feat(devnet): composable local devnet with scenarios, Docker image, and CI

.dockerignore

@@ -3,13 +3,17 @@
 # except for
 !.gitmodules
 !bun.lockb
+!bun.lock
 !foundry.toml
 !package.json
 !solhint.json
 !tsconfig.json
 !generated/
 !lib/
 !scripts/
+!scripts/devnet/
+!deployments/
+!Dockerfile.devnet
 !src/
 
 # needed for forge

.editorconfig

@@ -9,5 +9,22 @@ indent_size = 2
 insert_final_newline = true
 max_line_length = 120
 trim_trailing_whitespace = true
-use_tabs = false
-use_single_quotes = true
+
+[*.json]
+indent_size = 2
+
+[package.json]
+indent_size = 4
+
+[funding.json]
+indent_size = 4
+
+[env.d.ts]
+indent_style = tab
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.sol]
+indent_size = 2
+max_line_length = 120

.github/workflows/build-devnet.yml

@@ -0,0 +1,104 @@
+name: build-devnet
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    paths:
+      - 'src/**'
+      - 'scripts/**'
+      - 'lib/**'
+      - 'generated/**'
+      - 'Dockerfile.devnet'
+      - '.dockerignore'
+      - 'compose.yml'
+      - 'compose.attach.yml'
+      - 'foundry.toml'
+      - 'package.json'
+      - 'bun.lock'
+      - '.github/workflows/build-devnet.yml'
+  workflow_dispatch:
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE: ghcr.io/${{ github.repository }}/devnet
+
+concurrency:
+  group: build-devnet-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    name: Build & publish devnet image
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Docker metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=sha,format=long
+            type=sha,format=short,prefix=${{ github.ref_name }}-,enable={{is_default_branch}}
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: Build image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile.devnet
+          load: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Smoke test (deploy + seed + health)
+        env:
+          IMAGE_REF: ${{ env.IMAGE }}:${{ steps.meta.outputs.version }}
+        run: |
+          docker run -d --name efp-devnet -p 8545:8545 -p 8000:8000 "$IMAGE_REF"
+          for i in $(seq 1 90); do
+            if curl -fsS http://localhost:8000/health >/dev/null; then
+              echo "Healthy after ${i}s"
+              exit 0
+            fi
+            if [ -z "$(docker ps -q -f name=efp-devnet -f status=running)" ]; then
+              echo "::error::container exited early"
+              docker logs efp-devnet
+              exit 1
+            fi
+            sleep 1
+          done
+          echo "::error::devnet did not become healthy"
+          docker logs efp-devnet
+          exit 1
+
+      - name: Tear down smoke test
+        if: always()
+        run: docker rm -f efp-devnet || true
+
+      - name: Log in to GHCR
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Push image
+        if: github.event_name != 'pull_request'
+        run: docker push --all-tags "${IMAGE}"

.github/workflows/test.yml

@@ -41,3 +41,27 @@ jobs:
         run: |
           forge test -vvv
         id: test
+
+  devnet:
+    name: Devnet integration tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4.1.1
+        with:
+          submodules: recursive
+
+      - name: Install Foundry
+        uses: foundry-rs/foundry-toolchain@v1
+        with:
+          version: nightly
+
+      - name: Install Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.2.13
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Run devnet integration tests
+        run: bun run devnet:test

Dockerfile

@@ -3,20 +3,20 @@ FROM oven/bun:latest as setup
 
 RUN apt-get update \
   && apt-get install -y \
-    ca-certificates \
-    curl \
-    git \
-    gnupg \
-    tree \
+  ca-certificates \
+  curl \
+  git \
+  gnupg \
+  tree \
   && rm -rf /var/lib/apt/lists/*
 
 # install nodejs
 RUN mkdir -p /etc/apt/keyrings \
-    && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
-    && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list \
-    && apt-get update \
-    && apt-get install -y nodejs \
-    && rm -rf /var/lib/apt/lists/*
+  && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
+  && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list \
+  && apt-get update \
+  && apt-get install -y nodejs \
+  && rm -rf /var/lib/apt/lists/*
 
 # install foundryup
 RUN curl -L https://foundry.paradigm.xyz | bash
@@ -26,7 +26,7 @@ RUN foundryup
 WORKDIR /usr/src/app
 
 # install project dependencies
-COPY bun.lockb package.json ./
+COPY bun.lock package.json ./
 RUN bun install --production --frozen-lockfile
 
 # copy the rest of the project

Dockerfile.devnet

@@ -0,0 +1,36 @@
+FROM oven/bun:1.2.13
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+  curl \
+  git \
+  build-essential \
+  ca-certificates \
+  && rm -rf /var/lib/apt/lists/*
+
+# Install Foundry
+RUN curl -L https://foundry.paradigm.xyz | bash
+ENV PATH="/root/.foundry/bin:${PATH}"
+RUN foundryup
+
+WORKDIR /app
+
+# Install dependencies
+COPY package.json bun.lock ./
+RUN bun install --frozen-lockfile
+
+# Copy source and build contracts
+COPY . .
+RUN forge install && forge build
+
+EXPOSE 8545 8000
+
+ENV FOUNDRY_DISABLE_NIGHTLY_WARNING=true
+# Bind to all interfaces inside the container; everything else is env-driven:
+#   DEVNET_RPC_URL     attach to an existing node (e.g. http://devnet:8545) instead of spawning anvil
+#   DEVNET_SCENARIO    composable scenario to seed (empty | minimal | demoGraph)
+#   DEVNET_CHAIN_ID    chain id when spawning a node (default 31337)
+ENV DEVNET_HOST=0.0.0.0
+ENV DEVNET_SCENARIO=demoGraph
+
+CMD ["bun", "scripts/runDevnet.ts"]