feat(rebalancer): mixed-mode movable collateral and inventory rebalancing (#8249)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

Author: Mo-Hussain

.changeset/mixed-rebalancer-mode.md

@@ -0,0 +1,20 @@
+---
+'@hyperlane-xyz/rebalancer': major
+---
+
+Mixed-mode rebalancing was added to enable simultaneous movable collateral (EVM) and inventory (multi-VM) execution within a single rebalancer configuration, enabling cross-protocol rebalancing across EVM and Sealevel chains.
+
+**BREAKING CHANGES:**
+
+- `inventorySigner` config field was replaced with `inventorySigners`, a per-protocol map (`Partial<Record<ProtocolType, { address: string; key?: string } | string>>`). Existing configs using `inventorySigner` must migrate to the new schema.
+- `IExternalBridge.execute()` signature changed from `(quote, privateKey: string)` to `(quote, privateKeys: Partial<Record<ProtocolType, string>>)`. All `IExternalBridge` implementations must update their `execute` method to accept the new multi-protocol key map.
+
+**New features:**
+
+- Per-protocol signer architecture supporting EVM + Sealevel keys simultaneously.
+- `transferRemote` execution refactored to use `WarpCore.getTransferRemoteTxs()` for multi-VM compatibility, with protocol-aware receipt parsing and `SealevelCoreAdapter.parseMessageDispatchLogs` for Sealevel message ID extraction.
+- LiFi bridge extended with Sealevel support via `KeypairWalletAdapter`, Hyperlane domain ID to LiFi chain ID translation, and mutex around configure+execute to prevent race conditions.
+- Startup validation for signer coverage against all inventory route protocols, per-protocol address format validation, and Solana pubkey cross-check.
+- `parseSolanaPrivateKey()` utility with strict 64-byte validation and base58 normalization.
+- Zod schemas hardened for strategy configs, external bridges, and inventory signers with per-protocol address validation.
+- Private key redaction in log statements and EVM-only filtering for Explorer signer addresses.

.changeset/sdk-solana-extra-signers.md

@@ -0,0 +1,5 @@
+---
+'@hyperlane-xyz/sdk': minor
+---
+
+An `extraSigners` field was added to `SolanaWeb3Transaction` and `TransferRemoteParams` to properly thread Sealevel keypairs through the typed transaction pipeline. WarpCore now generates and passes a `Keypair` for SolanaWeb3 transfers, and `SealevelHypTokenAdapter` consumes it instead of generating its own. `KeypairSvmTransactionSigner.signTransaction` was changed to use `partialSign` to preserve extra signer signatures across blockhash resubmits.

pnpm-lock.yaml

@@ -681,7 +681,6 @@ export const rebalancer: CommandModuleWithWriteContext<{
       // Create rebalancer service
       const service = new RebalancerService(
         context.multiProvider,
-        undefined,
         context.multiProtocolProvider,
         context.registry,
         rebalancerConfig,

typescript/cli/src/commands/warp.ts

@@ -1,4 +1,10 @@
 warpRouteId: USDC/eclipsemainnet
+inventorySigners:
+  ethereum: '0x6056e8E8e5Db30ffa9d721e3D73b3D558011FdA9'
+  sealevel: '5seKh2p3B8Kq9nAE7X4svfX9uLt81wWAiDJuLK1XNgXf'
+externalBridges:
+  lifi:
+    integrator: rebalancer
 strategy:
   rebalanceStrategy: weighted
   chains:
@@ -9,6 +15,10 @@ strategy:
       bridgeLockTime: 1800
       bridgeMinAcceptedAmount: 3500
       bridge: '0x8c8D831E1e879604b4B304a2c951B8AEe3aB3a23'
+      override:
+        solanamainnet:
+          executionType: inventory
+          externalBridge: lifi
 
     base:
       weighted:
@@ -17,6 +27,10 @@ strategy:
       bridgeLockTime: 1800
       bridgeMinAcceptedAmount: 3500
       bridge: '0x33e94B6D2ae697c16a750dB7c3d9443622C4405a'
+      override:
+        solanamainnet:
+          executionType: inventory
+          externalBridge: lifi
 
     arbitrum:
       weighted:
@@ -25,6 +39,10 @@ strategy:
       bridgeLockTime: 1800
       bridgeMinAcceptedAmount: 3500
       bridge: '0x4c19c653a8419A475d9B6735511cB81C15b8d9b2'
+      override:
+        solanamainnet:
+          executionType: inventory
+          externalBridge: lifi
 
     optimism:
       weighted:
@@ -33,6 +51,10 @@ strategy:
       bridgeLockTime: 1800
       bridgeMinAcceptedAmount: 3500
       bridge: '0x33e94B6D2ae697c16a750dB7c3d9443622C4405a'
+      override:
+        solanamainnet:
+          executionType: inventory
+          externalBridge: lifi
 
     polygon:
       weighted:
@@ -41,6 +63,10 @@ strategy:
       bridgeLockTime: 1800
       bridgeMinAcceptedAmount: 2500
       bridge: '0x33e94B6D2ae697c16a750dB7c3d9443622C4405a'
+      override:
+        solanamainnet:
+          executionType: inventory
+          externalBridge: lifi
 
     unichain:
       weighted:
@@ -49,6 +75,10 @@ strategy:
       bridgeLockTime: 1800
       bridgeMinAcceptedAmount: 3500
       bridge: '0x33e94B6D2ae697c16a750dB7c3d9443622C4405a'
+      override:
+        solanamainnet:
+          executionType: inventory
+          externalBridge: lifi
 
     ink:
       weighted:
@@ -57,3 +87,14 @@ strategy:
       bridgeLockTime: 1800
       bridgeMinAcceptedAmount: 2500
       bridge: '0x33e94B6D2ae697c16a750dB7c3d9443622C4405a'
+      override:
+        solanamainnet:
+          executionType: inventory
+          externalBridge: lifi
+
+    solanamainnet:
+      weighted:
+        weight: 10
+        tolerance: 5
+      executionType: inventory
+      externalBridge: lifi

typescript/infra/config/environments/mainnet3/rebalancer/USDC/eclipsemainnet-config.yaml

@@ -228,7 +228,6 @@ export class ProductionRebalancerRunner
     // Create service with mock action tracker
     this.service = new RebalancerService(
       multiProvider,
-      undefined,
       multiProtocolProvider,
       registry,
       rebalancerConfig,

typescript/rebalancer-sim/src/runners/ProductionRebalancerRunner.ts

@@ -46,7 +46,9 @@
     "@inquirer/prompts": "catalog:",
     "@inquirer/select": "catalog:",
     "@lifi/sdk": "catalog:",
+    "@solana/web3.js": "catalog:",
     "bignumber.js": "catalog:",
+    "bs58": "catalog:",
     "ethers": "catalog:",
     "express": "^5.1.0",
     "pino": "catalog:",