@deeeed/metamask-harness 0.87.0 → 0.89.0

package/library/manifests/mobile.action-manifest.json

@@ -2614,7 +2614,7 @@
       "execution_capabilities": ["app-mutation", "external-mutation"]
     },
     "metamask.perps.close_orders": {
-      "description": "mobile Cancel selected live Perps open orders on the app's current Perps network, with no mainnet opt-in. Use selector/mode params to cancel matching symbols or all orders. Pre-existing testnet state on an account the task owns is converged, not refused.",
+      "description": "mobile Cancel selected live Perps open orders on the app's current Perps network; on mainnet only orders this run placed, anything else is refused before dispatch. Use selector/mode params to cancel matching symbols or all orders. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -2819,11 +2819,24 @@
               "mainnet",
               "testnet"
             ],
-            "description": "Perps network the order must run on; checked against the live app. A mainnet order must declare mainnet."
+            "description": "Perps network the order must run on; checked against the live app. A mainnet order must declare mainnet: a market order with close_immediately, or a dev1 limit order away from the market at 1x and at most $15 notional at its limit price, which the run cancels at its end (success, failure or abort) and records in perps-mainnet-orders.json."
           },
           "close_immediately": {
             "type": "boolean",
-            "description": "Close the opened position again inside this action and prove the market flat (market orders only; the market must start flat). Required on mainnet, with leverage 1 and notional at most $15 from a fixture account."
+            "description": "Close the opened position again inside this action and prove the market flat (market orders only; the market must start flat). A mainnet market order needs it, with leverage 1 and notional at most $15 from a fixture account; a mainnet limit order takes none (the run cancels it at its end)."
+          },
+          "order_type": {
+            "type": "string",
+            "enum": ["market", "limit"],
+            "default": "market"
+          },
+          "limit_price": {
+            "type": ["string", "number"],
+            "description": "Limit price; omit it to offset from the current market price by offset_pct."
+          },
+          "offset_pct": {
+            "type": "number",
+            "description": "Limit price offset from the current market price when limit_price is omitted (default -30 for a buy, 30 for a sell)."
           }
         },
         "additionalProperties": false
@@ -3142,7 +3155,7 @@
       "execution_capabilities": ["app-mutation", "external-mutation"]
     },
     "metamask.perps.ensure_orders": {
-      "description": "mobile Converge selected testnet orders to open or absent, then independently assert the final state. Creating an open state uses a resting limit order, which the shared Perps order rule refuses on mainnet; cancelling acts on the app's current Perps network with no mainnet opt-in. Pre-existing testnet state on an account the task owns is converged, not refused.",
+      "description": "mobile Converge selected testnet orders to open or absent, then independently assert the final state. Creating an open state uses a resting limit order, which the shared Perps order rule refuses on mainnet; cancelling acts on the app's current Perps network, and on mainnet only on orders this run placed. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -3511,7 +3524,7 @@
           "network": {
             "type": "string",
             "enum": ["testnet", "mainnet"],
-            "description": "Requested Perps network. Omit it to keep the current network unless a named profile supplies one."
+            "description": "Requested Perps network; network=mainnet is the opt-in for mainnet orders. Omit it to keep the current network unless a named profile supplies one."
           },
           "market": {
             "type": "string",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.87.0",
+  "version": "0.89.0",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,15 +21,15 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-node": "0.1.7",
-    "@farmslot/adapter-rn": "0.19.4",
-    "@farmslot/adapter-sdk": "0.8.1",
-    "@farmslot/adapter-web": "0.6.5",
-    "@farmslot/agent-runtime": "0.17.1",
+    "@farmslot/adapter-node": "0.1.12",
+    "@farmslot/adapter-rn": "0.19.10",
+    "@farmslot/adapter-sdk": "0.8.6",
+    "@farmslot/adapter-web": "0.6.10",
+    "@farmslot/agent-runtime": "0.17.5",
     "@farmslot/handoff": "^0.3.1",
-    "@farmslot/protocol": "0.35.0",
-    "@farmslot/recipe-cli": "0.11.1",
-    "@farmslot/recipe-runner": "0.28.1",
+    "@farmslot/protocol": "0.37.0",
+    "@farmslot/recipe-cli": "0.13.0",
+    "@farmslot/recipe-runner": "0.29.0",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",
@@ -55,6 +55,11 @@
   },
   "main": "./dist/index.js",
   "exports": {
+    "./provider": {
+      "development": "./src/provider.ts",
+      "import": "./dist/provider.js",
+      "default": "./dist/provider.js"
+    },
     ".": {
       "development": "./src/index.ts",
       "import": "./dist/index.js",

package/scripts/validate-release-report.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { validateRecipeArtifactPackage } from '@farmslot/protocol';
+import { recipeTraceEntries, validateRecipeArtifactPackage } from '@farmslot/protocol';
+import { CAPTURE_EVIDENCE_INCOMPLETE, onlyCaptureInterrupted } from '@farmslot/recipe-runner';
 
 const options = parseArgs(process.argv.slice(2));
 const inventoryPath = path.resolve(options.inventory);
@@ -71,6 +72,7 @@ for (const entry of verdictCases) {
     errors.push(`${entry.id ?? '<missing-id>'} must include evidence`);
     continue;
   }
+  const interruptedRuns = [];
   for (const evidence of entry.evidence) {
     if (typeof evidence !== 'string' || evidence.length === 0) {
       errors.push(`${entry.id ?? '<missing-id>'} contains invalid evidence`);
@@ -121,7 +123,8 @@ for (const entry of verdictCases) {
         }
         documents[required] = requiredDocument.value;
       }
-      if (documents['summary.json'] && entry.status === 'PASS' && documents['summary.json'].status !== 'pass') {
+      const captureInterrupted = onlyCaptureInterrupted(recipeTraceEntries(documents['trace.json']) ?? []);
+      if (documents['summary.json'] && entry.status === 'PASS' && documents['summary.json'].status !== 'pass' && !captureInterrupted) {
         errors.push(`${entry.id ?? '<missing-id>'} PASS evidence summary.json must have status pass: ${resolved}`);
       }
       if (requiredDocuments.every((required) => required in documents)) {
@@ -147,11 +150,20 @@ for (const entry of verdictCases) {
             .join(', ');
           errors.push(`${entry.id ?? '<missing-id>'} evidence directory is not a valid Recipe Protocol artifact package: ${resolved} (${codes})`);
         }
+        interruptedRuns.push(captureInterrupted);
       }
     } else if (!stat.isFile()) {
       errors.push(`${entry.id ?? '<missing-id>'} evidence must be a file or run directory: ${resolved}`);
     }
   }
+  // Retained interrupted attempts must not override a retry's product verdict.
+  if (interruptedRuns.length > 0 && interruptedRuns.every(Boolean)) {
+    if (entry.status !== 'BLOCKED_ENVIRONMENT') {
+      errors.push(`${entry.id ?? '<missing-id>'} evidence failed only because its recording was interrupted (CAPTURE_INTERRUPTED): report BLOCKED_ENVIRONMENT, ${CAPTURE_EVIDENCE_INCOMPLETE}, with the partial video, not ${entry.status}`);
+    } else if (!entry.summary.includes(CAPTURE_EVIDENCE_INCOMPLETE)) {
+      errors.push(`${entry.id ?? '<missing-id>'} summary must say "${CAPTURE_EVIDENCE_INCOMPLETE}" for a case whose recordings were interrupted`);
+    }
+  }
 }
 
 const counts = Object.fromEntries([...allowedStatuses].map((status) => [

package/site/assets/help-recipes.json

@@ -201,7 +201,7 @@
         "Analytics: verify the collection destination and existing consent before capture. Changing participation or marketing consent requires operator approval and restoration of the prior settings; a recipe's hardcoded opt-in is not permission. Missing collection prerequisites are not missing product events.",
         "Flake risk: wait on observable state instead of sleeping, keep device and runtime identity explicit, and never overwrite a prior run's artifacts.",
         "Mutation: require an independent state assertion and identity-bound receipt. Bind activity to that operation's accepted ID; an old row or nonzero count is insufficient. Opening and closing orders have different IDs. Schedule authorized cleanup in teardown, verify its result, and report any residue. Testnet cleanup closes what the task opened and never silently undoes another task's live proof on a reserved account or market.",
-        "Testnet account state: on a testnet account or market the task owns for its run (the slot's fixture account, or one reserved with exclusive_testnet_market=true), converging is an explicit, ownership-scoped setup choice, not a violation. Use the team library's perps.ensure-market-state or perps.clean-market-testnet, or on Mobile and Core metamask.perps.ensure_positions / metamask.perps.ensure_orders (mode=all for strays), record what was closed in the trace, then prove. A pre-existing position or order on an account the task owns is never a reason to block, skip, or refuse, and a fixture that demands an empty account must converge rather than refuse. Extension ensure_* and teardown_state only assert; converge there through an explicitly funded leaf action. Never broaden cleanup onto an account or market the task does not own; obtain an owned one instead of blocking. On mainnet, orders follow the shared Perps order rule (PERPS_MAINNET_ORDER_REFUSED), Core needs CORE_PERPS_ALLOW_MAINNET_WRITES=1 for any write, Mobile cleanup acts on whatever network the app is on, and Extension refuses mainnet writes other than orders and `close_visible_position` in the fixture-policy lane.",
+        "Testnet account state: on a testnet account or market the task owns for its run (the slot's fixture account, or one reserved with exclusive_testnet_market=true), converging is an explicit, ownership-scoped setup choice, not a violation. Use the team library's perps.ensure-market-state or perps.clean-market-testnet, or on Mobile and Core metamask.perps.ensure_positions / metamask.perps.ensure_orders (mode=all for strays), record what was closed in the trace, then prove. A pre-existing position or order on an account the task owns is never a reason to block, skip, or refuse, and a fixture that demands an empty account must converge rather than refuse. Extension ensure_* and teardown_state only assert; converge there through an explicitly funded leaf action. Never broaden cleanup onto an account or market the task does not own; obtain an owned one instead of blocking. On mainnet, orders follow the shared Perps order rule (PERPS_MAINNET_ORDER_REFUSED), Core needs CORE_PERPS_ALLOW_MAINNET_WRITES=1 for any write, Mobile close_positions acts on whatever network the app is on, close_orders there cancels only the run's own orders, and Extension refuses mainnet writes other than orders, `close_visible_position` and cancelling the run's own orders in the fixture-policy lane.",
         "Rate limits: RATE_LIMITED means Hyperliquid answered 429 Too Many Requests and bounded retries did not get through; it says nothing about the product. Wait a minute and rerun a read. A placement left outcome-unknown is never rerun before the market's positions, orders and fills are checked.",
         {
           "text": "An accepted order can fill before the UI updates. Preserve its receipt even when the expected resting-order assertion fails; one empty read does not prove cleanup. Check the read API's cache and freshness options before adding polling. Reconcile returned margin against the pre-placement balance. A successful close does not turn the original failed proof into a pass.",