portFree(cdpPort);
-    while (!free && Date.now() < deadline) {
-      await new Promise((resolve) => setTimeout(resolve, 250));
-      free = await portFree(cdpPort);
-    }
-    if (!free) throw new Error(`CDP port ${cdpPort} is still in use after stopping the ${webDappPolicy().adapterId} browser; another process owns it.`);
-  }
-  return { stopped, stale, foreign, cdpPortFree: free };
-}

package/adapters/web-dapp/lib/readiness.mjs

@@ -1,272 +0,0 @@
-// Read-only readiness of a web-dapp slot for recipe runs: checkout shape,
-// dependencies, the slot dev server, forced testnet, wallet fixture, browser,
-// MetaMask extension copy and the per-slot CDP port. Never launches anything
-// except the optional short-lived browser start probe.
-
-import { execFileSync } from 'node:child_process';
-import { existsSync, readFileSync } from 'node:fs';
-import path from 'node:path';
-
-import { canonicalPath, fixtureEntry, loadWalletFixture, readBrowserState, viemAccountFromEntry, webDappPolicy, webDappRuntimeDir } from '../../../library/actions/web-dapp/platform/runtime.mjs';
-import { ownsProcess, pidAlive, portFree } from './processes.mjs';
-
-function check(id, ok, detail, { required = true, status } = {}) {
-  return { id, status: status ?? (ok ? 'pass' : 'fail'), required, detail };
-}
-
-async function httpStatus(url, timeoutMs = 20000) {
-  try {
-    const response = await fetch(url, { signal: AbortSignal.timeout(timeoutMs), redirect: 'manual' });
-    return response.status;
-  } catch (error) {
-    return error?.name === 'TimeoutError' ? 'timeout' : 'unreachable';
-  }
-}
-
-// Diagnostic only. Whether the slot's dev server looks configured for testnet:
-// the farm starts `next dev` (temp/farmslot/next-dev.pid) with the policy's
-// testnet variable set to true (the Terminal's
-// NEXT_PUBLIC_HYPERLIQUID_FORCE_TESTNET). Process inspection cannot prove
-// what the browser talks to (macOS reports a process's initial environment,
-// and lsof cannot see other users' sockets), so this only warns; the browser
-// is held to testnet by the network and wallet layers (the venue policy's
-// blocked hosts, the wallet host). Each listener on the app port must descend
-// from the pid-file process and run from the checkout (its cwd); every process on the way from
-// a listener up to the pid-file process is read exactly (argv and environment
-// entries from sysctl KERN_PROCARGS2) and must carry the testnet variable. An
-// unreadable process makes the result unknown.
-export const DEV_SERVER_PID_FILE = 'temp/farmslot/next-dev.pid';
-
-function run(command, args) {
-  try {
-    return execFileSync(command, args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
-  } catch (error) {
-    return typeof error?.stdout === 'string' ? error.stdout : '';
-  }
-}
-
-const PROCARGS_HELPER = `
-import ctypes, ctypes.util, json, struct, sys
-libc = ctypes.CDLL(ctypes.util.find_library("c"), use_errno=True)
-pid = int(sys.argv[1])
-argmax = ctypes.c_int(0)
-size = ctypes.c_size_t(ctypes.sizeof(argmax))
-if libc.sysctl((ctypes.c_int * 2)(1, 8), 2, ctypes.byref(argmax), ctypes.byref(size), None, 0) != 0:
-    print("null"); sys.exit(0)
-buf = ctypes.create_string_buffer(argmax.value)
-size = ctypes.c_size_t(argmax.value)
-if libc.sysctl((ctypes.c_int * 3)(1, 49, pid), 3, buf, ctypes.byref(size), None, 0) != 0:
-    print("null"); sys.exit(0)
-raw = buf.raw[:size.value]
-argc = struct.unpack("i", raw[:4])[0]
-rest = raw[4:]
-rest = rest[rest.index(b"\\0"):].lstrip(b"\\0")
-parts = rest.split(b"\\0")
-env = []
-for part in parts[argc:]:
-    if not part: break
-    env.append(part.decode("utf-8", "replace"))
-print(json.dumps({"argv": [p.decode("utf-8", "replace") for p in parts[:argc]], "env": env}))
-`;
-
-export const systemProbe = Object.freeze({
-  listeners: (port) => run('lsof', ['-nP', `-iTCP:${port}`, '-sTCP:LISTEN', '-t']).split('\n').map(Number).filter((pid) => pid > 0),
-  parents: () => new Map(run('ps', ['-A', '-o', 'pid=,ppid=']).split('\n')
-    .map((line) => line.trim().split(/\s+/u).map(Number))
-    .filter(([pid, ppid]) => pid > 0 && ppid >= 0)),
-  cwd: (pid) => (run('lsof', ['-a', '-p', String(pid), '-d', 'cwd', '-Fn']).split('\n').find((line) => line.startsWith('n')) ?? '').slice(1) || null,
-  // { argv: string[], env: string[] } with exact element boundaries, or null.
-  procArgs: (pid) => {
-    const python = usablePython();
-    if (!python) return null;
-    try {
-      return JSON.parse(execFileSync(python, ['-c', PROCARGS_HELPER, String(pid)], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 15000 }).trim());
-    } catch {
-      return null;
-    }
-  },
-});
-
-// macOS's /usr/bin/python3 is a stub until the Command Line Tools are
-// installed, and running it opens an install dialog that takes keyboard
-// focus. Use it only when xcode-select reports a developer directory; any
-// other python3 on PATH is a real install.
-export function pythonFor({ found, platform = process.platform, developerDir }) {
-  if (!found) return null;
-  if (platform === 'darwin' && found === '/usr/bin/python3' && !developerDir()) return null;
-  return found;
-}
-
-let pythonChoice;
-function usablePython() {
-  if (pythonChoice === undefined) {
-    pythonChoice = pythonFor({ found: run('/usr/bin/which', ['python3']).trim(), developerDir: () => run('/usr/bin/xcode-select', ['-p']).trim() });
-  }
-  return pythonChoice;
-}
-
-export function environmentValue(env, name) {
-  const entry = env.find((item) => item.startsWith(`${name}=`));
-  return entry === undefined ? undefined : entry.slice(name.length + 1);
-}
-
-// `next dev` / `next start`: the argument after the next binary.
-export function nextServerMode(argv) {
-  for (let index = 0; index < argv.length - 1; index += 1) {
-    const element = argv[index];
-    if (element === 'next' || element.endsWith('/next') || element.endsWith('/next/dist/bin/next')) {
-      if (argv[index + 1] === 'dev' || argv[index + 1] === 'start') return argv[index + 1];
-    }
-  }
-  return null;
-}
-
-function chainTo(listener, root, parents) {
-  const chain = [];
-  let current = listener;
-  for (let hops = 0; current && hops < 64; hops += 1) {
-    chain.push(current);
-    if (current === root) return chain;
-    current = parents.get(current);
-  }
-  return null;
-}
-
-export function devServerTestnetDiagnostic(target, { appPort, variable, probe = systemProbe } = {}) {
-  const checkout = canonicalPath(target);
-  const unknown = (detail) => ({ known: false, forced: false, detail });
-  const pidFile = path.join(checkout, DEV_SERVER_PID_FILE);
-  if (!existsSync(pidFile)) return unknown(`no ${DEV_SERVER_PID_FILE}`);
-  const root = Number(readFileSync(pidFile, 'utf8').trim());
-  if (!pidAlive(root)) return unknown(`next dev pid ${root} is not running`);
-  if (!appPort) return unknown('no app port to check');
-  const listeners = probe.listeners(appPort);
-  if (listeners.length === 0) return unknown(`nothing (visible to this user) listens on app port ${appPort}`);
-  const parents = probe.parents();
-  let mode = null;
-  for (const listener of listeners) {
-    const chain = chainTo(listener, root, parents);
-    if (!chain) return { known: true, forced: false, detail: `app port ${appPort} is served by pid ${listener}, outside next dev pid ${root}` };
-    const cwd = probe.cwd(listener);
-    if (!cwd || canonicalPath(cwd) !== checkout) {
-      return { known: true, forced: false, detail: `pid ${listener} on app port ${appPort} runs from ${cwd ?? 'an unknown directory'}, not ${checkout}` };
-    }
-    for (const pid of chain) {
-      const args = probe.procArgs(pid);
-      if (!args) return unknown(`cannot read the arguments and environment of pid ${pid}`);
-      // A process that rewrote its title (next-server) overwrote the memory
-      // its arguments and environment are read from.
-      if (args.env.length === 0) return unknown(`pid ${pid} (${args.argv[0] ?? '?'}) rewrote its process title; its environment is not readable`);
-      const processMode = nextServerMode(args.argv);
-      if (processMode === 'start') return { known: true, forced: false, detail: `pid ${pid} runs next start; its environment cannot prove what the build inlined` };
-      if (processMode === 'dev') mode = 'dev';
-      const value = environmentValue(args.env, variable);
-      if (value !== 'true') {
-        return { known: true, forced: false, detail: `pid ${pid} (between app port ${appPort} and next dev pid ${root}) has ${variable}=${value ?? '<unset>'}` };
-      }
-    }
-  }
-  if (mode !== 'dev') return { known: true, forced: false, detail: `no process serving app port ${appPort} runs next dev` };
-  return { known: true, forced: true, detail: `every process from app port ${appPort}'s listeners (cwd ${checkout}) up to next dev pid ${root} has ${variable}=true` };
-}
-
-export const MAINNET_CONFIRMATION = 'REAL_FUNDS';
-
-// The launch only checks the requested network: mainnet needs the real-funds
-// confirmation. Testnet is enforced inside the browser (the venue policy's blocked hosts).
-export function assertLaunchNetwork(_target, { network, mainnetConfirmation } = {}) {
-  const requested = network == null || network === '' ? 'testnet' : String(network);
-  if (requested !== 'testnet' && requested !== 'mainnet') {
-    throw new Error(`network must be testnet or mainnet, got ${JSON.stringify(network)}.`);
-  }
-  if (requested === 'mainnet' && mainnetConfirmation !== MAINNET_CONFIRMATION) {
-    throw new Error(`network=mainnet needs mainnet_confirmation=${MAINNET_CONFIRMATION}; refusing to launch the ${webDappPolicy().adapterId} browser.`);
-  }
-  return requested;
-}
-
-// "a, b and c".
-function listing(names) {
-  return names.length > 1 ? `${names.slice(0, -1).join(', ')} and ${names.at(-1)}` : names.join('');
-}
-
-// `policy`: the venue policy (checkout, dependencies, startPath, testnetVariable);
-// by default the one RECIPE_WEB_DAPP_POLICY names.
-export async function webDappReadiness({
-  policy = webDappPolicy(),
-  target,
-  appPort,
-  cdpPort,
-  signer = 'extension',
-  account = 'dev1',
-  env = process.env,
-  probeBrowser = undefined,
-}) {
-  const checks = [];
-  const shape = policy.checkout.matches(target);
-  checks.push(check('checkout', shape, shape ? policy.checkout.label : `${target} is not a ${policy.checkout.name} checkout`));
-  const deps = policy.dependencies.filter((name) => !existsSync(path.join(target, 'node_modules', name, 'package.json')));
-  checks.push(check('dependencies', deps.length === 0, deps.length === 0 ? `${listing(policy.dependencies)} installed` : `missing: ${deps.join(', ')} (run npm ci on Node 22)`));
-
-  if (appPort) {
-    const status = await httpStatus(`http://127.0.0.1:${appPort}${policy.startPath}`);
-    checks.push(check('app-dev-server', status === 200, `GET http://localhost:${appPort}${policy.startPath} -> ${status}`));
-  } else {
-    checks.push(check('app-dev-server', false, 'no dev-server port; pass --watcher-port <port> or set TERMINAL_APP_PORT'));
-  }
-  // Advisory: the browser enforces testnet itself (the venue policy's blocked hosts).
-  const testnet = devServerTestnetDiagnostic(target, { appPort, variable: policy.testnetVariable });
-  checks.push(check('testnet-forced', testnet.known && testnet.forced, testnet.detail, {
-    required: false,
-    status: testnet.known && testnet.forced ? 'pass' : 'warn',
-  }));
-
-  try {
-    const { file, fixture } = await loadWalletFixture(target, env);
-    const address = viemAccountFromEntry(fixtureEntry(fixture, account)).address;
-    checks.push(check('wallet-fixture', true, `${path.basename(file)}: account ${account} -> ${address}`));
-  } catch (error) {
-    checks.push(check('wallet-fixture', false, error.message.split('\n')[0]));
-  }
-
-  if (probeBrowser) {
-    try {
-      const browser = await probeBrowser(env);
-      checks.push(check('browser', true, `${browser.version ?? browser.bin} (${browser.source})`));
-    } catch (error) {
-      checks.push(check('browser', false, error.message.split('\n')[0]));
-    }
-  }
-
-  const extensionDir = path.resolve(env.TERMINAL_EXTENSION_DIR || path.join(target, 'temp/metamask-extension/chrome'));
-  const manifestPath = path.join(extensionDir, 'manifest.json');
-  const extensionRequired = signer === 'extension';
-  if (existsSync(manifestPath)) {
-    const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
-    checks.push(check('metamask-extension', true, `MetaMask ${manifest.version} at ${extensionDir}`, { required: extensionRequired }));
-  } else {
-    checks.push(check('metamask-extension', false, `no extension dist at ${extensionDir}`, { required: extensionRequired }));
-  }
-  const checkout = env.TERMINAL_EXTENSION_CHECKOUT;
-  const checkoutOk = Boolean(checkout) && existsSync(path.join(checkout, 'node_modules/@metamask/browser-passworder'));
-  checks.push(check('extension-fixture-tooling', checkoutOk, checkoutOk
-    ? `extension checkout ${checkout} has fixture-state dependencies`
-    : 'TERMINAL_EXTENSION_CHECKOUT unset or not installed (needed to import the wallet into the extension)', { required: extensionRequired }));
-
-  const state = await readBrowserState(target);
-  const runtime = webDappRuntimeDir(target);
-  const live = Boolean(state && ownsProcess('browser', state.browserPid, runtime) && ownsProcess('wallet-host', state.hostPid, runtime));
-  if (cdpPort) {
-    const free = await portFree(cdpPort);
-    const owned = live && state.cdpPort === cdpPort;
-    checks.push(check('cdp-port', free || owned, free ? `CDP port ${cdpPort} is free` : owned ? `CDP port ${cdpPort} held by this slot's browser` : `CDP port ${cdpPort} is held by another process`));
-  } else {
-    checks.push(check('cdp-port', false, 'no CDP port; pass --cdp-port <port>'));
-  }
-  checks.push(check('browser-live', live, live
-    ? `browser pid ${state.browserPid} (${state.signer}, ${state.account?.name}) and wallet host pid ${state.hostPid}`
-    : 'no slot browser running (metamask.app.launch starts it)', { required: false }));
-
-  const failed = checks.filter((item) => item.required && item.status === 'fail').map((item) => item.id);
-  return { status: failed.length === 0 ? 'pass' : 'fail', checks, failed, browser: live ? state : null };
-}

package/adapters/web-dapp/stop.mjs

@@ -1,38 +0,0 @@
-#!/usr/bin/env node
-// stop.mjs — stop the web-dapp slot browser, wallet host and console collector, verify the CDP port
-// is free. Idempotent: nothing running is success.
-//
-// Inputs: --target <checkout> [--cdp-port <port>] [--json]
-// Outputs: JSON summary on stdout. Exit 0 stopped/nothing to stop; 1 port still owned.
-// Never touches: the Next.js dev server (Farmslot owns it), browser profiles.
-
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import { webDappPolicy } from '../../library/actions/web-dapp/platform/runtime.mjs';
-import { stopConsoleCollector, stopWebDappBrowser } from './lib/processes.mjs';
-
-const usage = 'Usage: stop.mjs --target <checkout> [--cdp-port <port>] [--json]';
-
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  const argv = process.argv.slice(2);
-  if (argv.includes('--help') || argv.includes('-h')) {
-    process.stdout.write(`${usage}\n`);
-    process.exit(0);
-  }
-  const value = (flag) => {
-    const index = argv.indexOf(flag);
-    return index >= 0 ? argv[index + 1] : undefined;
-  };
-  const target = value('--target') ?? process.cwd();
-  const rawPort = value('--cdp-port') ?? process.env.RECIPE_CDP_PORT ?? process.env.CDP_PORT;
-  try {
-    const log = (message) => process.stderr.write(`[${webDappPolicy().adapterId}/stop] ${message}\n`);
-    const result = await stopWebDappBrowser(target, { cdpPort: rawPort ? Number(rawPort) : undefined, log });
-    const collector = await stopConsoleCollector(target, { log });
-    process.stdout.write(`${JSON.stringify({ status: 'pass', ...result, consoleCollector: collector })}\n`);
-  } catch (error) {
-    process.stdout.write(`${JSON.stringify({ status: 'fail', error: error.message })}\n`);
-    process.exit(1);
-  }
-}

package/adapters/web-dapp/verify.mjs

@@ -1,51 +0,0 @@
-#!/usr/bin/env node
-// verify.mjs — `mm-harness verify --adapter <web-dapp adapter>`: read-only readiness of a
-// web-dapp slot (checkout, deps, dev server, forced testnet, fixture,
-// browser start probe, MetaMask extension copy, CDP port).
-//
-// Inputs: --target <checkout> [--cdp-port <port>] [--watcher-port <app port>]
-//   [--signer extension|injected] [--account <name>] [--json]
-// Outputs: readiness JSON (or a human summary) on stdout. Exit 0 ready; 1 not ready.
-// Never launches the slot browser or the dev server.
-
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import { resolveBrowser } from './launch.mjs';
-import { webDappPolicy } from '../../library/actions/web-dapp/platform/runtime.mjs';
-import { webDappReadiness } from './lib/readiness.mjs';
-
-const usage = 'Usage: verify.mjs --target <checkout> [--cdp-port <port>] [--watcher-port <app port>] [--signer extension|injected] [--account <name>] [--json]';
-
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  const argv = process.argv.slice(2);
-  if (argv.includes('--help') || argv.includes('-h')) {
-    process.stdout.write(`${usage}\n`);
-    process.exit(0);
-  }
-  const value = (flag) => {
-    const index = argv.indexOf(flag);
-    return index >= 0 ? argv[index + 1] : undefined;
-  };
-  const num = (raw) => (raw && /^\d+$/u.test(raw) ? Number(raw) : undefined);
-  const policy = webDappPolicy();
-  const report = await webDappReadiness({
-    policy,
-    target: path.resolve(value('--target') ?? process.cwd()),
-    appPort: num(value('--watcher-port') ?? process.env.TERMINAL_APP_PORT ?? process.env.WATCHER_PORT),
-    cdpPort: num(value('--cdp-port') ?? process.env.RECIPE_CDP_PORT ?? process.env.CDP_PORT),
-    signer: value('--signer') ?? process.env.TERMINAL_SIGNER ?? 'extension',
-    account: value('--account') ?? process.env.TERMINAL_ACCOUNT ?? 'dev1',
-    probeBrowser: resolveBrowser,
-  });
-  if (argv.includes('--json')) {
-    process.stdout.write(`${JSON.stringify({ schemaVersion: 1, command: 'verify', adapter: policy.adapterId, ...report }, null, 2)}\n`);
-  } else {
-    for (const check of report.checks) {
-      const mark = check.status === 'pass' ? '✓' : check.status === 'warn' || !check.required ? '·' : '✗';
-      process.stdout.write(`${mark} ${check.id}: ${check.detail}\n`);
-    }
-    process.stdout.write(report.status === 'pass' ? `${policy.adapterId} slot ready\n` : `not ready: ${report.failed.join(', ')}\n`);
-  }
-  process.exit(report.status === 'pass' ? 0 : 1);
-}