@deeeed/metamask-harness 0.84.0 → 0.86.0

package/CHANGELOG.md

@@ -2,6 +2,71 @@
 
 ## Unreleased
 
+## 0.86.0 - 2026-10-09
+
+### Added
+
+- `MM_HARNESS_SIBLING_LIBRARIES=0` turns off sibling discovery: libraries and reference checkouts beside the checkout or under `~/shared-library` are no longer found.
+- `call` takes `--hud show|hide` like `run`. With recipe-cli 0.11.1 a call draws the HUD by default, and its HUD text is its `intent=` input (`mm-harness call ui.screenshot intent="Show the order filled"`).
+- `MOBILE_RELOAD_VERIFY_TIMEOUT_MS` sets how long `adapters/mobile/reload-app.mjs` waits to verify a reload (default 30 000), and `MM_HARNESS_CONSOLE_ATTACH_TIMEOUT_MS` how long `launch` waits for the Extension console collector to attach (default about 10 s). A value that is not a positive number uses the default. Contract tests use them where no app or extension target can answer.
+
+### Changed
+
+- Depend on `@farmslot/recipe-runner` 0.28.1, `@farmslot/recipe-cli` 0.11.1, `@farmslot/adapter-sdk` 0.8.1, `@farmslot/adapter-web` 0.6.5, `@farmslot/adapter-node` 0.1.7 and `@farmslot/adapter-rn` 0.19.4 (were 0.28.0, 0.11.0, 0.8.0, 0.6.4, 0.1.6 and 0.19.3), pinned together; the install holds one `@farmslot/recipe-runner` and one `@farmslot/adapter-sdk`. Farmslot #869 and #870:
+  - `run` and `call` draw the HUD for every recipe source, an untrusted or inherited one (a task's `recipe-source.json`) included, unless `--hud hide`. The HUD is part of the plan an approval covers, so an untrusted-source approval made before this release without `--hud hide` (on an adapter that draws the HUD), or with another `--hud` setting, must be approved again; the refusal prints the new digest.
+  - The HUD on Extension pages is drawn in a closed shadow root with its text capped at 180 characters, so a node's own intent can no longer satisfy its `ui.wait_for text=` check or catch a text-target press.
+  - `call app.hud` drives the HUD itself, with no automatic updates.
+- A Mobile `run` arms and collects the app's issue buffer through `METAMASK_RECIPE_MOBILE_BRIDGE_SCRIPT` when it is set, as launch, status and the action library already do (it always used the bundled `cdp-bridge.cjs`). An empty value means the bundled bridge, as in the action library.
+- Extension `start-watch.sh` checks for the webpack compile marker every 0.5 s (was 2 s) and still refreshes the watcher pid every 2 s; its 480 s limit is now wall-clock time. It waits for stale watchers to stop instead of a fixed 2 s.
+
+### Fixed
+
+- Mobile `status` and `doctor` pair a physical Android device whose bridge entry carries a manufacturer prefix. A Pixel 6a over USB lists as `model:Pixel_6a` in adb while its bridge entry says `Google Pixel 6a`; it read `liveState: no-bridge`, so `doctor --print-ready` printed `not-ready` and Farmslot slot.check health failed on an unlocked wallet. The prefixed name pairs only the sole physical device (not `emulator-*`) of that model, so a same-model emulator cannot take the phone's entry; bare-model matching is unchanged.
+- Extension `ui.navigate hash=` and `url=` accept a route the Extension router rewrites in the same document. Extension 13.52 canonicalizes Perps symbols (`#/perps/trade/sol` becomes `#/perps/trade/SOL`, `XYZ%3Atsla` becomes `xyz%3ATSLA`, query kept), and readiness waited for the requested URL until it timed out. Readiness for a requested URL now takes the rewritten URL once it holds for two polls, if only the hash changed on the same extension page (same origin, path and query). Another origin, extension page or query, a `chrome-error://` page or a document that never becomes ready still fails; the error names the last URL (`Extension page did not reach <url> within <n>ms (last URL <url>)`). A lock screen that redirects to `#/unlock` is reported, not failed, so assert the route on `href`. `hash=` returns `href` (where the page landed), `requestedHref` and `redirected`; `url=` returns `href`.
+- `metamask.wallet.select_account name=` on Extension and Mobile also matches account group names. Multichain wallets (Extension 13.52) keep fixture names such as `dev1` on the account group while the internal account stays `Account 1`, so `name=dev1` failed with `Requested account was not found in internalAccounts`. A name with no internal account match now selects the EVM account of the account group with that name; a name two account groups share, or a group with no EVM account, fails without selecting anything. Extension, like Mobile, returns `alreadySelected: true` without a write when the requested account is already selected.
+
+- Docs, `help` and the Mobile, Extension and Core Perps action descriptions no longer say mainnet is read-only; they state the real mainnet rule (the shared Perps order rule, Core's `CORE_PERPS_ALLOW_MAINNET_WRITES=1`, Mobile cleanup acting on the app's current network, Extension cancel refused on mainnet outside the funded release lane). Core close, ensure and teardown descriptions no longer claim testnet only.
+- Contributors: the feature-guard scripts (`differential.mjs`, `release-smoke.mjs`, `builds.mjs`) reach a remote host with `-o ConnectTimeout=10` on every `ssh` and `scp`, and `BatchMode=yes` on `scp` as on `ssh`. A host name whose first address does not answer (`ssh macpro.local` from macwork: `connect to host macpro.local port 22: Undefined error: 0`) failed or hung without it; with it, ssh moves on to the next address.
+- Extension `refresh-build.sh` writes its build log under `$TMPDIR` as `refresh-build.XXXXXX`, without the `.log` suffix (macOS `mktemp` takes no suffix after the X's); macOS `mktemp -t` ignored `TMPDIR`, so each contract run left two logs in the machine's temp dir.
+- Contributors: a unit run gets one TMPDIR that every worker inherits. When the run ends, interrupted (Ctrl-C, SIGTERM) or not, the processes still naming it are stopped and it is removed; an interrupted run used to leave its per-file temp dirs, vitest's transform dir and detached test browsers behind. Every unit run also left a CDP broker socket in `/tmp` (the console-forwarder test killed the forwarder before it could release it), and the mutation-receipt test now writes under TMPDIR, not the checkout. Two contract tests whose bare `mktemp -d` ignored the runner's TMPDIR on macOS now create under it.
+- Contributors: contract and unit tests no longer see the operator's recipe libraries. `ct_init` and the unit setup point `MM_HARNESS_CONFIG` at a missing file, set `MM_HARNESS_SIBLING_LIBRARIES=0`, point `FARMSLOT_HOME` into the sandbox (the personal library) and clear `RECIPE_LIBRARY_PATH` and any exported `MM_HARNESS_REF_<ADAPTER>`. Port claims go to a sandbox `MM_HARNESS_PORT_REGISTRY`, not `~/.cache/mm-harness/ports`. From a checkout with perps and terminal configured, or checked out beside it, `run-name-resolution` and `extension-perps-g005` failed (`mm-harness-wave2` failed with the config). A test that covers one of these sources sets it up itself.
+
+## 0.85.0 - 2026-10-09
+
+### Added
+
+- `health.check` recipes for Mobile, Extension and Core: a read-only readiness check to run before ticket work. A failed precondition stops at a node named after its error (for example `WALLET_LOCKED`, `NOT_ON_HOME` or, on Mobile and Extension, `CONSOLE_ERRORS`), whose intent gives the recovery command. `mm-harness help` lists it under the target step.
+- `metamask.app.assert_no_console_errors` on Mobile and Extension, as on `web-dapp`: it fails on a console error or exception that no console allowlist covers, judging the events since the launch began by their own timestamps, and fails as unavailable unless the capture is proven (the slot's console forwarder or collector is running and a control line logged in the app or MetaMask reaches the log). `launch` records when it starts, and console lines replayed from before then (by an app runtime or browser the launch kept) are left out. Mobile reads `app-console.log`, which every launch now restarts empty along with the forwarder's replay cursor, and judges only the device the bridge selects; Extension reads `extension-console.log` from the offset `launch` records, and its collector now stamps each line with the event's own time (UTC, with milliseconds). Known app noise is accepted only when it also appears on the app's unchanged base build: the bundled library ships `diagnostics/console-allowlist.json` (the Extension unlock page's `UNSAFE_componentWillMount` warning), read ahead of other libraries' by these actions and by run diagnostics, and the classifier carries pattern rules for base-reproduced errors one exact entry cannot cover: Mobile's SES lockdown intrinsic reports and its notifications startup failure (`createOnChainTriggers`), whose message carries the bundle line; Extension's `getBearerToken` while locked (MetaMask/metamask-extension#46688) and the Money query adapter's `mutations` TypeError (TAT-4063), whose stacks name build-specific chunks. Allowlist entries can name the `app` source Mobile lines carry, and Mobile console lines match without the forwarder's time and device prefix.
+
+### Changed
+
+- **BREAKING:** `run --hud` takes `show` or `hide`, default `show`. `auto` is gone: the CLI refuses it as an invalid choice (`--hud must be show or hide; received 'auto'.`); drop the flag to get the default. The recipe HUD, each node's intent, now draws on every adapter that implements `app.hud`, headless browsers included. A headless web-dapp (Terminal) browser gets it where `auto` skipped it; Mobile and Extension already drew it by default. A Mobile release artifact still runs without it, since it has no dev bridge to draw with. `METAMASK_RECIPE_AUTO_HUD=0` stays the internal off switch for self-test, verify and the test sandboxes, and `--hud show` wins over it.
+- **BREAKING:** web-dapp `ui.screenshot` keeps the HUD in the capture (it hid it while capturing), so Terminal screenshot evidence shows the node's intent as Mobile and Extension evidence does. `--hud hide` is the way to a HUD-free screenshot.
+- A `surface=wallet` web-dapp `ui.screenshot` (the MetaMask confirmation window or side panel) shows the running node's intent too: the HUD is a bar docked to that MetaMask page's bottom edge for the capture only, which reserves its own height so the request and the footer buttons move up rather than being covered (pointer-events none), and is removed after it.
+- A run with the HUD off (`--hud hide`, a `call`, an untrusted source) first clears the HUD an earlier run left on the slot, so its screenshots never show a previous recipe's intent: web-dapp deletes `hud.json` (the wallet host redraws from it) and the drawn HUD on the app tabs; Extension removes the runner HUD from its pages. Nothing is launched to do it, `METAMASK_RECIPE_AUTO_HUD=0` skips it, and a failed clear prints one `WARN:` line on stderr.
+- Inside a checkout, every command resolves its adapter, target and slot once, through recipe-cli's context resolver, so `status`, `doctor`, `run` and the rest need no `--adapter`. The order is: flag, then the checkout's runtime binding, then its slot, then a unique detect match among the built-ins and the operator's library plugins (matched by their declared `detect`, before any plugin code loads).
+  - A checkout that more than one adapter matches stops with `ADAPTER_AMBIGUOUS` (exit 2) and lists the candidates. With no match, a command keeps its "could not detect the MetaMask repo type" error.
+  - `status`, `doctor`, `run`, `call` and discovery (`actions`, `run --list`/`--describe`, `call --list`) carry `context` in their `--json` envelopes (each value and its source), as does a command's own `USAGE` error once its context has resolved. Grammar refusals (raised before resolution), the task view (`status --task`/`--watch`) and the other commands' envelopes, `launch` on every adapter included, are unchanged. Human output adds one `context:` line on stderr when the adapter was not given by a flag.
+  - Terminal detection needs a recipe-terminal library that declares `detect` (recipe-terminal #8, 8a44aee); with an older library, pass `--adapter terminal`.
+  - `status` accepts `--adapter` and `--platform` (it refused them with `CLI_UNKNOWN_OPTION`).
+  - The slot comes from mm-harness's own pool resolution (the configured Farmslot root, else the nearest Farmslot checkout's `pool/`) unless `FARMSLOT_POOL_DIR` or `FARMSLOT_ROOT` names one, so a slot checkout beside a Farmslot checkout resolves its slot, and its ports fill `--cdp-port`/`--watcher-port`, with no env.
+  - Commands no longer detect the adapter themselves: status, doctor, check, provision, prepare, help, task init, `verify`'s overlay, debug, logs, fixtures, review and domain all read the resolved one. `check` still refuses `--platform ios|android`.
+  - `review` and `domain` scope to the resolved adapter when review covers it (mobile, extension, core, terminal), else run unscoped. Only an explicit `--adapter` that names another adapter is refused.
+- Depend on `@farmslot/recipe-cli` 0.11.0 and `@farmslot/adapter-sdk` 0.8.0 (were 0.10.0 and 0.7.1) for the context resolver (deeeed/farmslot#864), on `@farmslot/recipe-runner` 0.28.0, `@farmslot/protocol` 0.35.0 and `@farmslot/agent-runtime` 0.17.1 (were 0.27.0, 0.34.0 and 0.17.0), and on `@farmslot/adapter-web` 0.6.4, `@farmslot/adapter-rn` 0.19.3 and `@farmslot/adapter-node` 0.1.6 (were 0.6.2, 0.19.1 and 0.1.4). With them, a web-dapp launch stops waiting for CDP when its browser dies (deeeed/farmslot#865). The install holds one `@farmslot/adapter-sdk` and one `@farmslot/recipe-runner`.
+- Help lists the selectable adapters (the registered ones, then those the operator's libraries and the invocation's `--library` entries declare) wherever it names `--adapter` or `--platform`, instead of a fixed `mobile|extension|core|terminal`.
+- **BREAKING:** Mobile `verify` takes `--watcher-port` (the public `verify` grammar accepted it; the Mobile leaf refused it) and reads `RECIPE_WATCHER_PORT`: the Metro port is `--watcher-port`, then `RECIPE_WATCHER_PORT`, then `WATCHER_PORT`, then the slot's `.js.env`. With no port env set, a checkout the slot pool maps gets the pool slot's port through `WATCHER_PORT`, so that port now wins over the checkout's `.js.env` `WATCHER_PORT`.
+- **BREAKING:** A `RECIPE_RUNTIME_CONTEXT` that belongs to another checkout no longer sets the Extension slot's ports (`CDP_PORT`, `WATCHER_PORT`, `SLOT_ID`), Extension `verify`'s `RECIPE_SLOT_ID` and `RECIPE_HARNESS_EXTENSION_ID` (it reads the checkout's own context instead), or the Mobile provision slot (simulator, slot id). It counts when its `repoRoot` is the checkout's Git top level (so a clone nested inside another checkout never takes that checkout's context), or, without a `repoRoot`, when the file sits inside the checkout: the rule recipe-cli applies to the runtime binding. A context outside every checkout that names no `repoRoot` used to be authoritative; an orchestrator that keeps the file elsewhere sets `repoRoot`.
+- Contributors: `bash tests/contract/run.sh` runs half the cores' worth of tests at once (`-j N`), each in its own process group, `TMPDIR` and output file, and prints each test's duration and the 15 slowest. A test gets 60 s (`CONTRACT_TEST_TIMEOUT`, or `# contract: timeout=<s>` in its header) and fails as `timed out`; what it leaves running is killed and named on a `LEAK` line; a test that rebuilds `dist/` declares `# contract: serial`. An unfiltered run over `CONTRACT_BUDGET` (180 s) fails, and a stopped run first lets each running test clean up (its EXIT trap reaps the leaves its CLI detached), then kills every process group left in the test's tree. A process a test leaves behind can no longer stall the run.
+- Contributors: `yarn test:goldens` runs its families through `run.sh` and fails over `GOLDENS_BUDGET` (120 s); a golden case gets 60 s (`GOLDENS_CASE_TIMEOUT`, was 600 s). Docs: CONTRIBUTING and cli-contract describe both.
+- Contributors: `AGENTS.md` has a `## Test speed` section: the default and CI suite must take 5 minutes or less (the contract and goldens runs check their own budgets; build and unit are not checked), and a new or changed test uses no fixed waits of 1 s or more, moves to `tests/live/` when it takes over 5 s (a golden case over 30 s), tears down every background process, and never rebuilds `dist/` under concurrent readers.
+- Site: the platform map (`site/platform.html`) is a static page instead of the zoomable canvas. It shows the five layers (Libraries, MetaMask preset, Adapters, CLI, Engine) with their packages, one `mm-harness run` traced through them, and who changes what. It renders from `file://` (no `fetch`), so `site/assets/platform.json` is removed.
+
+### Fixed
+
+- A command no longer runs `git rev-parse` on every library it finds before dispatch. Library path hydration ran on every command, `--version` included, and pinned each discovered library (a sibling checkout, a config entry, the fetch cache) to its revision, which it never reads. The revision is now looked up only by what reports it (`status`, `domain`, `review`), as before. In a workspace with recipe-library checkouts beside the product checkout, that was one git process per library on every start.
+- `tests/contract/run.sh`, and `yarn test:goldens` through it, refuse to start (exit 2, `Next: npm run build`) when `dist/` is missing or older than any `src/**/*.ts`. `bin/mm-harness` then runs the TypeScript source on every start, type-stripped each time (about 260 ms more per start, over a thousand starts per run). CI and the full local suite build first, so only a bare `run.sh` or `yarn test:goldens` was affected.
+- Extension reopen (`adapters/extension/ensure-browser.sh`) no longer builds its `node -e` script or its `python3` profile cleanup from the slot id, checkout, runtime, profile, extension and runner paths, CDP port, webpack pid or wallet fixture path. The scripts are fixed text and get those values as argv. Before, a checkout path with an apostrophe (`/tmp/Arthur's checkout`) broke the reopen script's syntax and silently skipped the profile cleanup, and a crafted value could change the code the reopen ran.
+
 ## 0.84.0 - 2026-10-08
 
 ### Changed

package/README.md

@@ -419,9 +419,11 @@ A team library supplies `review/antipatterns.md` (one `##` section per family),
 optional `review/antipatterns.<adapter>.md` families appended for that adapter only,
 `review/parity.md`, and `owned-paths.json`; the harness composes them and never
 copies them. Locations resolve env (`RECIPE_LIBRARY_PATH`, `MM_HARNESS_REF_<ADAPTER>`)
-→ `mm-harness config` → sibling directory beside the checkout → shallow fetch into
-`<checkout>/.skills-cache/<name>`. A missing reference checkout degrades the parity
-step to "not checked" with the reason.
+→ `mm-harness config` → sibling directory beside the checkout or under
+`~/shared-library` → shallow fetch into `<checkout>/.skills-cache/<name>`.
+`MM_HARNESS_SIBLING_LIBRARIES=0` turns the sibling step off, for libraries and
+reference checkouts alike (the test sandboxes set it). A missing reference
+checkout degrades the parity step to "not checked" with the reason.
 
 ## Recover
 

package/adapters/extension/console-tail.mjs

@@ -90,10 +90,14 @@ function out(event, destination = null) {
   }
 }
 
-function stamp() {
-  const d = new Date();
-  const p = (n) => String(n).padStart(2, '0');
-  return `${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`;
+// A record's time: the UTC time of day of the event's own timestamp (CDP
+// Runtime.Timestamp, ms since the epoch), as the Mobile console forwarder
+// writes it, or of the write when the event carries none. Events the browser
+// replays when a collector attaches keep their own time, so
+// metamask.app.assert_no_console_errors can leave out those from before a
+// launch.
+function stamp(timestamp) {
+  return new Date(Number.isFinite(timestamp) ? timestamp : Date.now()).toISOString().slice(11, 23);
 }
 
 function shortLabel(target) {
@@ -160,7 +164,7 @@ function emitConsole(label, params, destination) {
   const level = String(params.type || 'log').toUpperCase();
   const text = (params.args || []).map(previewArg).join(' ');
   const [first, ...rest] = text.split('\n');
-  out(`${stamp()} [${label}] ${level}  ${first}${atSuffix(frameText(params.stackTrace?.callFrames?.[0]))}${rest.length ? `\n${rest.join('\n')}` : ''}`, destination);
+  out(`${stamp(params.timestamp)} [${label}] ${level}  ${first}${atSuffix(frameText(params.stackTrace?.callFrames?.[0]))}${rest.length ? `\n${rest.join('\n')}` : ''}`, destination);
 }
 
 function emitException(label, params, destination) {
@@ -172,7 +176,7 @@ function emitException(label, params, destination) {
     'uncaught exception';
   const frame = frameText(d.stackTrace?.callFrames?.[0]) || frameText({ url: d.url, lineNumber: d.lineNumber, columnNumber: d.columnNumber });
   const [first, ...rest] = String(text).split('\n');
-  out(`${stamp()} [${label}] EXCEPTION  ${first}${atSuffix(frame)}${rest.length ? `\n${rest.join('\n')}` : ''}`, destination);
+  out(`${stamp(params.timestamp)} [${label}] EXCEPTION  ${first}${atSuffix(frame)}${rest.length ? `\n${rest.join('\n')}` : ''}`, destination);
 }
 
 // Browser log entries (network failures, interventions, deprecations) are
@@ -186,7 +190,7 @@ function emitLogEntry(label, params, destination) {
   // A Log entry's location is its URL as is: a line number appended to a URL
   // could not be told apart from the URL's own text.
   const where = e.url ? e.url : frameText(e.stackTrace?.callFrames?.[0]);
-  out(`${stamp()} [${label}] [browser:${source}] ${level}  ${e.text || ''}${atSuffix(where)}`, destination);
+  out(`${stamp(e.timestamp)} [${label}] [browser:${source}] ${level}  ${e.text || ''}${atSuffix(where)}`, destination);
 }
 
 function handleMessage(label, destination, data) {

package/adapters/extension/ensure-browser.sh

@@ -235,9 +235,10 @@ echo "[cleanup] Reusing profile ${PROFILE}"
 # shutdowns; --load-extension re-advertises the path but does not flip it back,
 # leaving MV3 service workers inert).
 if [ -f "${PROFILE}/Default/Preferences" ]; then
-  python3 -c "
+  python3 - "${PROFILE}/Default/Preferences" 2>/dev/null <<'PY' && echo "[cleanup] Cleared crash recovery state + re-enabled extensions"
 import json
-pf = '${PROFILE}/Default/Preferences'
+import sys
+pf = sys.argv[1]
 prefs = json.load(open(pf))
 prefs['profile'] = prefs.get('profile', {})
 prefs['profile']['exit_type'] = 'Normal'
@@ -248,7 +249,7 @@ for ext_id, ext_prefs in ext_settings.items():
         ext_prefs['state'] = 1
         ext_prefs.pop('disable_reasons', None)
 json.dump(prefs, open(pf, 'w'))
-" 2>/dev/null && echo "[cleanup] Cleared crash recovery state + re-enabled extensions"
+PY
 fi
 
 # Readiness gate: wait until webpack emits a loadable background entry before
@@ -289,10 +290,13 @@ echo "[reopen] ${SLOT_ID} — CDP:${CDP_PORT:-off}"
 cd "${REPO}"
 
 trap - EXIT
-exec node -e "
+# The reopen script is fixed text; paths, ids and ports reach it as argv, never as source.
+IFS= read -r -d '' REOPEN_SCRIPT <<'NODE' || true
+const [SCRIPT_DIR, SLOT_ID, AGENT_DIR, EXTENSION, REPO, RUNNER_BIN, PROFILE, cdpPortArg, webpackPidArg, WALLET_FIXTURE] =
+  process.argv.slice(1);
 const path = require('path');
 const fs = require('fs');
-const adapterWeb = (name) => require('module').createRequire(path.join('${SCRIPT_DIR}', 'package.json'))('@farmslot/adapter-web/' + name);
+const adapterWeb = (name) => require('module').createRequire(path.join(SCRIPT_DIR, 'package.json'))('@farmslot/adapter-web/' + name);
 const http = require('http');
 const { execFileSync } = require('child_process');
 let chromium; try { chromium = require('@playwright/test').chromium; } catch { chromium = require('playwright').chromium; }
@@ -318,15 +322,9 @@ const {
   resolveBrowser,
 } = adapterWeb('browser-resolver');
 
-const SLOT_ID = '${SLOT_ID}';
-const AGENT_DIR = '${AGENT_DIR}';
-const EXTENSION = '${EXTENSION}';
-const REPO = '${REPO}';
-const RUNNER_BIN = '${RUNNER_BIN}';
-const PROFILE = '${PROFILE}';
-const CDP_PORT = '${CDP_PORT}' || null;
-const WEBPACK_PID = '${WEBPACK_PID}' || null;
-const walletFixture = JSON.parse(fs.readFileSync('${WALLET_FIXTURE}', 'utf8'));
+const CDP_PORT = cdpPortArg || null;
+const WEBPACK_PID = webpackPidArg || null;
+const walletFixture = JSON.parse(fs.readFileSync(WALLET_FIXTURE, 'utf8'));
 const PASSWORD = walletFixture.password;
 
 if (!PASSWORD) {
@@ -522,8 +520,8 @@ const releaseFocusHold = () => {
   await evaluatePageViaCdp(page, applyPersistentSlotTitle, { slotId: SLOT_ID, defaultTitle: 'MetaMask' });
 
   // Wait for runtime state to settle, then unlock if needed.
-  const unlockSelector = '[data-testid=\"unlock-password\"]';
-  const homeSelector = '[data-testid=\"account-menu-icon\"]';
+  const unlockSelector = '[data-testid="unlock-password"]';
+  const homeSelector = '[data-testid="account-menu-icon"]';
   let detectedState = 'unknown';
   for (let i = 0; i < 15; i++) {
     if (await page.locator(homeSelector).count()) {
@@ -544,7 +542,7 @@ const releaseFocusHold = () => {
   if (detectedState === 'locked') {
     console.log('[reopen] Unlocking wallet...');
     await page.fill(unlockSelector, PASSWORD);
-    await page.click('[data-testid=\"unlock-submit\"]');
+    await page.click('[data-testid="unlock-submit"]');
     await page.waitForSelector(homeSelector, { timeout: 30000 });
     console.log('[reopen] Unlocked');
   } else if (detectedState === 'onboarding') {
@@ -611,4 +609,5 @@ const releaseFocusHold = () => {
   console.error(e);
   process.exit(1);
 });
-"
+NODE
+exec node -e "$REOPEN_SCRIPT" "$SCRIPT_DIR" "$SLOT_ID" "$AGENT_DIR" "$EXTENSION" "$REPO" "$RUNNER_BIN" "$PROFILE" "$CDP_PORT" "$WEBPACK_PID" "$WALLET_FIXTURE"

package/adapters/extension/refresh-build.sh

@@ -103,7 +103,7 @@ fi
 
 echo "[refresh] Using node $(node -v 2>/dev/null || echo 'not found')"
 echo "[refresh] Starting yarn start (watcher-port=${WATCHER_PORT:-default})..."
-LOG="$(mktemp -t refresh-build-XXXXXX.log)"
+LOG="$(mktemp "${TMPDIR:-/tmp}/refresh-build.XXXXXX")"
 echo "[refresh] Log: $LOG"
 env ${PORT_ARG} yarn start > "$LOG" 2>&1 &
 BUILD_PID=$!

package/adapters/extension/start-watch.sh

@@ -19,7 +19,7 @@
 #   <runtime-dir>/recipe-harness-webpack.{pid,log}; optional --summary file
 #   {feature,status,inputs,outputs,generatedAt}.
 #   Exit 0 — compiled; 1 — slot watcher owns the checkout, build failed, or
-#   compile-marker timeout (240x2s); 2 — bad args.
+#   compile-marker timeout (480 s); 2 — bad args.
 #
 # Never touches: the slot-owned webpack.pid watcher process (refusal only,
 # removes the pid file only when stale); product source files.
@@ -229,8 +229,11 @@ existing_watch_pids="$(watcher_pids || true)"
 if [ -n "$existing_watch_pids" ]; then
   echo "[recipe-harness] Stopping stale target-scoped watcher(s): $(printf '%s' "$existing_watch_pids" | tr '\n' ' ')"
   printf '%s\n' "$existing_watch_pids" | xargs kill 2>/dev/null || true
-  sleep 2
-  existing_watch_pids="$(watcher_pids || true)"
+  for _ in 1 2 3 4 5 6 7 8 9 10; do
+    existing_watch_pids="$(watcher_pids || true)"
+    [ -z "$existing_watch_pids" ] && break
+    sleep 0.2
+  done
   if [ -n "$existing_watch_pids" ]; then
     printf '%s\n' "$existing_watch_pids" | xargs kill -9 2>/dev/null || true
   fi
@@ -290,7 +293,13 @@ elif [ -n "$LIB_DIR" ] && [ "${RECIPE_LOG_TUI_PARENT:-}" != "1" ]; then
   watch_tail_pid=$!
 fi
 compiled=false
-for i in {1..240}; do
+# The log is checked every 0.5 s, so a marker is seen at once. The watcher pid
+# needs a full process listing, so it is refreshed every 2 s. Bounded by time:
+# 480 s for a compile marker, 20 s for yarn start's watcher to appear.
+poll_started=$SECONDS
+i=0
+while [ $((SECONDS - poll_started)) -lt 480 ]; do
+  i=$((i + 1))
   if [ -n "$watch_tail_pid" ] && ! kill -0 "$watch_tail_pid" >/dev/null 2>&1; then
     wait "$watch_tail_pid" 2>/dev/null || true
     if grep -Eq 'compiled successfully|compiled with [0-9]+ warning|MetaMask .* compiled|Bundle end: service worker|Bundle end:.*app-init' "$watch_log" 2>/dev/null; then
@@ -300,9 +309,9 @@ for i in {1..240}; do
     echo '[recipe-harness] compact build watcher exited before compile marker; continuing to poll webpack log' >&2
     watch_tail_pid=""
   fi
-  if ! write_canonical_watch_pid; then
-    if [ "$i" -le 10 ]; then
-      sleep 2
+  if [ $((i % 4)) -eq 1 ] && ! write_canonical_watch_pid; then
+    if [ $((SECONDS - poll_started)) -lt 20 ]; then
+      sleep 0.5
       continue
     fi
     [ -n "$watch_tail_pid" ] && kill "$watch_tail_pid" >/dev/null 2>&1 || true
@@ -331,7 +340,7 @@ for i in {1..240}; do
     [ -n "$watch_tail_pid" ] && wait "$watch_tail_pid" 2>/dev/null || true
     break
   fi
-  sleep 2
+  sleep 0.5
 done
 if [ "$compiled" != true ]; then
   [ -n "$watch_tail_pid" ] && kill "$watch_tail_pid" >/dev/null 2>&1 || true

package/adapters/manifest.json

@@ -47,7 +47,7 @@
       "entry": "adapters/mobile/reload-app.mjs",
       "kind": "node",
       "purpose": "Request an in-place React Native app reload through Metro's protocol-v2 message endpoint.",
-      "inputs": "--port --json; env WATCHER_PORT, METRO_PORT",
+      "inputs": "--port --json; env WATCHER_PORT, METRO_PORT, MOBILE_RELOAD_VERIFY_TIMEOUT_MS (default 30000)",
       "outputs": "reload result on stdout; exit 0 requested / 1 unavailable or invalid input"
     },
     {

package/adapters/mobile/reload-app.mjs

@@ -146,7 +146,8 @@ async function reload(port) {
 }
 
 async function waitForReload(port, targetBefore, processBefore, observer) {
-  const deadline = Date.now() + 30_000;
+  const timeoutMs = Number(process.env.MOBILE_RELOAD_VERIFY_TIMEOUT_MS);
+  const deadline = Date.now() + (timeoutMs > 0 ? timeoutMs : 30_000);
   let lastError;
   while (Date.now() < deadline) {
     if (processBefore && readAndroidPid() !== processBefore) {

package/adapters/mobile/start-console-forwarder.sh

@@ -72,7 +72,15 @@ if [ -f "$PID_FILE" ]; then
   rm -f "$PID_FILE"
 fi
 
+# Each launch starts a fresh log. The replay cursor goes with it: it marks
+# lines as written that are no longer in the file, such as the relaunched
+# app's first lines the previous forwarder wrote, so the new forwarder replays
+# the app runtime's console buffer into the new log instead of skipping them.
+# A runtime the launch kept replays lines from before the launch too;
+# metamask.app.assert_no_console_errors leaves those out by their own time
+# against the mark each launch attempt records (app-console.launch.json).
 : > "$APP_LOG_FILE"
+rm -f "$APP_LOG_FILE.forwarder-state.json"
 pid="$(node "$SCRIPT_DIR/launch-console-forwarder.cjs" \
   --port "$PORT" \
   --out "$APP_LOG_FILE" \

package/adapters/shared/resolve-slot-ports-core.mjs

@@ -198,15 +198,57 @@ function mergeKvLayers(...layers) {
   return Object.keys(result).length ? formatKvLines(result) : '';
 }
 
+// Whether a runtime context belongs to the checkout at `repo` (recipe-cli's
+// binding rule): its repoRoot is the checkout's Git top level, so a clone
+// nested inside another checkout never takes that checkout's context; without
+// a repoRoot, the file sits inside that top level. An orchestrator may keep the
+// file elsewhere as long as it names the checkout. Twin of recipe-cli's
+// runtimeContextOwned: this module stays dependency-free for the shell paths
+// that load it, so the rule is repeated here rather than imported.
+export function ownsRuntimeContext(file, repo) {
+  let repoRoot;
+  try {
+    const value = JSON.parse(fs.readFileSync(file, 'utf8'));
+    repoRoot = typeof value?.repoRoot === 'string' ? value.repoRoot : undefined;
+  } catch {
+    return false;
+  }
+  if (repoRoot === undefined) return within(gitTopLevel(repo), file);
+  try {
+    return fs.realpathSync(repoRoot) === fs.realpathSync(gitTopLevel(repo));
+  } catch {
+    // A path that does not exist owns nothing.
+    return false;
+  }
+}
+
+function gitTopLevel(dir) {
+  try {
+    return execFileSync('git', ['-C', dir, 'rev-parse', '--show-toplevel'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+  } catch {
+    // Not a Git checkout: the directory is its own root.
+    return dir;
+  }
+}
+
+function within(outer, inner) {
+  try {
+    const relative = path.relative(fs.realpathSync(outer), fs.realpathSync(inner));
+    return !(relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative));
+  } catch {
+    // A path that does not exist owns nothing.
+    return false;
+  }
+}
+
 function extensionRuntimeContextPath(repo) {
   const repoRoot = path.resolve(repo);
   const envCtx = process.env.RECIPE_RUNTIME_CONTEXT;
-  if (envCtx) {
-    // Farmslot may manage runtime context outside the checkout. Treat the
-    // explicit environment override as authoritative; containment is not a
-    // security boundary and silently dropping it selects the wrong port.
-    return path.resolve(envCtx);
-  }
+  // Another checkout's context would set this checkout's ports.
+  if (envCtx && ownsRuntimeContext(path.resolve(envCtx), repoRoot)) return path.resolve(envCtx);
   return path.join(repoRoot, recipeRuntimeDir(), 'agentic-runtime.json');
 }
 

package/dist/adapters/console-capture.js

@@ -58,7 +58,9 @@ async function ensureConsoleCollector(options) {
   fs.writeFileSync(pidFile, `${child.pid}
 `);
   const attachmentFrom = { [extensionLog]: fileSize(extensionLog), [pageLog]: fileSize(pageLog) };
-  for (let attempt = 0; attempt < 100; attempt += 1) {
+  const timeoutMs = Number(process.env.MM_HARNESS_CONSOLE_ATTACH_TIMEOUT_MS);
+  const attempts = Math.ceil((timeoutMs > 0 ? timeoutMs : 1e4) / 100);
+  for (let attempt = 0; attempt < attempts; attempt += 1) {
     const proc = processArgs(child.pid);
     if (!proc) break;
     if (collectorMatches(proc, identity)) {

package/dist/adapters/extension/actions.js

@@ -43,6 +43,11 @@ const extensionActions = {
       }
     })
   }),
+  // The HUD lives only in the extension pages' DOM.
+  async clearHud() {
+    const { clearExtensionHud } = await import("../../../library/actions/extension/platform/cdp.mjs");
+    await clearExtensionHud();
+  },
   trustedMutation: true,
   // ensure_positions and ensure_orders only check state here.
   inputFindings: (nodeId, node) => [

package/dist/adapters/extension/console-capture.js

@@ -1,4 +1,5 @@
 import fs from "node:fs";
+import path from "node:path";
 import { recipeRuntimePath } from "@farmslot/recipe-cli/harness";
 import { verifyCapture } from "../../../library/actions/shared/console-collector.mjs";
 import { ensureConsoleCollector } from "../console-capture.js";
@@ -10,6 +11,21 @@ function extensionCaptureFiles(target) {
     pidFile: recipeRuntimePath(target, "console-tail.pid")
   };
 }
+const EXTENSION_CONSOLE_LAUNCH_FILE = "extension-console.launch.json";
+function recordConsoleLaunchIn(runtimeDir) {
+  const log = path.join(runtimeDir, "extension-console.log");
+  const stat = fs.existsSync(log) ? fs.statSync(log) : null;
+  fs.mkdirSync(runtimeDir, { recursive: true });
+  const launchedAtMs = Date.now();
+  fs.writeFileSync(
+    path.join(runtimeDir, EXTENSION_CONSOLE_LAUNCH_FILE),
+    `${JSON.stringify({ offset: stat?.size ?? 0, inode: stat?.ino ?? null, launchedAtMs, recordedAt: new Date(launchedAtMs).toISOString() })}
+`
+  );
+}
+function recordExtensionConsoleLaunch(target) {
+  recordConsoleLaunchIn(path.dirname(extensionCaptureFiles(target).extensionLog));
+}
 function extensionCdpPort() {
   return process.env.CDP_PORT ?? process.env.RECIPE_CDP_PORT;
 }
@@ -37,8 +53,10 @@ async function verifyExtensionConsoleControl(capture) {
   return verifyCapture({ cdpPort: capture.cdpPort, log: capture.extensionLog, target: "extension", extensionId });
 }
 export {
+  EXTENSION_CONSOLE_LAUNCH_FILE,
   ensureExtensionConsoleCapture,
   extensionCaptureFiles,
   extensionCdpPort,
+  recordExtensionConsoleLaunch,
   verifyExtensionConsoleControl
 };

package/dist/adapters/extension/fixtures.js

@@ -4,6 +4,7 @@ import { colorHumanMessage, EXIT, shellQuote, spawnScriptStreaming } from "@farm
 import { FIXTURE_STREAM_TIMEOUT_MS } from "../../commands/fixtures.js";
 import { sameFeatureFlags } from "../../feature-flags.js";
 import { runnerDir } from "../../paths.js";
+import { recordExtensionConsoleLaunch } from "./console-capture.js";
 import { readExtensionPinnedFlags } from "./feature-flags.js";
 import { releaseArtifactState } from "./runtime-decision.js";
 async function applyExtensionFixture({
@@ -96,6 +97,7 @@ async function applyExtensionFixture({
   }
   process.stderr.write(`${colorHumanMessage(`\u2192 fixtures ${action} extension \u2014 resetting and seeding the slot-owned profile from the existing build\u2026`)}
 `);
+  recordExtensionConsoleLaunch(target);
   const liveScript = path.join(runnerDir, "adapters/extension/live.sh");
   const args = ["--target", target, "--launch-existing-dist", "--launch-only", "--reset-profile"];
   const flagKeys = Object.keys(fixtureFlags);

package/dist/adapters/extension/overlay.js

@@ -1,13 +1,14 @@
-import { readRuntimeContextField, resolveRuntimeContextPath } from "@farmslot/recipe-cli/harness";
+import { readRuntimeContextField, recipeRuntimeDir, resolveRuntimeContextPath } from "@farmslot/recipe-cli/harness";
 import fs from "node:fs";
+import path from "node:path";
+import { ownsRuntimeContext } from "../../../adapters/shared/resolve-slot-ports-core.mjs";
 import { resolveExtensionSlotPorts } from "../slot-ports.js";
 function hasArg(args, needle) {
   return args.some((arg) => arg === needle || arg.startsWith(`${needle}=`));
 }
 function applyExtensionRuntimeEnv(target, args) {
-  const contextPath = resolveRuntimeContextPath(target);
-  const contextExists = fs.existsSync(contextPath);
-  if (contextExists) {
+  const contextPath = [resolveRuntimeContextPath(target), path.join(target, recipeRuntimeDir(), "agentic-runtime.json")].find((file) => fs.existsSync(file) && ownsRuntimeContext(file, target));
+  if (contextPath) {
     process.env.RECIPE_RUNTIME_CONTEXT = contextPath;
     if (!process.env.RECIPE_SLOT_ID) {
       const slotId = readRuntimeContextField(contextPath, "slotId");

package/dist/adapters/extension/runtime.js

@@ -4,6 +4,7 @@ import fs from "node:fs";
 import { createRequire } from "node:module";
 import path from "node:path";
 import { importRecipeHarnessRuntimeBrowserExtension, importRecipeHarnessRuntimeCdp, resolveFarmslotPoolDir, runnerDir } from "../../paths.js";
+import { recordExtensionConsoleLaunch } from "./console-capture.js";
 import { poolFilesForHost } from "../resolve-slot-ports.js";
 import { macosSessionLocked, SESSION_LOCKED_MESSAGE, SESSION_LOCKED_USER_ACTION } from "../../../adapters/shared/session-lock.mjs";
 import { profileProcessPids } from "./validation-process-ownership.js";
@@ -666,6 +667,7 @@ async function launchLockedValidationBrowser(options) {
   fs.mkdirSync(validationProfileRoot, { recursive: true });
   fs.mkdirSync(validationArtifactsRoot, { recursive: true });
   assertNoQuarantinedValidationProfiles(validationProfileRoot);
+  recordExtensionConsoleLaunch(options.projectRoot);
   await stopOwnedCdpListener(options.cdpPort, [
     validationRuntimePath,
     path.join(options.projectRoot, recipeRuntimeDir())

package/dist/adapters/mobile/launch.js

@@ -1,4 +1,5 @@
 import fs from "node:fs";
+import path from "node:path";
 import { recipeRuntimePath, EXIT, str, writeInteractiveProgress } from "@farmslot/recipe-cli/harness";
 import { applyDeviceTargeting } from "../../commands/device-target.js";
 import { launchMobile } from "../../commands/launch/mobile.js";
@@ -49,6 +50,14 @@ function metroLaunchEvidence(target) {
     if (descriptor !== void 0) fs.closeSync(descriptor);
   }
 }
+function recordMobileConsoleLaunch(target) {
+  const file = recipeRuntimePath(target, "app-console.launch.json");
+  const launchedAtMs = Date.now();
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  fs.writeFileSync(file, `${JSON.stringify({ launchedAtMs, recordedAt: new Date(launchedAtMs).toISOString() })}
+`);
+}
+const markedLaunches = /* @__PURE__ */ new WeakSet();
 const mobileLaunchProfile = {
   refuseFlags({ platformTarget }) {
     if (!platformTarget) {
@@ -104,7 +113,14 @@ const mobileLaunchProfile = {
   },
   nativeInputs: ["ios", "android", "package.json", "yarn.lock"],
   rebuildCommand: ({ platformTarget }) => `mm-harness launch ${platformTarget} --build`,
-  compose: ({ target, platformTarget, machine, remoteFlagRequest }, tier, restartApp, clearMetro) => launchMobile(target, platformTarget, tier, machine, restartApp, clearMetro, remoteFlagRequest?.flags),
+  compose: (launch, tier, restartApp, clearMetro) => {
+    const { target, platformTarget, machine, remoteFlagRequest } = launch;
+    if (restartApp || !markedLaunches.has(launch)) {
+      markedLaunches.add(launch);
+      recordMobileConsoleLaunch(target);
+    }
+    return launchMobile(target, platformTarget, tier, machine, restartApp, clearMetro, remoteFlagRequest?.flags);
+  },
   classify(_launch, output) {
     if (output.includes("open-device: Android device is locked.")) {
       return {
@@ -187,5 +203,6 @@ const mobileLaunchProfile = {
   evidence: metroLaunchEvidence
 };
 export {
-  mobileLaunchProfile
+  mobileLaunchProfile,
+  recordMobileConsoleLaunch
 };

package/dist/adapters/mobile/provision.js

@@ -4,7 +4,7 @@ import crypto from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { resolveSlotPortsByRepo } from "../../../adapters/shared/resolve-slot-ports-core.mjs";
+import { ownsRuntimeContext, resolveSlotPortsByRepo } from "../../../adapters/shared/resolve-slot-ports-core.mjs";
 const RUNWAY_IOS_METADATA = {
   artifactName: "ios-app-main-dev-expo",
   workflow: "expo-dev-build.yml",
@@ -177,8 +177,10 @@ function fail(target, platform, code, message, rerunCommand, slot) {
   };
 }
 function readSlotContext(target, runtimeDir) {
+  const envContext = process.env.RECIPE_RUNTIME_CONTEXT;
   const candidates = [
-    process.env.RECIPE_RUNTIME_CONTEXT,
+    // Another checkout's context would name its slot and simulator.
+    envContext && ownsRuntimeContext(envContext, target) ? envContext : void 0,
     runtimeContextPath(target, runtimeDir),
     path.join(target, recipeRuntimeDir(), "agentic-runtime.json"),
     path.join(target, "temp/recipe/runtime/agentic-runtime.json"),

package/dist/adapters/mobile/run.js

@@ -57,7 +57,8 @@ const mobileRun = {
     // matches its target against it.
     RECIPE_RN_EXPLICIT_PLATFORM: process.env.RECIPE_RN_EXPLICIT_PLATFORM
   }),
-  // An installed release artifact is opaque: no harness HUD inside it.
+  // An installed release artifact is opaque: it has no dev bridge and no
+  // AgentStepHud, so there is nothing to draw the HUD with.
   autoHud: () => process.env.METAMASK_RECIPE_MOBILE_OPAQUE_RUNTIME !== "1",
   // Always clear a HUD step the engine left on-device (a failed run strands
   // the FAIL banner). Best-effort — never masks the run's real outcome.
@@ -157,7 +158,7 @@ const mobileObservation = {
   }
 };
 function runMobileIssueCommand(projectRoot, command) {
-  const bridge = path.join(runnerDir, "adapters", "mobile", "bridge-runtime", "cdp-bridge.cjs");
+  const bridge = process.env.METAMASK_RECIPE_MOBILE_BRIDGE_SCRIPT || path.join(runnerDir, "adapters", "mobile", "bridge-runtime", "cdp-bridge.cjs");
   const result = spawnSync(process.execPath, [bridge, command], {
     cwd: projectRoot,
     env: { ...process.env, APP_ROOT: projectRoot, CDP_TIMEOUT: "5000" },