@deeeed/metamask-harness 0.61.0 → 0.61.1

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+## 0.61.1 - 2026-09-21
+
+### Fixed
+
+- Preserve explicitly typed public signer-key indices in recipe plans while redacting credentials. Adopt `@farmslot/recipe-harness@0.18.1` invocation evidence so parameterized run artifacts validate without reconstructing inputs.
+
 ## 0.61.0 - 2026-09-20
 
 ### Added

package/dist/commands/run.js

@@ -1,6 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
-import { walletFixturePath } from "../paths.js";
+import { importRecipeHarness, walletFixturePath } from "../paths.js";
 import { color } from "../cli-color.js";
 import { recipeRunning } from "../heal-bounds.js";
 import { checkoutBusyOut, EXIT, usageOut, writeInteractiveProgress } from "./shared.js";
@@ -39,7 +39,7 @@ import { JsonStreamWriter } from "../json-stream.js";
 import { formatRunDiagnosticsForHuman, readRunDiagnosticsDocument } from "../run-diagnostics.js";
 import { recipeTrustFailure } from "../recipe-security.js";
 import { ProvenanceDriftError } from "../execution-provenance.js";
-import { recordCommandEvidence, redactStructuredValue } from "../command-journal.js";
+import { recordCommandEvidence } from "../command-journal.js";
 import {
   actionLibraryContextArgs,
   missingActionCapabilities,
@@ -640,6 +640,7 @@ async function handleRunPlan(recipeArg, params, options, stream) {
       detail: nodeCount === void 0 ? "would execute the recipe nodes" : `would execute ${nodeCount} recipe node(s)`
     }
   ];
+  const { redactRecipeParams } = await importRecipeHarness();
   const payload = {
     schemaVersion: 1,
     command: "run",
@@ -647,7 +648,7 @@ async function handleRunPlan(recipeArg, params, options, stream) {
     status,
     adapter,
     recipe: recipeFile,
-    params: redactStructuredValue(effectiveParams),
+    params: redactRecipeParams(effectiveParams, isRecord(recipe) ? recipe.paramsSchema : void 0).params,
     findings,
     plan
   };

package/docs/RECIPES.md

@@ -488,3 +488,12 @@ mm-harness run --list --json
 ```
 
 See [Security](SECURITY.md) before enabling custom executable actions.
+
+### Packaging parameterized runs
+
+New runs retain `recipe-invocation.json` alongside their original recipe and
+resolved dependencies. The canonical validator reads those execution-bound
+inputs when validating the artifact directory, so Pretty PR does not need to
+reconstruct parameters from logs or a later plan. Keep the invocation artifact
+and its manifest entry when copying a run. Redacted credential inputs cannot be
+revalidated; pass fixture references instead of credentials.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.61.0",
+  "version": "0.61.1",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -24,7 +24,7 @@
     "@farmslot/expo-recipe": "0.11.0",
     "@farmslot/handoff": "^0.3.1",
     "@farmslot/protocol": "0.30.0",
-    "@farmslot/recipe-harness": "0.18.0",
+    "@farmslot/recipe-harness": "0.18.1",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "es-module-lexer": "2.3.1",