@deeeed/metamask-harness 0.91.6 → 0.92.0

package/CHANGELOG.md

@@ -2,6 +2,33 @@
 
 ## Unreleased
 
+## 0.92.0 - 2026-10-14
+
+### Changed
+
+- Use the coordinated public recipe-engine release for immutable artifact closeout and engine-owned attempt publication manifests.
+- Keep browser provenance checks on the engine finalization contract, with native browser lifetime conformance in the live release tier.
+
+### Fixed
+
+- Extension Perps smoke binds document and native captures to its passing observations for live conformance. Existing `perps-home` callers remain supported, and `smoke` names the shared QA proof.
+- Retain invocation-owned backend logs through engine closeout before the canonical artifact manifest is written.
+- Finish successful Mobile dependency recovery with explicit install-baseline recording so a retry accepts the installed content.
+
+### Removed
+
+- `MM_HARNESS_BIN` entrypoint delegation. Invoke a development checkout directly; Farmslot selects the provider package root. Public commands, arguments and executable identity are preserved.
+
+## 0.91.7 - 2026-10-13
+
+### Changed
+
+- Use the coordinated Farmslot recipe closure for fresh task attempt directories, selected-package checks and declared output provenance. Reusing a retained `--artifacts-dir` refuses and preserves its evidence.
+
+### Fixed
+
+- Render PR validation logs from the selected retained attempt, including when an older legacy report remains.
+
 ## 0.91.6 - 2026-10-13
 
 ### Fixed

package/README.md

@@ -447,14 +447,13 @@ failure.
 - [QA](docs/QA.md) — clean-machine and human release checks.
 - [Contributing](docs/CONTRIBUTING.md) — ownership, layout, and change gates.
 
-For development, point the installed command at a source checkout:
+For development, invoke the source checkout directly:
 
 ```bash
-export MM_HARNESS_BIN=/path/to/metamask-harness/bin/mm-harness
-mm-harness --version
+/path/to/metamask-harness/bin/mm-harness --version
 ```
 
-Unset `MM_HARNESS_BIN` to return to the published installation.
+Farmslot selects that same package through `recipe.provider.root.env`, configured as `MM_HARNESS_PACKAGE_ROOT`. Binary environment overrides do not redirect the public entrypoint.
 
 
 ### Workflow entry points and completion

package/bin/mm-harness

@@ -29,43 +29,11 @@ done
 SCRIPT_DIR="$(cd "$(dirname "$SOURCE")" && pwd -P)"
 RUNNER_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 
-# Dev/prod switch (the single override point). MM_HARNESS_BIN, when set, is the
-# authoritative path to a dev checkout's bin/mm-harness with active pre-release
-# changes; unset resolves the installed/global mm-harness (prod). Handing the
-# invocation over here, before any dependency work, lets the dev checkout fully
-# own the run. The self-path guard prevents an exec loop when MM_HARNESS_BIN
-# already points at this script — including via a symlink (both sides are resolved
-# to their real paths before comparing).
-if [ -n "${MM_HARNESS_BIN:-}" ]; then
-  self_real="$SCRIPT_DIR/${SOURCE##*/}"
-  # Resolve MM_HARNESS_BIN through any symlink chain so a symlink-to-self is caught.
-  mm_bin_src="$MM_HARNESS_BIN"
-  while [ -L "$mm_bin_src" ]; do
-    mm_bin_dir="$(cd "$(dirname "$mm_bin_src")" && pwd -P)"
-    mm_bin_target="$(readlink "$mm_bin_src")"
-    if [[ "$mm_bin_target" == /* ]]; then
-      mm_bin_src="$mm_bin_target"
-    else
-      mm_bin_src="$mm_bin_dir/$mm_bin_target"
-    fi
-  done
-  bin_real_dir="$(cd "$(dirname "$mm_bin_src")" 2>/dev/null && pwd -P || true)"
-  bin_real="${bin_real_dir:+$bin_real_dir/${mm_bin_src##*/}}"
-  if [ "$bin_real" != "$self_real" ]; then
-    if [ ! -x "$MM_HARNESS_BIN" ]; then
-      echo "mm-harness: MM_HARNESS_BIN is not an executable: $MM_HARNESS_BIN" >&2
-      echo "  Next: point MM_HARNESS_BIN at a checkout's bin/mm-harness, or unset it to use the global install" >&2
-      exit 1
-    fi
-    exec "$MM_HARNESS_BIN" "$@"
-  fi
-fi
-
 # Internal executable identity (not part of the public env surface): the CLI
 # embeds this in emitted recovery commands so they run verbatim even when
-# mm-harness is not on PATH (task-local installs). Set AFTER the MM_HARNESS_BIN
-# delegation above so the final executable entered always overwrites any
-# inherited/stale value with its own resolved self path.
+# mm-harness is not on PATH (task-local installs). Set at the
+# invocation entry so the executable always overwrites an inherited/stale
+# value with its own resolved self path.
 export MM_HARNESS_EXECUTABLE="$SCRIPT_DIR/${SOURCE##*/}"
 export MM_HARNESS_INVOKED_AS="$INVOKED_AS"
 

package/dist/adapters/mobile/runtime-decision.js

@@ -11,7 +11,7 @@ import {
   supersededErrorCapture
 } from "@farmslot/recipe-runner/runtime/log-analysis";
 import { probeMetroPackager } from "@farmslot/recipe-runner/runtime/metro-probe";
-import { color, recipeRuntimePath, shellQuote } from "@farmslot/recipe-cli/harness";
+import { recipeRuntimePath, shellQuote } from "@farmslot/recipe-cli/harness";
 import { resolveMobileToolPath } from "@farmslot/adapter-rn";
 import { mobileProductMarkers } from "./deps-markers.js";
 import { mobileMetroEnvCheck } from "./metro-env.js";
@@ -164,7 +164,7 @@ async function decideMobileReadiness(target, options = {}) {
         ...report.reasons,
         "Quick launch does not install dependencies."
       ],
-      userAction: `cd ${shellQuote(resolved)} && ${depsInstallCommand(resolved)}`,
+      userAction: `cd ${shellQuote(resolved)} && ${depsInstallCommand(resolved)} && mm-harness runtime-decision --adapter mobile --target ${shellQuote(resolved)} --record-baseline`,
       actions: []
     };
   }
@@ -185,24 +185,10 @@ async function decideMobileReadiness(target, options = {}) {
     )
   };
 }
-function writeDepsNote() {
-  const stream = process.stderr;
-  const body = "No install baseline is recorded. Required package checks passed; timestamps alone do not establish dependency drift. Reusing the installed dependencies.";
-  stream.write(
-    `
-${color("warn", "mm-harness note (deps):", { stream })} ${color("dim", body, { stream })}
-
-`
-  );
-}
 async function computeMobileReadiness(resolved, options, fast) {
-  const rawDeps = depsCheck(resolved, {
+  let deps = depsCheck(resolved, {
     productMarkers: mobileProductMarkers(options.platform)
   });
-  let deps = rawDeps;
-  if (rawDeps.status === "stale" && !rawDeps.hasBaseline) {
-    deps = { installed: rawDeps.installed, status: "current", hasBaseline: false };
-  }
   if (deps.status === "current") {
     const absent = missingRequiredDeps(resolved);
     if (absent.length > 0) {
@@ -320,7 +306,6 @@ async function computeMobileReadiness(resolved, options, fast) {
       actions: installActions(resolved)
     };
   }
-  if (rawDeps.status === "stale" && !rawDeps.hasBaseline) writeDepsNote();
   if (metro.status === "down") {
     return {
       schemaVersion: 1,

package/dist/adapters/terminal-backend/provider.js

@@ -40,18 +40,6 @@ async function createBackendProvider(context) {
   };
   const serviceLog = path.join(target, ".agent/terminal-backend/service.log");
   const logOffset = fs.existsSync(serviceLog) ? fs.statSync(serviceLog).size : 0;
-  const output = path.resolve(target, String(context.options?.artifactsDir ?? context.project.artifactDir));
-  const manifest = path.join(output, "artifact-manifest.json");
-  const manifestIdentity = () => {
-    try {
-      const s = fs.statSync(manifest, { bigint: true });
-      return [s.dev, s.ino, s.size, s.mtimeNs, s.ctimeNs].join(":");
-    } catch (error) {
-      if (error.code === "ENOENT") return void 0;
-      throw error;
-    }
-  };
-  const previousManifest = manifestIdentity();
   if (owner) {
     setEnv("BACKEND_OWNER_ID", owner);
     setEnv("BACKEND_LIFECYCLE_SCRIPT", lifecycle);
@@ -59,6 +47,19 @@ async function createBackendProvider(context) {
   const cleanup = async () => {
     if (owner) await main([...args("stop"), owner]);
   };
+  let finalized = false;
+  const finalize = async () => {
+    if (finalized) return;
+    finalized = true;
+    try {
+      await cleanup();
+    } finally {
+      for (const [key, value] of previous) {
+        if (value === void 0) delete process.env[key];
+        else process.env[key] = value;
+      }
+    }
+  };
   const logSource = () => ({ label: "NestJS and monitor", path: serviceLog });
   const hint = "Prepare the selected slot with the full profile.";
   const runtime = defineAdapter({
@@ -83,6 +84,20 @@ async function createBackendProvider(context) {
     readiness: { statusRuntime: true, captureProviders: [], readyIndicator: () => "OK" },
     logSources: () => [logSource()],
     appLogSource: logSource,
+    ...owner ? { observation: { performance: {
+      async start({ artifactsDir }) {
+        return {
+          onActionEvent() {
+          },
+          async finalize(observerManifestPath) {
+            await finalize();
+            if (!observerManifestPath || !fs.existsSync(serviceLog)) return;
+            await writeContainedArtifact(artifactsDir, "logs/backend.log", fs.readFileSync(serviceLog).subarray(logOffset), "Backend logs");
+            await indexArtifactManifest(observerManifestPath, [{ category: "log", label: "Backend and monitor logs", path: "logs/backend.log", type: "text" }]);
+          }
+        };
+      }
+    } } } : {},
     hints: { launch: hint, relaunch: hint, runtimeProbeRecovery: () => "Inspect the slot service.log and run farmslot doctor --conformance." },
     devServer: {
       label: "NestJS",
@@ -119,32 +134,9 @@ async function createBackendProvider(context) {
     }
   });
   if (executing) runtime.resolveSlotPorts();
-  let finalized = false;
   return {
     runtime,
-    ...owner ? {
-      cancel: cleanup,
-      async finalize() {
-        if (finalized) return;
-        finalized = true;
-        try {
-          try {
-            await cleanup();
-          } finally {
-            const currentManifest = manifestIdentity();
-            if (fs.existsSync(serviceLog) && currentManifest !== void 0 && currentManifest !== previousManifest) {
-              await writeContainedArtifact(output, "logs/backend.log", fs.readFileSync(serviceLog).subarray(logOffset), "Backend logs");
-              await indexArtifactManifest(manifest, [{ category: "log", label: "Backend and monitor logs", path: "logs/backend.log", type: "text" }]);
-            }
-          }
-        } finally {
-          for (const [key, value] of previous) {
-            if (value === void 0) delete process.env[key];
-            else process.env[key] = value;
-          }
-        }
-      }
-    } : {}
+    ...owner ? { cancel: cleanup, finalize } : {}
   };
 }
 export {

package/dist/command-contract.js

@@ -779,7 +779,7 @@ Common overrides:
   --adapter <{adapters}>  Target adapter (auto-detected inside a checkout)
   --platform <ios|android>           Mobile platform preference; use --adapter for the product adapter
   --target <path>                    Checkout path (default: cwd)
-  --artifacts-dir <dir>              Override evidence output (default: active task/artifacts, otherwise a checkout-local temp/recipe/runs/<run>)
+  --artifacts-dir <dir>              Fresh evidence output (default: active task/artifacts/recipe-runs/<attempt>, otherwise checkout-local temp/recipe/runs/<run>); retained packages cannot be reused
   --funding-request <absolute-file>  Original consented mutation request for external-mutation actions
   --funding-preflight <absolute-file> Eligible funding preflight bound to the request bytes
   --funding-release-proof <absolute-file> Exact release proof independently bound to funding eligibility
@@ -1343,7 +1343,7 @@ Example:
   where available) and prints the copy's executable. A task records that path,
   so \`npm i -g\` upgrading the global install never changes the harness a running
   task runs. Idempotent: the same install returns the same pin. A source checkout
-  (MM_HARNESS_BIN) or an existing pin is printed as is.
+  invoked directly or an existing pin is printed as is.
 
   --json                             Machine-readable { version, source, executable, pinned, created }
 

package/dist/commands/launch/device.js

@@ -260,9 +260,8 @@ function launchPass(launch, profile, state, remoteFlags) {
     );
   } else {
     const tierNote = tier === "quick" ? "quick relaunch, no native build" : tier;
-    const devNote = process.env.MM_HARNESS_BIN ? ` ${color("dim", "[dev: MM_HARNESS_BIN]")}` : "";
     console.error(
-      `${color("ok", "\u2713")} launch ${adapter}${platformTarget ? ` ${platformTarget}` : ""} \u2014 ${color("ok", profile.deviceLabel(launch))} \xB7 ${tierNote} \xB7 app + bridge ready${devNote}`
+      `${color("ok", "\u2713")} launch ${adapter}${platformTarget ? ` ${platformTarget}` : ""} \u2014 ${color("ok", profile.deviceLabel(launch))} \xB7 ${tierNote} \xB7 app + bridge ready`
     );
   }
   return EXIT.ok;

package/dist/mm-harness-cli.js

@@ -265,8 +265,8 @@ await createHarnessCli({
       "SETUP \u2014 tab-completion (zsh + bash), sourced from the bundled scripts:",
       "  mm-harness completions install   # print the lines to add to ~/.zshrc / ~/.bashrc",
       "",
-      "DEV/PROD \u2014 the global npm install is prod; set MM_HARNESS_BIN to a dev checkout to override:",
-      "  MM_HARNESS_BIN=/path/to/checkout/bin/mm-harness   # unset = the installed/global bin",
+      "DEVELOPMENT \u2014 invoke the source checkout directly; Farmslot selects its configured provider package root:",
+      "  /path/to/checkout/bin/mm-harness --version",
       "",
       "See README.md for the workflow and docs/RECIPES.md for proof authoring."
     ],

package/dist/pr-body/render.js

@@ -1,5 +1,9 @@
 import fs from "node:fs";
+import { createRequire } from "node:module";
 import path from "node:path";
+const { readRecipeAttemptSelection } = createRequire(import.meta.url)(
+  "@farmslot/agent-runtime/scripts/retained-recipe-attempt.cjs"
+);
 const PROSE_FILE = "pr-description.md";
 const BODY_FILE = "pr-body.md";
 const RECIPE_HEADING = "## **Validation Recipe**";
@@ -77,7 +81,9 @@ function renderPrBody(input) {
     throw new Error(`Missing ${path.relative(input.taskDir, prosePath)}: write the PR description there first.`);
   }
   const recipePath = path.join(artifacts, "recipe.json");
-  const reportPath = path.join(artifacts, "recipe-run", "report.md");
+  const selected = readRecipeAttemptSelection(input.taskDir);
+  const reportRoot = selected?.relativeArtifactRoot ?? "recipe-run";
+  const reportPath = path.join(artifacts, reportRoot, "report.md");
   const workflowPath = path.join(artifacts, "workflow.mmd");
   const machine = [];
   let recipe = null;
@@ -91,7 +97,7 @@ function renderPrBody(input) {
   const hasReport = fs.existsSync(reportPath);
   machine.push([
     LOGS_HEADING,
-    hasReport ? logsSection(reportPath, input.command) : "Not applicable: no recipe run report under `artifacts/recipe-run/`."
+    hasReport ? logsSection(reportPath, input.command) : `Not applicable: no recipe run report under \`artifacts/${reportRoot}/\`.`
   ]);
   const hasWorkflow = fs.existsSync(workflowPath);
   if (hasWorkflow) {

package/docs/cli-contract.md

@@ -10,7 +10,7 @@ Callers scanned (2026-10-02):
 
 ## Resolution and environment
 
-- Farms resolve the binary with `HARNESS_BIN="${METAMASK_HARNESS_BIN:-${MM_HARNESS_BIN:-mm-harness}}"; command -v "$HARNESS_BIN"`. `MM_HARNESS_BIN` hands the whole invocation to another checkout's `bin/mm-harness`.
+- Farms select the provider package through `recipe.provider.root.env`, configured as `MM_HARNESS_PACKAGE_ROOT`, and invoke its public `mm-harness` command. The entrypoint stays in the package invoked; inherited binary overrides cannot redirect it.
 - Static review runs `{{support}}/bin/mm-harness` with entry `dist/mm-harness-cli.js`, so the package layout (`bin/`, `dist/`) is part of the contract.
 - Hook environment: `RECIPE_SLOT_ID`, `RECIPE_RUNTIME_DIR` (default `temp/recipe/runtime`), `RECIPE_WALLET_FIXTURE`, `RECIPE_LIBRARY_PATH`, `MM_HARNESS_DOMAIN`, `IOS_SIMULATOR`/`ADB_SERIAL` (mobile slots), `RECIPE_HARNESS_ROOT=temp/recipe/harness` (Extension).
 

package/library/recipes/extension/perps/smoke-observation.recipe.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://farmslot.io/schemas/recipe-v1.schema.json",
+  "title": "MetaMask Extension Perps smoke observation",
+  "description": "Observe the populated Perps home and retain its document and native viewport. The caller establishes the network and opens Perps before this read-only proof.",
+  "workflow": {
+    "entry": "read-home",
+    "nodes": {
+      "read-home": {
+        "action": "metamask.perps.read_visible_state",
+        "surface": "home",
+        "minimum_market_count": 1,
+        "require_features": [
+          "balance",
+          "market-list"
+        ],
+        "intent": "Observe a populated Perps home after setup",
+        "next": "assert-home",
+        "forbid_test_ids": [
+          "perps-tutorial-skip-button"
+        ],
+        "max_items": 200
+      },
+      "assert-home": {
+        "action": "assert_output",
+        "source": "read-home",
+        "assert": {
+          "path": "$.surface",
+          "operator": "eq",
+          "value": "home"
+        },
+        "intent": "The observed surface is Perps home",
+        "next": "assert-markets"
+      },
+      "assert-markets": {
+        "action": "assert_output",
+        "source": "read-home",
+        "assert": {
+          "path": "$.marketCount",
+          "operator": "gte",
+          "value": 1
+        },
+        "intent": "Perps home contains market data rather than only a loading shell",
+        "next": "capture-document"
+      },
+      "capture-document": {
+        "action": "ui.capture_surface",
+        "path": "evidence/perps-smoke-document.png",
+        "next": "capture-window",
+        "intent": "Keep the observed Perps home document for visual review"
+      },
+      "capture-window": {
+        "action": "ui.screenshot",
+        "path": "screenshots/perps-smoke.png",
+        "next": "done",
+        "intent": "Keep the native Perps viewport after its market checks"
+      },
+      "done": {
+        "action": "end",
+        "status": "pass"
+      }
+    }
+  }
+}

package/library/recipes/extension/perps/smoke.recipe.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://farmslot.io/schemas/recipe-v1.schema.json",
   "title": "MetaMask Extension Perps smoke",
-  "description": "Sets and verifies the configured Perps network, default testnet, before proof. Extension Perps smoke: verifies CDP, unlocks if needed, opens Perps, proves visible home with market data, and reads positions/orders. Requires approved wallet setup and completed onboarding gates; a visible tutorial is setup, not passing smoke.",
+  "description": "Sets and verifies the configured Perps network, default testnet, before proof. Verifies CDP, unlocks if needed, opens Perps, asserts visible home and market data, retains document and native captures, and reads positions/orders. Requires approved wallet setup and completed onboarding gates; a visible tutorial is setup, not passing smoke.",
   "paramsSchema": {
     "type": "object",
     "additionalProperties": false,
@@ -26,7 +26,7 @@
         "page": false,
         "positions": false,
         "orders": false,
-        "next": "read-home",
+        "next": "observe-perps",
         "intent": "Verify the configured Perps network before proof; default testnet. Keep accounts and orders."
       },
       "status": {
@@ -67,55 +67,29 @@
         "action": "end",
         "status": "pass"
       },
-      "read-home": {
-        "action": "metamask.perps.read_visible_state",
-        "surface": "home",
-        "minimum_market_count": 1,
-        "require_features": [
-          "balance",
-          "market-list"
-        ],
-        "intent": "Observe a populated Perps home after setup",
-        "next": "assert-home",
-        "forbid_test_ids": [
-          "perps-tutorial-skip-button"
-        ],
-        "max_items": 200
-      },
-      "assert-home": {
-        "action": "assert_output",
-        "source": "read-home",
-        "assert": {
-          "path": "$.surface",
-          "operator": "eq",
-          "value": "home"
-        },
+      "observe-perps": {
+        "action": "call",
+        "ref": "perps.smoke-observation",
         "proves": [
-          "perps-home"
+          "perps-home",
+          "smoke"
         ],
-        "intent": "The observed surface is Perps home",
-        "next": "assert-markets"
-      },
-      "assert-markets": {
-        "action": "assert_output",
-        "source": "read-home",
-        "assert": {
-          "path": "$.marketCount",
-          "operator": "gte",
-          "value": 1
-        },
-        "proves": [
-          "perps-home"
-        ],
-        "intent": "Perps home contains market data rather than only a loading shell",
-        "next": "read-positions"
+        "next": "read-positions",
+        "intent": "Check the populated Perps home and retain its observed viewport"
       }
     }
   },
   "proofTargets": [
     {
       "id": "perps-home",
-      "claim": "The unlocked Perps home has visible market data and no observed tutorial gate."
+      "claim": "The unlocked Perps home has visible market data and no observed tutorial gate.",
+      "proofMode": "state"
+    },
+    {
+      "id": "smoke",
+      "kind": "qa-check",
+      "claim": "The unlocked Perps home has visible market data and no observed tutorial gate.",
+      "proofMode": "state"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.91.6",
+  "version": "0.92.0",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,15 +21,15 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-node": "0.1.14",
-    "@farmslot/adapter-rn": "0.20.1",
-    "@farmslot/adapter-sdk": "0.9.1",
-    "@farmslot/adapter-web": "0.7.2",
-    "@farmslot/agent-runtime": "0.18.1",
+    "@farmslot/adapter-node": "0.1.17",
+    "@farmslot/adapter-rn": "0.22.1",
+    "@farmslot/adapter-sdk": "0.12.0",
+    "@farmslot/adapter-web": "0.8.2",
+    "@farmslot/agent-runtime": "0.20.1",
     "@farmslot/handoff": "^0.3.1",
-    "@farmslot/protocol": "0.40.0",
-    "@farmslot/recipe-cli": "0.14.3",
-    "@farmslot/recipe-runner": "0.31.0",
+    "@farmslot/protocol": "0.43.0",
+    "@farmslot/recipe-cli": "0.16.1",
+    "@farmslot/recipe-runner": "0.34.0",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",