@deeeed/metamask-harness 0.92.19 → 0.92.21

package/CHANGELOG.md

@@ -2,6 +2,33 @@
 
 ## Unreleased
 
+## 0.92.21 - 2026-10-17
+
+### Added
+
+- Restore `mm-harness pr-body render` as a thin command over the shared Farmslot renderer.
+
+### Changed
+
+- Pin the `@farmslot` packages to the release set with `@farmslot/recipe-cli` 0.23.0 (protocol 0.54.0, recipe-runner 0.39.0, adapter-sdk 0.18.0, agent-runtime 0.29.0, adapter-web 0.10.14, adapter-node 0.1.34, adapter-rn 0.22.23).
+
+### Fixed
+
+- `pr-body render` takes the Validation Recipe from the selected attempt's captured `recipe.json` (or the task's single retained package), not the editable `artifacts/recipe.json`, and names the run, runner, runner revision and recipe digest above its log.
+- `pr-body render` refuses a selected attempt that fails artifact validation or lacks its recipe or report, and refuses two candidate packages when no attempt is selected; it writes nothing in either case.
+- `pr-body render --out` refuses to overwrite the authored description, recipe, workflow, attempt selection or retained evidence.
+- `pr-body render` refuses symlinked or oversized (over 4 MiB) inputs, converts CRLF in fenced logs to LF, and creates new output files owner-only without following a symlink.
+
+## 0.92.20 - 2026-10-17
+
+### Removed
+
+- Retire the unused `runtime-health` hidden command and the `health` and `home` aliases of `status`. Extension health checks keep running inside `ensure-ready`, `runtime-decision` and launch verification.
+
+### Changed
+
+- Document that hosted tasks resolve the Recipe Cook and Perps checklist roots from each node's pool `env`.
+
 ## 0.92.19 - 2026-10-17
 
 ### Fixed

package/README.md

@@ -400,16 +400,16 @@ check for upstream updates. Keep the selected library unchanged during a run.
 ```bash
 # Write artifacts/pr-description.md in the repository PR template shape (prose
 # only), then render the publishable body.
-farmslot recipe artifacts temp/tasks/dev/TAT-1 --format markdown \
-  --out temp/tasks/dev/TAT-1/artifacts/pr-body.md \
-  --command 'farmslot recipe run artifacts/recipe.json'
+mm-harness pr-body render temp/tasks/dev/TAT-1 --command 'mm-harness run artifacts/recipe.json'
 ```
 
-The Markdown renderer writes `artifacts/pr-body.md`: the description with the "Validation
+`pr-body render` writes `artifacts/pr-body.md`: the description with the "Validation
 Recipe" and "Validation Logs" sections rendered from `artifacts/recipe.json` and
 `artifacts/recipe-run/report.md` (and "Recipe Workflow" from `artifacts/workflow.mmd`
 when it exists), replacing any pasted by hand. The worker never pastes artifacts
-into markdown, so fences cannot break.
+into markdown, so fences cannot break. When a passing run recorded the task's
+selected attempt, both sections come from that attempt's validated package; a package
+that fails validation is refused, and nothing is written.
 
 ## Review a change
 
@@ -473,6 +473,8 @@ Farmslot selects that same package through `recipe.provider.root.env`, configure
 
 Explicitly invoke `mms-recipe-dev`, `mms-recipe-fix-bug`, `mms-recipe-qa` or the team's static review skill. `mms-recipe-cook` selects or resumes their shared Markdown checklist. Matching descriptions or changed paths never activates these workflows.
 
+Hosted tasks select that checklist on the execution node, not the gateway. The Core, Mobile and Extension packs root their Recipe Cook checklists at `CONSENSYS_RECIPE_COOK_ROOT` and their Perps checklists at `PERPS_RECIPE_LIBRARY_ROOT`. Set them in every node's pool `env`, not only the gateway's. A node missing the root for the selected checklist refuses the task as source unavailable.
+
 Static Perps review uses a generated source checklist without installing or launching the app harness. `recipe-qa` freezes a PR, range or daily change window and requires runtime smoke plus selected recipe proof. Official release validation uses its named release profile and proof lane.
 
 TASK.md holds the request; CHECKLIST.md is the sole step list. The frozen terminal contract and task-local mark validate completion. Publication, retained sessions and workspace cleanup belong to the caller. Farmslot handles them through its control plane; direct invocation returns the outcome to the engineer. See the [task-directory guide](site/task-dir.html) and [QA tutorial](site/tutorials/v5.html).

package/dist/cli-commands.js

@@ -11,10 +11,11 @@ const SPEC = {
     { name: "help", desc: "Load version-matched recipe guidance (help review composes the review guide)", args: ["review"], flags: ["--json", "--adapter", "--target", "--domain"] },
     { name: "review", desc: "Materialize a review checklist composed from the base review and a team library", args: ["checklist"], flags: ["--domain", "--since", "--base", "--out", "--adapter", "--target", "--json"] },
     { name: "domain", desc: "Which team library owns the change (declared value, else owned-paths.json)", flags: ["--domain", "--base", "--adapter", "--target", "--json"] },
+    { name: "pr-body", desc: "Render the publishable PR body: pr-description.md plus the recipe and run sections built from artifacts", args: ["render", "<task-dir>"], flags: ["--command", "--out", "--json"] },
     { name: "config", desc: "Per-engineer locations and optional advisor settings", args: ["list", "path", "get", "set", "unset"], flags: ["--json"] },
     { name: "tutorial", desc: "Open the visual recipe tutorial", flags: ["--json", "--no-open"] },
     { name: "setup-base", desc: "Bootstrap numbered product checkouts", flags: ["--dir", "--counts", "--only", "--dry-run", "--force", "--json", "--show-config", "--reset-config", "--skip-harness-update"] },
-    { name: "status", aliases: ["health", "home"], desc: "Home status + next commands", flags: ["--json", "--fast", "--watch", "--task"] },
+    { name: "status", desc: "Home status + next commands", flags: ["--json", "--fast", "--watch", "--task"] },
     { name: "ports", desc: "Slot ports and runtime paths", flags: ["--json"] },
     { name: "up", desc: "Decide + run minimum work to reach ready", flags: ["--json", "--dry-run"] },
     { name: "sync", desc: "Refresh harness + canonicalize wallet fixture", flags: ["--json"] },

package/dist/command-contract.js

@@ -175,6 +175,40 @@ Example:
       })
     }
   },
+  {
+    name: "pr-body",
+    summary: "Render the publishable PR body: the authored description plus the recipe and run log sections built from artifacts.",
+    example: "mm-harness pr-body render temp/tasks/dev/TAT-1",
+    helpText: `mm-harness pr-body render <task-dir> [flags]
+
+  Reads <task-dir>/artifacts/pr-description.md (the PR body the worker wrote in
+  the repository PR template shape) and inserts the machine sections rendered
+  from artifacts: "Validation Recipe" from artifacts/recipe.json, "Validation
+  Logs" from artifacts/recipe-run/report.md, and "Recipe Workflow" from
+  artifacts/workflow.mmd when it exists. Any such section the worker pasted by
+  hand is replaced. The sections go before the first checklist section, else at
+  the end. Fences are always longer than any backtick run in the content and
+  close on their own line. Writes <task-dir>/artifacts/pr-body.md.
+
+  When a passing run recorded the task's selected attempt, both sections come
+  from that attempt's package, which must pass validation or nothing is written.
+
+  --command <text>  Recipe invocation to show above the run log
+  --out <file>      Write elsewhere than artifacts/pr-body.md (never over an
+                    authored input or retained evidence)
+  --json            Machine-readable result
+
+Example:
+  mm-harness pr-body render temp/tasks/dev/TAT-1 --json`,
+    contract: {
+      options: options(HELP, JSON, {
+        "--command": value(),
+        "--out": value()
+      }),
+      positionals: [{ label: "action", choices: ["render"] }, { label: "task-dir" }],
+      minimumPositionals: 2
+    }
+  },
   {
     name: "config",
     summary: "Per-engineer locations and optional recipe advisor settings.",
@@ -258,13 +292,12 @@ Example:
   },
   {
     name: "status",
-    aliases: ["health", "home"],
     summary: "Home dashboard for a checkout: detected adapter, next command, and (mobile) connected devices with the selected target.",
     example: "mm-harness status",
     helpText: `mm-harness status [flags]
 
   Home dashboard for the current checkout \u2014 the detected adapter, the next command
-  to run, and (mobile only) the connected devices with live app state. Aliases: health, home.
+  to run, and (mobile only) the connected devices with live app state.
 
   --adapter <{adapters}>  Target adapter (auto-detected inside a checkout)
   --target <path>                    Checkout path (default: cwd)
@@ -1409,7 +1442,6 @@ Example:
 ];
 const HIDDEN_COMMANDS = [
   "completion-candidates",
-  "runtime-health",
   "runtime-decision",
   "resolve-extension",
   "ensure-ready",

package/dist/commands/pr-body.js

@@ -0,0 +1,29 @@
+import { optionFlag, optionString, parseArgs, renderRetainedArtifactsMarkdown, usageError } from "@farmslot/recipe-cli/harness";
+import fs from "node:fs";
+import path from "node:path";
+const USAGE = "Usage: mm-harness pr-body render <task-dir> [--command <text>] [--out <file>] [--json]";
+async function handlePrBody(argv) {
+  const parsed = parseArgs(argv);
+  const [action, taskArg] = parsed.positional;
+  if (action !== "render" || !taskArg) throw usageError(USAGE);
+  const taskDir = path.resolve(taskArg);
+  if (!fs.existsSync(path.join(taskDir, "artifacts"))) {
+    throw usageError(`${taskDir} has no artifacts/ directory; pass the task directory mm-harness task init wrote.`);
+  }
+  const command = optionString(parsed.options, "command");
+  const out = path.resolve(optionString(parsed.options, "out") ?? path.join(taskDir, "artifacts", "pr-body.md"));
+  const { result } = await renderRetainedArtifactsMarkdown({ directory: taskDir, command, out, format: "markdown" });
+  const { sections = [], recipe, run, workflow } = result;
+  if (optionFlag(parsed.options, "json")) {
+    process.stdout.write(`${JSON.stringify({ command: "pr-body", subcommand: "render", status: "ok", taskDir, out, sections, recipe, run, workflow }, null, 2)}
+`);
+  } else {
+    process.stdout.write(`pr body: ${out}
+  ${sections.join("\n  ")}
+`);
+  }
+  return 0;
+}
+export {
+  handlePrBody
+};

package/dist/mm-harness-cli.js

@@ -48,13 +48,13 @@ import { handleHelp } from "./commands/help.js";
 import { handleLogs } from "./commands/logs.js";
 import { overlayCommandOptions } from "./commands/overlay.js";
 import { handlePin } from "./commands/pin.js";
+import { handlePrBody } from "./commands/pr-body.js";
 import { handlePrepare } from "./commands/prepare.js";
 import { handleProvision } from "./commands/provision.js";
 import { handleRecipeQuality } from "./commands/recipe-quality.js";
 import { handleResolveExtension } from "./commands/resolve-extension.js";
 import { handleReview } from "./commands/review.js";
 import { handleRuntimeDecision } from "./commands/runtime-decision.js";
-import { handleRuntimeHealth } from "./commands/runtime-health.js";
 import { handleRuntimeLaunch } from "./commands/runtime-launch.js";
 import { handleSelfTest } from "./commands/self-test.js";
 import { handleSetupBase } from "./commands/setup-base.js";
@@ -139,6 +139,7 @@ const PUBLIC_RUN = {
   help: { run: (args) => handleHelp(args, { packageRoot, harnessVersion: hostVersion() }), nudge: false },
   review: { run: handleReview },
   domain: { run: handleDomain },
+  "pr-body": { run: handlePrBody },
   config: { run: handleConfig },
   tutorial: { run: (args) => handleTutorial(args, { harnessVersion: hostVersion() }), exit: "now", nudge: false },
   "setup-base": { run: handleSetupBase, raw: true, exit: "now", nudge: false },
@@ -173,7 +174,6 @@ const PUBLIC_RUN = {
 const HIDDEN_RUN = {
   // Shell completion answers for the checkout's adapter, so it resolves one.
   "completion-candidates": { run: handleCompletionCandidates, nudge: false, context: "adapter" },
-  "runtime-health": { run: (args) => handleRuntimeHealth(parseArgs(args)) },
   "runtime-decision": { run: (args) => handleRuntimeDecision(parseArgs(args, { recordIsFlag: true })) },
   "resolve-extension": { run: (args) => handleResolveExtension(parseArgs(args)) },
   "ensure-ready": { run: (args) => handleEnsureReady(parseArgs(args)) },
@@ -198,7 +198,7 @@ const HELP_GROUPS = [
   {
     title: "PROVE",
     blurb: "run recipes and inspect readiness",
-    commands: ["run", "last", "doctor", "check", "checklist", "review", "recipe-quality"]
+    commands: ["run", "last", "doctor", "check", "checklist", "review", "pr-body", "recipe-quality"]
   },
   {
     title: "RUNTIME OVERLAY",

package/docs/CONTRIBUTING.md

@@ -92,7 +92,7 @@ command-local platform ladders for surface-owned behavior:
   `prepare`, `debug`, `reload` and `runtime-decision` read their own members.
 
 A few comparisons remain where a command exists for one platform
-(`runtime-health`, `resolve-extension`, `ensure-ready`, `runtime-launch`) or
+(`resolve-extension`, `ensure-ready`, `runtime-launch`) or
 code compares a platform's own data (`review/knowledge.ts`, the Core jest
 grouping in `check.ts`, the Mobile release-artifact state file).
 

package/docs/cli-contract.md

@@ -62,7 +62,8 @@ Callers scanned (2026-10-02):
 | Command | Caller | Consumes | G: |
 |---|---|---|---|
 | `checklist mark <taskDir> {start\|<n>\|complete [--mark-last]\|blocked --reason <s>\|no-change --reason <s>\|--help}` | `{{TASK_DIR}}/mark` shim (`mark_cmd`) | exit code; `SIGNAL.json`, `CHECKLIST.md` | `task/mark-*` |
-| `farmslot recipe artifacts <taskDir> --format markdown --out <file> --json` | migrated pack hooks and PR-description skills | successful exit, structured `error.message`, explicit `out`; no implicit output file | shared recipe-cli artifact contracts; retained Markdown baselines |
+| `pr-body render <taskDir> [--out <file>] --json` (cwd = task dir) | MetaMask engineers and skills; the gateway `pr-body-render.ts` when a pack's `pr_body_cmd` names it | on failure `JSON.parse(stdout).error`, else stderr; then `--out`, else `artifacts/pr-body.md` | `task/pr-body-render-*` |
+| `farmslot recipe artifacts <taskDir> --format markdown --out <file> --json` | farm pack hooks (`vars.pr_body_cmd`) and PR-description skills on the farm | successful exit, structured `error.message`, explicit `out`; no implicit output file | shared recipe-cli artifact contracts; retained Markdown baselines |
 | `review checklist --out <file> [--domain <d>] [--since <sha>]` | domain fixtures, review templates | the written file | `task/review-checklist` |
 | `check diff …`, `recipe-quality build …` | templates | exit code | not covered: run repo lint/test tooling |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.92.19",
+  "version": "0.92.21",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,15 +21,15 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-node": "0.1.33",
-    "@farmslot/adapter-rn": "0.22.22",
-    "@farmslot/adapter-sdk": "0.17.1",
-    "@farmslot/adapter-web": "0.10.13",
-    "@farmslot/agent-runtime": "0.28.0",
+    "@farmslot/adapter-node": "0.1.34",
+    "@farmslot/adapter-rn": "0.22.23",
+    "@farmslot/adapter-sdk": "0.18.0",
+    "@farmslot/adapter-web": "0.10.14",
+    "@farmslot/agent-runtime": "0.29.0",
     "@farmslot/handoff": "^0.3.1",
-    "@farmslot/protocol": "0.53.0",
-    "@farmslot/recipe-cli": "0.22.5",
-    "@farmslot/recipe-runner": "0.38.4",
+    "@farmslot/protocol": "0.54.0",
+    "@farmslot/recipe-cli": "0.23.0",
+    "@farmslot/recipe-runner": "0.39.0",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",

package/dist/commands/runtime-health.js

@@ -1,19 +0,0 @@
-import { adapterOption, optionFlag, optionString, parsePort, targetPath } from "@farmslot/recipe-cli/harness";
-async function handleRuntimeHealth({ options }) {
-  const adapter = adapterOption(options);
-  if (adapter !== "extension") throw new Error("runtime-health currently applies to the extension adapter.");
-  const target = targetPath(options);
-  const cdpPort = parsePort(
-    optionString(options, "cdpPort") ?? process.env.CDP_PORT ?? process.env.RECIPE_CDP_PORT,
-    "runtime-health requires --cdp-port <port>."
-  );
-  const { checkExtensionRuntimeHealth, formatHealthFailure } = await import("../adapters/extension/runtime.js");
-  const report = await checkExtensionRuntimeHealth(target, cdpPort);
-  if (optionFlag(options, "json")) console.log(JSON.stringify(report, null, 2));
-  else if (report.status === "PASS") console.log(`PASS extension runtime cdp=${cdpPort} target=${report.targetUrl}`);
-  else console.error(formatHealthFailure(report, target));
-  return report.status === "PASS" ? 0 : 1;
-}
-export {
-  handleRuntimeHealth
-};