@deeeed/metamask-harness 0.47.4 → 0.48.0

package/dist/devices.js

@@ -1,18 +1,30 @@
 import { execFileSync } from "node:child_process";
 import { resolveMobileToolPath } from "../library/actions/mobile/platform/tool-paths.mjs";
-function listConnectedDevices(platform) {
+function reportProbeFailure(errors, platform, error) {
+  const code = error?.code;
+  if (code === "ENOENT") return;
+  const reason = code === "ETIMEDOUT" ? "timed out after 5 seconds" : "failed";
+  const probeCode = code ?? error?.status;
+  errors.push({
+    platform,
+    message: `${platform} device discovery ${reason}; device availability is unknown.`,
+    userAction: platform === "ios" ? "xcrun simctl list devices booted -j" : "adb devices -l",
+    ...probeCode !== void 0 ? { probeCode } : {}
+  });
+}
+function listConnectedDevices(platform, errors = []) {
   const devices = [];
-  if (!platform || platform === "android") devices.push(...listAndroidDevices());
-  if (!platform || platform === "ios") devices.push(...listIosSimulators());
+  if (!platform || platform === "android") devices.push(...listAndroidDevices(errors));
+  if (!platform || platform === "ios") devices.push(...listIosSimulators("booted", errors));
   return devices;
 }
-function findAvailableIosSimulatorById(id) {
-  for (const simulator of listIosSimulators("available")) {
+function findAvailableIosSimulatorById(id, errors = []) {
+  for (const simulator of listIosSimulators("available", errors)) {
     if (simulator.id === id) return simulator;
   }
   return void 0;
 }
-function listAndroidDevices() {
+function listAndroidDevices(errors) {
   const adbPath = resolveMobileToolPath("adb");
   if (!adbPath) return [];
   let output;
@@ -22,7 +34,12 @@ function listAndroidDevices() {
       timeout: 5e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-  } catch {
+  } catch (error) {
+    reportProbeFailure(errors, "android", error);
+    return [];
+  }
+  if (!output.trimStart().startsWith("List of devices attached")) {
+    errors.push({ platform: "android", message: "Android device discovery returned an invalid response; device availability is unknown.", userAction: "adb devices -l" });
     return [];
   }
   const devices = [];
@@ -39,7 +56,7 @@ function listAndroidDevices() {
   }
   return devices;
 }
-function listIosSimulators(scope = "booted") {
+function listIosSimulators(scope, errors) {
   let output;
   try {
     output = execFileSync("xcrun", ["simctl", "list", "devices", scope, "-j"], {
@@ -47,13 +64,18 @@ function listIosSimulators(scope = "booted") {
       timeout: 5e3,
       stdio: ["ignore", "pipe", "ignore"]
     });
-  } catch {
+  } catch (error) {
+    reportProbeFailure(errors, "ios", error);
     return [];
   }
   let parsed;
   try {
     parsed = JSON.parse(output);
+    if (!parsed?.devices || typeof parsed.devices !== "object" || Array.isArray(parsed.devices) || Object.values(parsed.devices).some((devices2) => !Array.isArray(devices2) || devices2.some((device) => !device || typeof device.udid !== "string"))) {
+      throw new Error("Invalid simctl device inventory");
+    }
   } catch {
+    errors.push({ platform: "ios", message: "iOS device discovery returned an invalid response; device availability is unknown.", userAction: `xcrun simctl list devices ${scope} -j` });
     return [];
   }
   const devices = [];

package/dist/execution-provenance.js

@@ -141,14 +141,15 @@ function sourceSnapshot(root, adapter, excludedRoots = [], includedRoots = []) {
     "--",
     ...pathspecs
   ]);
+  const head = gitBuffer(git.topLevel, ["rev-parse", "HEAD"]);
   return {
-    head: gitText(git.topLevel, ["rev-parse", "HEAD"]).trim() || null,
+    head: head.toString("utf8").trim() || null,
     status,
-    sourceFingerprint: adapter === "mobile" && path.resolve(root) === git.topLevel ? mobileSourceFingerprint(root) : nestedGitSourceFingerprint(root, git, pathspecs, excludedRoots, includedRoots)
+    sourceFingerprint: adapter === "mobile" && path.resolve(root) === git.topLevel ? mobileSourceFingerprint(root) : nestedGitSourceFingerprint(root, git, pathspecs, excludedRoots, includedRoots, head)
   };
 }
-function nestedGitSourceFingerprint(root, git, pathspecs, excludedRoots, includedRoots) {
-  const gitFingerprint = gitSourceFingerprint(git.topLevel, pathspecs);
+function nestedGitSourceFingerprint(root, git, pathspecs, excludedRoots, includedRoots, head) {
+  const gitFingerprint = gitSourceFingerprint(git.topLevel, pathspecs, head);
   if (git.pathspec === "." && includedRoots.length === 0) return gitFingerprint;
   return createHash("sha256").update(gitFingerprint).update("\0nested-source\0").update(directoryFingerprint(root, excludedRoots, includedRoots)).digest("hex");
 }
@@ -169,16 +170,16 @@ function gitContext(root) {
     return null;
   }
 }
-function gitSourceFingerprint(topLevel, pathspecs) {
+function gitSourceFingerprint(topLevel, pathspecs, head) {
   const hash = createHash("sha256");
-  hash.update(gitBuffer(topLevel, ["rev-parse", "HEAD"]));
+  hash.update(head);
   hash.update("\0diff\0");
   hash.update(
     gitBuffer(topLevel, [
       "diff",
       "--no-ext-diff",
       "--binary",
-      "HEAD",
+      head.toString("utf8").trim(),
       "--",
       ...pathspecs
     ])

package/dist/funding-execution-context.js

@@ -4,6 +4,7 @@ import { chmod, lstat, mkdir, open, readFile, readdir, realpath } from "node:fs/
 import os from "node:os";
 import path from "node:path";
 import { digestRecipeDocument } from "@farmslot/protocol";
+import { recipeRuntimeDir } from "./paths.js";
 const SHA256 = /^[a-f0-9]{64}$/u;
 const INTEGER = /^(0|[1-9][0-9]{0,39})$/u;
 const IDENTIFIER = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
@@ -99,7 +100,7 @@ async function loadTrustedMutationBase(options) {
     fundingBalanceProof
   );
   const identity = await validateFundingDocuments(documents);
-  const currentReleaseRuntime = options.testIo?.currentReleaseRuntime ?? releaseRuntimeValidator(path.resolve(options.projectRoot));
+  const currentReleaseRuntime = options.testIo?.currentReleaseRuntime ?? releaseRuntimeValidator(path.resolve(options.projectRoot), identity.proofLane);
   const currentRelease = await currentReleaseRuntime(false, identity.cdpPort);
   if (currentRelease.artifactSha256 !== identity.subjectDigest || currentRelease.treeSha256 !== identity.releaseTreeSha256) {
     throw new Error("Runner-owned current release artifact does not match the funding release proof.");
@@ -162,6 +163,7 @@ async function authorizeTrustedMutationPlan(base, plan, testIo = {}) {
     }
   }
   if (actual.size === 0) throw new Error("Funding documents require a resolved external-mutation plan.");
+  await mkdir(source.artifactsDir, { recursive: true, mode: 448 });
   const artifactsIdentitySha256 = await directoryIdentity(source.artifactsDir);
   const operationCounts = [...expected.entries()].sort(([left], [right]) => left.localeCompare(right)).map(([action, count]) => ({ action, count }));
   const runId = sha256(canonical({
@@ -719,14 +721,27 @@ async function validateFundingEvidenceChain(documents, identity) {
   if (policy.required !== true || policy.registrySha256 !== identity.registrySha256 || policy.profileId !== identity.profileId || policy.domain !== identity.domain) {
     throw new Error("Funding release proof does not bind the runner-trusted funding policy.");
   }
-  const artifact = requireRecord(releaseProof.artifact, "funding release proof artifact");
-  if (artifact.sha256 !== identity.subjectDigest || !SHA256.test(String(artifact.treeSha256 ?? ""))) {
-    throw new Error("Funding release proof artifact identity is invalid.");
+  const sourceDev = identity.proofLane === "source-dev";
+  let releaseTreeSha256;
+  if (sourceDev) {
+    const source = requireRecord(releaseProof.source, "funding source-dev proof source");
+    const workingTree = requireRecord(source.workingTree, "funding source-dev working tree");
+    const build = requireRecord(source.build, "funding source-dev build");
+    if (identity.profileId !== "live-perps-tiny" || identity.domain !== "perps" || "artifact" in releaseProof || !/^[a-f0-9]{40}$/u.test(String(source.commit ?? "")) || !["clean", "dirty"].includes(String(workingTree.state)) || !SHA256.test(String(workingTree.statusSha256 ?? "")) || (workingTree.state === "clean" ? workingTree.statusSha256 !== sha256("") || "diffSha256" in workingTree : !SHA256.test(String(workingTree.diffSha256 ?? ""))) || build.outputSha256 !== identity.subjectDigest || !Array.isArray(build.instrumentation) || build.instrumentation.some((item) => typeof item !== "string" || !item.trim()) || releaseProof.compatibilityOnly !== true || releaseProof.releaseRecommendationEligible !== false) {
+      throw new Error("Funding source-dev proof requires bound build provenance and compatibility-only evidence.");
+    }
+    releaseTreeSha256 = String(build.outputSha256);
+  } else {
+    const artifact = requireRecord(releaseProof.artifact, "funding release proof artifact");
+    if (artifact.sha256 !== identity.subjectDigest || !SHA256.test(String(artifact.treeSha256 ?? ""))) {
+      throw new Error("Funding release proof artifact identity is invalid.");
+    }
+    releaseTreeSha256 = String(artifact.treeSha256);
   }
   const runtime = requireRecord(releaseProof.runtime, "funding release proof runtime");
   const extensionRuntime = requireRecord(runtime.extension, "funding release proof Extension runtime");
-  if (identity.client !== "extension" || identity.proofLane !== "official-unmodified" || runtime.fixtures !== false || runtime.instrumentation !== false || extensionRuntime.cleanProfile !== true || extensionRuntime.runtimeTreeSha256 !== artifact.treeSha256) {
-    throw new Error("Funding release proof is not an unmodified clean Extension runtime.");
+  if (identity.client !== "extension" || extensionRuntime.runtimeTreeSha256 !== releaseTreeSha256 || (sourceDev ? typeof runtime.fixtures !== "boolean" || typeof runtime.instrumentation !== "boolean" || typeof extensionRuntime.cleanProfile !== "boolean" || typeof extensionRuntime.profileId !== "string" || !extensionRuntime.profileId.trim() : identity.proofLane !== "official-unmodified" || runtime.fixtures !== false || runtime.instrumentation !== false || extensionRuntime.cleanProfile !== true)) {
+    throw new Error("Funding proof does not match its permitted Extension runtime lane.");
   }
   const onboarding = requireRecord(releaseProof.walletOnboarding, "funding release proof walletOnboarding");
   const onboardingRuntime = requireRecord(onboarding.runtime, "funding release proof wallet runtime");
@@ -837,8 +852,8 @@ async function validateFundingEvidenceChain(documents, identity) {
   const onboardingWallet = successfulWalletOutput(
     onboardingTrace,
     "funding release onboarding evidence",
-    "ui-import",
-    "extension-visible-onboarding-import"
+    sourceDev ? "ui-visible-session" : "ui-import",
+    sourceDev ? "extension-visible-wallet-session" : "extension-visible-onboarding-import"
   );
   const onboardingOrigin = extensionOrigin(onboardingWallet.targetUrl, "funding release onboarding wallet");
   if (onboardingWallet.runtimeSessionId !== onboardingRuntime.runtimeSessionId || onboardingWallet.cdpPort !== onboardingRuntime.cdpPort || onboardingWallet.cdpTargetId !== onboardingRuntime.cdpTargetId || extensionOrigin(onboardingRuntime.targetUrl, "funding release onboarding runtime") !== onboardingOrigin) {
@@ -972,7 +987,7 @@ async function validateFundingEvidenceChain(documents, identity) {
       evidenceDocument.runtimeSessionId,
       "funding balance evidence runtimeSessionId"
     );
-    if (evidenceDocument.selectedIdentitySha256 !== onboardingWallet.selectedIdentitySha256 || wallet.selectedIdentitySha256 !== onboardingWallet.selectedIdentitySha256 || wallet.runtimeSessionId !== runtimeSessionId || wallet.cdpPort !== onboardingWallet.cdpPort || extensionOrigin(wallet.targetUrl, "funding balance wallet") !== onboardingOrigin) {
+    if (evidenceDocument.selectedIdentitySha256 !== onboardingWallet.selectedIdentitySha256 || wallet.selectedIdentitySha256 !== onboardingWallet.selectedIdentitySha256 || wallet.runtimeSessionId !== runtimeSessionId || sourceDev && (wallet.runtimeSessionId !== onboardingWallet.runtimeSessionId || wallet.cdpTargetId !== onboardingWallet.cdpTargetId) || wallet.cdpPort !== onboardingWallet.cdpPort || extensionOrigin(wallet.targetUrl, "funding balance wallet") !== onboardingOrigin) {
       throw new Error("Funding balance evidence wallet or runtime is not anchored to release onboarding.");
     }
     const currentRuntime = {
@@ -999,13 +1014,26 @@ async function validateFundingEvidenceChain(documents, identity) {
   return {
     requirements,
     runtime: balanceRuntime,
-    releaseTreeSha256: String(artifact.treeSha256)
+    releaseTreeSha256
   };
 }
-function releaseRuntimeValidator(projectRoot) {
+function releaseRuntimeValidator(projectRoot, proofLane) {
   return async (requireLive, cdpPort) => {
     const { extensionRuntimeReusable } = await import("./commands/launch/extension.js");
     const { releaseArtifactState, runtimeDistCheck } = await import("./adapters/extension/runtime-decision.js");
+    if (proofLane === "source-dev") {
+      const { extensionTreeSha256 } = await import("./adapters/extension/artifact-integrity.js");
+      const configuredPort = Number(process.env.CDP_PORT ?? process.env.RECIPE_CDP_PORT);
+      if (configuredPort !== cdpPort || !await extensionRuntimeReusable(projectRoot, { status: "none" })) {
+        throw new Error("Source-dev funding requires the current harness-owned Extension runtime.");
+      }
+      const treeSha256 = extensionTreeSha256(path.join(
+        projectRoot,
+        recipeRuntimeDir(),
+        process.env.RECIPE_RUNTIME_DIST_DIR || "runtime-dist"
+      ));
+      return { artifactSha256: treeSha256, treeSha256 };
+    }
     const artifact = releaseArtifactState(projectRoot);
     if (artifact.status !== "valid" || runtimeDistCheck(projectRoot, artifact).status !== "fresh" || !artifact.sha256 || !artifact.treeSha256) {
       throw new Error("Runner-owned current release artifact is invalid or stale.");
@@ -1253,14 +1281,16 @@ function parsePreflightRequirements(value) {
   if (!Array.isArray(value)) throw new Error("Funding preflight requirements must be an array.");
   return value.map((entry, index) => {
     const record = requireRecord(entry, `funding preflight requirements[${index}]`);
+    const evidence = requireRecord(record.evidence, `funding preflight requirements[${index}].evidence`);
+    const wrapper = requireRecord(evidence.wrapper, `funding preflight requirements[${index}].evidence.wrapper`);
     return {
       kind: requireIdentifier(record.kind, `funding preflight requirements[${index}].kind`),
       id: requireIdentifier(record.id, `funding preflight requirements[${index}].id`),
       minBaseUnits: requireInteger(record.minBaseUnits, `funding preflight requirements[${index}].minBaseUnits`),
       actualBaseUnits: requireInteger(record.actualBaseUnits, `funding preflight requirements[${index}].actualBaseUnits`),
       evidenceSha256: requireIdentifier(
-        record.evidenceSha256,
-        `funding preflight requirements[${index}].evidenceSha256`,
+        wrapper.sha256,
+        `funding preflight requirements[${index}].evidence.wrapper.sha256`,
         true
       )
     };

package/dist/heal-bounds.js

@@ -63,7 +63,7 @@ async function ensureOverlay(adapter, target, heal, state, json) {
 function classifyFailure(output) {
   if (/SCREENSHOT_PROTECTED|screenshot is protected by FLAG_SECURE/iu.test(output)) return "screenshot-protected";
   if (/CDP_TIMEOUT|Mobile CDP bridge command timed out|NO_TARGET|WS_CLOSED/iu.test(output)) return "infra";
-  if (/wallet|fixture|keyring|not seeded|\bsrp\b|password|onboard/iu.test(output)) return "wallet";
+  if (/fixture|keyring|not seeded|\bsrp\b|password|onboard/iu.test(output)) return "wallet";
   if (/metro|cdp|chrome|bridge|bundle|packager|port\b|econnrefused|not reachable|watcher|dev client|websocket/iu.test(output)) {
     return "infra";
   }
@@ -101,8 +101,8 @@ function checkHealBounds(target, output, state) {
     return {
       code: "WALLET_STATE_REQUIRED",
       exitCode: EXIT.bounded,
-      message: "recovery would require a seeded wallet \u2014 healing never touches fixtures.",
-      userAction: "run mm-harness fixtures set",
+      message: "wallet prerequisites need attention; healing never changes wallet state.",
+      userAction: /(?:^|\n)\s*Next:\s*([^\r\n]+)/u.exec(output)?.[1] ?? "run mm-harness doctor --json",
       originalError
     };
   }

package/dist/live-adapter-contract.js

@@ -334,6 +334,10 @@ async function runLiveAdapterScript({ platform, action, node, context, prepared
       throw new Error(`Live adapter ${script} timed out after ${processTimeoutMs}ms.`);
     }
     if (result.exitCode !== 0) {
+      const failureOutput = await readFile(outputPath, "utf8").then(JSON.parse).catch(() => null);
+      if (Array.isArray(failureOutput?.artifacts)) {
+        for (const artifact of failureOutput.artifacts) context.registerArtifact(artifact);
+      }
       throw new Error(`Live adapter ${script} exited ${result.exitCode}: ${result.stderr || result.stdout}`);
     }
     let parsed = null;

package/dist/manifest.js

@@ -2,7 +2,6 @@ import fs from "node:fs";
 import path from "node:path";
 import { OFFICIAL_RECIPE_ACTIONS } from "@farmslot/protocol";
 import { manifestPath, readJson, importRecipeProtocol } from "./paths.js";
-import { actionSourceIntegrity } from "./recipe-security.js";
 function loadMetaMaskMobileActionManifest() {
   return asActionManifest(readJson(manifestPath("mobile")));
 }
@@ -26,7 +25,6 @@ async function resolveActionManifest(adapter, overridePath, librarySources, task
     );
     const manifest = loadActionManifest(adapter, manifestPath2);
     await validateManifest(manifest);
-    const integrity = await actionSourceIntegrity(manifestPath2, "task", implementationRoot);
     return {
       manifest,
       actionSources: await describeManifestSources(manifest, {
@@ -34,8 +32,7 @@ async function resolveActionManifest(adapter, overridePath, librarySources, task
         tier: "task",
         manifestPath: manifestPath2,
         implementationRoot,
-        trust: "unknown",
-        ...integrity
+        trust: "unknown"
       })
     };
   }
@@ -67,12 +64,6 @@ async function resolveActionManifest(adapter, overridePath, librarySources, task
   for (const [name, entry] of Object.entries(canonicalActions)) {
     if (official.has(name)) mergedActions[name] = entry;
   }
-  const canonicalImplementationRoot = path.join(canonical.source.root, "actions");
-  const canonicalIntegrity = await actionSourceIntegrity(
-    canonical.file,
-    "canonical",
-    canonicalImplementationRoot
-  );
   const actionSources = /* @__PURE__ */ new Map();
   for (const name of Object.keys(mergedActions)) {
     actionSources.set(name, {
@@ -96,14 +87,12 @@ async function resolveActionManifest(adapter, overridePath, librarySources, task
     const sourceName = isCanonical ? "metamask" : entry.source.name ?? path.basename(entry.source.root);
     const tier = isCanonical ? "canonical" : sourceName === "personal" ? "personal" : "team";
     const implementationRoot = path.join(entry.source.root, "actions");
-    const integrity = isCanonical ? canonicalIntegrity : await actionSourceIntegrity(entry.file, tier, implementationRoot);
     const sourceInfo = {
       name: sourceName,
       tier,
       manifestPath: entry.file,
       implementationRoot,
-      trust: entry.source.provenance?.trust ?? (isCanonical ? "trusted" : "unknown"),
-      ...integrity
+      trust: entry.source.provenance?.trust ?? (isCanonical ? "trusted" : "unknown")
     };
     for (const [name, action] of Object.entries(actionsOf(entry.manifest))) {
       if (official.has(name)) {

package/dist/mm-harness-cli.js

@@ -288,7 +288,7 @@ Advanced integrations:
 
 Example:
   mm-harness run wallet.smoke --describe
-  mm-harness run perps.clean-market-testnet market=BTC --plan --adapter mobile
+  mm-harness run perps.release-market-search query=Bitcoin --plan --adapter mobile
   mm-harness run recipe.json market=ETH --adapter extension`
   },
   {
@@ -613,6 +613,7 @@ Example:
   --device <serial>                  Explicit Android device serial
   --cdp-port <port>                  Extension CDP port
   --chrome-user-data-dir <dir>       Isolated Chrome profile path
+  --reset-profile                    Explicitly clear that profile; default preserves wallet state
   --artifacts-dir <dir>              Validation evidence directory
   --start-watch                      Build through the checkout watcher
   --build-lavamoat                   Build through the production-like path

package/dist/runner.js

@@ -20,10 +20,11 @@ import {
   bindMetaMaskMobileLifecycleDeadline,
   createMetaMaskMobileLifecycleCommandRunner,
   MOBILE_LIFECYCLE_DEADLINE_FIELD,
+  MOBILE_LIFECYCLE_PREPARED,
   resolveMetaMaskMobileLifecycleTarget
 } from "./app-lifecycle.js";
 import { loadMetaMaskExtensionActionManifest, loadMetaMaskMobileActionManifest } from "./manifest.js";
-import { metaMaskActionExecutionCapabilities } from "./recipe-security.js";
+import { actionSourceIntegrity, metaMaskActionExecutionCapabilities } from "./recipe-security.js";
 import {
   prepareLiveAdapterScript
 } from "./live-adapter-contract.js";
@@ -210,7 +211,7 @@ function withTrustedMutationContext(adapters, base, externalMutationActions, ada
     ...entry,
     async execute(node, context) {
       const identityProof = entry.action === identityProofAction;
-      const invalidatesIdentity = identityInvalidatingActions.has(entry.action) || entry.action.startsWith("ui.") && !identityPreservingUiActions.has(entry.action);
+      const invalidatesIdentity = identityInvalidatingActions.has(entry.action) || base?.proofLane !== "source-dev" && entry.action.startsWith("ui.") && !identityPreservingUiActions.has(entry.action);
       if (identityProof || invalidatesIdentity) selectedIdentitySha256 = void 0;
       const externalMutation = externalMutationActions.has(entry.action);
       if (externalMutation && !base) {
@@ -272,6 +273,15 @@ async function prepareLiveAdapterImplementations(platform, actions, sources, tru
     source.digest = executable.sourceDigest;
     source.resolveDigest = void 0;
   }));
+  for (const source of sources.values()) {
+    if (source.tier === "official" || source.digest) continue;
+    const integrity = await actionSourceIntegrity(source.manifestPath, source.tier, source.implementationRoot);
+    for (const candidate of sources.values()) {
+      if (!candidate.digest && candidate.manifestPath === source.manifestPath && candidate.implementationRoot === source.implementationRoot && candidate.tier === source.tier) {
+        Object.assign(candidate, integrity);
+      }
+    }
+  }
   return prepared;
 }
 function adapterSecurity(action, sources, trustTaskActions = false) {
@@ -405,7 +415,8 @@ function mobileSourceAwareLifecycleAdapters(adapter, lifecycle, readinessProbe =
               command: "foreground",
               settle_ms: 0,
               timeout_ms: foregroundTimeoutMs,
-              [MOBILE_LIFECYCLE_DEADLINE_FIELD]: readinessDeadline
+              [MOBILE_LIFECYCLE_DEADLINE_FIELD]: readinessDeadline,
+              [MOBILE_LIFECYCLE_PREPARED]: true
             },
             context
           );