feat: deploy relay api on testnet (#8685)

Author: troykessler

.changeset/relayer-api-config-schema.md

@@ -0,0 +1,5 @@
+---
+"@hyperlane-xyz/sdk": minor
+---
+
+Relay API configuration fields were added to RelayerAgentConfigSchema (relayApiEnabled, relayApiPort, relayApiRateLimitMaxRequests, relayApiRateLimitWindowSecs, relayApiCorsOrigins). All fields are optional for backward compatibility.

rust/main/agents/relayer/src/settings/mod.rs

@@ -95,7 +95,7 @@ pub struct RelayerSettings {
     pub relay_api_rate_limit_max_requests: Option<usize>,
     /// Relay API rate limit: time window in seconds (default: 60)
     pub relay_api_rate_limit_window_secs: Option<u64>,
-    /// Relay API allowed CORS origins (comma-separated). Defaults to localhost:3000 and nexus.hyperlane.xyz.
+    /// Relay API allowed CORS origins (comma-separated). Defaults to https://nexus.hyperlane.xyz.
     pub relay_api_cors_origins: Vec<String>,
 }
 
@@ -449,12 +449,7 @@ impl FromRawConf<RawRelayerSettings> for RelayerSettings {
                     .filter(|s| !s.is_empty())
                     .collect()
             })
-            .unwrap_or_else(|| {
-                vec![
-                    "https://nexus.hyperlane.xyz".to_string(),
-                    "http://localhost:3000".to_string(),
-                ]
-            });
+            .unwrap_or_else(|| vec!["https://nexus.hyperlane.xyz".to_string()]);
 
         err.into_result(RelayerSettings {
             base,

rust/main/helm/hyperlane-agent/templates/relayer-statefulset.yaml

@@ -122,6 +122,10 @@ spec:
         ports:
         - name: metrics
           containerPort: {{ .Values.hyperlane.metrics.port }}
+        {{- if .Values.hyperlane.relayer.relayApi.enabled }}
+        - name: relay-api
+          containerPort: {{ .Values.hyperlane.relayer.relayApi.port }}
+        {{- end }}
       volumes:
       - name: relayer-configmap
         configMap:

rust/main/helm/hyperlane-agent/values.yaml

@@ -101,6 +101,13 @@ hyperlane:
   relayer:
     enabled: false
     aws: # true | false
+    # relayApi controls only the containerPort declaration so Kubernetes knows
+    # about the port. The actual HYP_RELAYAPIENABLED / HYP_RELAYAPIPORT env vars
+    # flow through envConfig (set by the infra TS helpers). Direct Helm users
+    # must also populate envConfig with relay API fields to enable the feature.
+    relayApi:
+      enabled: false
+      port: 8900
     podAnnotations:
       prometheus.io/port: '9090'
       prometheus.io/scrape: 'true'

typescript/infra/config/docker.ts

@@ -57,9 +57,9 @@ export const mainnetDockerTags: MainnetDockerTags = {
 
 export const testnetDockerTags: BaseDockerTags = {
   // rust agents
-  relayer: '7eb690c-20260406-142107',
-  relayerRC: '7eb690c-20260406-142107',
-  relayerFastPath: '7eb690c-20260406-142107',
+  relayer: 'd851a31-20260429-121400',
+  relayerRC: 'd851a31-20260429-121400',
+  relayerFastPath: 'd851a31-20260429-121400',
   validator: '7eb690c-20260406-142107',
   validatorRC: '7eb690c-20260406-142107',
   scraper: 'caa8162-20260409-132508',

typescript/infra/config/environments/testnet4/agent.ts

@@ -324,6 +324,13 @@ const hyperlane: RootAgentConfig = {
     cache: {
       enabled: true,
     },
+    relayApi: {
+      enabled: true,
+      port: 8900,
+      rateLimitMaxRequests: 100,
+      rateLimitWindowSecs: 60,
+      corsOrigins: 'https://nexus.hyperlane.xyz',
+    },
     resources: relayerResources,
   },
   validators: {

typescript/infra/src/agents/index.ts

@@ -244,6 +244,7 @@ export class RelayerHelmManager extends OmniscientAgentHelmManager {
         this.config.relayerConfig.environmentVariableEndpointEnabled ?? true,
       cacheDefaultExpirationSeconds:
         this.config.relayerConfig.cache?.defaultExpirationSeconds,
+      relayApi: this.config.relayerConfig.relayApi ?? { enabled: false },
     };
 
     const signers = await this.config.signers();

typescript/infra/src/config/agent/relayer.ts

@@ -86,6 +86,15 @@ export interface BaseRelayerConfig {
   txIdIndexingEnabled?: boolean;
   igpIndexingEnabled?: boolean;
   reorgPeriodOverrides?: ChainMap<number>;
+  relayApi?: RelayApiConfig;
+}
+
+export interface RelayApiConfig {
+  enabled: boolean;
+  port?: number;
+  rateLimitMaxRequests?: number;
+  rateLimitWindowSecs?: number;
+  corsOrigins?: string;
 }
 
 // Full relayer-specific agent config for a single chain
@@ -121,6 +130,8 @@ export interface HelmRelayerValues extends HelmStatefulSetValues {
   environmentVariableEndpointEnabled?: boolean;
   // Config for the cache
   cacheDefaultExpirationSeconds?: number;
+  // Config for the relay API
+  relayApi?: RelayApiConfig;
 }
 
 export interface RelayerDbBootstrapConfig {
@@ -185,6 +196,23 @@ export class RelayerConfigHelper extends AgentConfigHelper<RelayerConfig> {
     relayerConfig.allowContractCallCaching = baseConfig.cache?.enabled ?? false;
     relayerConfig.txIdIndexingEnabled = baseConfig.txIdIndexingEnabled ?? true;
     relayerConfig.igpIndexingEnabled = baseConfig.igpIndexingEnabled ?? true;
+    if (baseConfig.relayApi !== undefined) {
+      relayerConfig.relayApiEnabled = baseConfig.relayApi.enabled;
+      if (baseConfig.relayApi.port !== undefined) {
+        relayerConfig.relayApiPort = baseConfig.relayApi.port;
+      }
+      if (baseConfig.relayApi.rateLimitMaxRequests !== undefined) {
+        relayerConfig.relayApiRateLimitMaxRequests =
+          baseConfig.relayApi.rateLimitMaxRequests;
+      }
+      if (baseConfig.relayApi.rateLimitWindowSecs !== undefined) {
+        relayerConfig.relayApiRateLimitWindowSecs =
+          baseConfig.relayApi.rateLimitWindowSecs;
+      }
+      if (baseConfig.relayApi.corsOrigins !== undefined) {
+        relayerConfig.relayApiCorsOrigins = baseConfig.relayApi.corsOrigins;
+      }
+    }
 
     return relayerConfig;
   }

typescript/sdk/src/metadata/agentConfig.ts

@@ -483,6 +483,43 @@ export const RelayerAgentConfigSchema = AgentConfigSchema.extend({
     .boolean()
     .optional()
     .describe('Whether to enable IGP indexing'),
+  relayApiEnabled: z
+    .boolean()
+    .optional()
+    .describe(
+      'Whether to enable the relay API HTTP server. Defaults to false.',
+    ),
+  relayApiPort: z
+    .number()
+    .int()
+    .positive()
+    .lte(65535)
+    .optional()
+    .describe(
+      'Port for the relay API HTTP server. When set, the relay API is served on this dedicated port instead of the shared metrics port.',
+    ),
+  relayApiRateLimitMaxRequests: z
+    .number()
+    .int()
+    .positive()
+    .optional()
+    .describe(
+      'Relay API rate limit: max requests allowed per window. Defaults to 100.',
+    ),
+  relayApiRateLimitWindowSecs: z
+    .number()
+    .int()
+    .positive()
+    .optional()
+    .describe(
+      'Relay API rate limit: window duration in seconds. Defaults to 60.',
+    ),
+  relayApiCorsOrigins: z
+    .string()
+    .optional()
+    .describe(
+      'Relay API allowed CORS origins, comma-separated. Defaults to https://nexus.hyperlane.xyz.',
+    ),
 });
 
 export type RelayerConfig = z.infer<typeof RelayerAgentConfigSchema>;