Merge branch 'main' into pr-branch

Author: openhands-agent

.changeset/config.json

@@ -10,7 +10,6 @@
       "@hyperlane-xyz/cli",
       "@hyperlane-xyz/cosmos-sdk",
       "@hyperlane-xyz/cosmos-types",
-      "@hyperlane-xyz/eslint-config",
       "@hyperlane-xyz/github-proxy",
       "@hyperlane-xyz/helloworld",
       "@hyperlane-xyz/http-registry-server",

.gitattributes

@@ -1,4 +1,5 @@
 typescript/sdk/src/cw-types/*.types.ts linguist-generated=true
+typescript/svm-sdk/src/hyperlane/program-bytes.ts linguist-generated=true binary
 rust/main/chains/hyperlane-ethereum/abis/*.abi.json linguist-generated=true
 solidity/contracts/interfaces/avs/*.sol linguist-vendored=true
 solidity/contracts/avs/ECDSA*.sol linguist-vendored=true

.github/CODEOWNERS

@@ -40,5 +40,5 @@ typescript/rebalancer-sim @Mo-Hussain @nambrot @paulbalaji
 typescript/relayer @Mo-Hussain @yorhodes @paulbalaji
 
 ## Shared Tooling
-typescript/eslint-config @xeno097 @paulbalaji
+oxlint.json @xeno097 @paulbalaji
 typescript/tsconfig @xeno097 @paulbalaji

.github/workflows/claude-code-review.yml

@@ -77,7 +77,7 @@ jobs:
           PR_NUMBER: ${{ github.event.pull_request.number || github.event.issue.number }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          prompt: "Use agent teams to run /claude-review, then use /inline-pr-comments to post findings as a consolidated PR review with inline comments"
+          prompt: 'Use agent teams to run /claude-review, then use /inline-pr-comments to post findings as a consolidated PR review with inline comments'
           track_progress: true
           use_sticky_comment: false
           claude_args: |
@@ -132,7 +132,7 @@ jobs:
           PR_NUMBER: ${{ github.event.issue.number }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          prompt: "Use agent teams to run /claude-security-review, then use /inline-pr-comments to post findings as a consolidated PR review with inline comments"
+          prompt: 'Use agent teams to run /claude-security-review, then use /inline-pr-comments to post findings as a consolidated PR review with inline comments'
           track_progress: true
           use_sticky_comment: false
           claude_args: |
@@ -200,7 +200,7 @@ jobs:
           PR_NUMBER: ${{ github.event.issue.number }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          prompt: "Use agent teams to run /claude-tob-review, then use /inline-pr-comments to post findings as a consolidated PR review with inline comments"
+          prompt: 'Use agent teams to run /claude-tob-review, then use /inline-pr-comments to post findings as a consolidated PR review with inline comments'
           track_progress: true
           use_sticky_comment: false
           claude_args: |
@@ -271,7 +271,7 @@ jobs:
           PR_NUMBER: ${{ github.event.pull_request.number || github.event.issue.number }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          prompt: "When you have specific code feedback on changed lines, use /inline-pr-comments to deliver it as a consolidated GitHub review with inline comments."
+          prompt: 'When you have specific code feedback on changed lines, use /inline-pr-comments to deliver it as a consolidated GitHub review with inline comments.'
           track_progress: true
           use_sticky_comment: false
-          claude_args: "--model ${{ env.CLAUDE_SONNET_MODEL }}"
+          claude_args: '--model ${{ env.CLAUDE_SONNET_MODEL }}'

.github/workflows/ghcr-cleanup.yml

@@ -40,7 +40,7 @@ jobs:
             hyperlane-agent
             hyperlane-monorepo
             hyperlane-node-services
-          image-tags: "pr-*"
+          image-tags: 'pr-*'
           tag-selection: tagged
           cut-off: 1w
           keep-n-most-recent: 5

.github/workflows/node-services-docker.yml

@@ -128,7 +128,7 @@ jobs:
           |-------|-----|
           | hyperlane-node-services | \`${TAG_SHA_DATE}\` |
 
-          **Services included:** rebalancer, warp-monitor, ccip-server, keyfunder, relayer
+          **Services included:** rebalancer, warp-monitor, ccip-server, keyfunder, relayer, fee-quoting
 
           **Full image path:**
           \`\`\`

.github/workflows/release.yml

@@ -10,7 +10,6 @@ on:
       - 'typescript/**'
       - '!typescript/infra/**'
       - '!typescript/ccip-server/**'
-      - '!typescript/eslint-config/**'
       - '!typescript/github-proxy/**'
       - '!typescript/http-registry-server/**'
       - '!typescript/tsconfig/**'
@@ -31,6 +30,11 @@ on:
           - alpha
           - rc
           - preview
+      include_zksync:
+        description: 'Include ZKSync build artifacts (adds ~6min)'
+        required: false
+        default: false
+        type: boolean
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
@@ -255,6 +259,19 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      # Need to install foundry for the build step. `hardhat-foundry` expects foundry to be installed.
+      - name: Setup Foundry
+        uses: ./.github/actions/setup-foundry
+
+      # Build BEFORE snapshot versioning so turbo cache hits are preserved.
+      # Snapshot versioning rewrites every package.json, which invalidates turbo hashes.
+      - name: Build packages
+        run: pnpm run build
+
+      - name: Build ZKSync artifacts
+        if: inputs.include_zksync
+        run: pnpm run build:zk
+
       - name: Create snapshot versions
         run: pnpm exec changeset version --snapshot ${{ inputs.snapshot_tag }}
 
@@ -264,13 +281,6 @@ jobs:
           SNAPSHOT_VERSION=$(node -p "require('./typescript/sdk/package.json').version")
           echo "snapshot=$SNAPSHOT_VERSION" >> $GITHUB_OUTPUT
 
-      # Need to install foundry for the build step. `hardhat-foundry` expects foundry to be installed.
-      - name: Setup Foundry
-        uses: ./.github/actions/setup-foundry
-
-      - name: Build packages
-        run: pnpm run build && pnpm run build:zk
-
       - name: Publish beta packages
         run: pnpm exec changeset publish --tag ${{ inputs.snapshot_tag }} --no-git-tag
         env:
@@ -289,3 +299,31 @@ jobs:
           echo "npm install @hyperlane-xyz/sdk@${{ inputs.snapshot_tag }}" >> $GITHUB_STEP_SUMMARY
           echo "npm install @hyperlane-xyz/cli@${{ inputs.snapshot_tag }}" >> $GITHUB_STEP_SUMMARY
           echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+
+  notify-publish-failure:
+    if: >-
+      always() && (
+        needs.publish-release.result == 'failure' ||
+        needs.check-latest-published.result == 'failure' ||
+        needs.cli-install-cross-platform-release-test.result == 'failure'
+      )
+    needs:
+      [
+        check-latest-published,
+        cli-install-cross-platform-release-test,
+        publish-release,
+      ]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Notify Slack on publish failure
+        uses: slackapi/slack-github-action@v3
+        with:
+          webhook: ${{ secrets.SLACK_INCIDENTS_WEBHOOK }}
+          webhook-type: incoming-webhook
+          payload: |
+            text: ":red-siren: NPM package publish failed — see workflow run for details"
+            blocks:
+              - type: "section"
+                text:
+                  type: "mrkdwn"
+                  text: ":red-siren: *NPM package publish failed*\n<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|View workflow run #${{ github.run_number }}>"

.github/workflows/rust-release.yml

@@ -191,7 +191,7 @@ jobs:
           git config user.name "${{ steps.generate-token.outputs.app-slug }}[bot]"
           git config user.email "${BOT_USER_ID}+${{ steps.generate-token.outputs.app-slug }}[bot]@users.noreply.github.com"
 
-          BRANCH_NAME="release-agents-v${NEW_VERSION}"
+          BRANCH_NAME="release-agents"
 
           # Create branch from current HEAD (which is main)
           git checkout -B "$BRANCH_NAME"

.github/workflows/solidity-fork-tests.yml

@@ -53,7 +53,3 @@ jobs:
       - name: Run Fork Tests
         working-directory: ./solidity
         run: pnpm run test:fork
-
-      - name: Run Multicollateral Fork Tests
-        working-directory: ./solidity/multicollateral
-        run: pnpm run test:fork

.github/workflows/test-cli-e2e.yml

@@ -14,12 +14,16 @@ on:
         type: string
       has_radix:
         type: string
+      has_starknet:
+        type: string
       has_tron:
         type: string
       has_relayer:
         type: string
       has_rebalancer:
         type: string
+      has_svm:
+        type: string
 
 env:
   TURBO_TELEMETRY_DISABLED: 1
@@ -98,6 +102,7 @@ jobs:
           - warp-bridge-2
           - warp-deploy-1
           - warp-deploy-2
+          - warp-deploy-remote-routers
           # check
           - warp-check-1
           - warp-check-2
@@ -259,6 +264,83 @@ jobs:
         env:
           CLI_E2E_TEST: ${{ matrix.test }}
 
+  # ── Starknet ─────────────────────────────────────────
+
+  cli-starknet-e2e-smoke:
+    runs-on: depot-ubuntu-24.04
+    if: (inputs.run_cli_e2e == 'true' || inputs.has_starknet == 'true') && inputs.ci_tier == 'smoke'
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - core-deploy
+          - warp-deploy
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          submodules: recursive
+          persist-credentials: false
+      - name: install-hyperlane-cli
+        uses: ./.github/actions/install-cli
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      - name: Checkout registry
+        uses: ./.github/actions/checkout-registry
+      - name: CLI starknet e2e tests (${{ matrix.test }})
+        run: pnpm -C typescript/cli test:starknet:e2e
+        env:
+          CLI_E2E_TEST: ${{ matrix.test }}
+          CLI_E2E_TIER: ${{ inputs.ci_tier }}
+
+  cli-starknet-e2e-matrix:
+    runs-on: depot-ubuntu-24.04
+    if: (inputs.run_cli_e2e == 'true' || inputs.has_starknet == 'true') && inputs.ci_tier == 'full'
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - core-apply-mailbox-owner
+          - core-apply-default-hook-protocol-fee
+          - core-apply-default-ism-redeploy
+          - core-apply-routing-ism-owner
+          - core-deploy
+          - core-read
+          - ism
+          - warp-apply-hook-add-merkle
+          - warp-apply-hook-replace-with-protocol-fee
+          - warp-apply-hook-update-protocol-fee-config
+          - warp-apply-hook-same-config
+          - warp-apply-ism-add-test-ism
+          - warp-apply-ism-replace-with-message-id-multisig
+          - warp-apply-ism-same-config
+          - warp-apply-ownership-preserve
+          - warp-apply-ownership-starknet1
+          - warp-apply-ownership-starknet2
+          - warp-apply-ownership-all
+          - warp-apply-route-extension
+          - warp-deploy
+          - warp-read
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          submodules: recursive
+          persist-credentials: false
+      - name: install-hyperlane-cli
+        uses: ./.github/actions/install-cli
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      - name: Checkout registry
+        uses: ./.github/actions/checkout-registry
+      - name: CLI starknet e2e tests (${{ matrix.test }})
+        run: pnpm -C typescript/cli test:starknet:e2e
+        env:
+          CLI_E2E_TEST: ${{ matrix.test }}
+          CLI_E2E_TIER: ${{ inputs.ci_tier }}
+
   # ── Tron (small — always full) ──────────────────────
 
   cli-tron-e2e-matrix:
@@ -289,7 +371,7 @@ jobs:
         env:
           CLI_E2E_TEST: ${{ matrix.test }}
 
-  # ── Cross-chain (small — always full) ───────────────
+  # ── Cross-chain ─────────────────────────────────────
 
   cli-cross-chain-e2e-matrix:
     runs-on: depot-ubuntu-24.04
@@ -319,6 +401,33 @@ jobs:
         env:
           CLI_E2E_TEST: ${{ matrix.test }}
 
+  cli-cross-chain-starknet-e2e-matrix:
+    runs-on: depot-ubuntu-24.04
+    if: inputs.run_cli_e2e == 'true' || inputs.has_starknet == 'true'
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - warp-apply-starknet
+          - warp-deploy-starknet
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          submodules: recursive
+          persist-credentials: false
+      - name: install-hyperlane-cli
+        uses: ./.github/actions/install-cli
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      - name: Checkout registry
+        uses: ./.github/actions/checkout-registry
+      - name: CLI cross chain e2e tests (${{ matrix.test }})
+        run: pnpm -C typescript/cli test:cross-chain:e2e
+        env:
+          CLI_E2E_TEST: ${{ matrix.test }}
+
   # ── Aleo ─────────────────────────────────────────────
 
   cli-aleo-e2e-smoke:
@@ -389,6 +498,61 @@ jobs:
         env:
           CLI_E2E_TEST: ${{ matrix.test }}
 
+  # ── SVM (Sealevel) ──────────────────────────────────
+
+  cli-svm-e2e-smoke:
+    runs-on: depot-ubuntu-24.04
+    if: (inputs.run_cli_e2e == 'true' || inputs.has_svm == 'true') && inputs.ci_tier == 'smoke'
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - core-deploy
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          submodules: recursive
+          persist-credentials: false
+      - name: install-hyperlane-cli
+        uses: ./.github/actions/install-cli
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      - name: Checkout registry
+        uses: ./.github/actions/checkout-registry
+      - name: CLI sealevel e2e tests (${{ matrix.test }})
+        run: pnpm -C typescript/cli test:sealevel:e2e
+        env:
+          CLI_E2E_TEST: ${{ matrix.test }}
+
+  cli-svm-e2e-matrix:
+    runs-on: depot-ubuntu-24.04
+    if: (inputs.run_cli_e2e == 'true' || inputs.has_svm == 'true') && inputs.ci_tier == 'full'
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - core-deploy
+          - core-apply
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          submodules: recursive
+          persist-credentials: false
+      - name: install-hyperlane-cli
+        uses: ./.github/actions/install-cli
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      - name: Checkout registry
+        uses: ./.github/actions/checkout-registry
+      - name: CLI sealevel e2e tests (${{ matrix.test }})
+        run: pnpm -C typescript/cli test:sealevel:e2e
+        env:
+          CLI_E2E_TEST: ${{ matrix.test }}
+
   # ── Package-specific targeted tests ─────────────────
   # Run only when peripheral packages change, testing just the
   # specific CLI commands that use them. Full coverage in merge queue.