@deeeed/metamask-harness 0.37.0 → 0.38.0

package/dist/recipe-security.js

@@ -3,10 +3,19 @@ import { lstat, readFile, readdir, realpath } from "node:fs/promises";
 import path from "node:path";
 const READ_ONLY_CUSTOM_ACTIONS = /* @__PURE__ */ new Set([
   "ui.locators",
+  "ui.activate_and_observe",
   "metamask.wallet.fixture_status",
   "metamask.wallet.validate_import",
   "metamask.wallet.list_accounts",
   "metamask.wallet.read_state",
+  "metamask.assets.read_visible_state",
+  "metamask.assets.read_details",
+  "metamask.networks.read_visible_state",
+  "metamask.perps.read_visible_state",
+  "metamask.perps.compare_provider_market",
+  "metamask.perps.read_eligibility",
+  "metamask.perps.read_funds_confirmation",
+  "metamask.swap_bridge.read_visible_state",
   "metamask.perps.read_positions",
   "metamask.perps.read_orders",
   "metamask.perps.read_account",
@@ -19,15 +28,37 @@ const READ_ONLY_CUSTOM_ACTIONS = /* @__PURE__ */ new Set([
   "metamask.analytics.assert_events"
 ]);
 const APP_MUTATION_CUSTOM_ACTIONS = /* @__PURE__ */ new Set([
+  "ui.activate_and_observe",
+  "metamask.assets.verify_sorting",
+  "metamask.assets.set_token_visibility",
+  "metamask.assets.import_custom_token",
+  "metamask.assets.prepare_send",
+  "metamask.assets.review_send",
+  "metamask.assets.finish_send",
+  "metamask.assets.set_custom_gas",
+  "metamask.assets.select_network_scope",
+  "metamask.wallet.lock",
+  "metamask.networks.add_custom",
+  "metamask.networks.add_chainlist",
+  "metamask.networks.remove_custom",
   "metamask.wallet.setup",
   "metamask.wallet.import",
   "metamask.wallet.reset",
   "metamask.wallet.ensure_unlocked",
   "metamask.wallet.select_account",
+  "metamask.swap_bridge.select_assets",
+  "metamask.swap_bridge.set_amount",
+  "metamask.swap_bridge.set_max_amount",
+  "metamask.swap_bridge.set_slippage",
+  "metamask.swap_bridge.submit_transaction",
+  "metamask.settings.set_basic_functionality",
   "metamask.deeplink.open",
   "metamask.perps.close_positions",
   "metamask.perps.close_orders",
   "metamask.perps.place_order",
+  "metamask.perps.close_visible_position",
+  "metamask.perps.open_position_action",
+  "metamask.perps.edit_margin",
   "metamask.perps.edit_order",
   "metamask.perps.update_position_tpsl",
   "metamask.perps.ensure_positions",
@@ -35,15 +66,24 @@ const APP_MUTATION_CUSTOM_ACTIONS = /* @__PURE__ */ new Set([
   "metamask.perps.clear_performance_caches",
   "metamask.perps.measure_homepage_visible",
   "metamask.perps.prepare_local_snapshot_endpoint",
+  "metamask.perps.set_market_favorite",
+  "metamask.perps.select_activity_filter",
+  "metamask.perps.select_market_filter",
+  "metamask.perps.open_balance_action",
   "metamask.perps.start_state",
   "metamask.perps.teardown_state",
   // Consent changes wallet state and is therefore an app mutation.
   "metamask.analytics.set_consent"
 ]);
 const EXTERNAL_MUTATION_CUSTOM_ACTIONS = /* @__PURE__ */ new Set([
+  "ui.activate_and_observe",
+  "metamask.assets.finish_send",
+  "metamask.swap_bridge.submit_transaction",
   "metamask.perps.close_positions",
   "metamask.perps.close_orders",
   "metamask.perps.place_order",
+  "metamask.perps.close_visible_position",
+  "metamask.perps.edit_margin",
   "metamask.perps.edit_order",
   "metamask.perps.update_position_tpsl",
   "metamask.perps.ensure_positions",

package/dist/runner.js

@@ -246,6 +246,9 @@ function mobileSourceAwareLifecycleAdapters(adapter, lifecycle, readinessProbe =
   return lifecycle.map((entry) => ({
     ...entry,
     async execute(node, context) {
+      if (context.env?.METAMASK_RECIPE_MOBILE_OPAQUE_RUNTIME === "1") {
+        return entry.execute(node, context);
+      }
       const command = node.command ?? node.event ?? node.state;
       const reloadsSource = command === "launch" || command === "foreground" || command === "restart";
       const checksIosContinuity = command === "foreground" && !isAndroidLifecycle(node, context.env ?? {});

package/docs/RELEASE-QA-CAPABILITY-MAP.md

@@ -1,150 +1,125 @@
 # Release QA capability map
 
-This document maps the Extension release checklists to durable recipe
-capabilities. The baseline is `mm-harness` 0.36.0. It is a capability map, not
-a claim that the listed release cases currently pass.
-
-Source baseline: QA repository commit
+This document maps the current mm-harness release-validation surface to the
+MetaMask Extension QA checklists at commit
 [`77591c5`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/tree/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension).
-The relevant sources are the Perps
-[`checklist`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/perps-rc/perps-rc-regression.md)
-and
-[`runbook`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/perps-rc/runbook.md),
-Assets
-[`checklist`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/assets-rc/assets-rc-regression.md)
-and
-[`runbook`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/assets-rc/runbook.md),
-Swap and Bridge
-[`checklist`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/swap-bridge-rc/swap-bridge-rc-regression.md)
-and
-[`runbook`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/swap-bridge-rc/runbook.md),
-and Networks
-[`checklist`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/networks-regression-rc/networks-regression-rc.md)
-and
-[`runbook`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/networks-regression-rc/runbook.md).
-
-Ratings:
-
-- **AVAILABLE**: a typed capability supplies the required setup, operation, or
-  machine-checkable observation.
-- **PARTIAL**: generic UI operations or a narrower domain action can perform
-  part of the case, but deterministic setup or a domain assertion is absent.
-- **MISSING**: no durable recipe capability covers the case family.
-- **TARGET**: being implemented in the current change; not present in 0.36.0.
-
-## Cross-cutting capabilities
-
-| Requirement | 0.36.0 capability | Status |
-| --- | --- | --- |
-| Discover the typed surface | `mm-harness actions --adapter extension --json` exposes the schemas in the [Extension action manifest](../library/manifests/extension.action-manifest.json), so a plan can reject unsupported domain operations before launch. | **AVAILABLE** |
-| Validate and launch the downloaded official RC artifact | Network discovery and download remain in the release-validation workflow, following the QA [`download-build.sh`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/assets-rc/scripts/download-build.sh) contract. | **TARGET**: verify a local Extension ZIP or Android APK against its trusted digest and declared product identity, then run it without using a checkout build. Extension adds safe extraction, cached tree integrity, and isolated launch. Android adds explicit-device install and launch; release recipes use native accessibility without a development bridge, Metro, or HUD. Downloaded iOS artifacts remain unsupported. |
-| Start from an imported wallet or clean onboarding | [`metamask.wallet.import`](../library/actions/extension/wallet/import.mjs), [`metamask.wallet.reset`](../library/actions/extension/wallet/reset.mjs), and the shared [`import`](../library/recipes/wallet/import.recipe.json) and [`reset-import`](../library/recipes/wallet/reset-import.recipe.json) recipes can use visible UI and parameterized credential sources. | **AVAILABLE** |
-| Drive and observe UI | The [Extension action manifest](../library/manifests/extension.action-manifest.json) exposes typed navigation, press, input, key, scroll, wait, screenshot, surface capture, locators, and CDP target selection. | **AVAILABLE** for mechanics; domain meaning remains **PARTIAL**. |
-| Record evidence and a terminal verdict | Recipe traces, action results, screenshots, and artifact indexing exist. There is no release-plan completion gate equivalent to the QA [`validate-run-report.sh`](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/assets-rc/scripts/validate-run-report.sh), including canonical case-ID coverage and explicit remaining cases. | **PARTIAL** |
-| Parameterized environment control | Wallet import choices and Extension analytics consent are typed. Domain fixtures, service doubles, geo eligibility, network catalogs, and remote stream scenarios are not general release-plan inputs. | **MISSING** |
-
-## Perps: 64 Critical cases
-
-The existing Perps surface can prepare, read, assert, and close selected
-positions and open orders, and place a basic order. See the
-[`Extension manifest`](../library/manifests/extension.action-manifest.json) and
-[`smoke recipe`](../library/recipes/extension/perps/smoke.recipe.json). It does
-not reproduce the checklist's seeded account snapshot: balance, long and short
-positions, limit orders, take-profit/stop-loss state, activity, watchlist, and
-controlled provider responses and streams.
-
-| Case family | Required start state | Required operations and assertions | 0.36.0 coverage |
+It describes reusable capabilities, not a release verdict. A release verdict
+must come from the case inventory, terminal traces, and completion gate for that
+specific artifact.
+
+The referenced plans contain 135 cases:
+
+- Perps: [64 cases](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/perps-rc/perps-rc-regression.md)
+- Assets: [22 cases](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/assets-rc/assets-rc-regression.md)
+- Swap and Bridge: [39 cases](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/swap-bridge-rc/swap-bridge-rc-regression.md)
+- Networks: [10 cases](https://github.com/MetaMask/experimental-mm-qa-ai-tasks/blob/77591c5998fcf6368417fd5be01871e6c9c3dc5b/tasks/rc-extension/networks-regression-rc/networks-regression-rc.md)
+
+## Artifact boundary
+
+Artifact discovery and download belong to the release-validation workflow. The
+workflow supplies mm-harness with a local artifact, expected product identity,
+and trusted SHA-256. mm-harness never discovers or downloads a release.
+
+For Extension, `runtime-launch` verifies the ZIP digest and manifest version,
+extracts it safely, records archive and tree provenance, copies the exact tree
+to an isolated runtime directory, resets only the selected Chrome profile, and
+launches without building or patching the checkout.
+
+For Android, `runtime-launch` requires one physical-device serial, verifies the
+local APK digest, package ID, version name, and version code, installs it, and
+binds subsequent recipes to the installed APK digest and selected device. The
+release path does not use Metro, a development bridge, or the HUD.
+
+```sh
+mm-harness runtime-launch \
+  --adapter extension \
+  --target /path/to/metamask-extension \
+  --cdp-port 9222 \
+  --artifact-file /path/to/metamask-chrome-X.Y.Z.zip \
+  --artifact-version X.Y.Z \
+  --artifact-sha256 <trusted-digest>
+
+mm-harness runtime-launch \
+  --adapter mobile \
+  --platform android \
+  --target /path/to/metamask-mobile \
+  --device <physical-device-serial> \
+  --artifact-file /path/to/app.apk \
+  --artifact-version X.Y.Z \
+  --artifact-build-id <version-code> \
+  --artifact-package-id io.metamask \
+  --artifact-sha256 <trusted-digest>
+```
+
+## Completion gate
+
+[`scripts/validate-release-report.mjs`](../scripts/validate-release-report.mjs)
+compares a canonical case inventory with terminal verdicts. It rejects missing
+or unknown IDs, duplicate IDs, non-terminal statuses, absent evidence, evidence
+outside the declared root, incomplete run directories, and any non-empty
+`remainingCases`. A passing gate writes `metadata.json`,
+`report-quality.json`, and `report.md`.
+
+Supported verdicts are `PASS`, `FAIL`, `BLOCKED_FUNDS`, `BLOCKED_COST`, and
+`BLOCKED_ENVIRONMENT`. Product failures must remain failures; infrastructure,
+funding, and cost limits must not be reported as passes.
+
+## Capability matrix
+
+`AVAILABLE` means a typed action or bundled recipe covers the reusable
+operation and produces machine-readable evidence. `PARTIAL` means the generic
+operation exists but the complete checklist family still depends on task-local
+composition, live funds, or deterministic external state. `MISSING` means the
+current manifests do not expose the required durable capability.
+
+### Perps
+
+| Case family | Required state and behavior | Current capability | Status |
 | --- | --- | --- | --- |
-| Feature, navigation, session (4) | Feature/eligibility combinations and accounts with different Perps state | Toggle gates, lock/unlock, switch accounts, navigate back; assert gating, account isolation, and route recovery | **PARTIAL**: wallet/account and generic navigation exist; deterministic gates and Perps session assertions are missing. |
-| Perps home (8) | Seeded balance, positions, orders, watchlist, and history | Open cards and balance actions, mutate watchlist; assert all seeded summaries and recent activity | **PARTIAL**: position/order reads and assertions exist; account, market, watchlist, and activity observations are missing. |
-| Market list (4) | Controlled catalog, categories, and price updates | Search, filter, sort, open a market; assert catalog and live values | **PARTIAL**: UI mechanics only; no market catalog or price assertion. |
-| Market details (6) | Selected market data, candles, position, and market-specific order | Navigate and change chart range; assert header, stats, chart states, action mode, and selected-market orders | **PARTIAL**: route and selected order/position state only; market and chart observations are missing. |
-| Order entry (12) | Known balance, constraints, price, leverage limits, and order outcomes | Edit side, amount, percent, leverage, limit price, TP/SL; submit market/limit orders; assert validation, preview, fill, resting order, and duplicate protection | **PARTIAL**: basic placement and open-order convergence exist; rich entry controls, limit/TP-SL inputs, validation, and outcome fields are missing. |
-| Position management (11) | Seeded isolated position, margin, TP/SL, and resting order | Add/reduce exposure, add margin, edit TP/SL, cancel order; assert size, margin, liquidation price, TP/SL, and removal | **PARTIAL**: close positions/orders exists; modify, margin, TP/SL, and rich field assertions are missing. |
-| Deposit (3) | Funded wallet and known Perps balance | Enter amount/Max and confirm; assert validation, pending/success, and resulting balances/activity | **MISSING** |
-| Withdraw (4) | Known withdrawable balance | Enter amount/percent/Max and confirm; assert validation, destination, balance, and activity | **MISSING** |
-| Activity and history (6) | Seeded trades, orders, funding, deposits, and withdrawals | Filter and open details; assert type-specific rows and agreement with home | **MISSING** |
-| Streaming and resilience (4) | Controllable initial responses, updates, reconnects, and order events | Refresh, disconnect/reconnect, close/reopen; assert price, position, order, activity, and loading-state reconciliation | **MISSING** |
-| Geo/compliance (1) | Ineligible trade state | Attempt a trade; assert blocking UI and no submitted order | **MISSING** |
-| Responsive presentation (1) | Popup-width Perps views with populated content | Traverse core views and capture surfaces; assert no clipping or overlap | **PARTIAL**: screenshots and generic UI assertions exist; no reusable Perps presentation assertion. |
-
-The aggregate Extension Perps snapshot is a **TARGET**. It exposes account,
-market, position, open-order, activity, and watchlist observations in one typed,
-read-only result when the Extension background test hook is present. An
-untouched production artifact does not expose that hook, so official-artifact
-Perps assertions still require a product-supported observation boundary. The
-snapshot also does not create the required start state.
-
-## Assets: 22 Critical cases
-
-| Case family | Required start state | Required operations and assertions | 0.36.0 coverage |
+| Navigation, home, markets, and details | Eligible account, live catalog, market summaries, chart, statistics, and route recovery | Visible-state reads, market navigation/search/filter, provider comparison, eligibility reads, and market-detail recipes | **AVAILABLE** for visible live flows |
+| Watchlist and activity | Existing favorites and typed activity rows | Favorite mutation, activity-filter selection, and release recipes | **AVAILABLE** |
+| Order entry | Funded Perps balance, market/limit inputs, validation, preview, fill, and duplicate protection | Parameterized order placement plus visible order-entry and validation recipes | **PARTIAL**: live state and provider outcomes remain release-dependent |
+| Position management | Open position, close, margin, and TP/SL changes | Visible position actions, close, edit-margin, and TP/SL actions | **PARTIAL**: exact outcome depends on live account state |
+| Deposit and withdrawal | Wallet funds, Perps balance, confirmations, and resulting activity | Balance actions and confirmation reads with a funds-flow recipe | **PARTIAL**: funds and provider availability are external |
+| Snapshot assertions | Positions, orders, markets, history, and watchlist | Bounded redacted snapshot when the background hook exists; visible-state reads on untouched releases | **AVAILABLE** with runtime-specific observation paths |
+| Deterministic seeded provider state | Balance, positions, limit orders, TP/SL, history, and controlled REST/stream behavior | Existing setup fixtures do not reproduce the complete QA provider model inside an untouched release artifact | **MISSING** |
+
+### Assets
+
+| Case family | Required state and behavior | Current capability | Status |
 | --- | --- | --- | --- |
-| Token list, prices, details, sorting (4) | Imported account with known live holdings across networks | Open and sort token list/details; assert holdings, fiat, change, chart, and market data | **PARTIAL**: wallet import and UI mechanics only; no asset reads or assertions. |
-| Token import, hide, persistence, custom network (5) | Known ERC-20 contracts and custom network configuration | Search/import/hide/re-add/restart/remove network; assert visibility and persistence | **MISSING**: no token-list/import or custom-network domain actions. |
-| Real-time and aggregate balances (2) | Known multi-chain balances and an externally triggered update | Observe stream and aggregate; assert prompt update and total | **MISSING** |
-| EVM send and activity (3) | Two owned accounts with native/token funds and gas | Send token, native Max, and custom-gas transaction; assert confirmation, balances, gas behavior, and activity | **MISSING** |
-| NFTs (3) | Owned indexed NFT plus owned and unowned contracts | Detect/import/filter/open media; assert ownership rejection, metadata, image, and network filter | **MISSING** |
-| DeFi positions (2) | Account with known live protocol positions | Open list/details; assert protocol, supplied/borrowed assets, and USD totals | **MISSING** |
-| Solana assets and send (2) | Imported Solana account with SOL and SPL balances | Inspect assets and send SPL; assert fiat, confirmation, balances, and activity | **MISSING** |
-| Bitcoin balance (1) | Imported Bitcoin account with known balance | Open asset details; assert balance, fiat, and chart | **MISSING** |
-
-## Swap and Bridge: 39 cases (25 Critical, 14 Non-Critical)
-
-These cases intentionally form a sequential, live-funds journey. A successful
-step changes the next step's network and balances, so generic navigation alone
-cannot establish or prove the required state transitions.
-
-| Case family | Required start state | Required operations and assertions | 0.36.0 coverage |
+| Token list, prices, details, and sorting | Funded account with known holdings and price data | Visible token-list/details reads, network scope, sorting assertions, and bundled recipes | **AVAILABLE** for EVM token UI |
+| Token search/import/hide/persistence | Known contracts and a persistent profile | Custom-token import, visibility changes, restart-safe recipes, and custom-network composition | **AVAILABLE** for Extension EVM tokens |
+| Native/token send and gas | Funded owned accounts and live gas | Prepare, review, custom-gas, finish, and Max/cancel/send recipes | **PARTIAL**: terminal submission is gated by funds and cost policy |
+| Aggregate Android holdings | Imported wallet with multi-chain assets | Native-accessibility token-list read on an untouched physical-device release | **AVAILABLE** |
+| Balance streaming and aggregation arithmetic | Triggered inbound update and expected cross-network totals | Visible snapshots exist; deterministic inbound trigger and tolerance assertions are not bundled | **PARTIAL** |
+| NFTs, DeFi, Solana send, and Bitcoin details | Indexed owned positions/assets and chain-specific transaction flows | Generic visible UI only | **MISSING** |
+
+### Swap and Bridge
+
+| Case family | Required state and behavior | Current capability | Status |
 | --- | --- | --- | --- |
-| Random ERC-20 round trip on Ethereum (2 Critical) | Funded imported account and live token/quote services | Select eligible random token, swap amount then Max; assert quote, confirmation, balance deltas, and activity | **MISSING** |
-| WETH round trip (2 Critical) | Funded Ethereum account | Swap ETH to WETH and Max back; assert quotes, wrapping result, balance deltas, and activity | **MISSING** |
-| Gasless round trip (2 Critical) | Smart Transactions enabled and funded ETH/USDC balances | Execute full-balance gasless swaps; assert route, no stranded input, balances, and activity | **MISSING** |
-| Ethereum to native Solana (2 Critical) | Funded Ethereum source and derived Solana destination | Bridge Max and await completion; assert destination asset is native SOL, balances, and activity | **MISSING** |
-| Half/Max swaps across destination networks (12 Critical, 8 Non-Critical) | Balance delivered by the preceding bridge on each network | Pick supported random token, swap about half and Max back; assert quote/route, confirmation, balance deltas, and activity | **MISSING** |
-| Sequential onward bridges (5 Critical, 4 Non-Critical) | Source balance produced by the preceding swap | Bridge Max to the specified next network and await completion; assert source/destination assets, balances, and activity | **MISSING** |
-| Quote-only networks (2 Non-Critical) | Selected network and funded source asset | Request but do not submit a quote; assert supported routes, fees, and destination | **MISSING** |
+| Surface, asset, network, and amount selection | Supported source/destination pair | Exact asset/network selection, amount/Max input, and visible-state reads on Extension; exact native selection and amount input on Android | **AVAILABLE** |
+| Quote and slippage | Live quote services and supported route | Surface, quote, Max-quote, and custom-slippage recipes | **AVAILABLE** |
+| Submit and confirmation | Sufficient source balance and gas | Typed submit action with explicit confirmation policy | **PARTIAL**: live funds and cost policy decide whether submission is allowed |
+| Sequential multi-network journey | Balances delivered by preceding swaps and bridges | Individual steps are composable, but the complete live-funds journey remains task-local and resumable by its case inventory | **PARTIAL** |
+| Activity, balance deltas, and completed bridge tracking | Confirmed transactions and indexed activity | Visible-state evidence exists; reusable terminal activity and arithmetic assertions are incomplete | **PARTIAL** |
 
-## Networks: 10 cases (7 Critical, 3 not marked Critical)
+### Networks
 
-| Case family | Required start state | Required operations and assertions | 0.36.0 coverage |
+| Case family | Required state and behavior | Current capability | Status |
 | --- | --- | --- | --- |
-| Custom-network asset rendering (4) | HyperEVM, INK, and XDC configurations plus known token contracts/balances | Add/select networks and tokens; assert decimals, render stability, logos, and token rows | **MISSING** |
-| Fiat and price APIs (2) | Custom networks with supported native assets and conversion responses | Refresh/select network; assert conversion rates and fiat values | **MISSING** |
-| Send Max and activity (2) | Funded HyperEVM/INK accounts and recipient | Send native Max; assert review amount, gas handling, completion, balance, and activity | **MISSING** |
-| Bridge label, tracking, details (2) | Funded Monad account and a completed bridge route | Submit/open bridge activity; assert label, status tracking, route, fees, and details | **MISSING** |
-
-## Prioritized delivery order
-
-1. **Downloaded official artifact validation and launch — current target.**
-   Accept a local ZIP, trusted digest, and requested version from the
-   release-validation workflow; validate the manifest and extracted tree,
-   reuse a validated cache, and launch without modifying the source checkout
-   or original artifact. Prove onboarding, visible wallet import, normal popup
-   operation, and side-panel operation.
-2. **Aggregate Extension Perps snapshot — current target.** Add a typed,
-   read-only result for account, markets, positions, open orders, activity, and
-   watchlist, with selectors suitable for machine assertions. It is usable in
-   source-built runtimes that expose the background test hook; an untouched
-   production artifact must fail explicitly until it has a supported read-only
-   observation boundary.
-3. **Deterministic Perps start state.** Add setup-time, trace-visible provider
-   doubles and seeded balance, positions, limit orders, TP/SL, activity, and
-   watchlist. Keep setup outside the proof window and never mutate product
-   state to manufacture an assertion.
-4. **Complete Perps operations and assertions.** Add parameterized feature and
-   eligibility control, watchlist, rich order entry, position changes, margin,
-   TP/SL, deposits, withdrawals, activity filters, and stream recovery. Extend
-   shared Mobile/Extension vocabulary where both clients support the behavior.
-5. **Release-plan completion gate.** Validate canonical case IDs, verdict
-   counts, required evidence, and explicit remaining cases before reporting a
-   terminal result.
-6. **Assets and Networks domain surfaces.** Add shared network selection and
-   custom-network state first, then typed assets, balances, token import,
-   transaction/activity, NFT, DeFi, and non-EVM observations.
-7. **Swap and Bridge domain surface.** Add quote, route, submit, status,
-   balance-delta, and activity actions with explicit live-funds safeguards and
-   resumable sequential state.
-
-Completing the two current targets does **not** provide full Perps parity. The
-64-case plan still depends on deterministic domain state, controlled provider
-behavior, richer mutations and assertions, and a canonical completion gate.
+| Add, select, and remove custom networks | Known RPC configuration and chain identity | Typed custom-network and Chainlist add, visible-state read, select, and remove actions | **AVAILABLE** on Extension |
+| Custom-network tokens and persistence | Known token contract and persistent profile | Network actions compose with Assets import/visibility/persistence recipes | **AVAILABLE** on Extension |
+| Balance stability and fiat visibility | Funded custom network and live price APIs | Visible-state reads and a bounded balance-stability recipe | **PARTIAL**: external price availability remains uncontrolled |
+| Send Max and activity | Funded custom network and recipient | Assets send actions cover the transaction path | **PARTIAL**: exact activity and balance-delta assertions remain task-local |
+| Bridge tracking and details | Completed supported bridge route | Swap/Bridge composition exists; reusable terminal tracking assertions are incomplete | **PARTIAL** |
+| Android multi-network visibility | Imported wallet with holdings on multiple chains | Native Assets read reports aggregate visible holdings without Metro or a development bridge | **AVAILABLE** |
+
+## Platform scope
+
+The 135-case source inventory targets Extension. It must not be relabeled as an
+Android checklist. Android release validation uses a separate case inventory
+for the product behaviors exercised on a physical device, while reusing the
+same action vocabulary and report gate where the clients expose equivalent
+flows. Simulator-only evidence is not accepted for Android release claims.

package/library/actions/extension/assets/finish_send.mjs

@@ -0,0 +1,128 @@
+import { runAdapter, withExtensionPage } from '../platform/cdp.mjs';
+import { activityItem, bodyState, selectors, tokenRow, transactionState, visible, waitFor } from './send.mjs';
+
+runAdapter(async (input) => withExtensionPage(input, async (page) => {
+  const decision = String(input.node?.decision || '').trim();
+  const symbol = String(input.node?.symbol || '').trim().toUpperCase();
+  const amount = String(input.node?.amount || '').trim();
+  const resumeSubmitted = input.node?.resume_submitted === true;
+  const resumedHash = String(input.node?.transaction_hash || '').trim();
+  const timeoutMs = Number(input.node?.timeout_ms ?? 120_000);
+  if (!['confirm', 'cancel'].includes(decision) || !symbol || !amount) {
+    throw new Error('metamask.assets.finish_send requires decision=confirm|cancel, symbol, and amount.');
+  }
+  if (decision === 'confirm' && input.node?.confirm_live !== true) {
+    throw new Error('metamask.assets.finish_send decision=confirm requires confirm_live=true.');
+  }
+  const control = decision === 'confirm' ? selectors.confirm : selectors.cancel;
+  let state = await bodyState(page);
+  let submittedTransaction = null;
+  let submittedNow = false;
+  if (await visible(page, control)) {
+    const beforeTransactions = decision === 'confirm' ? await transactionState(page) : null;
+    if (decision === 'confirm' && !beforeTransactions?.available) {
+      throw new Error('Transaction state is unavailable; refusing to submit without proof binding.');
+    }
+    const beforeById = new Map((beforeTransactions?.transactions ?? []).map((transaction) => [transaction.id, transaction]));
+    await page.click(control);
+    submittedNow = decision === 'confirm';
+    state = await waitFor(page, async () => {
+      const current = await bodyState(page);
+      return current.route === '' || current.route === '#/' ? current : null;
+    }, 'Wallet did not return after send decision.', timeoutMs);
+    if (decision === 'confirm') {
+      submittedTransaction = await waitFor(page, async () => {
+        const current = await transactionState(page);
+        const changed = current.transactions.filter((transaction) => {
+          const before = beforeById.get(transaction.id);
+          if (!before) return true;
+          const wasAwaitingApproval = ['unapproved', 'approved'].includes(String(before.status).toLowerCase());
+          return wasAwaitingApproval && (before.status !== transaction.status || before.hash !== transaction.hash);
+        });
+        if (changed.length > 1) {
+          throw new Error(`Send submission changed multiple transaction records: ${changed.map((transaction) => transaction.id).join(', ')}.`);
+        }
+        return changed[0] ?? null;
+      }, 'Send confirmation did not change one transaction record.', timeoutMs);
+    }
+  } else if (decision === 'cancel') {
+    throw new Error('Send cancel control was not visible.');
+  } else if (!resumeSubmitted) {
+    throw new Error('Send confirm control was not visible. Next: rerun with resume_submitted=true only if this exact transaction was already submitted.');
+  } else if (!resumedHash) {
+    throw new Error('metamask.assets.finish_send resume_submitted=true requires transaction_hash.');
+  } else if (!/^0x[0-9a-f]{64}$/iu.test(resumedHash)) {
+    throw new Error('metamask.assets.finish_send transaction_hash must be a full EVM transaction hash.');
+  }
+  if (decision === 'cancel') {
+    return { action: input.action, decision, cancelled: true, proofPath: 'trusted-pointer-visible-ui' };
+  }
+  submittedTransaction = await waitFor(page, async () => {
+    const current = await transactionState(page);
+    const transaction = submittedNow
+      ? current.transactions.find((entry) => entry.id === submittedTransaction?.id)
+      : current.transactions.find((entry) => entry.hash?.toLowerCase() === resumedHash.toLowerCase());
+    if (!transaction) return null;
+    if (['failed', 'rejected', 'dropped'].includes(String(transaction.status).toLowerCase())) {
+      throw new Error(`Send transaction ${transaction.id} reached ${transaction.status}.`);
+    }
+    return String(transaction.status).toLowerCase() === 'confirmed' && /^0x[0-9a-f]{64}$/iu.test(transaction.hash || '')
+      ? transaction
+      : null;
+  }, `Sent ${amount} ${symbol} did not produce one confirmed transaction record.`, timeoutMs);
+  let tokenAfter = null;
+  if (!state.route.includes('/tx/')) {
+    if (state.route.includes('/activity')) {
+      await page.click(selectors.home);
+    }
+    tokenAfter = await waitFor(page, () => tokenRow(page, symbol), `${symbol} did not reappear after send.`, timeoutMs);
+    await waitFor(page, async () => {
+      const current = await bodyState(page);
+      if (current.route.includes('/activity') || current.route.includes('/tx/')) return current;
+      await page.click(selectors.activity);
+      return null;
+    }, 'Activity did not open after send.', timeoutMs);
+  }
+  let activity = null;
+  if (!state.route.includes('/tx/')) {
+    activity = await waitFor(page, () => activityItem(page, symbol, amount), `Sent ${amount} ${symbol} did not appear in Activity.`, timeoutMs);
+    await waitFor(page, async () => {
+      const current = await bodyState(page);
+      if (current.route.includes('/tx/')) return current;
+      const currentActivity = await activityItem(page, symbol, amount);
+      if (currentActivity) {
+        activity = currentActivity;
+        await page.click(currentActivity.selector);
+      }
+      return null;
+    }, `Sent ${amount} ${symbol} transaction details did not open.`, timeoutMs);
+  }
+  const details = await waitFor(page, async () => {
+    const current = await bodyState(page);
+    if (!current.route.includes('/tx/') || !/\bConfirmed\b/u.test(current.text)) return null;
+    return current;
+  }, `Sent ${amount} ${symbol} did not reach Confirmed.`, timeoutMs);
+  const explorerUrl = await page.evaluate(`document.querySelector('[data-testid="transaction-details-block-explorer"]')?.getAttribute('data-explorer-url') || null`);
+  const transactionHash = details.route.match(/\/(0x[0-9a-f]{64})(?:\?|$)/iu)?.[1]
+    ?? details.text.match(/\b0x[0-9a-f]{64}\b/iu)?.[0]
+    ?? String(explorerUrl || '').match(/\/(0x[0-9a-f]{64})(?:[/?#]|$)/iu)?.[1]
+    ?? null;
+  if (!transactionHash) throw new Error('Confirmed transaction details did not expose a full transaction hash.');
+  if (transactionHash.toLowerCase() !== submittedTransaction.hash.toLowerCase()) {
+    throw new Error(`Confirmed Activity details opened ${transactionHash}, expected ${submittedTransaction.hash}.`);
+  }
+  return {
+    action: input.action,
+    decision,
+    symbol,
+    amount,
+    activity,
+    tokenAfter,
+    details,
+    explorerUrl,
+    transactionHash,
+    transactionId: submittedTransaction.id,
+    resumed: !submittedNow,
+    proofPath: 'trusted-pointer-visible-ui',
+  };
+}));