Prover/dist prover hiercong

.gitattributes

@@ -23,6 +23,7 @@ prover/symbolic/testdata/**/*.cbor binary
 prover/prover-assets/**/**/**/*.bin binary
 prover/prover-assets/**/**/**/**/*.bin binary
 prover/prover-assets/kzgsrs/* binary
+prover/zkevm/arithmetization/*.bin binary
 
 *.woff2 binary
 

.github/actions/setup-nodejs/action.yml

@@ -9,7 +9,7 @@ inputs:
   pnpm-version:
     description: 'The version of pnpm to use'
     required: true
-    default: '9.14.4'
+    default: '10.18.3'
   pnpm-install-options:
     description: 'The options to pass to pnpm install'
     required: true

.github/workflows/bridge-ui-e2e-tests.yml

@@ -1,4 +1,4 @@
-name: Run Bridge UI E2E Tests
+name: Bridge UI E2E Tests
 
 permissions:
   contents: read
@@ -23,7 +23,7 @@ on:
 jobs:
   run-e2e-tests:
     if: github.event.pull_request.head.repo.fork == false
-    runs-on: gha-runner-scale-set-ubuntu-22.04-amd64-large
+    runs-on: gha-runner-scale-set-ubuntu-22.04-amd64-xl
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -62,41 +62,44 @@ jobs:
         env:
           NEXT_PUBLIC_WALLET_CONNECT_ID: ${{ secrets.PUBLIC_WALLET_CONNECT_ID }}
           NEXT_PUBLIC_INFURA_ID: ${{ secrets.PUBLIC_BRIDGE_UI_INFURA_ID }}
+          NEXT_PUBLIC_ALCHEMY_API_KEY: ${{ secrets.NEXT_PUBLIC_ALCHEMY_API_KEY }}
           NEXT_PUBLIC_QUICKNODE_ID: ${{ secrets.PUBLIC_BRIDGE_UI_QUICKNODE_ID }}
-          NEXT_PUBLIC_DYNAMIC_ENVIRONMENT_ID: ${{ secrets.PUBLIC_DYNAMIC_SANDBOX_ENVIRONMENT_ID }}
+          NEXT_PUBLIC_WEB3_AUTH_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_WEB3_AUTH_TESTNET_CLIENT_ID }}
           NEXT_PUBLIC_LIFI_API_KEY: ${{ secrets.PUBLIC_LIFI_API_KEY }}
           NEXT_PUBLIC_LIFI_INTEGRATOR_NAME: ${{ secrets.PUBLIC_LIFI_INTEGRATOR_NAME }}
           NEXT_PUBLIC_ONRAMPER_API_KEY: ${{ secrets.PUBLIC_ONRAMPER_API_KEY }}
           NEXT_PUBLIC_LAYERSWAP_API_KEY: ${{ secrets.PUBLIC_LAYERSWAP_API_KEY }}
           NEXT_PUBLIC_ENVIRONMENT: local
           REVALIDATE_SECRET: ${{ secrets.BRIDGE_UI_REVALIDATE_SECRET }}
+          CONTENTFUL_SPACE_ID: ${{ secrets.CONTENTFUL_SPACE_ID }}
           NEXT_PUBLIC_E2E_TEST_MODE: true
           NEXT_PUBLIC_IS_CCTP_ENABLED: false
 
       - name: Install linux dependencies
         run: |
           sudo apt-get install --no-install-recommends -y xvfb
-      
+
       - name: Run unit tests
         run: pnpm run -F bridge-ui test:unit
         env:
           # Can run unit tests in parallel
           CI: "false"
           DOTENV_CONFIG_PATH: ".env.production"
           NEXT_PUBLIC_INFURA_ID: ${{ secrets.PUBLIC_BRIDGE_UI_INFURA_ID }}
+          NEXT_PUBLIC_ALCHEMY_API_KEY: ${{ secrets.NEXT_PUBLIC_ALCHEMY_API_KEY }}
           NEXT_PUBLIC_LIFI_API_KEY: "placeholder"
           NEXT_PUBLIC_LIFI_INTEGRATOR_NAME: "placeholder"
           NEXT_PUBLIC_WALLET_CONNECT_ID: "placeholder"
-          NEXT_PUBLIC_DYNAMIC_ENVIRONMENT_ID: "placeholder"
+          NEXT_PUBLIC_WEB3_AUTH_CLIENT_ID: "placeholder"
           NEXT_PUBLIC_QUICKNODE_ID: "placeholder"
           NEXT_PUBLIC_E2E_TEST_MODE: false
-      
+
       - name: Login to Docker Hub
         uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 #v3.4.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      
+
       - name: Pull all images with retry
         uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 #v3.0.2
         with:
@@ -129,21 +132,21 @@ jobs:
         run: |
           docker ps -la && docker images
           docker container ls -a
-      
+
       - name: Initialize Metamask testing fixture
-        run: xvfb-run pnpm run -F bridge-ui build:cache
+        run: xvfb-run -a pnpm run -F bridge-ui build:cache
         env:
           E2E_TEST_SEED_PHRASE: "test test test test test test test test test test test junk"
           E2E_TEST_WALLET_PASSWORD: "TestPassword!"
 
       # Prerequisite - Testing wallet must have >0 ETH and USDC on Sepolia
       - name: Run E2E tests
-        run: xvfb-run pnpm run -F bridge-ui test:e2e:headful
+        run: xvfb-run -a pnpm run -F bridge-ui test:e2e:headful
         env:
           # Do not run E2E tests in parallel. Especially blockchain tx where nonces can collide.
           CI: "true"
           DOTENV_CONFIG_PATH: ".env.test"
-          NEXT_PUBLIC_DYNAMIC_ENVIRONMENT_ID: ${{ secrets.PUBLIC_DYNAMIC_SANDBOX_ENVIRONMENT_ID }}
+          NEXT_PUBLIC_WEB3_AUTH_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_WEB3_AUTH_TESTNET_CLIENT_ID }}
 
       - name: Archive Playwright report
         uses: actions/upload-artifact@v4

.github/workflows/bridge-ui-publish.yml

@@ -51,7 +51,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 #v3.11.1
 
@@ -69,8 +69,9 @@ jobs:
             NEXT_PUBLIC_ENVIRONMENT=${{ env.NEXT_PUBLIC_ENVIRONMENT }}
             NEXT_PUBLIC_WALLET_CONNECT_ID=${{ env.NEXT_PUBLIC_WALLET_CONNECT_ID }}
             NEXT_PUBLIC_INFURA_ID=${{ env.NEXT_PUBLIC_INFURA_ID }}
+            NEXT_PUBLIC_ALCHEMY_API_KEY=${{ env.NEXT_PUBLIC_ALCHEMY_API_KEY }}
             NEXT_PUBLIC_QUICKNODE_ID=${{ env.NEXT_PUBLIC_QUICKNODE_ID }}
-            NEXT_PUBLIC_DYNAMIC_ENVIRONMENT_ID=${{ env.NEXT_PUBLIC_DYNAMIC_ENVIRONMENT_ID }}
+            NEXT_PUBLIC_WEB3_AUTH_CLIENT_ID=${{ env.NEXT_PUBLIC_WEB3_AUTH_CLIENT_ID }}
             NEXT_PUBLIC_LIFI_API_KEY=${{ env.NEXT_PUBLIC_LIFI_API_KEY }}
             NEXT_PUBLIC_LIFI_INTEGRATOR_NAME=${{ env.NEXT_PUBLIC_LIFI_INTEGRATOR_NAME }}
             NEXT_PUBLIC_ONRAMPER_API_KEY=${{ env.NEXT_PUBLIC_ONRAMPER_API_KEY }}
@@ -79,17 +80,20 @@ jobs:
           cache-to: type=registry,ref=consensys/linea-bridge-ui:buildcache,mode=max
           secrets: |
             "revalidate_secret=${{ env.REVALIDATE_SECRET }}"
+            "contentful_space_id=${{ secrets.CONTENTFUL_SPACE_ID }}"
         env:
           NEXT_PUBLIC_WALLET_CONNECT_ID: ${{ secrets.PUBLIC_WALLET_CONNECT_ID }}
           NEXT_PUBLIC_INFURA_ID: ${{ secrets.PUBLIC_BRIDGE_UI_INFURA_ID }}
+          NEXT_PUBLIC_ALCHEMY_API_KEY: ${{ secrets.NEXT_PUBLIC_ALCHEMY_API_KEY }}
           NEXT_PUBLIC_QUICKNODE_ID: ${{ secrets.PUBLIC_BRIDGE_UI_QUICKNODE_ID }}
-          NEXT_PUBLIC_DYNAMIC_ENVIRONMENT_ID: ${{ matrix.environment == 'production' && secrets.PUBLIC_DYNAMIC_ENVIRONMENT_ID || secrets.PUBLIC_DYNAMIC_SANDBOX_ENVIRONMENT_ID }}
+          NEXT_PUBLIC_WEB3_AUTH_CLIENT_ID: ${{ matrix.environment == 'production' && secrets.NEXT_PUBLIC_WEB3_AUTH_CLIENT_ID || secrets.NEXT_PUBLIC_WEB3_AUTH_TESTNET_CLIENT_ID }}
           NEXT_PUBLIC_LIFI_API_KEY: ${{ secrets.PUBLIC_LIFI_API_KEY }}
           NEXT_PUBLIC_LIFI_INTEGRATOR_NAME: ${{ secrets.PUBLIC_LIFI_INTEGRATOR_NAME }}
           NEXT_PUBLIC_ONRAMPER_API_KEY: ${{ secrets.PUBLIC_ONRAMPER_API_KEY }}
           NEXT_PUBLIC_LAYERSWAP_API_KEY: ${{ secrets.PUBLIC_LAYERSWAP_API_KEY }}
           NEXT_PUBLIC_ENVIRONMENT: ${{ matrix.environment }}
           REVALIDATE_SECRET: ${{ secrets.BRIDGE_UI_REVALIDATE_SECRET }}
+          CONTENTFUL_SPACE_ID: ${{ secrets.CONTENTFUL_SPACE_ID }}
 
   test-build:
     if: github.event.pull_request.head.repo.fork == true

.github/workflows/build-and-publish.yml

@@ -30,6 +30,9 @@ on:
       transaction_exclusion_api_changed:
         required: true
         type: string
+      build_linea_besu_package:
+        required: true
+        type: string
       coordinator_image_tagged:
         required: true
         type: string
@@ -42,6 +45,11 @@ on:
       transaction_exclusion_api_image_tagged:
         required: true
         type: string
+    outputs:
+      linea_besu_package_tag:
+        value: ${{ jobs.linea_besu_package.outputs.linea_besu_package_tag }}
+      expected_traces_api_version:
+        value: ${{ jobs.linea_besu_package.outputs.expected_traces_api_version }}
     secrets:
       DOCKERHUB_USERNAME:
         required: false
@@ -88,3 +96,11 @@ jobs:
       image_name: consensys/linea-transaction-exclusion-api
       push_image: ${{ inputs.push_image }}
     secrets: inherit
+
+  linea_besu_package:
+    uses: ./.github/workflows/linea-besu-package-build-and-upload.yml
+    if: ${{ always() && (inputs.build_linea_besu_package == 'true') }}
+    with:
+      release_tag_prefix: ''
+      with_besu_fleet_plugin: false
+    secrets: inherit

.github/workflows/codeql.yml

@@ -4,9 +4,76 @@ on:
   workflow_call:
 
 jobs:
+  changes:
+    name: Detect Changes
+    runs-on: gha-runner-scale-set-ubuntu-22.04-amd64-small
+    outputs:
+      languages: ${{ steps.set-matrix.outputs.languages }}
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 #v3.0.2
+        id: changes
+        with:
+          filters: |
+            go:
+              - '**/*.go'
+              - '**/go.mod'
+              - '**/go.sum'
+            java-kotlin:
+              - '**/*.java'
+              - '**/*.kt'
+              - '**/*.gradle'
+              - '**/*.gradle.kts'
+              - '**/pom.xml'
+              - '**/build.gradle'
+              - '**/gradle.properties'
+              - '**/settings.gradle'
+              - 'build.gradle'
+              - 'gradle.properties'
+              - 'settings.gradle'
+            javascript-typescript:
+              - '**/*.js'
+              - '**/*.ts'
+              - '**/*.tsx'
+              - '**/*.jsx'
+              - '**/*.json'
+              - '**/package.json'
+              - '**/tsconfig.json'
+              - '**/pnpm-lock.yaml'
+              - '**/yarn.lock'
+              - '**/package-lock.json'
+            actions:
+              - '.github/workflows/**'
+              - '.github/actions/**'
+            python:
+              - '**/*.py'
+              - '**/requirements.txt'
+              - '**/pyproject.toml'
+              - '**/setup.py'
+              - '**/Pipfile'
+      - name: Build matrix
+        id: set-matrix
+        run: |
+          languages=()
+          if [ "${{ steps.changes.outputs.go }}" == "true" ]; then languages+=("\"go\""); fi
+          if [ "${{ steps.changes.outputs.java-kotlin }}" == "true" ]; then languages+=("\"java-kotlin\""); fi
+          if [ "${{ steps.changes.outputs.javascript-typescript }}" == "true" ]; then languages+=("\"javascript-typescript\""); fi
+          if [ "${{ steps.changes.outputs.actions }}" == "true" ]; then languages+=("\"actions\""); fi
+          if [ "${{ steps.changes.outputs.python }}" == "true" ]; then languages+=("\"python\""); fi
+
+          echo "languages=[$(IFS=,; echo "${languages[*]}")]" >> $GITHUB_OUTPUT
+
   analyze:
     name: Analyze
     runs-on: gha-runner-scale-set-ubuntu-22.04-amd64-med
+    needs: changes
+    if: ${{ needs.changes.outputs.languages != '[]' }}
     permissions:
       actions: read
       contents: read
@@ -15,7 +82,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'go', 'java-kotlin', 'javascript-typescript', 'actions', 'python' ]
+        language: ${{ fromJson(needs.changes.outputs.languages) }}
 
     steps:
       - name: Checkout repository
@@ -35,7 +102,7 @@ jobs:
           java-version: 21
 
       - name: Autobuild
-        if: matrix.language != 'github-actions'
+        if: matrix.language != 'actions'
         uses: github/codeql-action/autobuild@v3
         env:
           GITHUB_TOKEN: ${{ secrets._GITHUB_TOKEN_RELEASE_ACCESS }}

.github/workflows/linea-besu-package-build-and-upload.yml

@@ -0,0 +1,90 @@
+name: Reusable linea-besu-package build and upload
+
+permissions:
+  contents: read
+  actions: read
+  packages: read
+
+on:
+  workflow_call:
+    inputs:
+      release_tag_prefix:
+        required: true
+        type: string
+      with_besu_fleet_plugin:
+        required: true
+        type: boolean
+    outputs:
+      linea_besu_package_tag:
+        value: ${{ jobs.build-and-upload-artifact.outputs.linea_besu_package_tag }}
+      expected_traces_api_version:
+        value: ${{ jobs.build-and-upload-artifact.outputs.expected_traces_api_version }}
+      dockerimage:
+        value: ${{ jobs.build-and-upload-artifact.outputs.dockerimage }}
+    secrets:
+      DOCKERHUB_USERNAME:
+        required: false
+      DOCKERHUB_TOKEN:
+        required: false
+      FLEET_GITHUB_APP_ID:
+        required: false
+      FLEET_GITHUB_APP_PRIVATE_KEY:
+        required: false
+
+jobs:
+  build-and-upload-artifact:
+    runs-on: gha-runner-scale-set-ubuntu-22.04-amd64-med
+    outputs:
+      linea_besu_package_tag: ${{ steps.assemble.outputs.dockertag }}
+      expected_traces_api_version: ${{ steps.assemble.outputs.tracer_plugin_version }}
+      dockerimage: ${{ steps.assemble.outputs.dockerimage }}
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+
+      - name: build the linea artifacts
+        id: assemble
+        uses: ./.github/actions/linea-besu-package/assemble
+        with:
+          release_tag_prefix: ${{ inputs.release_tag_prefix }}
+          fetch_besu_fleet_plugin: ${{ inputs.with_besu_fleet_plugin }}
+          fleet_github_app_id: ${{ secrets.FLEET_GITHUB_APP_ID }}
+          fleet_github_app_private_key: ${{ secrets.FLEET_GITHUB_APP_PRIVATE_KEY }}
+
+      - name: set up docker buildx
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 #v3.11.1
+
+      - name: set docker build args
+        run: |
+          echo "Building docker tag: ${{ steps.assemble.outputs.dockertag }}"
+          echo "Building docker image: ${{ steps.assemble.outputs.dockerimage }}"
+
+      - name: build the combined manifest
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 #v6.18.0
+        env:
+          DOCKER_BUILD_SUMMARY: false
+        with:
+          context: linea-besu-package/linea-besu/.
+          platforms: linux/amd64
+          provenance: false
+          build-args: |
+            VERSION=${{ steps.assemble.outputs.dockertag }}
+            VCS_REF=${{ github.sha }}
+            BUILD_DATE=${{ steps.assemble.outputs.build_date }}
+          load: true
+          push: false
+          tags: |
+            consensys/linea-besu-package:${{ steps.assemble.outputs.dockertag }}
+
+      - name: Save Docker image as artifact
+        run: |
+          docker images
+          docker save consensys/linea-besu-package:${{ steps.assemble.outputs.dockertag }} | gzip > linea-besu-package-image.tar.gz
+        shell: bash
+
+      - name: Upload Docker image artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: linea-besu-package
+          path: linea-besu-package-image.tar.gz
+          retention-days: 1