Fixes #1930

Before: 5m 47s (billed time 7m 1s)
Shard: 2m 53s (billed time 17m 53s)
Build once + container: 2m 54s (billed time 11m 36s)

.

https://wallet.dev.oasis.io/account/oasis1qppz78n4lpnw9knz7d7jz7vvjrt7qd2c6ypsa7me

Before	After

Intermediate step until we fix hardcoded setFeeAmount(oasis.quantity.fromBigInt(0n))

Related to #2081

• cropped image not used anywhere
• not touching other brand icons. One is needed in repo for extension action icons. In addition, they look a bit differently.

This test usually passes after two automatic retries. And very rarely it fails all three repeats

Tried to reproduce here:
https://github.com/oasisprotocol/wallet/actions/runs/14473819140/job/40594465703 0/3 failed
https://github.com/oasisprotocol/wallet/actions/runs/14473819140/job/40597292495 7/9 failed

After
https://github.com/oasisprotocol/wallet/actions/runs/14473822355/job/40594471812 0/3 failed
https://github.com/oasisprotocol/wallet/actions/runs/14473822355/job/40597299796 0/3 failed
https://github.com/oasisprotocol/wallet/actions/runs/14473822355/job/40598095792 0/3 failed

This PR renames:

1. oasis rofl machine terminate -> oasis rofl machine stop
2. oasis rofl machine cancel -> oasis rofl machine remove

It keeps old "terminate" and "cancel" subcommands as aliases.

Rationale

1. The "terminate" term may also associate with "terminate your subscription", which is not the case. The "stop" term is also more consistent with Docker's "start/stop/restart" terminology and also with oasis rofl machine restart.
2. The "cancel" term may be a bit too soft since it cancels your subscription and destroys the machine. I'd prefer to call this "remove" for consistency with other "add/remove" subcommands.

Fixes #951

Analogous to #967 but for runtime transactions.

Followup to #969 and #967

• Don't allow queries with known inefficient filter combinations (e.g. rel + timestamp, rel + sender)

• Also remove support for multiple method filters, because it is unfesable to support it with good performance without number of indexes exploding (oasisprotocol/explorer#1717 (comment))

The CI tests started failing with

batch response: This repository exceeded its LFS budget. The account responsible for the budget should increase it to restore access.

After increasing the budget, the usage was >$2 per day, so let's try migrating away from git LFS since we don't really need it. We can store test artifacts on S3.

• stop tracking rofl.Register transactions as ROFL update transactions (these are already tracked in rofl_instance_transactions transactions)

• fix possible duplicates in rofl_instance_transactions

Fixes: #963

Also do not override the success field for failed transactions.

TODO:

• check if there's a somewhat straightforward DB migration we can do to fix it for already processed txs.
• in some rare cases, some other methods also have a missing status, look into it

Fixes #966

Split Transactions query based on the presence of related address filter.

Fixes #968

This endpoint was missed in the initial rofl API implementation.

Fixes: #962 and #940

Fixes #950

• Common pool, Fee Accumulator and Burn address were missing from static lists due to this list being generated from genesis, but these addresses were not explicitly listed in genesis
• Also fixes ConsensusAccountsFirstActivityRecompute to also look at events. Before, when computing first-activity after fast-sync we only looked at transactions

Ubuntu 20-04 images are getting deprecated: actions/runner-images#11101

For evm events, we try decoding the potential address field in an event so that we can match the potential token contract to which the event belongs. However, the query shouldn't assume that the address field contents are base64 encoded, since in theory this could contain anything. Additionally, ensure this lookup is done only for evm.log events.

For example, the query currently fails when encountering a roflmarket.provider_created event, which contains an oasis1 address in the body of the event:

 {"address": "oasis1qrfeadn03ljm0kfx8wx0d5zf6kj79pxqvv0dukdm"}

Couple of minor followups to #959

This still causes confusion. Thoughts on this wording?

Extracted from #1777

Details card extracted from #1777

For now 1k limit in API call is fine. In the near future we will have dedicated endpoint to get instance details.

Extracted from #1777

Based on new designs current tx list is moved to "Updates" tab. In transactions tab we gonna show instance transactions list.

Extracted from #1777

Two cards needed to build ROFL app details page. Both, metadta and policy are are defined as { [key: string]: any }. Created issue to update method filter across app #1839

PR contains minor fixes needed for a release.

Most commits were extracted to:

• status badge #1819
• New ROFL instance events #1820
• ROFL link component #1827
• Tweak TableHeaderAge component #1829
• ROFL apps list page #1834
• ROFL app instances card #1837
• ROFL app metadata and policy cards #1840
• ROFL app details card #1841
• Provide missing data to ROFL apps list #1842
• Enable ROFL app details page #1848
• Setup ROFL app transactions card #1851
• Add ROFL to home page graph #1853
• Include ROFL apps in search results #1859
• ROFL apps minor UI tweaks #1861
• ROFL app instance transactions tab #1863

Extracted from #1777

Closes #1866

Extracted from #1777

Closes #1875

We moved to MaybeWithTooltip component for controlling tooltips. Seems like an old component for handling links with tooltips is obsolete.

Sample (details section and tx list)
https://explorer.dev.oasis.io/mainnet/consensus/block/24050809?page=3
https://pr-1887.oasis-explorer.pages.dev/mainnet/consensus/block/24050809?page=3

Regression test - hash column (after component removal)
https://explorer.dev.oasis.io/mainnet/emerald/block
https://pr-1887.oasis-explorer.pages.dev/mainnet/emerald/block

Part of #1769
Metadata added in oasisprotocol/nexus#985
Icons added in oasisprotocol/assets#7

Someone else should fill out metadata+icons for more tokens

Related to oasisprotocol/wallet#2156

Random UI tweaks:

• use new optional admin_eth prop
• label updates
• trim admin account on mobile
• mobile last activity row fix
• add missing data to vertical list
• fix vertical list background color in testnet
• mobile metadata and policy cards fix

Fixes #1843

https://explorer.dev.oasis.io/testnet/sapphire/tx/0x69ba2b1c23a5e76043d43c192985db4d9829f4894be7d26765e90214d4dc910e
https://explorer.dev.oasis.io/mainnet/sapphire/tx/0x061ce16ad3433f7b23d4cc03f46e231176fd6d62986d4ec0be8f24faebd447f4
https://explorer.dev.oasis.io/mainnet/sapphire/tx/0xadfb838be0d4c4261193e88051156af6488e89960a872da9c040a99f184b08a1
https://explorer.dev.oasis.io/testnet/sapphire/tx/0xd69958564337597153d7a6f08f5d158bc95fe37ce8adefaaaa35e86488ee4403
https://explorer.dev.oasis.io/testnet/sapphire/tx/0xc6a0b7f768153623819582a51ab629e97a1c2ff66a35e573fb4e708ff8293b5a

Before	After

Need to bump ROFL apps in prod

Fixes #882

Closes #1883

https://pr-1894.oasis-explorer.pages.dev/testnet/sapphire

Closes #1865 (events are part of another PR)

Implement partially verified tag for contracts and differentiate tags visually. Fixes: #1880

Before:

After:

Extracted from #1777
Add ROFL bubble. Can be merge when MVP is accepted.

cc @matevz

Related #1843

https://explorer.dev.oasis.io/mainnet/sapphire/tx/0x97b1dadd5e467779d45c263026bf51a79a4cb0a0f29f6ae3e3d6e3eb232e8e84
Before | After

https://explorer.dev.oasis.io/mainnet/sapphire/tx/0xcfc97351d9e4c0bc27fad1eff78d512b42fcc5194c46e9f941d3e0df699bfaff
low values like "203" stay as they are

Fixes #1877 (comment)

• Unifies how we get account metadata for other layers
• Fixes recognizing unused named accounts opened by oasis1 address

These are the same account:
https://explorer.dev.oasis.io/testnet/pontusxtest/address/0x628677D9A9d93a913182fa04893Da0ce4E6570Ee
https://explorer.dev.oasis.io/testnet/pontusxtest/address/oasis1qz5ejnpmy46zt6f8tvfqmcspawg26mphfujj3gjk
but only hex one was recognized as "deltaDAO AG"

related to #1685
and #1398 (comment)

Related to #1843

https://explorer.dev.oasis.io/mainnet/sapphire/tx/0x3d3b494646d001a92c5b5a899d1b796f7efee56e909f0a898a707f407c1d5f10

https://explorer.dev.oasis.io/mainnet/sapphire/tx/0x02c54b39b286d39bb7e78bb5d777a5e9596376deb8a1d0010a5659280d0bafee

Before | After

Show undelegated shares on Sapphire instead of Amount field value.

Fixes: #1599

https://explorer.dev.oasis.io/testnet/sapphire/tx/6f1b5e74c32422f3295a54b0a56812d49aefe9901db9a75c19c039228164170d
https://explorer.dev.oasis.io/testnet/sapphire/block/8594080

Before:

After:

Extracted from #1777. Last missing piece for apps list was added to Nexus lately.

Closes #1867

master (related to the latest trimming/highlighting changes?)
https://explorer.dev.oasis.io/mainnet/sapphire/token/0x5f88516FB09575F961f81f2b8BCE38ff5e790750/inventory#inventory

https://pr-1869.oasis-explorer.pages.dev/mainnet/sapphire/token/0x5f88516FB09575F961f81f2b8BCE38ff5e790750/inventory#inventory

random Slack request

PRs covering other apps than Explorer:

• ROSE App oasisprotocol/rose-app#236
• Faucet oasisprotocol/testnet-faucet#30
• Playground oasisprotocol/playground#112
• Wallet oasisprotocol/wallet#2167
• Starter oasisprotocol/demo-starter#31
• Votee oasisprotocol/dapp-votee#89
• Blockvote oasisprotocol/dapp-blockvote#132
• Abi Playground oasisprotocol/abi-playground#8

Fallback to error raw message. Closes #1847

http://localhost:1234/mainnet/sapphire/token/oasis1qpr5m6tprr0xv0vg82svda3t00wvcs6equ4zqal0/instance/2

https://explorer.dev.oasis.io/mainnet/sapphire/search?q=ose
Before, After

https://explorer.dev.oasis.io/mainnet/sapphire/token/0x2D69C85166B8B84916EF49FF20f287f9Eb6381fe/instance/2

Before	After

Alternative to #1899 (should be easier to maintain)
Fixes: #1874

After:

Dependency update broke orval CLI in #1465, reverting for now.

It generated 1869f73 that needs multiple changes in app

Tweak "From" table cell alignment (short labels and arrow icon)

prod
https://explorer.oasis.io/testnet/consensus/address/oasis1qr629x0tg9gm5fyhedgs9lw5eh3d8ycdnsxf0run

vs
https://pr-1860.oasis-explorer.pages.dev/testnet/consensus/address/oasis1qr629x0tg9gm5fyhedgs9lw5eh3d8ycdnsxf0run

https://explorer.dev.oasis.io/testnet/sapphire/token
Before | After

Multiple fixes and improvements discovered during the ROFL scheduler development.

This PR:

• adds docs/rofl/quickstart
• migrates ROFL's readme.mdx from the docs repo to this repo under docs/rofl
• moves ROFL-related images to rofl/images folder
• removes --update-manifest from oasis rofl build cmd in docs/rofl/app.mdx
• adds tab widget for Native Linux or Docker-executed oasis rofl build command
• mentions persistent local volumes in docs/rofl/README.mdx
• mentions c10l Sapphire smart contracts in docs/rofl/app.mdx

COMPLETE PREVIEW

Closes #2165.

Update prerequisites.md

This PR updates web3.py version in sapphirepy from 6.x to 7.x.
Changes:

• sapphire.py Now uses 7.x class based middleware with changes to block_hash parsing (new hexbytes version).
• test_e2e.py updated

TODO:

• Add AsyncWeb3 middleware

In addition, this PR also updates the publish.yaml workflow with PyPI tag release.

Closes #499

This pull request streamlines the GitHub Actions workflows, updates dependencies, and introduces a new package.json file for the project. The most notable changes include simplifying the setup of pnpm and caching, updating the viem dependency to a more flexible version range, and adding a package.json file with project metadata and configuration.

Reproducible Builds:

• all workflows use now pnpm install --frozen-lockfile
• all workflows use now the package manger from root package.json via pnpm/action-setup@v4

Workflow Simplifications:

• Replaced the manual setup of pnpm and caching in all workflows (ci-docs, ci-lint, ci-playwright, ci-test, contracts-test, publish) with the cache: 'pnpm' option in actions/setup-node@v4 for improved maintainability. Also removed redundant steps like pnpm store path and actions/cache. [1] [2] [3] [4] [5] [6] [7]

Dependency Updates:

• Updated the viem dependency in examples/wagmi-v2/package.json and integrations/viem-v2/package.json to use the 2.x version range instead of a specific version, allowing for minor version updates without manual intervention. [1] [2]

Project Configuration:

• Added a new package.json file at the root of the project with metadata, Node.js version requirements (>=18.0.0), and pnpm configuration, including an override for the elliptic package.
• Removed the elliptic override from pnpm-workspace.yaml, as it is now managed in the new package.json.

Enhance the documentation for the sign() and verify() functions in Sapphire.sol to clarify how the contextOrHash parameter should be used with different signing algorithms:

• Correct the expected hash size for Secp384r1PrehashedSha384 from 32 bytes to 48 bytes
• Add detailed explanations of parameter behavior for each algorithm type
• Explicitly document that Sr25519 signatures MUST use "substrate" as the context for compatibility with Substrate off-chain signing using { withType: true }
• Add clear code examples showing proper usage for different algorithms
• Maintain consistent documentation between sign() and verify() functions

This pull request includes changes to the docs/addresses.md file to update the list of standard contract addresses. The changes primarily focus on improving the readability and consistency of the documentation.

Documentation updates:

• Reformatted the table to include links to both mainnet and testnet addresses for each contract.
• Removed the "Verify" column from the table and replaced it with direct links to the contract addresses on the Oasis explorer.
• Updated the references to the contract addresses to use new link labels for better clarity.
• Adds Router Nitro tokens #549

PREVIEW

This pull request includes updates to the examples/wagmi-v2 project to improve the test suite and update dependencies. The most important changes include updating the @tenkeylabs/dappwright dependency and enhancing the end-to-end test script to handle page navigation and account switching more robustly.

Dependency updates:

• examples/wagmi-v2/package.json: Updated @tenkeylabs/dappwright dependency from version ^2.8.6 to ^2.10.0 which includes the fix for account selection by name
• Fixed MetaMask version to 12.10.4 to address issues with enabling testing networks during CI setup. See TenKeyLabs/dappwright#426 for details.

Enhancements to end-to-end tests:

• examples/wagmi-v2/test/e2e.spec.ts: Changed account selection from numeric index to account name (wallet.switchAccount("Alice")), based on the fix in Dappwright PR #440. This change resolves the issue where account switching would get stuck on the account selection screen.
• examples/wagmi-v2/test/e2e.spec.ts: Added logic to store the current URL and handle potential page closures by reopening and navigating back to the application URL if necessary. This ensures the test continues even if the page is closed during the process.

This PR addresses build failures caused by recent updates to the time crate (v0.3.41) and its dependency deranged (v0.4.1).

• Recent releases of the time crate (after v0.3.36) pull in deranged v0.4.1
• This newer version of deranged introduces changes to trait implementations that cause type inference errors
• The specific error occurs in runtime/src/common/sgx/ias.rs with ambiguous trait implementations

Fix:

• Patched the time crate to use v0.3.36 from GitHub (released April 11, 2024)
• Update Foundry cmake version in ci-test.yaml

This PR:

• adds CHANGELOG.md to clients/py wrapper library
• updates version from 0.3.0 to 0.4.0 in clients/py/setup.py

This PR fixes:

• publish-contracts-soldeer job error in publish.yaml.
• Token expiration issue

Missing actions/checkout@v4 resulted in combined working directory paths (/home/runner/work/sapphire-paratime/sapphire-paratime/contracts/contracts)

Soldeer API token expires after 1 month which makes it unsuitable as a github secret. The soldeer CI/CD has been updated to use email/password combination.

Fix: Added actions/checkout@v4 to publish-contracts-soldeer.

Fixes #561

Update hardhat-boilerplate example to use ethers v5.8.0, which addresses the security vulnerability in elliptic 6.5.4. Additionally, add a workspace-wide override in pnpm-workspace.yaml to enforce elliptic v6.6.1+ across all transitive dependencies.

Update pnpm-lock.yaml to reflect these dependency changes.

This change resolves the Dependabot security alert #156 by ensuring all instances of the elliptic package use the patched version with the security fixes.

This pull request includes updates to the docs/addresses.md file, specifically in the list of standard contract addresses. The main changes involve correcting the links for the Router Asset Forwarder and Router Asset Bridge contracts.

Corrections to contract addresses:

• docs/addresses.md: Corrected the links for the Router Asset Forwarder and Router Asset Bridge contracts in the list of standard contract addresses.

Change package name (sapphire.py -> oasis-sapphire-py) to allow upload to PyPI.

Issue: #561

The import still works the same import sapphirepy.

Documenting ParaTime observer node as a special type of ParaTime client node that is registered on chain and supports running confidential queries and view calls on confidential ParaTime such as Sapphire.

Part of oasisprotocol/oasis-sdk#2186

This PR:

• adds docs/build/rofl/quickstart
• replaces docs/build/rofl/* -> /external/oasis-sdk/docs/rofl/* with a symlink docs/build/rofl -> external/oasis-sdk/docs/rofl

PREVIEW

This PR updates Foundry docs with new soldeer contracts/integrations versions.
Issue #1209

The latest Oasis Core releases 25.1 for Mainnet and Testnet have brought config file changes when enabling state sync.

Node operators that have state sync configured in their configuration files note that:
The following configuration options have been relocated from the consensus.state_sync section to consensus.light_client.trust:

• consensus.state_sync.trust_period -> consensus.light_client.trust.period,
• consensus.state_sync.trust_height -> consensus.light_client.trust.height
• consensus.state_sync.trust_hash -> consensus.light_client.trust.hash

We are updating this here and also replacing the nonexistent Tendermint links with the ones from the CometBFT docs.

• Added dapp-votee and dapp-blockvote projects from Oasis Protocol
• Created description.yaml files with properly formatted project descriptions
• Updated README.md with instructions for running the app locally
• Added documentation for scripts/projects in a new README.md file to help users understand how to add new projects to the playground

dapp-wrose project describes WebAuthn version, not the main branch

Already deployed.

Removes secret from rofl.yaml to avoid confusion.

Add dynamic translations using vue-i18n with support for English and Slovenian, based on the browser's language preference.

Creating a button to add Sapphire Mainnet to Metamask in Chrome browser extension (Issue: #12 ) and add new styling.

Before:

After:

Fixes #7

Upgrade demo-starter-py to align with new sapphirepy middleware upgrade..
Changes

• added AsyncWeb3 methods
• test example using websockets
• updated path handling for pytest to work from any execution directory

This PR:

• Updates CI to run against master branch.
• Aligns tests/linter with latest structure changes.

Part of oasisprotocol/internal#44

I forgot to bump main deploy action in prev PR.

We need actions/upload-pages-artifact@v3 as it used upload-artifact v4

Fixes #6118
Fixes #6134

These changes move us closer to allowing an arbitrary querier to be plugged into a client service. This should be useful for light backend clients, as they can create their own querier with a verified trust root, and use read-syncer to fetch state data from a remote node.

These changes unify constructors for immutable and mutable state and allow us to query the state by using a remote tree.

This will remove DeliverCommand from consensus ServiceClient, making the API more clean and limited only to two methods DeliverBlock and DeliverEvents. As a result, anyone with access to blocks and events can now run the client.

These changes reduce the CometBFT consensus backend interface to a minimal set of methods, all of which can be implemented by a light client backend.

Fixes #6122

Removing SetableBackend interface, as transaction submission does not belong in the beacon backend implementation. This change also removes the dependency between the beacon backend and the consensus backend/transaction submission manager.

Minor code fixes, cleanup, ... that was found along the way.

pkg:golang/golang.org/x/net@v0.37.0
1 known vulnerabilities affecting installed version
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ [CVE-2025-22872] CWE-1286                                                                                                                                                                                   ┃
┣━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ Description        ┃ github.com/golang/net - Improper Validation of Syntactic Correctness of                                                                                                                ┃
┃                    ┃ Input                                                                                                                                                                                  ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ OSS Index ID       ┃ CVE-2025-22872                                                                                                                                                                         ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ CVSS Score         ┃ 6.3/10 (Medium)                                                                                                                                                                        ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ CVSS Vector        ┃ CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N                                                                                                                        ┃
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ Link for more info ┃ https://ossindex.sonatype.org/vulnerability/CVE-2025-22872?component-type=golang&component-name=golang.org%2Fx%2Fnet&utm_source=nancy-client&utm_medium=integration&utm_content=1.0.33 ┃
┗━━━━━━━━━━━━━━━━━━━━┻━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛

SetBit method was clearing all remaining bits instead of zeroing the chosen one. We could also remove since currently not used.

remove duplicate package imports

History reindex e2e test is flaky: https://buildkite.com/oasisprotocol/oasis-core-ci/builds/15043#0195ef94-e784-49d4-aebc-187f01a818c1.

Even though compute node is producing blocks, its indexer may still be behind the client...