This PR:

• adds --wipe-storage to rofl deploy command which is useful when you set a new storage in the manifest file and redeploy the app.
• moves the following flags into a common file:
  --deployment
  --wipe-storage
• deduplicates npa and cfg initialization unless they can be provided outside of the manifest file (e.g. rofl create)
• fixes #509

Preview

Resolves #537

CLI bugfixes discovered during oasisprotocol/oasis-sdk#2090:

• sgx-raw builds can now be built with the rofl-dev builder
• a new verbose switch -v was introduced which prints out exact build commands
• Cargo.lock is now overwritten/regenerated by default and the --locked switch is passed only in the oasis rofl build --verify mode
• trust root is optional for debug builds
• oasis rofl create now also supports --no-update-manifest switch if you simply want to register a new rofl app

Closes #499.

Based on the feedback from one of our partners, it would be a good idea to populate compose.yaml with ROFL-specific features (storage, appd, secrets) and then let developer remove those, if not needed.

Closes #368, #556

Existing behavior didn't allow implicit volumes with default settings, for example

services:
  ollama:
    image: "docker.io/ollama/ollama"
    ports:
      - "11434:11434"
    volumes:
      - ollama-storage:/root/.ollama
    entrypoint: ["/usr/bin/bash", "-c", "/bin/ollama serve & sleep 5; ollama pull ${OLLAMA_MODEL}; wait"]

volumes:
  ollama-storage:

Fixes #535.

This reverts commit f0b9c53 as it breaks builds since absolute symlinks are valid in rootfs images.

Fixes regression caused by #517.

If a compose file was called sth else than compose.yaml the init command left it intact, which is correct. But if the file was called compose.yaml it replaced it, even though it already existed on the disk.

For sgx-raw projects, there are no mandatory artifacts defined and since it has the omitempty flag, it's not there in the manifest. oasis rofl build thus crashes for clean sgx-raw projects.

Fixes: #1022

Fixes: #953

Add support for fetching EVM token prices from Neby subgraph

• Introduces neby_derived_price to the database and API, sourced directly from the Neby DEX GraphQL API.

• Unlike Uniswap v2, we do not parse on-chain events or follow swaps; instead, we rely on the subgraph’s derivedETH field as the canonical price. This significantly simplifies the implementation and is acceptable given that the price is primarily used for token sorting.

• The analyzer is currently hardcoded to Neby; the implementation can be generalized in the future to support additional sources or DEX subgraphs if needed.

Fixes: #1093

Note that this will only effect future transaction and not past, already indexed ones.

See the error field for the example mentioned in #1093:

		{
			"amount": "0",
			"body": {
				"address": "AQAAAAAAAAAAAAAAAAAAAAAAAQM=",
				"data": "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",
				"value": ""
			},
			"charged_fee": "3548600000000000",
			"error": {
				"code": 10,
				"module": "core"
			},
			"eth_hash": "26911fd1bab06a9a8ccc30f5e57ca703cd838c31c71ea1c3677f8c21142f6c15",
			"fee": "3565900000000000",
			"fee_symbol": "TEST",
			"gas_limit": 35659,
			"gas_used": 35486,
			"hash": "acdf0913db2bd45e2e20cc1ca815681b979b378efe4a467f52601b6f5c42db8e",
			"index": 2,
			"is_likely_native_token_transfer": false,
			"method": "evm.Call",
			"nonce_0": 100,
			"round": 12228806,
			"sender_0": "oasis1qq235lqj77855qcemcr5w2qm372s4amqcc4v3ztc",
			"sender_0_eth": "0xC3ecf872F643C6238Aa20673798eed6F7dA199e9",
			"signers": [
				{
					"address": "oasis1qq235lqj77855qcemcr5w2qm372s4amqcc4v3ztc",
					"address_eth": "0xC3ecf872F643C6238Aa20673798eed6F7dA199e9",
					"nonce": 100
				}
			],
			"size": 1032,
			"success": false,
			"timestamp": "2025-06-21T09:05:05+02:00",
			"to": "oasis1qzr543mmela3xwflqtz3e0l8jzp8tupf3v59r6qn",
			"to_eth": "0x0100000000000000000000000000000000000103"
		}

Fixes #1087

Fixes: #1101

Fixes #887

The API currently uses an in-memory cache for a specific endpoint(consensus block), while no caching is applied to other cases. This somewhat arbitrary choice stems from historical decisions without clear justification. In practice, the utilization of this cache is very low, so we remove the cache for now.

Closes: #1094

Fixes: #1044

Fixes: #1095

Fixes #1078

No change in practice, just makes the fix consistent with the fix in oasis-web3-gateway.

Add support for filtering Runtime Event lists by type. This works on:

• Runtime Account events
• Runtime transaction events
• Runtime block events

Besides the real event types, there is a pseudo-type called "Token transfer", which actually means "EVM log message with a signature denoting a token transfer.

Currently there is one unresolved issue: token transfer are returned both when filtering for "Token transfers" and "EVM log messages", since they are technically both. To solve this we need some support from the Nexus side, but it's unlikely to land during the current sprint, so I say we should merge this now, and improve later when the Nexus team has the bandwidth to add what we need.

https://pr-2072.oasis-explorer.pages.dev/testnet/sapphire/rofl/app/rofl1qp55evqls4qg6cjw5fnlv4al9ptc0fsakvxvd9uw

Changes:

• Add links to Endorsement display:
  node, provider, provider_instance_admin, and entity are now displayed as links.
• Improve displaying AND and OR structures
• Rephrase the text

Before	After

This depends on:

• #2078
• #2084

Adds filtering for consensus event list in:

• Block details
• Account details
• Validator details
• Transaction details

Apparently, we haven't introduced i18n names for consensus event types, so the filter is simply offering the technical names. but this is consistent with the way there events are currently displayed.

In this PR, I am applying new insights gained during implementing event type filtering
to the previously implemented transaction method filtering:

• Rename TX method filter components so that we reference method, not type
• Use dedicated option types, instead using typecasting to any in change handlers

According to the ROFL app, the "homepage" field of metadata can also hold Twitter and Discord handles, besides web URLs.

This PR adds support for properly displaying those.

Example with X handle @elmo:

https://explorer.dev.oasis.io/testnet/sapphire/rofl/app/rofl1qpcj2zgme3ss0s39zyx5dl36779z54gxkgrqj36q

Example with discord:mrbeast

Please note: This PR now also includes the fix from #2086

Fixes #2070

provider_instance_admin: https://pr-2071.oasis-explorer.pages.dev/testnet/sapphire/rofl/app/rofl1qp55evqls4qg6cjw5fnlv4al9ptc0fsakvxvd9uw
node: https://pr-2071.oasis-explorer.pages.dev/mainnet/sapphire/rofl/app/rofl1qpdzzm4h73gtes04xjn4whan84s3k33l5gx787l2

node before | node after

Includes commits from #2065 and #2064

Related #1516
Part of #1222

https://pr-2068.oasis-explorer.pages.dev/testnet/sapphire/tx/0xf7b4437a1aeccb4e90f7c28eacbc03bdbd416d40476b7abfd13f02af22c2993a
https://pr-2068.oasis-explorer.pages.dev/testnet/sapphire/tx/0xec6a5664ad06e38c620a9a71c5608b0abcbde11cf7ec83fa4f67c2a57a364e31
Example 1 | Example 2

Small adjustments in AddressLink CSS.

	Before	After
Transfer events squeezed small
Minting event

Improves #2096.

Sync with oasisprotocol/nexus#1105

Nexus is not defaulting to 0 anymore for token num_holders and num_transfers props.

Related #1516
Part of #1222

https://pr-2065.oasis-explorer.pages.dev/testnet/sapphire/tx/0xd4559c82595299c6a39d56387c97b7c3e6c9ac49cdd691179b9ebb69ac4f35a6
https://pr-2065.oasis-explorer.pages.dev/testnet/sapphire/tx/0x22c3c69ca9d42edd0fc0f945b969f3fbe7f574aca815379475f1e636c38c766e
Example 1 | Example 2

Background: earlier, we had a 404 dialog with a bg that was mostly transparent, so it was shown in changing dark and light colors, depending on the current theme.

However, during a recent re-design, this concept has been dropped; the bg is no longer transparent, it's always blue.

Therefore, the text color now always must be white. However, this bit was missed during implementation, because it looked OK on mainnet.

This PR fixes that: sets the text color to white, independently of the current there.

Fixes #2093

	Before	After
Mainnet
Testnet

Add tooltip to Fee proxy field.
Closes #2046.

Before:

After:

Add 'Visit ROSE App' button to the header on desktop. Fixes #1713

Before:

After:

Make it consistent with runtime accounts

https://explorer.dev.oasis.io/search?q=oasis1qpwaggvmhwq5uk40clase3knt655nn2tdy39nz2f

In validator details, we are showing the voting power (as a number) in one row, and the percentage in the next.
Sometimes this is not easy to find.

We can put them in one row.

Before	After

Thanks for the top to @amela

Also, @juresobocan has approved the new design.

Mark accounts with 0 balance as '-' instead of 'XXS'. Fixes issue #1857

Before:

After:

Sync with Nexus oasisprotocol/nexus#1096

(If provided in metadata.)

For testing, search for "deborah"

Before	After

https://explorer.dev.oasis.io/testnet/sapphire/address/0xd5fc21B36D5153Cd0bfF4d774539ba9dFd13ADA8

The "node" policy was not tested, and therefore broken.

This PR fixes that.

Fixes #2095

Before	After

This is needed so that the class names loaded from CSS modules are applied properly.

This fixes regression sneaked into #2075 at the last minute before merging, which broke some CSS:

Before	After

https://explorer.dev.oasis.io/testnet/sapphire/tx/ed778b517d9b14ffe64df0772cef1c878cd9711556e91025d8c950a72eef23f7
https://explorer.dev.oasis.io/testnet/sapphire/tx/437384c366a1aeb5cd0613e94e4145c44d63997aab4fb60790f4c88ba73cc3c3

Following @lukaw3d's suggestion, let's use patterns that are more consistent with what we have for sapphire event names.

Make the text layout.contrastMain color, which works for both mainnet and testnet

Fixes #2055

Now we have:

Example URL: http://localhost:1234/testnet/sapphire/rofl/app/rofl1qrqw99h0f7az3hwt2cl7yeew3wtz0fxunu7luyfg

Before	After

Add the necessary gap when we want to display an address right next to other elements.

	Before	After	Comment
Token title card			Added manual spacing.
NFT instance title card			This was supposed to show the address, not the name, since the name is already at the title. Fixed that, plus added manual spacing.
Owner link in NFT inventory			Added missing space after colon

Fixes #2096.

• Current PR: Just make the text white
• #2056
• #2057

The small "i" button on the top left is now visible

Before	After

Fixes remaining problem from #2055

Fixes #2048

This is an unrelated fix extracted from #2072.

With the current CSS, links that support the hover highlight feature appear ever so slightly bellow the normal baseline, because of margin settings. This PR fixes that, restoring correct alignment.

Before	After

(The second screenshot is from the new endorsement display which is not part of the master branch yet, but you get the point.)

Adjust positioning and width of Staking Trend line chart to show numbers on y-axis fully. Fixes Issue #1930 .

Before:

After:

Another bit extracted from #2072

Make the "last activity" row look good at all widths:

Before	After

Fixes #2090

This PR rewrites the rofl-oracle-* examples to a new format:

• name rofl-oracle-sgx for SGX and rofl-oracle-tdx-raw for TDX flavor without containers
• introduce rofl.yaml
• in the Rust code, use the rofl_core app's id() and trust_root() implementation
• rofl-oracle-sgx: use debug: true for Localnet and no trust root
• update Testnet trust roots to more recent ones
• rename rofl-oracle-*/oracle -> rofl-oracle-*/contracts because that's where web3 devs expect smart contracts to live in
• add symlink from rofl-oracle-tdx-raw/contracts -> rofl-oracle-sgx/contracts to avoid code duplication
• add CI for building rofl-oracle-* examples
• update Cargo.toml files to use the current oasis-sdk repo tooling, including the minimal-runtime example
• bump deps in rofl-utils used by rofl-oracle-sgx

Related oasisprotocol/oasis-web3-gateway#759, oasisprotocol/cli#548

Fixes #2237

Fixes #812 and #2045

Fixes #2233

Fixes #1938
Related #86

Fixes #2254

Fixes #2270

• rofl-scheduler: Do not provision instances before accept is confirmed
• rofl-scheduler: Correctly stop instances assigned to other nodes
• rofl-scheduler: Correctly process transaction results
• runtime-sdk/modules/rofl-market: Fix instance removal (requires runtime upgrade)
• rofl-scheduler: Skip removing instances affected by claim bug (needs to be removed after fix deployed #2256)

Fixes #2232

Fixes #2280

Now contains a real-world CBOR-encoded message in the example response.

Fixes #2235

Revert short syntax for volume mounting. Related to oasisprotocol/cli#517 (comment)

Fixes #2268

Related to #2271

the library is still very much "only help when you already know what you're doing" but look at this badness

import * as oasis from '@oasisprotocol/client';
console.log(oasis.quantity.toBigInt(oasis.quantity.fromBigInt(-10n)));
// 246n

Based on the recent feedback from the hackathon and our partners the ROFL diagram needs to be updated to reflect new features:

• TEE was replaced with "ROFL App in TEE" and ROFL App was replaced with "Containers"; we needed to put the docker/podman into bigger context.
• removed "Other Chains"; some of the hackathoners wanted to use ROFL signed transactions to communicate with non-Oasis chains
• Sapphire -> Sapphire Confidential EVM Chain; because some users went on ROFL docs directly without knowing what Sapphire is
• added new Sapphire->ROFL "Secrets" connection to reflect a new feature
• added "Encrypted Storage" to reflect a new feature
• added "appd REST" to reflect the feature with connection to Sapphire for signing smart contract transactions
• "Outer World" -> "Web 2 Services"; this terminology is more common in the crypto community

Fixes oasisprotocol/docs#1357

Adds thirdweb RPC. I also tested confidential queries and they seem to work.

Metamask seems to name the accounts weird in the setup (maybe different every version?)
"jvh" corresponds to address 0x70997970C51812dc3A010C7d01b50e0d17dc79C8

Part of oasisprotocol/docs#1369

Fixes: #595

As seen in the referenced issues, a large majority of modern clients expect leading zeroes in the getStorageAt response.

Updated Oasis CLI usage for testing ROFL sgx-raw on Localnet.

Followup test for #762

In Go 1.21, the standard library includes built-in max/min function, which can greatly simplify the code.

Newer go-ethereum versions reject a zero chainID in LatestSignerForChainID. For legacy transactions without a chain ID, we now correctly pass nil.

TODO:

• add a test

Implementation of the new homepage design. Implementation of 1310
Before:

After:

Preview

Preview

Implementation of new styling of admonition cards and create a new instance for 'Example'.

Before:

After:

Change docCard design across all docs to the new design. Implementing Issue #1338

Before:

After:

Refactors #1324

fix some minor issues in the comments

fix some typos

This PR adds updated descriptions for ethDam 2025 projects.
Issue: #122

This PR adds #131 projects to playground.

Fixes #127

This PR adds:

• TaikaiImporter.ts for scraping Oasis hackathon projects from taikai.network.

Fixes TypeError: can't access property "toLowerCase", license is undefined.
This error occurred in the formatLicense function when trying to call toLowerCase() on undefined license values.

This PR fixes the following typos in YAML description files:

• Corrects "aquire" to "acquire" in clpd-private/description.yaml
• Corrects "usefull" to "useful" in demo-e2eproxy/description.yaml

Related oasisprotocol/oasis-sdk#2277

Also upgrades the artifacts versions and documents better production contract deployment.

This PR adds write permissions for container build artifacts and updates code for web3.py 7.x and python 3.12+

Properly check the sign-submit tx result (related oasisprotocol/oasis-sdk#2281).

Related oasisprotocol/oasis-sdk#2280

The new resources should still work fine with deepseek, but should also be deployable on free Oasis Testnet ROFL provider.

lstrip removes all leading characters in the list instead of a prefix. Use removeprefix instead.

As suggested by oasisprotocol/oasis-sdk#2277

This closes #151.
This closes #153.

Offer "copy address", "view in explorer", "disconnect wallet"
features, instead of just copying the address.

It looks like this:

On mobile:

Closes #161.

The LIDO-branded version is deployed to https://vote-lido.oasis.io
(Also available from https://vote.oasis.io/lido )

Things done as side-affects / dependencies of this task:

• #138
• #140
• #141
• #142
• #148
• #150
• #151

Tasks specifically related for LIDO:

• Set up frontend deployment
• Deploy new contracts
• Customize application title and tagline
• Customize background images
• Customize App logo
• Customize app behavior
• Fix LDO token compatibility
• Set up domain alias and redirect

• General: vertical centering should work better now
• Mobile: eliminate horizontal scrolling

Before	After

Closes #169.

This makes running the frontend using the production contracts as a backend very easy.

Improves #168.

The following two settings can now be customized from .env:

• Hide "under construction" features
• Hide hardwired settings

Things that should be done in another PR:

• Support multiple providers (implement composite provider).
• Restart watching blocks if connection is lost (switch to another provider and start fetching where the node left off).
• Support TLS.

These changes should run only one ROFL notifier for all ROFL components. Once all ROFL apps are updated and support get_config method, we can remove support for RegisterNotify and remove/decouple ROFL notifier from ROFL handler.

Closes #6218

For context please read design doc. To see where this PR fits in, see Implementation and Validation Plan/2.

For the discussion about need to release new version read the #6204 (comment) and replies.

Changes:

• Made height mandatory (not related to tests, just cleanup).
• Changed that master secrets are fetched before ephemeral, as the latter are optional. This way, ephemeral secrets are always fetched in full, if node registers in the middle of init method.
• Used the latest state root for verifying data in key manager, so that secret loading succeeds in first try.

Tackles #6262 (comment), see existing slack discussion.

Only hosts that serve p2p protocol should advertise themselves via seed nodes for peer discovery.

I don't think this checksum is ever used, or is it? If not, it might be best to remove it, since it's unrelated to the keys derived from ephemeral secrets.

fix some minor issues in the comments

🤦