Skip to content

feat(ramps-controller): accept a JSON moneyHeadlessAllProviders payload carrying provider allowlists#9524

Draft
saustrie-consensys wants to merge 3 commits into
mainfrom
saustrie/ramps-headless-provider-allowlist
Draft

feat(ramps-controller): accept a JSON moneyHeadlessAllProviders payload carrying provider allowlists#9524
saustrie-consensys wants to merge 3 commits into
mainfrom
saustrie/ramps-headless-provider-allowlist

Conversation

@saustrie-consensys

@saustrie-consensys saustrie-consensys commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Explanation

moneyHeadlessAllProviders is currently a boolean remote flag: the literal true widens headless fiat auto-selection quoting to every provider class (#9409). Phase 2 of the Headless Buy all-providers work needs QA to force a specific provider mix (for example external-browser-only) without a client change per test configuration.

This PR widens the flag's value contract so the same LaunchDarkly key can carry provider allowlists:

  • The flag now also accepts an object payload { "enabled": true, "providerIds": ["/providers/x"], "surfaces": { "money": [...], "perps": [...], "predictions": [...] } }. isHeadlessAllProvidersEnabled returns true for a payload whose enabled is the literal true; every other previously-false value still resolves to false, and the boolean forms behave exactly as before.
  • New pure getHeadlessProviderAllowlist(remoteFeatureFlagState, surface?) (plus HEADLESS_ALLOWLIST_SURFACES / HeadlessAllowlistSurface) resolves the allowlist: a valid non-empty surfaces[surface] entry overrides the top-level providerIds; absent, empty, or malformed levels fall through, ending at "no restriction". Unknown keys and non-string entries are ignored, in the same defensive-coercion style as the boolean read.
  • When the resolved allowlist is non-empty, the widened pick drops candidates whose provider is not listed, before the existing fiat-limit filter and reliability-then-price ranking. Ids match in prefixed (/providers/x) or bare form, case-insensitively, via a module-local normalizer used only for allowlist matching (provider ids still match as-is everywhere else; the v16 removal of id normalization is not reverted). If nothing survives, getQuotes returns an empty success[] with sorted / error / customActions preserved.
  • getQuotes gains an optional surface option selecting the per-surface list. It is deliberately not part of the request cache key: the pick runs after the cached fetch, so an LD edit or a different surface re-applies over the cached raw response, and calls differing only in surface share one service request (pinned by a test).
  • The controller resolves the enabled bit and the allowlist from a single RemoteFeatureFlagController:getState read per getQuotes call, so a flag edit during the awaited fetch cannot produce a mixed read.

Backwards compatibility, and why this is a minor (not breaking) change: clients on earlier versions coerce any non-boolean value to false (native-only), so serving the object payload can never turn widening on for a client that cannot parse it, and production serves false everywhere today. No consumer needs code changes to keep working; boolean-only configurations see identical behavior. The documented "any non-boolean resolves to false" contract is widened, not changed, for the values it previously rejected.

References

Checklist

  • I've updated the test suite for new or updated code as appropriate
  • I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
  • I've communicated my changes to consumers by updating changelogs for packages I've changed
  • I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

@saustrie-consensys

Copy link
Copy Markdown
Contributor Author

@metamaskbot publish-preview

@github-actions

Copy link
Copy Markdown
Contributor

Preview builds have been published. Learn how to use preview builds in other projects.

Expand for full list of packages and versions.
@metamask-previews/account-tree-controller@7.5.5-preview-6f52159
@metamask-previews/accounts-controller@39.0.5-preview-6f52159
@metamask-previews/address-book-controller@7.1.2-preview-6f52159
@metamask-previews/ai-controllers@0.8.0-preview-6f52159
@metamask-previews/analytics-controller@1.2.1-preview-6f52159
@metamask-previews/analytics-data-regulation-controller@0.0.0-preview-6f52159
@metamask-previews/announcement-controller@8.1.0-preview-6f52159
@metamask-previews/app-metadata-controller@2.0.1-preview-6f52159
@metamask-previews/approval-controller@9.0.2-preview-6f52159
@metamask-previews/assets-controller@11.0.0-preview-6f52159
@metamask-previews/assets-controllers@109.4.1-preview-6f52159
@metamask-previews/authenticated-user-storage@3.0.1-preview-6f52159
@metamask-previews/base-controller@9.1.0-preview-6f52159
@metamask-previews/base-data-service@0.1.3-preview-6f52159
@metamask-previews/bitcoin-regtest-up@1.0.0-preview-6f52159
@metamask-previews/bridge-controller@77.5.0-preview-6f52159
@metamask-previews/bridge-status-controller@74.2.0-preview-6f52159
@metamask-previews/build-utils@3.0.4-preview-6f52159
@metamask-previews/chain-agnostic-permission@1.7.0-preview-6f52159
@metamask-previews/chomp-api-service@3.1.0-preview-6f52159
@metamask-previews/claims-controller@0.5.3-preview-6f52159
@metamask-previews/client-controller@1.0.1-preview-6f52159
@metamask-previews/client-utils@1.1.0-preview-6f52159
@metamask-previews/compliance-controller@2.1.0-preview-6f52159
@metamask-previews/composable-controller@12.0.1-preview-6f52159
@metamask-previews/config-registry-controller@0.4.1-preview-6f52159
@metamask-previews/connectivity-controller@0.3.0-preview-6f52159
@metamask-previews/controller-utils@12.3.0-preview-6f52159
@metamask-previews/core-backend@6.5.0-preview-6f52159
@metamask-previews/delegation-controller@3.0.2-preview-6f52159
@metamask-previews/earn-controller@12.2.2-preview-6f52159
@metamask-previews/eip-5792-middleware@3.0.5-preview-6f52159
@metamask-previews/eip-7702-internal-rpc-middleware@0.1.1-preview-6f52159
@metamask-previews/eip1193-permission-middleware@2.0.1-preview-6f52159
@metamask-previews/ens-controller@19.1.5-preview-6f52159
@metamask-previews/eth-block-tracker@15.0.1-preview-6f52159
@metamask-previews/eth-json-rpc-middleware@23.1.3-preview-6f52159
@metamask-previews/eth-json-rpc-provider@6.0.1-preview-6f52159
@metamask-previews/foundryup@1.0.1-preview-6f52159
@metamask-previews/gas-fee-controller@26.2.4-preview-6f52159
@metamask-previews/gator-permissions-controller@4.2.3-preview-6f52159
@metamask-previews/geolocation-controller@0.1.3-preview-6f52159
@metamask-previews/java-tron-up@1.0.0-preview-6f52159
@metamask-previews/json-rpc-engine@10.5.0-preview-6f52159
@metamask-previews/json-rpc-middleware-stream@8.0.8-preview-6f52159
@metamask-previews/keyring-controller@27.1.0-preview-6f52159
@metamask-previews/local-node-utils@1.0.0-preview-6f52159
@metamask-previews/logging-controller@8.0.2-preview-6f52159
@metamask-previews/message-manager@14.1.2-preview-6f52159
@metamask-previews/messenger@2.0.0-preview-6f52159
@metamask-previews/messenger-cli@0.2.0-preview-6f52159
@metamask-previews/money-account-api-data-service@0.1.0-preview-6f52159
@metamask-previews/money-account-balance-service@2.2.0-preview-6f52159
@metamask-previews/money-account-controller@0.3.3-preview-6f52159
@metamask-previews/money-account-upgrade-controller@2.2.1-preview-6f52159
@metamask-previews/multichain-account-service@13.0.0-preview-6f52159
@metamask-previews/multichain-api-middleware@4.0.1-preview-6f52159
@metamask-previews/multichain-network-controller@3.2.1-preview-6f52159
@metamask-previews/multichain-transactions-controller@7.1.1-preview-6f52159
@metamask-previews/name-controller@9.1.2-preview-6f52159
@metamask-previews/network-connection-banner-controller@0.1.0-preview-6f52159
@metamask-previews/network-controller@34.0.0-preview-6f52159
@metamask-previews/network-enablement-controller@5.6.0-preview-6f52159
@metamask-previews/notification-services-controller@25.0.0-preview-6f52159
@metamask-previews/passkey-controller@2.1.0-preview-6f52159
@metamask-previews/permission-controller@13.1.1-preview-6f52159
@metamask-previews/permission-log-controller@5.1.0-preview-6f52159
@metamask-previews/perps-controller@9.2.1-preview-6f52159
@metamask-previews/phishing-controller@17.2.1-preview-6f52159
@metamask-previews/platform-api-docs@0.0.0-preview-6f52159
@metamask-previews/polling-controller@16.0.8-preview-6f52159
@metamask-previews/preferences-controller@23.1.0-preview-6f52159
@metamask-previews/profile-metrics-controller@4.0.2-preview-6f52159
@metamask-previews/profile-sync-controller@28.3.0-preview-6f52159
@metamask-previews/ramps-controller@17.0.0-preview-6f52159
@metamask-previews/rate-limit-controller@7.0.1-preview-6f52159
@metamask-previews/react-data-query@0.2.1-preview-6f52159
@metamask-previews/remote-feature-flag-controller@4.2.2-preview-6f52159
@metamask-previews/sample-controllers@5.0.3-preview-6f52159
@metamask-previews/seedless-onboarding-controller@10.0.3-preview-6f52159
@metamask-previews/selected-network-controller@26.1.5-preview-6f52159
@metamask-previews/sentinel-api-service@0.0.0-preview-6f52159
@metamask-previews/shield-controller@5.1.3-preview-6f52159
@metamask-previews/signature-controller@39.2.7-preview-6f52159
@metamask-previews/smart-transactions-controller@25.0.1-preview-6f52159
@metamask-previews/snap-account-service@2.0.0-preview-6f52159
@metamask-previews/social-controllers@2.5.0-preview-6f52159
@metamask-previews/solana-test-validator-up@1.0.0-preview-6f52159
@metamask-previews/stellar-quickstart-up@0.0.0-preview-6f52159
@metamask-previews/storage-service@1.0.2-preview-6f52159
@metamask-previews/subscription-controller@6.2.1-preview-6f52159
@metamask-previews/transaction-controller@69.0.0-preview-6f52159
@metamask-previews/transaction-pay-controller@25.0.0-preview-6f52159
@metamask-previews/user-operation-controller@41.2.7-preview-6f52159
@metamask-previews/wallet@7.0.1-preview-6f52159
@metamask-previews/wallet-cli@0.0.0-preview-6f52159

@saustrie-consensys

Copy link
Copy Markdown
Contributor Author

@metamaskbot publish-preview

@github-actions

Copy link
Copy Markdown
Contributor

Preview builds have been published. Learn how to use preview builds in other projects.

Expand for full list of packages and versions.
@metamask-previews/account-tree-controller@7.5.5-preview-1ccf11bcb
@metamask-previews/accounts-controller@39.0.5-preview-1ccf11bcb
@metamask-previews/address-book-controller@7.1.2-preview-1ccf11bcb
@metamask-previews/ai-controllers@0.8.0-preview-1ccf11bcb
@metamask-previews/analytics-controller@1.2.1-preview-1ccf11bcb
@metamask-previews/analytics-data-regulation-controller@0.0.0-preview-1ccf11bcb
@metamask-previews/announcement-controller@8.1.0-preview-1ccf11bcb
@metamask-previews/app-metadata-controller@2.0.1-preview-1ccf11bcb
@metamask-previews/approval-controller@9.0.2-preview-1ccf11bcb
@metamask-previews/assets-controller@11.0.0-preview-1ccf11bcb
@metamask-previews/assets-controllers@109.4.1-preview-1ccf11bcb
@metamask-previews/authenticated-user-storage@3.0.1-preview-1ccf11bcb
@metamask-previews/base-controller@9.1.0-preview-1ccf11bcb
@metamask-previews/base-data-service@0.1.3-preview-1ccf11bcb
@metamask-previews/bitcoin-regtest-up@1.0.0-preview-1ccf11bcb
@metamask-previews/bridge-controller@77.5.0-preview-1ccf11bcb
@metamask-previews/bridge-status-controller@74.2.0-preview-1ccf11bcb
@metamask-previews/build-utils@3.0.4-preview-1ccf11bcb
@metamask-previews/chain-agnostic-permission@1.7.0-preview-1ccf11bcb
@metamask-previews/chomp-api-service@3.1.0-preview-1ccf11bcb
@metamask-previews/claims-controller@0.5.3-preview-1ccf11bcb
@metamask-previews/client-controller@1.0.1-preview-1ccf11bcb
@metamask-previews/client-utils@1.1.0-preview-1ccf11bcb
@metamask-previews/compliance-controller@2.1.0-preview-1ccf11bcb
@metamask-previews/composable-controller@12.0.1-preview-1ccf11bcb
@metamask-previews/config-registry-controller@0.4.1-preview-1ccf11bcb
@metamask-previews/connectivity-controller@0.3.0-preview-1ccf11bcb
@metamask-previews/controller-utils@12.3.0-preview-1ccf11bcb
@metamask-previews/core-backend@6.5.0-preview-1ccf11bcb
@metamask-previews/delegation-controller@3.0.2-preview-1ccf11bcb
@metamask-previews/earn-controller@12.2.2-preview-1ccf11bcb
@metamask-previews/eip-5792-middleware@3.0.5-preview-1ccf11bcb
@metamask-previews/eip-7702-internal-rpc-middleware@0.1.1-preview-1ccf11bcb
@metamask-previews/eip1193-permission-middleware@2.0.1-preview-1ccf11bcb
@metamask-previews/ens-controller@19.1.5-preview-1ccf11bcb
@metamask-previews/eth-block-tracker@15.0.1-preview-1ccf11bcb
@metamask-previews/eth-json-rpc-middleware@23.1.3-preview-1ccf11bcb
@metamask-previews/eth-json-rpc-provider@6.0.1-preview-1ccf11bcb
@metamask-previews/foundryup@1.0.1-preview-1ccf11bcb
@metamask-previews/gas-fee-controller@26.2.4-preview-1ccf11bcb
@metamask-previews/gator-permissions-controller@4.2.3-preview-1ccf11bcb
@metamask-previews/geolocation-controller@0.1.3-preview-1ccf11bcb
@metamask-previews/java-tron-up@1.0.0-preview-1ccf11bcb
@metamask-previews/json-rpc-engine@10.5.0-preview-1ccf11bcb
@metamask-previews/json-rpc-middleware-stream@8.0.8-preview-1ccf11bcb
@metamask-previews/keyring-controller@27.1.0-preview-1ccf11bcb
@metamask-previews/local-node-utils@1.0.0-preview-1ccf11bcb
@metamask-previews/logging-controller@8.0.2-preview-1ccf11bcb
@metamask-previews/message-manager@14.1.2-preview-1ccf11bcb
@metamask-previews/messenger@2.0.0-preview-1ccf11bcb
@metamask-previews/messenger-cli@0.2.0-preview-1ccf11bcb
@metamask-previews/money-account-api-data-service@0.1.0-preview-1ccf11bcb
@metamask-previews/money-account-balance-service@2.2.0-preview-1ccf11bcb
@metamask-previews/money-account-controller@0.3.3-preview-1ccf11bcb
@metamask-previews/money-account-upgrade-controller@2.2.1-preview-1ccf11bcb
@metamask-previews/multichain-account-service@13.0.0-preview-1ccf11bcb
@metamask-previews/multichain-api-middleware@4.0.1-preview-1ccf11bcb
@metamask-previews/multichain-network-controller@3.2.1-preview-1ccf11bcb
@metamask-previews/multichain-transactions-controller@7.1.1-preview-1ccf11bcb
@metamask-previews/name-controller@9.1.2-preview-1ccf11bcb
@metamask-previews/network-connection-banner-controller@0.1.0-preview-1ccf11bcb
@metamask-previews/network-controller@34.0.0-preview-1ccf11bcb
@metamask-previews/network-enablement-controller@5.6.0-preview-1ccf11bcb
@metamask-previews/notification-services-controller@25.0.0-preview-1ccf11bcb
@metamask-previews/passkey-controller@2.1.0-preview-1ccf11bcb
@metamask-previews/permission-controller@13.1.1-preview-1ccf11bcb
@metamask-previews/permission-log-controller@5.1.0-preview-1ccf11bcb
@metamask-previews/perps-controller@9.2.1-preview-1ccf11bcb
@metamask-previews/phishing-controller@17.2.1-preview-1ccf11bcb
@metamask-previews/platform-api-docs@0.0.0-preview-1ccf11bcb
@metamask-previews/polling-controller@16.0.8-preview-1ccf11bcb
@metamask-previews/preferences-controller@23.1.0-preview-1ccf11bcb
@metamask-previews/profile-metrics-controller@4.0.2-preview-1ccf11bcb
@metamask-previews/profile-sync-controller@28.3.0-preview-1ccf11bcb
@metamask-previews/ramps-controller@17.0.0-preview-1ccf11bcb
@metamask-previews/rate-limit-controller@7.0.1-preview-1ccf11bcb
@metamask-previews/react-data-query@0.2.1-preview-1ccf11bcb
@metamask-previews/remote-feature-flag-controller@4.2.2-preview-1ccf11bcb
@metamask-previews/sample-controllers@5.0.3-preview-1ccf11bcb
@metamask-previews/seedless-onboarding-controller@10.0.3-preview-1ccf11bcb
@metamask-previews/selected-network-controller@26.1.5-preview-1ccf11bcb
@metamask-previews/sentinel-api-service@0.0.0-preview-1ccf11bcb
@metamask-previews/shield-controller@5.1.3-preview-1ccf11bcb
@metamask-previews/signature-controller@39.2.7-preview-1ccf11bcb
@metamask-previews/smart-transactions-controller@25.0.1-preview-1ccf11bcb
@metamask-previews/snap-account-service@2.0.0-preview-1ccf11bcb
@metamask-previews/social-controllers@2.5.0-preview-1ccf11bcb
@metamask-previews/solana-test-validator-up@1.0.0-preview-1ccf11bcb
@metamask-previews/stellar-quickstart-up@0.0.0-preview-1ccf11bcb
@metamask-previews/storage-service@1.0.2-preview-1ccf11bcb
@metamask-previews/subscription-controller@6.2.1-preview-1ccf11bcb
@metamask-previews/transaction-controller@69.0.0-preview-1ccf11bcb
@metamask-previews/transaction-pay-controller@25.0.0-preview-1ccf11bcb
@metamask-previews/user-operation-controller@41.2.7-preview-1ccf11bcb
@metamask-previews/wallet@7.0.1-preview-1ccf11bcb
@metamask-previews/wallet-cli@0.0.0-preview-1ccf11bcb

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant