@deeeed/metamask-harness 0.79.0 → 0.80.0

package/CHANGELOG.md

@@ -2,6 +2,53 @@
 
 ## Unreleased
 
+## 0.80.0 - 2026-10-06
+
+### Added
+
+- Core `metamask.perps.quote_fees`: quotes an order's fees through the controller's `calculateFees` (read-only, testnet by default). `rewards_discount_bips` makes the headless `RewardsController:getPerpsDiscountForAccount` answer with that discount (with the Ethereum mainnet network context the controller builds the account id from), so a rewards discount can be proven live; without it the controller has no rewards source, as before.
+- Feature-loss guard for the platform migration (repo tooling; the package's behaviour is unchanged): `scripts/feature-inventory.mjs` checks the build against the frozen 0.76.0 capability inventory (`tests/feature-inventory/`), `scripts/differential.mjs` runs the same commands on the frozen 0.76.0 install and the packed checkout on real slots and reports every difference, and `scripts/release-smoke.mjs` runs the fixed recorded release smoke set (`tests/release-smoke/`). See `docs/feature-guard.md`.
+
+### Changed
+
+- `tsx` is a runtime dependency: Core live adapter scripts run under the target's own tsx when it has one and under the harness's otherwise, no longer a nearby Farmslot checkout's (`TSX_BIN` still wins). The CLI itself still runs from `dist/`.
+- The generic React Native runtime moves to `@farmslot/adapter-rn` 0.17.0 and the shared CDP broker to `@farmslot/recipe-runner/cdp-broker`:
+  - the Hermes bridge libraries and the console forwarder;
+  - the Metro config wrapper, launcher and log helpers;
+  - adb/idb tool discovery, connected-device listing, the device video recorders, frame metrics, and the Metro-env and source fingerprints.
+
+  mm-harness keeps the MetaMask parts: `cdp-bridge.cjs` and its recovery hints, the platform action bridge, the fingerprint input lists, `start-metro.sh` and `wait-for-bridge`. The Mobile overlay vendors the bridge libraries next to `cdp-bridge.cjs`, so `temp/recipe/harness/mobile/bridge-runtime/` stays the same.
+- `adapters/mobile/bridge-runtime/cdp-bridge.cjs` is now the MetaMask preset over `@farmslot/adapter-rn/bridge-runtime/bridge-core.cjs` (adapter-rn 0.17.0). It keeps the wallet commands (`status`, `list-accounts`, `get-selected-account`, `switch-account`, `unlock`), the navigator route table, the recovery hints, the Perps and Homepage perf markers and the wallet-ready check; every other command, target selection, the debugger-slot lock and the typed errors come from the package. Same path, commands, output and exit codes.
+- The Mobile library's native UI actions no longer default to MetaMask: they read the app under test from `ANDROID_PACKAGE_ID` / `IOS_BUNDLE_ID`, and native UI observation reads the app's display name from `METAMASK_RECIPE_MOBILE_APP_LABEL`; each fails with a `Next:` hint when missing. The Mobile adapter sets all three (`io.metamask`, `io.metamask.MetaMask`, `MetaMask` unless already set) in the `run` and `call` env and for the in-process UI bridge commands, so observation output is unchanged.
+- **Renamed env (no aliases):**
+  - `MM_HARNESS_ADB_PATH` / `MM_HARNESS_IDB_PATH` → `RECIPE_RN_ADB_PATH` / `RECIPE_RN_IDB_PATH`;
+  - `MM_HARNESS_EXPLICIT_PLATFORM` → `RECIPE_RN_EXPLICIT_PLATFORM`;
+  - `MM_HARNESS_METRO_{PROJECT_ROOT,BASE_CONFIG,ENV_FINGERPRINT,LOG_ARCHIVE_COUNT,LOG_ARCHIVE_BYTES}` → `RECIPE_RN_METRO_*`.
+
+  The first Mobile launch after upgrading restarts a Metro that an older version started, because its recorded environment names changed. Source and Metro-env fingerprints are unchanged, so recorded baselines stay valid.
+- Depend on `@farmslot/recipe-cli` 0.4.1, `@farmslot/adapter-sdk` 0.3.1, `@farmslot/recipe-runner` 0.24.0 and `@farmslot/agent-runtime` 0.17.0, and drop the `es-module-lexer` dependency (live adapter bundling now lives in `@farmslot/recipe-cli`).
+- `@farmslot/expo-recipe` 0.14.0 is replaced by `@farmslot/adapter-rn` 0.17.0, the same package under its new name, so the install holds one `@farmslot/recipe-runner`. The Mobile native UI provider (`createAgentDeviceUiTransport`, `NATIVE_UI_ACTIONS`) and the `mobile/wallet/native-ui`, `mobile/platform/native-session` and `mobile/ui/native-navigation` library actions import `@farmslot/adapter-rn`; a library action that imported `@farmslot/expo-recipe` through the harness install imports `@farmslot/adapter-rn` instead.
+- The generic harness support moves to `@farmslot/recipe-cli/harness` and mm-harness imports it directly: the resumability journal, the checkout lock, `JsonStreamWriter`, colour helpers, contained artifact writes, Git library provenance, shell-leaf invocation and the runtime path helpers (`recipeRuntimeDir`, `recipeRuntimePath`, `recipeHarnessRoot`, `recipeHarnessPath`, `harnessExecutable`). `src/host.ts` configures it as `mm-harness`, so env names (`MM_HARNESS_OPERATION_ID`, `MM_HARNESS_CHECKOUT_LOCK_TOKEN`, `MM_HARNESS_EXECUTABLE`), messages, journaled commands and the runtime layout are unchanged.
+- `launch`, `reload`, `stop`, `last` and `install`/`verify`/`cleanup` run from the generic harness in `@farmslot/recipe-cli`. The built-in platforms declare what the commands used to hardcode: checkout detection, the Mobile `ios`/`android` targets, their launch and command flags, the failure patterns bounded healing classifies, and Mobile's `METRO_PORT` dev-server port name. mm-harness keeps its help text, the Runway install variant and the analytics collector stop as command options. Flags, messages, envelopes and exit codes are unchanged.
+- Run evidence moves to `@farmslot/recipe-cli/harness` and mm-harness imports it directly: execution provenance, the framed recorder and its snapshots, the run report and product provenance, run diagnostics, live adapter scripts, run options, the behavioral proof checks, recipe trust input and failure envelopes, and the `Did you mean` suggestion. `src/host.ts` sets `recipeEnvPrefix: 'METAMASK_RECIPE'`, so the live adapter env names (`METAMASK_RECIPE_ADAPTER_INPUT`, `_OUTPUT`, `_LIVE_ADAPTER_DIR`, `_ACTION_SOURCE_MAP`), the `mm-harness-live-adapter-` and `.mm-harness-recording-` temp prefixes, messages, and `diagnostics.json`, `execution-provenance.json`, `product-provenance.json` and `report.md` are unchanged.
+- The platform `run` member is the SDK's `AdapterRun`. The Extension declares `--launch-existing-dist` through `run.platformOptions`, sets `METAMASK_RECIPE_EXTENSION_AUTOLAUNCH` in its `run.activateEnv` (so only Extension runs set it now), reports the browser it drove through `run.browserProvenance`, and names `METAMASK_RECIPE_EXTENSION_ACTIVE_RECORDING_PID` as `recording.framed.activePidEnv`. Terminal reads its wallet request findings through `diagnostics.requestLog`; the console collector ownership check moves into the Extension and Terminal `verifyControl`. Mobile declares `--metro-port` as `devServer.portFlags`.
+- Run diagnostics classify console lines through `src/console-classifier.ts`, which wraps `library/actions/shared/console-findings.mjs` (unchanged, still loadable by path).
+- The Extension browser launch and slot titles moved to `@farmslot/adapter-web` 0.2.0 (`launch-browser`, `slot-title`). `adapters/extension/launch-browser.cjs` keeps its flags and now only passes MetaMask's part to the package: the build-handoff lock, `home.html` and its `MetaMask` title, the harness runtime paths that prove a browser is ours, and the `mm-harness launch` rerun hint. `adapters/extension/lib/slot-title.cjs` is gone; readiness, reattach, reopen, `ensure-ready` and `stamp-runtime-title` use the package, and the overlay no longer installs `scripts/lib/slot-title.cjs`. Behaviour is unchanged.
+
+### Removed
+
+- **BREAKING:** the package entry no longer exports `recipeHarnessPath`; import it from `@farmslot/recipe-cli/harness`. `library/actions/harness-exports.mjs` no longer bridges `recipeHarnessPath` or `recipeRuntimeDir` either; library actions import both from `@farmslot/recipe-cli/harness`.
+- **BREAKING:** the package entry no longer exports `validateRuntimeProof`; import it from `@farmslot/recipe-cli/harness`. A script that resolves it through a locked harness install can use `createRequire(require.resolve('@deeeed/metamask-harness')).resolve('@farmslot/recipe-cli/harness')`.
+- **BREAKING:** the package entry no longer exports `captureActiveRecipeRecordingSnapshot`; import it from `@farmslot/recipe-cli/harness`. `library/actions/harness-exports.mjs` no longer bridges it either.
+
+### Fixed
+
+- Core `metamask.perps.*` actions run again on current MetaMask/core, which no longer ships tsx (#10564): they failed with `CORE_DEPS_INCOMPLETE` even with `TSX_BIN` set. The `run`/`call` gate, `doctor` and execution resolve tsx the same way, and once dependencies are installed `doctor` (and `verify`) fail with the gate's reason when controller actions cannot run, instead of reporting ready; a checkout with no dependencies is reported not ready, as before. A source checkout's `bin/mm-harness` no longer overwrites the caller's `TSX_BIN`.
+- Core Perps actions select any wallet fixture account: `dev2`–`dev7` (derived from the `dev1` mnemonic, as `list_accounts` shows them) by name, or a fixture account by its address, for reads and writes. An unknown name is refused, and a `0x` address is no longer replaced by `dev1` when a fixture is present: one outside the fixture is read as given and refused for signing.
+- Local co-development links only the Farmslot packages the checkout has (`packages/<name>/package.json`). A package it lacks, such as one Farmslot has since renamed, keeps its installed, pinned copy, so `runner-deps-ready` passes again on a current Farmslot checkout.
+- Extension `run --slot` works again next to a Farmslot checkout of any version (since 0.78.0 it exited 1, "Extension slot lookup requires a local host checkout", when the checkout predated `packages/recipe-runner`). The slot lookup finds the farm's pool by its pool files alone (`pool/*.json` with `slots`), with the same search as before: the configured root, else the nearest Farmslot checkout above the runner, then above the working directory. `@farmslot/*` code always comes from the harness's installed dependencies; a local Farmslot checkout supplies it only when `METAMASK_RUNNER_PROTOCOL_ROOT`, `.farmslot-root` (or, for `bin/mm-harness`'s tsx fallback, `FARMSLOT_ROOT`) names it, never because it sits nearby.
+- Wallet fixture sync no longer replaces an explicit `FARMSLOT_ROOT` with `~/dev/farmslot`.
+
 ## 0.79.0 - 2026-10-05
 
 ### Changed

package/README.md

@@ -459,4 +459,4 @@ TASK.md holds the request; CHECKLIST.md is the sole step list. The frozen termin
 
 ### Portable runtime proof
 
-`validateRuntimeProof(bundle, smokeTarget)` validates a retained Recipe v1 artifact package, requiring executed behavioral assertions for its declared targets. A passing command or end node alone is insufficient. QA skills use this exported function through their locked harness installation; no gateway, farm profile or run ID is required.
+`validateRuntimeProof(bundle, smokeTarget)` from `@farmslot/recipe-cli/harness` validates a retained Recipe v1 artifact package, requiring executed behavioral assertions for its declared targets. A passing command or end node alone is insufficient. QA skills import it from the `@farmslot/recipe-cli` their locked harness installation depends on; no gateway, farm profile or run ID is required.

package/adapters/extension/ensure-browser.sh

@@ -517,9 +517,9 @@ const releaseFocusHold = () => {
   await page.goto(homeUrl, { waitUntil: 'load', timeout: 15000 });
 
   // Set window title to slot ID (persists across SPA navigations)
-  const { applyPersistentSlotTitle } = require(path.join('${SCRIPT_DIR}', 'lib/slot-title.cjs'));
+  const { applyPersistentSlotTitle } = adapterWeb('slot-title');
   const { evaluatePageViaCdp } = adapterWeb('playwright-cdp');
-  await evaluatePageViaCdp(page, applyPersistentSlotTitle, SLOT_ID);
+  await evaluatePageViaCdp(page, applyPersistentSlotTitle, { slotId: SLOT_ID, defaultTitle: 'MetaMask' });
 
   // Wait for runtime state to settle, then unlock if needed.
   const unlockSelector = '[data-testid=\"unlock-password\"]';

package/adapters/extension/inject.mjs

@@ -128,7 +128,6 @@ copyFile(path.join(runnerDir, 'adapters/shared/tmux-session.sh'), path.join(harn
 copyFile(path.join(runnerDir, 'adapters/shared/tmux-viewer.sh'), path.join(harnessDir, 'scripts/lib/tmux-viewer.sh'));
 copyFile(path.join(runnerDir, 'adapters/shared/log-tui.mjs'), path.join(harnessDir, 'scripts/lib/log-tui.mjs'));
 copyAdapterWeb(path.join(harnessDir, 'scripts/node_modules/@farmslot/adapter-web'));
-copyFile(path.join(runnerDir, 'adapters/extension/lib/slot-title.cjs'), path.join(harnessDir, 'scripts/lib/slot-title.cjs'));
 copyFile(path.join(runnerDir, 'adapters/extension/lib/product-config.cjs'), path.join(harnessDir, 'scripts/lib/product-config.cjs'));
 makeExecutableTree(path.join(harnessDir, 'scripts'));
 fs.writeFileSync(path.join(harnessDir, 'installed-scripts.sha256'), `${dirContentHash(path.join(harnessDir, 'scripts'))}\n`);