@deeeed/metamask-harness 0.45.0 → 0.46.0

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-09-04
+
+### Added
+
+- Add parameterized Mobile Pro TWAP, Chase, and Scale recipes plus an offline advanced-orders QA walkthrough. Advanced-order recipes keep the current account when omitted, use stated provider/network/market defaults, default to testnet, and allow explicit mainnet selection.
+
+### Fixed
+
+- Make Mobile Perps start-state navigation keep an already-matching market, keep advanced-order controls reachable, select a market visibly from Perps Home, and clean matching active TWAP plus active or backgrounded Chase strategies with ordinary orders and positions; teardown now defaults to a verified Hyperliquid testnet environment, honors its declared timeout while canceling strategies, and TWAP placement defaults above the provider minimum.
+- Position active TWAP and Chase evidence inside the viewport before capture.
+
+## 0.45.1 - 2026-09-01
+
+### Fixed
+
+- Stop Mobile Perps order actions from forcing a connection reset after submission; completion now relies on observed position or open-order state.
+- Preserve the first recipe failure on every adapter instead of reloading or retrying the product runtime behind the proof.
+- Keep Extension TP/SL updates on the current page and require persistence reloads to be explicit recipe lifecycle steps.
+- Document and enforce the rule that ordinary proof actions cannot hide lifecycle recovery, cache clearing, state resets, or journey retries.
+
 ## 0.45.0 - 2026-08-28
 
 ### Changed

package/adapters/mobile/bridge-runtime/cdp-bridge.cjs

@@ -645,7 +645,10 @@ const COMMANDS = {
         if (walkSiblings === undefined) walkSiblings = true;
         var current = fiber;
         while (current) {
-          var sn = current.stateNode;
+          var rawStateNode = current.stateNode;
+          var sn = rawStateNode && rawStateNode.canonical && rawStateNode.canonical.publicInstance
+            ? rawStateNode.canonical.publicInstance
+            : rawStateNode;
           if (sn) {
             if (typeof sn.scrollTo === 'function') { sn.scrollTo({ y: opts.offset, animated: opts.animated }); return true; }
             if (typeof sn.scrollToOffset === 'function') { sn.scrollToOffset({ offset: opts.offset, animated: opts.animated }); return true; }
@@ -657,7 +660,10 @@ const COMMANDS = {
       }
       function findMeasurable(fiber) {
         if (!fiber) return null;
-        var sn = fiber.stateNode;
+        var rawStateNode = fiber.stateNode;
+        var sn = rawStateNode && rawStateNode.canonical && rawStateNode.canonical.publicInstance
+          ? rawStateNode.canonical.publicInstance
+          : rawStateNode;
         if (sn && typeof sn.measureLayout === 'function') return sn;
         return findMeasurable(fiber.child);
       }
@@ -666,7 +672,10 @@ const COMMANDS = {
         var target = opts.intoView ? findMeasurable(anchor) : null;
         var current = anchor ? anchor.return : null;
         while (current) {
-          var sn = current.stateNode;
+          var rawStateNode = current.stateNode;
+          var sn = rawStateNode && rawStateNode.canonical && rawStateNode.canonical.publicInstance
+            ? rawStateNode.canonical.publicInstance
+            : rawStateNode;
           var currentProps = current.memoizedProps;
           if (sn) {
             if (typeof sn.scrollTo === 'function' && !(currentProps && currentProps.horizontal === true)) {

package/dist/commands/call.js

@@ -34,7 +34,6 @@ import {
   executeWithHealBounds,
   prepareHeal,
   persistRunEffects,
-  recoverRunInfra,
   resolveMetaMaskLibrarySources,
   preflightRecipe,
   runRecipe,
@@ -289,7 +288,7 @@ async function handleCall(argv) {
       skipMobileSourceFreshness: authoredMobileRestart || adapter === "mobile" && readMobileReleaseArtifactState(target) !== null
     });
     if (typeof prepared === "number") return prepared;
-    const { state, heal } = prepared;
+    const { state } = prepared;
     preflightedExecution = await preflightRecipe(
       adapter,
       recipe,
@@ -335,14 +334,8 @@ async function handleCall(argv) {
             state
           );
         },
-        adapter,
         target,
-        heal,
-        state,
-        () => recoverRunInfra(adapter, target, json, {
-          cdpPort: optionString(options, "cdpPort"),
-          watcherPort: optionString(options, "watcherPort") ?? optionString(options, "metroPort")
-        })
+        state
       );
     } catch (error) {
       await networkObservation?.finalize().catch(() => void 0);

package/dist/commands/run-engine.js

@@ -1358,44 +1358,6 @@ async function ensureExtensionProofRuntime(target, heal, state, json, deps = {})
   });
   return null;
 }
-const RUN_RECOVERY_CODE = {
-  mobile: "mobile.runtime_recovered",
-  extension: "extension.runtime_recovered",
-  core: "run.retried"
-};
-async function recoverRunInfra(adapter, target, json, runtimeOptions = {}) {
-  getAdapterSurface(adapter).resolveSlotPorts(target);
-  const previousCdpPort = process.env.CDP_PORT;
-  const previousRecipeCdpPort = process.env.RECIPE_CDP_PORT;
-  if (runtimeOptions.cdpPort) {
-    process.env.CDP_PORT = runtimeOptions.cdpPort;
-    process.env.RECIPE_CDP_PORT = runtimeOptions.cdpPort;
-  }
-  try {
-    if (adapter === "extension") {
-      const { releaseArtifactState } = await import("../adapters/extension/runtime-decision.js");
-      const artifact = releaseArtifactState(target);
-      if (artifact.status !== "none" && artifact.status !== "valid") {
-        return {
-          status: 1,
-          output: "Release artifact recovery cannot trust the recorded runtime identity.\nNext: rerun runtime-launch with the same artifact source."
-        };
-      }
-      const { launchExtension } = await import("./launch/extension.js");
-      return launchExtension(target, "quick", false);
-    }
-    if (adapter === "mobile") {
-      return {
-        status: 1,
-        output: "Automatic Mobile runtime recovery is disabled.\nNext: use an explicit app.lifecycle action when the recipe intends to relaunch the app."
-      };
-    }
-    return { status: 0, output: "headless run retry" };
-  } finally {
-    restoreEnv("CDP_PORT", previousCdpPort);
-    restoreEnv("RECIPE_CDP_PORT", previousRecipeCdpPort);
-  }
-}
 function readRunFailureText(result) {
   try {
     const trace = JSON.parse(fs.readFileSync(result.tracePath, "utf8"));
@@ -1407,38 +1369,13 @@ function readRunFailureText(result) {
     return "";
   }
 }
-async function executeWithHealBounds(exec, adapter, target, heal, state, recover = () => recoverRunInfra(adapter, target, false), onRecovery = () => void 0) {
-  let result = await exec();
-  for (; ; ) {
-    if (result.status === "pass") return { result, violation: null };
-    const violation = checkHealBounds(
-      target,
-      readRunFailureText(result),
-      state
-    );
-    if (violation !== null) return { result, violation };
-    if (adapter === "mobile") return { result, violation: null };
-    if (heal === "off") return { result, violation: null };
-    const recoveryCode = RUN_RECOVERY_CODE[adapter];
-    state.attemptedRecoveries.push(recoveryCode);
-    onRecovery(recoveryCode);
-    const recovery = await recover();
-    if (recovery.status !== 0) {
-      return { result, violation: null };
-    }
-    if (adapter === "extension") {
-      state.mutations.push({
-        type: "runtime",
-        action: "reloaded",
-        reasonCode: recoveryCode
-      });
-    }
-    result = await exec();
-    if (result.status === "pass") {
-      state.recovered.push(recoveryCode);
-      return { result, violation: null };
-    }
-  }
+async function executeWithHealBounds(exec, target, state) {
+  const result = await exec();
+  if (result.status === "pass") return { result, violation: null };
+  return {
+    result,
+    violation: checkHealBounds(target, readRunFailureText(result), state)
+  };
 }
 function emitHealViolation(json, command, result, violation, state, adapter) {
   const userAction = adapter === "core" && violation.code === "WALLET_STATE_REQUIRED" ? 'create temp/recipe/runtime/wallet-fixture.json, or add "account": "<0x\u2026>" to the node block in the recipe' : violation.userAction ?? `inspect ${shellQuoteArg(result.summaryPath)} and ${shellQuoteArg(result.tracePath)}; fix the application or recipe failure before retrying`;
@@ -1499,7 +1436,6 @@ export {
   preflightRecipe,
   prepareHeal,
   prepareRuntimeIfNeeded,
-  recoverRunInfra,
   resolveMetaMaskLibrarySources,
   resolveRunRecipeArg,
   runOneNode,

package/dist/commands/run.js

@@ -22,7 +22,6 @@ import {
   preflightRecipe,
   prepareHeal,
   persistRunEffects,
-  recoverRunInfra,
   runRecipe,
   validateRunRecipeStatic
 } from "./run-engine.js";
@@ -304,7 +303,7 @@ async function handleRunInner({ positional, options }, stream) {
       });
       return prepared;
     }
-    const { state, heal } = prepared;
+    const { state } = prepared;
     preflightedExecution = await preflightRecipe(
       adapter,
       validated.recipeFile,
@@ -353,12 +352,8 @@ async function handleRunInner({ positional, options }, stream) {
             state
           );
         },
-        adapter,
         target,
-        heal,
-        state,
-        () => recoverRunInfra(adapter, target, machine, runtimeOptions),
-        (code) => stream.phase("recover", { code })
+        state
       );
     } catch (error) {
       await networkObservation?.finalize().catch(() => void 0);

package/docs/CONTRIBUTING.md

@@ -108,6 +108,14 @@ Write evidence under `context.artifactsDir` and return relative artifact paths.
 `METAMASK_RECIPE_LIVE_ADAPTER_DIR` is the explicit task-local implementation
 root; configured libraries are the durable sharing mechanism.
 
+An ordinary action performs only its declared operation and observes the
+product's result. It must not restart or reload the app, reconnect providers or
+streams, clear caches, reset state, or retry a failed journey. Those operations
+can hide the product failure the recipe exists to catch. If lifecycle is the
+subject, expose it as an explicit recipe node with separate postconditions. If
+transport or lifecycle fails during another action, return the failure and keep
+the evidence. Do not repair and continue.
+
 Add a bundled action only when it is reusable, typed, stable, reduces inference
 or risk, and has a real postcondition. Otherwise use a team library or task-local
 recipe. Follow [Recipes](RECIPES.md) and [Security](SECURITY.md).

package/docs/RECIPES.md

@@ -211,6 +211,17 @@ Rules:
 
 - Validate with `--plan` before side effects.
 - Use real product paths; never mutate hidden state to fabricate proof.
+- Never repair the product while proving it. A normal action must not restart,
+  reload, foreground, reconnect, clear caches, reset state, or rerun the
+  journey after failure. Observe the product's natural result and fail with the
+  last observed state when it does not arrive.
+- Put intended setup and lifecycle transitions in their own recipe nodes. Use
+  an explicit lifecycle node when restart, reload, reconnect, background, or
+  foreground behavior is the claim. A persistence proof must show the
+  transition as a node between the immediate and persisted assertions.
+- Keep setup outside the proof window. Setup may converge fixture-backed state
+  when the node names the mutation and the trace records it, but setup evidence
+  cannot prove the behavior under test.
 - Prove preparation with an independent read/assert or visible UI postcondition.
 - Keep ticket-specific claims in task-local recipes.
 - Compose, repair, or parameterize repeated behavior instead of multiplying names.
@@ -248,7 +259,8 @@ Keep responsibilities narrow:
 - **Recipes** compose actions and own journey order, safe defaults, invariants,
   and proof.
 - **Actions** translate one stable operation to existing UI, CDP, or controller
-  capabilities; they do not reimplement product business logic.
+  capabilities; they do not reimplement product business logic or hide
+  lifecycle recovery.
 - **Product/controllers** remain the source of truth for state transitions,
   validation, transactions, and domain behavior.
 

package/library/actions/extension/perps/update_position_tpsl.mjs

@@ -92,12 +92,8 @@ async function waitForExactPrices(page, identity, facts, timeoutMs) {
   throw new Error(`exact TP/SL postcondition was not visible: ${JSON.stringify(after)}.`);
 }
 
-async function observePersistedPrices(page, identity, facts, timeoutMs) {
+async function observeUpdatedPrices(page, identity, facts, timeoutMs) {
   const immediate = await waitForExactPrices(page, identity, facts, timeoutMs);
-  await page.session.call('Page.reload', { ignoreCache: true });
-  await new Promise((resolve) => setTimeout(resolve, 500));
-  await page.waitForSelector(dataTestId('perps-position-size-value'), { timeoutMs: 20_000 });
-  const persisted = await waitForExactPrices(page, identity, facts, timeoutMs);
   return {
     success: true,
     positionBefore: facts.positionBefore,
@@ -107,7 +103,6 @@ async function observePersistedPrices(page, identity, facts, timeoutMs) {
       stopLossPrice: facts.stopLossPrice,
     },
     immediate,
-    persistedAfterReload: persisted,
   };
 }
 
@@ -191,7 +186,7 @@ export async function updatePositionTpsl(input) {
         input,
         identity,
         dispatch: async () => { throw new Error('resumed TP/SL mutation must not dispatch'); },
-        observe: async ({ receipt }) => observePersistedPrices(
+        observe: async ({ receipt }) => observeUpdatedPrices(
           page,
           identity,
           receipt.facts,
@@ -264,7 +259,7 @@ export async function updatePositionTpsl(input) {
         button: 'left', buttons: 0, clickCount: 1,
       });
     },
-    observe: async ({ receipt }) => observePersistedPrices(
+    observe: async ({ receipt }) => observeUpdatedPrices(
       page,
       identity,
       receipt.facts,