[ { "path": ".claude/skills/claude-review/SKILL.md", "content": "---\nname: claude-review\ndescription: Review code changes using Hyperlane Warp UI coding standards. Use when reviewing PRs, checking your own changes, or doing self-review before committing.\n---\n\n# Code Review Skill\n\nUse this skill to review code changes against Hyperlane Warp UI standards.\n\n## When to Use\n\n- Before committing changes (self-review)\n- When asked to review a PR or diff\n- To check if changes follow project patterns\n\n## Instructions\n\nRead and apply the guidelines from `REVIEW.md` to review the code changes.\n\n### For PR Reviews\n\nWhen reviewing a PR, deliver feedback as a **single consolidated GitHub review** using `/inline-pr-comments`. Each run produces a separate review — nothing is overwritten.\n\n1. **Fetch prior reviews first** — the `/inline-pr-comments` skill fetches existing reviews/comments so you can avoid duplicating feedback and stay aware of ongoing discussions\n2. **Review body** — Overall assessment, architecture concerns, and issues found outside the diff\n3. **Inline comments** — Specific issues on changed lines (attached to the same review)\n\n### For Self-Review\n\nWhen reviewing your own changes before committing:\n\n1. Run `git diff` to see changes\n2. Apply the code review guidelines\n3. Fix issues directly rather than commenting\n" }, { "path": ".claude/skills/claude-security-review/SKILL.md", "content": "---\nname: claude-security-review\ndescription: Security-focused review for frontend/Web3 code. Use for XSS, wallet security, CSP, and dependency checks.\n---\n\n# Security Review Skill\n\nUse this skill for security-focused code review of frontend Web3 code.\n\n## When to Use\n\n- Reviewing wallet integration code\n- Checking for XSS vulnerabilities\n- CSP header changes\n- Dependency updates\n\n## Instructions\n\nRead and apply the security guidelines from `.github/prompts/security-scan.md` to review the code changes.\n\nReport findings with severity ratings (Critical/High/Medium/Low/Informational) and suggested fixes.\n\n### For PR Reviews\n\nWhen reviewing a PR, deliver feedback using `/inline-pr-comments` to post inline comments on specific lines.\n" }, { "path": ".claude/skills/commit/SKILL.md", "content": "---\nname: commit\ndescription: Commit changes following project quality gates and best practices. Run before creating any git commit.\n---\n\n# Commit Skill\n\nUse this skill when committing changes to ensure quality and correctness.\n\n## Pre-Commit Checklist\n\nRun these in order. **Do not commit if any fail.**\n\n1. **`pnpm format`** — Format all source files\n2. **`pnpm lint`** — Check for ESLint errors\n3. **`pnpm typecheck`** — Verify TypeScript compiles\n4. **`pnpm build`** — Ensure production build succeeds (optional for small changes, required before PR)\n\n## Staging Rules\n\n- **Only stage files related to the current task.** Review `git status` carefully.\n- **Never stage unrelated files** — markdown notes, scratch files, `.monorepo-tarballs/`, `agent/`, etc. should not be committed unless explicitly requested.\n- **Use specific file paths** with `git add`, not `git add .` or `git add -A`.\n- **Review `git diff --staged`** before committing to verify only intended changes are included.\n\n## Commit Message Format\n\n- Use conventional commit prefixes: `feat:`, `fix:`, `style:`, `chore:`, `refactor:`, `docs:`, `test:`\n- Keep the first line under 72 characters\n- Add a blank line then bullet points for multi-change commits\n- End with `Co-Authored-By: Claude Opus 4.6 `\n- Use a HEREDOC to pass the message to avoid shell escaping issues\n\n## Things to Watch For\n\n- **Secrets**: Never commit `.env`, credentials, or API keys\n- **Large files**: Don't commit binaries, build artifacts, or font files (check `.gitignore`)\n- **Formatting drift**: If oxfmt changed files you didn't touch, stage them separately or skip them\n\n## Example Flow\n\n```bash\npnpm format\npnpm lint\npnpm typecheck\ngit status # review what changed\ngit diff # verify changes are correct\ngit add # only related files\ngit diff --staged # double-check staged changes\ngit commit -m \"$(cat <<'EOF'\nfeat: description of change\n\n- Detail 1\n- Detail 2\n\nEOF\n)\"\n```\n" }, { "path": ".claude/skills/inline-pr-comments/SKILL.md", "content": "---\nname: inline-pr-comments\ndescription: Post a single consolidated PR review with summary and inline comments. Use this skill to deliver code review feedback as one unified review per run.\n---\n\n# Consolidated PR Review Skill\n\nUse this skill to submit code review feedback as a **single consolidated GitHub review** containing both the summary body and all inline comments.\n\n## When to Use\n\n- After completing a code review (use with /claude-review)\n- When you have specific line-by-line feedback to deliver\n\n## Instructions\n\nSubmit one consolidated review per run using the GitHub API. **Do NOT post inline comments individually.** Each run produces a new review — nothing is overwritten.\n\n### Step 1: Fetch Prior Review Context\n\nBefore reviewing, read existing reviews and comments on the PR for context:\n\n```bash\n# Fetch existing reviews (summaries)\ngh api --paginate \"repos/$GITHUB_REPOSITORY/pulls/$PR_NUMBER/reviews\" --jq '.[] | {user: .user.login, state: .state, body: .body}'\n\n# Fetch inline review comments\ngh api --paginate \"repos/$GITHUB_REPOSITORY/pulls/$PR_NUMBER/comments\" --jq '.[] | {user: .user.login, path: .path, line: .line, body: .body}'\n\n# Fetch general PR discussion comments\ngh api --paginate \"repos/$GITHUB_REPOSITORY/issues/$PR_NUMBER/comments\" --jq '.[] | {user: .user.login, body: .body}'\n```\n\nUse this context to:\n\n- **Skip issues already raised** — don't re-flag something a prior review already pointed out\n- **Reference prior discussions** — e.g. \"As noted in the previous review, ...\"\n- **Flag unresolved issues** — if a prior review raised something that still isn't fixed, note it briefly (e.g. \"Still unresolved from prior review: ...\")\n- **Avoid contradictions** — don't suggest the opposite of what a human reviewer requested\n\n### Step 2: Collect All Findings\n\nComplete the full review. Collect:\n\n- **Summary** — Overall assessment, architecture concerns, non-diff observations\n- **Inline comments** — Specific issues on changed lines (path, line, body)\n\n### Step 3: Build Review JSON\n\nWrite a JSON file to `/tmp/review.json`:\n\n```json\n{\n \"body\": \"## Review Summary\\n\\nOverall assessment here.\\n\\n## Observations Outside This PR\\n- `file:line`: description\",\n \"event\": \"COMMENT\",\n \"comments\": [\n {\n \"path\": \"src/file.ts\",\n \"line\": 42,\n \"body\": \"Issue description here\"\n },\n {\n \"path\": \"src/other.ts\",\n \"start_line\": 10,\n \"line\": 15,\n \"body\": \"Multi-line comment\"\n }\n ]\n}\n```\n\n**Fields:**\n\n- `body` — Markdown review summary (required)\n- `event` — Always `\"COMMENT\"` (never APPROVE or REQUEST_CHANGES)\n- `comments` — Array of inline comment objects (can be empty if no inline findings)\n - `path` — File path relative to repo root\n - `line` — Line number in the NEW version of the file\n - `start_line` + `line` — For multi-line comments\n - `body` — Markdown-formatted feedback\n\n### Step 4: Submit the Review\n\n```bash\ngh api \"repos/$GITHUB_REPOSITORY/pulls/$PR_NUMBER/reviews\" --input /tmp/review.json\n```\n\nThe `GITHUB_REPOSITORY` and `PR_NUMBER` environment variables are set by the CI workflow.\n\n### Limitations\n\n- Inline comments can only target lines in the diff (changed/added lines)\n- Comments targeting unchanged lines will cause the API call to fail\n- If unsure whether a line is in the diff, put the finding in the summary body instead\n\n### Handling Non-Diff Findings\n\nIssues in code NOT changed by the PR go in the review `body` under a dedicated section:\n\n```markdown\n## Observations Outside This PR\n\n- `src/utils/foo.ts:142`: Pre-existing null check missing\n- `src/core/bar.ts:78-82`: Similar pattern to line 45 issue\n```\n\n### Feedback Guidelines\n\n| Feedback Type | In Diff? | Where to Put It |\n| ----------------------------- | -------- | ---------------------------------------------------- |\n| Specific code issue | Yes | `comments` array entry for that line |\n| Pattern repeated across files | Yes | First occurrence in `comments` + note others in body |\n| Related issue found | No | `body` under \"Observations Outside This PR\" |\n| Pre-existing bug discovered | No | `body` (consider separate issue if critical) |\n| Overall architecture concern | N/A | `body` |\n\nBe concise. Group minor style issues together. Never use APPROVE or REQUEST_CHANGES.\n" }, { "path": ".claude/skills/resolve-pr-reviews/SKILL.md", "content": "---\nname: resolve-pr-reviews\ndescription: Review and resolve PR review comments interactively. Fetches unresolved comments, proposes fixes or explains why to skip, and replies on GitHub.\n---\n\n# Resolve PR Reviews\n\nUse this skill to process review comments on a PR. Pass the PR number as an argument (e.g. `/resolve-pr-reviews 1041`).\n\n## Workflow\n\n### Step 1: Fetch unresolved review comments\n\nUse the GitHub API to get all review comments that haven't been resolved:\n\n```bash\n# Get inline review comments (pull request review comments)\ngh api repos/{owner}/{repo}/pulls/{pr}/comments --jq '.[] | select(.position != null or .line != null)'\n\n# Get issue-level comments (general PR comments from reviewers, not bots)\ngh api repos/{owner}/{repo}/issues/{pr}/comments\n```\n\nFilter out:\n- Deployment/CI bots (Vercel deploy previews, CI status checks)\n- Already-resolved threads\n- Your own previous replies\n\nKeep:\n- AI review comments (Claude review bot, CodeRabbit inline suggestions) — these are actionable review feedback\n- Human reviewer comments\n\n### Step 2: Analyze each comment\n\nFor each unresolved comment:\n1. Read the relevant code being commented on\n2. Understand the reviewer's concern\n3. Propose a concrete fix OR explain why it should be skipped\n4. Categorize severity: **must fix**, **good idea**, or **skip** (with reasoning)\n\n### Step 3: Present to user\n\n**IMPORTANT: You MUST ask the user this question BEFORE showing any analysis. Do NOT skip this step or present comments prematurely.**\n\nAfter fetching and analyzing comments internally, use the `AskUserQuestion` tool to present a selection prompt:\n\n```\nQuestion: \"Found N review comments on PR #XXXX. How would you like to go through them?\"\nOptions:\n - \"One by one\" — Present each comment individually, user decides fix/skip before next\n - \"All at once\" — Present all comments together, user reviews full list\n```\n\nWait for the user's selection before proceeding. Then:\n\n- **\"one by one\"** (default): Present each comment individually with your analysis and proposed solution. Wait for user to decide \"fix\" or \"skip\" before moving to the next one.\n- **\"all at once\"**: Present all comments together with your analysis. User reviews the full list, then says which to fix and which to skip.\n\nFor each comment, show:\n- The reviewer's comment (abbreviated)\n- **Your own independent analysis** — don't just parrot the reviewer. Verify if the concern is actually valid, check the relevant code/dependencies, and explain what's really happening. If the reviewer is wrong or partially wrong, say so.\n- Your proposed fix (code diff) or skip reasoning\n- Your recommendation\n\n### Step 4: Apply fixes\n\nApply all approved fixes to the codebase.\n\n### Step 5: Commit and push\n\nRun the `/commit` skill to format, lint, typecheck, stage, and commit. Then push:\n\n```bash\ngit push\n```\n\n### Step 6: Reply to comments on GitHub\n\nReply to each comment using the correct GitHub API endpoints:\n\n**For inline review comments** (pull request review comments):\n```bash\n# Reply to an inline review comment (creates a reply in the same thread)\ngh api repos/{owner}/{repo}/pulls/{pr}/comments/{comment_id}/replies \\\n --method POST \\\n -f body=\"\"\n```\n\n**For issue-level comments** (general PR comments):\n```bash\ngh api repos/{owner}/{repo}/issues/{pr}/comments \\\n --method POST \\\n -f body=\"\"\n```\n\nReply content:\n- If fixed: \"Fixed in .\" (keep it short)\n- If skipped: Brief explanation of why (1-2 sentences)\n- Tag the reviewer with `@username` when replying to top-level comments\n\n## Important Notes\n\n- **Never guess comment IDs** — always fetch them from the API first\n- **Test the reply endpoint** — `pulls/{pr}/comments/{id}/replies` is for inline review comment threads. `issues/{pr}/comments` is for general PR comments.\n- **Don't reply to deploy/CI bots** — skip Vercel deploy previews, CI status comments. DO reply to AI review bots (Claude, CodeRabbit inline suggestions).\n- **Keep replies concise** — reviewers don't want essays\n" }, { "path": ".env.example", "content": "NEXT_PUBLIC_WALLET_CONNECT_ID=12345678901234567890123456789012\nNEXT_PUBLIC_RPC_OVERRIDES='{\"chain1\":{\"http\":\"https://...\"}}'\n\n# Offchain fee quoting (optional)\nNEXT_PUBLIC_FEE_QUOTING_URL= # Fee quoting service base URL\nFEE_QUOTING_API_KEY= # Server-side only API key for fee quoting service\n\n# Localhost only; production deployments must use https://\nNEXT_PUBLIC_RELAY_API_URL=http://localhost:8900\n\n# Predicate Attestation Support (server-side only, optional)\n# Required for routes with PredicateRouterWrapper\nPREDICATE_API_KEY=your_predicate_api_key_here\n# Optional: custom Predicate API URL (defaults to https://api.predicate.io/v2/attestation)\n# SECURITY: This value is server-side only and must point to a trusted endpoint.\n# Do not set this to an arbitrary or user-controlled host — the server-side proxy\n# enforces HTTPS and an allowlist (api.predicate.io / predicate.io) to prevent SSRF.\nPREDICATE_API_URL=https://api.predicate.io/v2/attestation\n\n# AWS S3 Font Storage (server-side only, used by prebuild script)\nAWS_ACCESS_KEY_ID=your_access_key_id\nAWS_SECRET_ACCESS_KEY=your_secret_access_key\nAWS_S3_BUCKET=your_bucket_name\nAWS_REGION=us-east-1\n" }, { "path": ".github/CODEOWNERS", "content": "* @xaroz @paulbalaji @xeno097 @troykessler\n" }, { "path": ".github/prompts/security-scan.md", "content": "## Frontend Security Focus Areas\n\nThis is a Web3 frontend application. Pay special attention to:\n\n### XSS & Content Security\n- Input sanitization before rendering user data\n- Dangerous patterns: dangerouslySetInnerHTML, eval(), innerHTML\n- URL validation (javascript: protocol, data: URLs)\n- CSP headers and inline script risks\n\n### Web3 Wallet Security\n- Blind signature attacks (signing data without user understanding)\n- Transaction simulation before signing\n- Clear message display before signature requests\n- Proper origin/domain verification for wallet connections\n- **Chain-aware address validation** - EVM hex can lowercase; Solana base58/Cosmos bech32 are case-sensitive\n- **Don't collapse addresses** - Normalizing non-EVM addresses can create security issues\n\n### Dependency & Supply Chain\n- Known vulnerabilities in dependencies\n- Malicious packages, typosquatting\n- Outdated critical security packages\n\n### API & Token Security\n- CORS configuration\n- Token storage (avoid localStorage for sensitive tokens)\n- API key exposure in client-side code\n\n### Private Key Handling\n- NEVER expose private keys client-side\n- Check for hardcoded keys or mnemonics\n- Wallet connection patterns should not request keys\n\n### Content Security Policy\n- New external resources (scripts, styles, frames) need CSP header updates\n- Check `next.config.js` for script-src, style-src, connect-src, frame-src\n- Third-party integrations (Intercom, analytics, wallets) need explicit allowlisting\n- Test with CSP enabled in production mode\n" }, { "path": ".github/workflows/ci.yml", "content": "name: ci\n\non:\n push:\n branches: [main, nautilus, nexus, injective, trump, ousdt]\n pull_request:\n branches: [main, nautilus, nexus, injective, trump, ousdt]\n merge_group:\n workflow_dispatch:\n\njobs:\n build:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: |\n pnpm install --frozen-lockfile\n CHANGES=$(git status -s)\n if [[ ! -z $CHANGES ]]; then\n echo \"Changes found: $CHANGES\"\n git diff\n exit 1\n fi\n\n - name: Cache build output\n id: build-cache\n uses: actions/cache@v4\n with:\n path: .next/\n key: ${{ runner.os }}-nextjs-build-${{ hashFiles('src/**', 'pnpm-lock.yaml', 'next.config.js', 'tsconfig.json') }}\n\n - name: build\n if: steps.build-cache.outputs.cache-hit != 'true'\n run: pnpm run build\n env:\n NEXT_PUBLIC_WALLET_CONNECT_ID: ${{ secrets.NEXT_PUBLIC_WALLET_CONNECT_ID }}\n\n typecheck:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: typecheck\n run: pnpm run typecheck\n\n format:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: format\n run: |\n pnpm run format\n CHANGES=$(git status -s)\n if [[ ! -z $CHANGES ]]; then\n echo \"Changes found: $CHANGES\"\n exit 1\n fi\n\n lint:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: lint\n run: pnpm run lint\n\n test:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: test\n run: pnpm run test\n\n e2e:\n needs: [build]\n if: >-\n github.base_ref == 'main' ||\n (github.event_name == 'push' && github.ref == 'refs/heads/main') ||\n github.event_name == 'merge_group' ||\n github.event_name == 'workflow_dispatch'\n uses: ./.github/workflows/e2e.yml\n secrets: inherit\n\n # Fast wallet-connected E2E subset, gates every PR.\n e2e-smoke:\n needs: [build]\n uses: ./.github/workflows/e2e-smoke.yml\n secrets: inherit\n\n # Full wallet-connected E2E matrix (chromium/firefox/webkit). Main-only so\n # PRs stay fast; merge_group runs it as a final gate before landing.\n e2e-wallet-full:\n needs: [build]\n if: >-\n (github.event_name == 'push' && github.ref == 'refs/heads/main') ||\n github.event_name == 'merge_group' ||\n github.event_name == 'workflow_dispatch'\n uses: ./.github/workflows/e2e-wallet-full.yml\n secrets: inherit\n" }, { "path": ".github/workflows/claude-code-review.yml", "content": "name: Claude Code Review\n\non:\n pull_request:\n types: [opened, synchronize, reopened, ready_for_review]\n pull_request_review_comment:\n types: [created]\n issue_comment:\n types: [created]\n\nenv:\n CLAUDE_OPUS_MODEL: claude-opus-4-7\n CLAUDE_SONNET_MODEL: claude-sonnet-4-6\n\nconcurrency:\n group: claude-review-${{ github.event.pull_request.number || github.event.issue.number }}\n cancel-in-progress: false\n\njobs:\n code-review:\n if: |\n (\n github.event_name == 'issue_comment' &&\n github.event.issue.pull_request &&\n contains(github.event.comment.body, '@claude review') &&\n (\n github.event.comment.author_association == 'MEMBER' ||\n github.event.comment.author_association == 'OWNER' ||\n github.event.comment.author_association == 'COLLABORATOR'\n )\n ) ||\n (\n github.event_name == 'pull_request' &&\n contains(join(github.event.pull_request.labels.*.name, ','), 'claude-review') &&\n github.event.pull_request.head.repo.full_name == github.repository\n )\n runs-on: ubuntu-latest\n timeout-minutes: 15\n permissions:\n contents: read\n pull-requests: write\n issues: write\n id-token: write\n steps:\n - name: Get PR SHA\n id: pr-sha\n uses: actions/github-script@v7\n with:\n script: |\n if (context.eventName === 'issue_comment') {\n const { data: pr } = await github.rest.pulls.get({\n owner: context.repo.owner,\n repo: context.repo.repo,\n pull_number: context.issue.number\n });\n core.setOutput('head_sha', pr.head.sha);\n } else {\n core.setOutput('head_sha', context.payload.pull_request.head.sha);\n }\n\n - name: Checkout repository\n uses: actions/checkout@v6\n with:\n ref: ${{ steps.pr-sha.outputs.head_sha }}\n fetch-depth: 0\n\n - name: Run Claude Code Review\n uses: anthropics/claude-code-action@v1\n with:\n anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}\n prompt: \"Use agent teams to run /claude-review, then use /inline-pr-comments to post findings as a consolidated PR review with inline comments\"\n track_progress: true\n use_sticky_comment: false\n claude_args: |\n --model ${{ env.CLAUDE_OPUS_MODEL }}\n --allowedTools \"Bash(gh api:*)\"\n\n security-review:\n if: |\n (\n github.event_name == 'pull_request' &&\n !github.event.pull_request.draft &&\n github.event.pull_request.head.repo.full_name == github.repository\n ) ||\n (\n github.event_name == 'issue_comment' &&\n github.event.issue.pull_request &&\n contains(github.event.comment.body, '@claude security') &&\n (\n github.event.comment.author_association == 'MEMBER' ||\n github.event.comment.author_association == 'OWNER' ||\n github.event.comment.author_association == 'COLLABORATOR'\n )\n )\n runs-on: ubuntu-latest\n timeout-minutes: 20\n permissions:\n contents: read\n pull-requests: write\n issues: write\n id-token: write\n steps:\n - name: Get PR SHA\n id: pr-sha\n uses: actions/github-script@v7\n with:\n script: |\n if (context.eventName === 'issue_comment') {\n const { data: pr } = await github.rest.pulls.get({\n owner: context.repo.owner,\n repo: context.repo.repo,\n pull_number: context.issue.number\n });\n core.setOutput('head_sha', pr.head.sha);\n } else {\n core.setOutput('head_sha', context.payload.pull_request.head.sha);\n }\n\n - name: Checkout repository\n uses: actions/checkout@v6\n with:\n ref: ${{ steps.pr-sha.outputs.head_sha }}\n fetch-depth: 2\n\n - name: Run Claude Security Review\n uses: anthropics/claude-code-security-review@25e460eb0a12077f0c6a1934d5dbae2f50785dda\n with:\n claude-api-key: ${{ secrets.ANTHROPIC_API_KEY }}\n comment-pr: true\n upload-results: true\n exclude-directories: 'node_modules,dist,.next,coverage,cache'\n claudecode-timeout: '15'\n claude-model: ${{ env.CLAUDE_OPUS_MODEL }}\n custom-security-scan-instructions: '.github/prompts/security-scan.md'\n\n interactive:\n if: |\n (\n github.event_name == 'issue_comment' &&\n github.event.issue.pull_request &&\n contains(github.event.comment.body, '@claude') &&\n !contains(github.event.comment.body, '@claude review') &&\n !contains(github.event.comment.body, '@claude security') &&\n (\n github.event.comment.author_association == 'MEMBER' ||\n github.event.comment.author_association == 'OWNER' ||\n github.event.comment.author_association == 'COLLABORATOR'\n )\n ) ||\n (\n github.event_name == 'pull_request_review_comment' &&\n github.event.pull_request.head.repo.full_name == github.repository &&\n contains(github.event.comment.body, '@claude') &&\n !contains(github.event.comment.body, '@claude security') &&\n (\n github.event.comment.author_association == 'MEMBER' ||\n github.event.comment.author_association == 'OWNER' ||\n github.event.comment.author_association == 'COLLABORATOR'\n )\n )\n runs-on: ubuntu-latest\n timeout-minutes: 15\n permissions:\n contents: read\n pull-requests: write\n issues: write\n id-token: write\n steps:\n - name: Get PR SHA\n id: pr-sha\n uses: actions/github-script@v7\n with:\n script: |\n let prNumber;\n if (context.eventName === 'issue_comment') {\n prNumber = context.issue.number;\n } else if (context.eventName === 'pull_request_review_comment') {\n prNumber = context.payload.pull_request.number;\n }\n if (prNumber) {\n const { data: pr } = await github.rest.pulls.get({\n owner: context.repo.owner,\n repo: context.repo.repo,\n pull_number: prNumber\n });\n core.setOutput('head_sha', pr.head.sha);\n }\n\n - name: Checkout repository\n uses: actions/checkout@v6\n with:\n ref: ${{ steps.pr-sha.outputs.head_sha || github.sha }}\n fetch-depth: 0\n\n - name: Run Claude Code Assistant\n uses: anthropics/claude-code-action@v1\n with:\n anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}\n track_progress: true\n use_sticky_comment: false\n claude_args: \"--model ${{ env.CLAUDE_SONNET_MODEL }}\"\n" }, { "path": ".github/workflows/create-merge-prs.yaml", "content": "name: Merge Main to Other Branches\n\non:\n push:\n branches:\n - main\n workflow_dispatch:\n\nconcurrency:\n group: ${{ github.workflow }}-${{ github.ref }}\n cancel-in-progress: true\n\njobs:\n create-merge-prs:\n runs-on: ubuntu-latest\n permissions:\n contents: write\n pull-requests: write\n strategy:\n fail-fast: false\n matrix:\n branch: [injective, nexus, trump, ousdt]\n steps:\n - name: Generate GitHub App Token\n id: generate-token\n uses: actions/create-github-app-token@v2\n with:\n app-id: ${{ secrets.HYPER_GONK_APP_ID }}\n private-key: ${{ secrets.HYPER_GONK_PRIVATE_KEY }}\n\n - name: Checkout repository\n uses: actions/checkout@v5\n with:\n fetch-depth: 0\n token: ${{ steps.generate-token.outputs.token }}\n\n - name: Get GitHub App User ID\n id: get-user-id\n run: echo \"user-id=$(gh api /users/${{ steps.generate-token.outputs.app-slug }}[bot] --jq .id)\" >> \"$GITHUB_OUTPUT\"\n env:\n GH_TOKEN: ${{ steps.generate-token.outputs.token }}\n\n - name: Configure Git for Hyper Gonk\n run: |\n git config user.name \"${{ steps.generate-token.outputs.app-slug }}[bot]\"\n git config user.email \"${{ steps.get-user-id.outputs.user-id }}+${{ steps.generate-token.outputs.app-slug }}[bot]@users.noreply.github.com\"\n\n - name: Check if merge is needed\n id: check-merge\n run: |\n git fetch origin ${{ matrix.branch }}\n if git merge-base --is-ancestor origin/main origin/${{ matrix.branch }}; then\n echo \"Branch ${{ matrix.branch }} is already up-to-date with main\"\n echo \"needs_merge=false\" >> $GITHUB_OUTPUT\n else\n echo \"Branch ${{ matrix.branch }} needs updates from main\"\n echo \"needs_merge=true\" >> $GITHUB_OUTPUT\n fi\n\n - name: Create and push merge branch\n if: steps.check-merge.outputs.needs_merge == 'true'\n id: merge\n run: |\n git checkout ${{ matrix.branch }}\n\n # Attempt merge, capturing if there are conflicts\n if git merge origin/main --no-edit; then\n echo \"has_conflicts=false\" >> $GITHUB_OUTPUT\n else\n echo \"::warning::Merge conflict detected for ${{ matrix.branch }}\"\n echo \"has_conflicts=true\" >> $GITHUB_OUTPUT\n # Stage all files including conflicts to allow branch creation\n git add -A\n git commit --no-edit || true\n fi\n\n git branch -M main-to-${{ matrix.branch }}\n git push -fu origin main-to-${{ matrix.branch }}\n env:\n GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}\n\n - name: Create or update PR\n if: steps.check-merge.outputs.needs_merge == 'true'\n run: |\n PR_EXISTS=$(gh pr list --base ${{ matrix.branch }} --head main-to-${{ matrix.branch }} --json number --jq '.[0].number')\n\n if [ \"${{ steps.merge.outputs.has_conflicts }}\" == \"true\" ]; then\n BODY=\"⚠️ **This PR has merge conflicts that need to be resolved manually.**\n\n This PR was automatically created to merge changes from \\`main\\` into \\`${{ matrix.branch }}\\`.\"\n else\n BODY=\"This PR was automatically created to merge changes from \\`main\\` into \\`${{ matrix.branch }}\\`.\"\n fi\n\n if [ -z \"$PR_EXISTS\" ]; then\n gh pr create \\\n --base ${{ matrix.branch }} \\\n --head main-to-${{ matrix.branch }} \\\n --title \"chore: merge main into ${{ matrix.branch }}\" \\\n --body \"$BODY\" \\\n --draft\n echo \"Created new PR for ${{ matrix.branch }}\"\n else\n echo \"PR #$PR_EXISTS already exists for ${{ matrix.branch }}\"\n fi\n env:\n GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}\n" }, { "path": ".github/workflows/e2e-smoke.yml", "content": "name: e2e-smoke\n\n# Fast subset of the wallet-connected E2E suite. Runs on every PR as a gate.\n# The full wallet E2E matrix runs from .github/workflows/e2e-wallet-full.yml.\n\non:\n workflow_call:\n workflow_dispatch:\n\njobs:\n e2e-smoke:\n timeout-minutes: 10\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: Restore build cache\n uses: actions/cache/restore@v4\n with:\n path: .next/\n key: ${{ runner.os }}-nextjs-build-${{ hashFiles('src/**', 'pnpm-lock.yaml', 'next.config.js', 'tsconfig.json') }}\n\n - name: Get Playwright version\n id: pw-version\n run: echo \"version=$(pnpm exec playwright --version)\" >> $GITHUB_OUTPUT\n\n - name: Cache Playwright browsers\n id: pw-cache\n uses: actions/cache@v4\n with:\n path: ~/.cache/ms-playwright\n key: ${{ runner.os }}-playwright-${{ steps.pw-version.outputs.version }}\n\n - name: Install Playwright browsers\n if: steps.pw-cache.outputs.cache-hit != 'true'\n run: pnpm exec playwright install chromium\n\n - name: Install Playwright system dependencies\n run: pnpm exec playwright install-deps chromium\n\n - name: Run E2E wallet smoke\n run: pnpm run test:e2e:wallet:smoke\n env:\n NEXT_PUBLIC_WALLET_CONNECT_ID: ${{ secrets.NEXT_PUBLIC_WALLET_CONNECT_ID }}\n\n - name: Upload report on failure\n if: failure()\n uses: actions/upload-artifact@v4\n with:\n name: e2e-smoke-report-${{ github.run_attempt }}\n path: playwright-report\n retention-days: 7\n" }, { "path": ".github/workflows/e2e-wallet-full.yml", "content": "name: e2e-wallet-full\n\n# Full wallet-connected E2E suite across chromium/firefox/webkit.\n# Called from ci.yml on push-to-main/merge_group/workflow_dispatch.\n# On PR, only the smoke subset runs (see e2e-smoke.yml).\n\non:\n workflow_call:\n workflow_dispatch:\n\njobs:\n e2e-wallet:\n timeout-minutes: 25\n runs-on: ubuntu-latest\n strategy:\n fail-fast: false\n matrix:\n # webkit disabled: prod build serves CSP `upgrade-insecure-requests`,\n # which webkit strictly honors on localhost (chromium/firefox special-\n # case it). All chunks get upgraded to https://localhost and fail SSL,\n # so the app never hydrates. Re-enable once we have a build path that\n # drops the upgrade directive for e2e without weakening prod CSP.\n browser: [chromium, firefox]\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: Restore build cache\n uses: actions/cache/restore@v4\n with:\n path: .next/\n key: ${{ runner.os }}-nextjs-build-${{ hashFiles('src/**', 'pnpm-lock.yaml', 'next.config.js', 'tsconfig.json') }}\n\n - name: Get Playwright version\n id: pw-version\n run: echo \"version=$(pnpm exec playwright --version)\" >> $GITHUB_OUTPUT\n\n - name: Cache Playwright browsers\n id: pw-cache\n uses: actions/cache@v4\n with:\n path: ~/.cache/ms-playwright\n key: ${{ runner.os }}-playwright-${{ steps.pw-version.outputs.version }}-${{ matrix.browser }}\n\n - name: Install Playwright browsers\n if: steps.pw-cache.outputs.cache-hit != 'true'\n run: pnpm exec playwright install ${{ matrix.browser }}\n\n - name: Install Playwright system dependencies\n run: pnpm exec playwright install-deps ${{ matrix.browser }}\n\n - name: Run E2E wallet tests\n run: pnpm exec playwright test tests/e2e-wallet --project=${{ matrix.browser }}\n env:\n NEXT_PUBLIC_WALLET_CONNECT_ID: ${{ secrets.NEXT_PUBLIC_WALLET_CONNECT_ID }}\n\n - name: Upload report\n if: ${{ !cancelled() }}\n uses: actions/upload-artifact@v4\n with:\n name: e2e-wallet-report-${{ matrix.browser }}-${{ github.run_attempt }}\n path: playwright-report\n retention-days: 14\n\n notify-failure:\n if: ${{ always() && needs.e2e-wallet.result == 'failure' }}\n needs: [e2e-wallet]\n runs-on: ubuntu-latest\n steps:\n - name: Notify Slack on e2e-wallet failure\n uses: slackapi/slack-github-action@v3\n with:\n webhook: ${{ secrets.E2E_SLACK_WEBHOOK }}\n webhook-type: incoming-webhook\n payload: |\n text: \":alert: Warp UI full e2e-wallet matrix failed — see workflow run for details\"\n blocks:\n - type: \"section\"\n text:\n type: \"mrkdwn\"\n text: \":alert: *Warp UI e2e-wallet full matrix failed*\\n<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|View workflow run #${{ github.run_number }}> on `${{ github.ref_name }}` @ ${{ github.sha }}\"\n" }, { "path": ".github/workflows/e2e.yml", "content": "name: e2e\n\non:\n workflow_call:\n workflow_dispatch:\n\njobs:\n build:\n # Only build when triggered standalone (workflow_dispatch).\n # When called from ci.yml (workflow_call), the build cache is already populated.\n if: ${{ github.event_name == 'workflow_dispatch' }}\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: Cache build output\n id: build-cache\n uses: actions/cache@v4\n with:\n path: .next/\n key: ${{ runner.os }}-nextjs-build-${{ hashFiles('src/**', 'pnpm-lock.yaml', 'next.config.js', 'tsconfig.json') }}\n\n - name: build\n if: steps.build-cache.outputs.cache-hit != 'true'\n run: pnpm run build\n env:\n NEXT_PUBLIC_WALLET_CONNECT_ID: ${{ secrets.NEXT_PUBLIC_WALLET_CONNECT_ID }}\n\n e2e:\n timeout-minutes: 10\n needs: [build]\n if: ${{ !cancelled() && (needs.build.result == 'success' || needs.build.result == 'skipped') }}\n runs-on: ubuntu-latest\n strategy:\n fail-fast: false\n matrix:\n shardIndex: [1, 2]\n shardTotal: [2]\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Get pnpm store directory\n id: pnpm-store\n shell: bash\n run: echo \"path=$(pnpm store path)\" >> $GITHUB_OUTPUT\n\n - name: Cache pnpm store\n uses: actions/cache@v4\n with:\n path: ${{ steps.pnpm-store.outputs.path }}\n key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-pnpm-store-\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: Restore build cache\n uses: actions/cache/restore@v4\n with:\n path: .next/\n key: ${{ runner.os }}-nextjs-build-${{ hashFiles('src/**', 'pnpm-lock.yaml', 'next.config.js', 'tsconfig.json') }}\n\n - name: Get Playwright version\n id: pw-version\n run: echo \"version=$(pnpm exec playwright --version)\" >> $GITHUB_OUTPUT\n\n - name: Cache Playwright browsers\n id: pw-cache\n uses: actions/cache@v4\n with:\n path: ~/.cache/ms-playwright\n key: ${{ runner.os }}-playwright-${{ steps.pw-version.outputs.version }}\n\n - name: Install Playwright browsers\n if: steps.pw-cache.outputs.cache-hit != 'true'\n run: pnpm exec playwright install chromium\n\n - name: Install Playwright system dependencies\n run: pnpm exec playwright install-deps chromium\n\n - name: Run Playwright tests\n run: pnpm exec playwright test --project=chromium --shard=${{ matrix.shardIndex }}/${{ matrix.shardTotal }}\n\n - name: Upload blob report\n if: ${{ !cancelled() }}\n uses: actions/upload-artifact@v4\n with:\n name: blob-report-${{ matrix.shardIndex }}\n path: blob-report\n retention-days: 1\n\n merge-reports:\n if: ${{ !cancelled() }}\n needs: [e2e]\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n - uses: pnpm/action-setup@v4\n - uses: actions/setup-node@v6\n with:\n node-version-file: '.nvmrc'\n\n - name: Install dependencies\n run: pnpm install --frozen-lockfile\n\n - name: Download blob reports\n uses: actions/download-artifact@v4\n with:\n path: all-blob-reports\n pattern: blob-report-*\n merge-multiple: true\n\n - name: Merge into HTML report\n run: pnpm exec playwright merge-reports --reporter html ./all-blob-reports\n\n - name: Upload HTML report\n uses: actions/upload-artifact@v4\n with:\n name: playwright-report-attempt-${{ github.run_attempt }}\n path: playwright-report\n retention-days: 14\n" }, { "path": ".github/workflows/update-hyperlane-deps.yml", "content": "name: Update Hyperlane Dependencies\n\non:\n schedule:\n # Run weekly on Mondays at 9 AM UTC\n - cron: '0 9 * * 1'\n workflow_dispatch: # Allow manual triggering\n\njobs:\n update-dependencies:\n runs-on: ubuntu-latest\n permissions:\n contents: write\n pull-requests: write\n\n steps:\n - name: Generate GitHub App Token\n id: generate-token\n uses: actions/create-github-app-token@v2\n with:\n app-id: ${{ secrets.HYPER_GONK_APP_ID }}\n private-key: ${{ secrets.HYPER_GONK_PRIVATE_KEY }}\n\n - name: Checkout repository\n uses: actions/checkout@v6\n with:\n ref: main\n token: ${{ steps.generate-token.outputs.token }}\n\n - name: Get GitHub App User ID\n id: get-user-id\n run: echo \"user-id=$(gh api /users/${{ steps.generate-token.outputs.app-slug }}[bot] --jq .id)\" >> \"$GITHUB_OUTPUT\"\n env:\n GH_TOKEN: ${{ steps.generate-token.outputs.token }}\n\n - name: Configure Git\n run: |\n git config user.name \"${{ steps.generate-token.outputs.app-slug }}[bot]\"\n git config user.email \"${{ steps.get-user-id.outputs.user-id }}+${{ steps.generate-token.outputs.app-slug }}[bot]@users.noreply.github.com\"\n\n - name: Setup pnpm\n uses: pnpm/action-setup@v4\n\n - name: Setup Node.js\n uses: actions/setup-node@v6\n with:\n node-version: '22'\n\n - name: Get latest SDK, Utils, Registry, and Widgets versions\n id: get-versions\n run: |\n LATEST_SDK=$(pnpm view @hyperlane-xyz/sdk version)\n LATEST_UTILS=$(pnpm view @hyperlane-xyz/utils version)\n LATEST_REGISTRY=$(pnpm view @hyperlane-xyz/registry version)\n LATEST_WIDGETS=$(pnpm view @hyperlane-xyz/widgets version)\n echo \"sdk=$LATEST_SDK\" >> $GITHUB_OUTPUT\n echo \"utils=$LATEST_UTILS\" >> $GITHUB_OUTPUT\n echo \"registry=$LATEST_REGISTRY\" >> $GITHUB_OUTPUT\n echo \"widgets=$LATEST_WIDGETS\" >> $GITHUB_OUTPUT\n echo \"Latest SDK: $LATEST_SDK\"\n echo \"Latest Utils: $LATEST_UTILS\"\n echo \"Latest Registry: $LATEST_REGISTRY\"\n echo \"Latest Widgets: $LATEST_WIDGETS\"\n\n - name: Update package.json with latest versions\n run: |\n npm pkg set dependencies.@hyperlane-xyz/sdk=${{ steps.get-versions.outputs.sdk }}\n npm pkg set dependencies.@hyperlane-xyz/utils=${{ steps.get-versions.outputs.utils }}\n npm pkg set dependencies.@hyperlane-xyz/registry=${{ steps.get-versions.outputs.registry }}\n npm pkg set dependencies.@hyperlane-xyz/widgets=${{ steps.get-versions.outputs.widgets }}\n\n - name: Install dependencies\n run: pnpm install --no-frozen-lockfile\n\n - name: Check for changes and create PR\n env:\n GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}\n run: |\n if ! git diff --quiet; then\n git checkout -b ci/update-hl-deps\n git add -A\n git commit -m \"chore: update Hyperlane deps to SDK ${{ steps.get-versions.outputs.sdk }} and Registry ${{ steps.get-versions.outputs.registry }}\n\n - Update @hyperlane-xyz/sdk to ${{ steps.get-versions.outputs.sdk }}\n - Update @hyperlane-xyz/utils to ${{ steps.get-versions.outputs.utils }}\n - Update @hyperlane-xyz/registry to ${{ steps.get-versions.outputs.registry }}\n - Update @hyperlane-xyz/widgets to ${{ steps.get-versions.outputs.widgets }}\"\n\n git push -fu origin ci/update-hl-deps\n\n PR_TITLE=\"chore: update Hyperlane deps\"\n PR_BODY=\"## Automated Dependency Update\n\n This PR updates the Hyperlane dependencies to their latest versions.\n\n **Updated versions:**\n - \\`@hyperlane-xyz/sdk\\`: \\`${{ steps.get-versions.outputs.sdk }}\\`\n - \\`@hyperlane-xyz/utils\\`: \\`${{ steps.get-versions.outputs.utils }}\\`\n - \\`@hyperlane-xyz/registry\\`: \\`${{ steps.get-versions.outputs.registry }}\\`\n - \\`@hyperlane-xyz/widgets\\`: \\`${{ steps.get-versions.outputs.widgets }}\\`\n\n **Changes include:**\n - Updated \\`package.json\\` with latest Hyperlane package versions\n - Updated \\`pnpm-lock.yaml\\` via \\`pnpm install\\`\n\n ---\n 🤖 This PR was automatically generated by the [update-hyperlane-deps workflow](.github/workflows/update-hyperlane-deps.yml)\"\n\n PR_EXISTS=$(gh pr list --base main --head ci/update-hl-deps --json number --jq length)\n if [ \"$PR_EXISTS\" -eq \"0\" ]; then\n gh pr create \\\n --base main \\\n --head ci/update-hl-deps \\\n --title \"$PR_TITLE\" \\\n --body \"$PR_BODY\"\n else\n echo \"Pull request already exists. Updating title and description...\"\n gh pr edit ci/update-hl-deps \\\n --title \"$PR_TITLE\" \\\n --body \"$PR_BODY\"\n fi\n else\n echo \"No changes detected. Skipping PR creation.\"\n fi\n" }, { "path": ".gitignore", "content": "# dependencies\n/node_modules\ncache/\n.pnpm-store/\n\n# testing\n/coverage\ncoverage.json\n/test/outputs\n\n# next.js\n/.next/\n/out/\n\n# production\n/src/context/*.json\n/artifacts\n/build\n/dist\n\n# misc\n.DS_Store\n*.pem\n\n# debug\nnpm-debug.log*\n.pnpm-debug.log*\n\n# local env files\n.env*\n!.env.example\n\n# vercel\n.vercel\n\n# typescript\n*.tsbuildinfo\n\n.idea\n\n.monorepo-tarballs\n\n.opencode\n.sisyphus\n\n# fonts (downloaded via scripts/fetch-fonts.mjs)\npublic/fonts/\n\n# Playwright\nnode_modules/\n/test-results/\n/playwright-report/\n/blob-report/\n/playwright/.cache/\n/playwright/.auth/\n/.playwright-mcp/\n" }, { "path": ".nvmrc", "content": "v24\n" }, { "path": ".oxfmtrc.json", "content": "{\n \"singleQuote\": true,\n \"sortImports\": {},\n \"sortTailwindcss\": {\n \"functions\": [\"clsx\"]\n },\n \"ignorePatterns\": [\"test/outputs\", \"public\", \"LICENSE.md\"]\n}\n" }, { "path": ".oxlintrc.json", "content": "{\n \"plugins\": [\"typescript\", \"import\", \"react\", \"nextjs\", \"jsx-a11y\"],\n \"rules\": {\n \"camelcase\": \"error\",\n \"guard-for-in\": \"error\",\n \"import/no-cycle\": \"error\",\n \"import/no-self-import\": \"error\",\n \"no-console\": \"warn\",\n \"no-eval\": \"error\",\n \"no-ex-assign\": \"error\",\n \"no-extra-boolean-cast\": \"error\",\n \"no-constant-condition\": \"off\",\n \"typescript/ban-ts-comment\": \"off\",\n \"typescript/explicit-module-boundary-types\": \"off\",\n \"typescript/no-explicit-any\": \"off\",\n \"typescript/no-non-null-assertion\": \"off\",\n \"typescript/no-require-imports\": \"warn\",\n \"typescript/no-unused-vars\": [\n \"error\",\n {\n \"argsIgnorePattern\": \"^_\",\n \"varsIgnorePattern\": \"^_\",\n \"caughtErrorsIgnorePattern\": \"^_\"\n }\n ],\n \"no-unused-vars\": \"off\",\n \"nextjs/no-img-element\": \"off\",\n \"jsx-a11y/alt-text\": \"off\",\n \"jsx-a11y/label-has-associated-control\": \"off\"\n },\n \"ignorePatterns\": [\n \"node_modules\",\n \"dist\",\n \"build\",\n \"coverage\",\n \".next\",\n \"postcss.config.js\",\n \"next.config.js\",\n \"tailwind.config.js\",\n \"sentry.*\"\n ]\n}\n" }, { "path": ".vscode/extensions.json", "content": "{\n \"recommendations\": [\"oxc.oxc-vscode\"],\n \"unwantedRecommendations\": []\n}\n" }, { "path": ".vscode/settings.json", "content": "{\n \"search.exclude\": {\n \"**/node_modules/**\": true\n },\n \"files.exclude\": {\n \"**/*.js.map\": true,\n \"**/*.js\": { \"when\": \"$(basename).ts\" },\n \"**/*.map\": { \"when\": \"$(basename).map\" }\n },\n \"files.watcherExclude\": {\n \"**/.git/objects/**\": true,\n \"**/.git/subtree-cache/**\": true,\n \"**/node_modules/*/**\": true\n },\n \"editor.formatOnSave\": true,\n \"editor.tabSize\": 2,\n \"editor.detectIndentation\": false,\n \"typescript.updateImportsOnFileMove.enabled\": \"always\",\n \"typescript.tsdk\": \"node_modules/typescript/lib\",\n \"[typescript]\": {\n \"editor.defaultFormatter\": \"oxc.oxc-vscode\"\n },\n \"[typescriptreact]\": {\n \"editor.defaultFormatter\": \"oxc.oxc-vscode\"\n },\n \"[javascript]\": {\n \"editor.defaultFormatter\": \"oxc.oxc-vscode\"\n },\n \"[json]\": {\n \"editor.defaultFormatter\": \"oxc.oxc-vscode\"\n },\n \"[jsonc]\": {\n \"editor.defaultFormatter\": \"oxc.oxc-vscode\"\n },\n \"[html]\": {\n \"editor.defaultFormatter\": \"oxc.oxc-vscode\"\n },\n \"[css]\": {\n \"editor.defaultFormatter\": \"oxc.oxc-vscode\"\n },\n \"tailwindCSS.experimental.classRegex\": [[\"clsx\\\\(([^)]*)\\\\)\", \"(?:'|\\\"|`)([^']*)(?:'|\\\"|`)\"]]\n}\n" }, { "path": "AGENTS.md", "content": "# AGENTS.md\n\n**Be extremely concise. Sacrifice grammar for concision. Terse responses preferred. No fluff.**\n\nThis file provides guidance to AI coding assistants when working with code in this repository.\n\n## Project Overview\n\nHyperlane Warp UI Template is a Next.js web application for cross-chain token transfers using [Hyperlane Warp Routes](https://docs.hyperlane.xyz/docs/reference/applications/warp-routes). It enables permissionless bridging of tokens between any supported blockchain.\n\n## Plan Mode\n\n- Make the plan extremely concise. Sacrifice grammar for the sake of concision.\n- At the end of each plan, give me a list of unresolved questions to answer, if any.\n\n## Development Commands\n\n```bash\npnpm install # Install dependencies\npnpm dev # Start development server\npnpm build # Production build\npnpm test # Run tests (vitest)\npnpm lint # ESLint check\npnpm typecheck # TypeScript type checking\npnpm prettier # Format code with Prettier\npnpm clean # Remove build artifacts (dist, cache, .next)\n```\n\n## Architecture\n\n### Stack\n- **Framework**: Next.js 15 with React 18\n- **Styling**: Tailwind CSS + Chakra UI\n- **State**: Zustand with persist middleware (`src/features/store.ts`)\n- **Queries**: TanStack Query\n- **Wallets**: Each blockchain uses distinct, composable wallet providers (EVM/RainbowKit, Solana, Cosmos, Starknet, Radix)\n- **Core Libraries**: `@hyperlane-xyz/sdk`, `@hyperlane-xyz/registry`, `@hyperlane-xyz/widgets`, `@hyperlane-xyz/utils`\n\n### Key Directories\n\n- `src/features/` - Core domain logic organized by feature:\n - `transfer/` - Token transfer flow (form, validation, execution via `useTokenTransfer`)\n - `tokens/` - Token selection, balances, approvals\n - `chains/` - Chain metadata, selection UI\n - `wallet/` - Multi-protocol wallet context providers\n - `warpCore/` - WarpCore configuration assembly\n - `store.ts` - Global Zustand store managing WarpContext, transfers, UI state\n\n- `src/consts/` - Configuration files:\n - `config.ts` - App configuration (feature flags, registry settings)\n - `warpRoutes.yaml` - Warp route token definitions\n - `chains.yaml` / `chains.ts` - Custom chain metadata\n - `app.ts` - App branding (name, colors, fonts)\n\n- `src/components/` - Reusable UI components\n- `src/pages/` - Next.js pages (main UI at `index.tsx`)\n\n### Data Flow\n\n1. **Initialization**: `WarpContextInitGate` loads registry and assembles `WarpCore` from warp route configs\n2. **State Hydration**: Zustand store rehydrates persisted state (chain overrides, transfer history)\n3. **Transfer Flow**: `TransferTokenForm` → `useTokenTransfer` → `WarpCore.getTransferRemoteTxs()` → wallet transaction\n\n### Configuration\n\nEnvironment variables (see `.env.example`):\n- `NEXT_PUBLIC_WALLET_CONNECT_ID` - **Required** for wallet connections\n- `NEXT_PUBLIC_REGISTRY_URL` - **Optional** custom Hyperlane registry URL\n- `NEXT_PUBLIC_RPC_OVERRIDES` - **Optional** JSON map of chain RPC overrides\n\n## Customization\n\nSee `CUSTOMIZE.md` for detailed customization instructions:\n- **Warp Routes**: `src/consts/warpRoutes.yaml` + `warpRouteWhitelist.ts`\n- **Chains**: `src/consts/chains.yaml` or `chains.ts`\n- **Branding**: `src/consts/app.ts`, `tailwind.config.js`, logo files in `src/images/logos/`\n- **Feature Flags**: `src/consts/config.ts` (showTipBox, showAddRouteButton, etc.)\n\n## Testing\n\nTests use Vitest and are co-located with source files using the `*.test.ts` naming convention. Vitest automatically discovers and runs all matching test files.\n\n```bash\n# Run all tests\npnpm test\n\n# Run a single test file\npnpm vitest src/features/transfer/fees.test.ts\n\n# Run tests in watch mode\npnpm vitest --watch\n```\n\n## Engineering Philosophy\n\n### Keep It Simple\nWe handle ONLY the most important cases. Don't add functionality unless it's small or absolutely necessary.\n\n### Error Handling\n- **Expected issues** (external systems, user input): Use explicit error handling, try/catch at boundaries\n- **Unexpected issues** (invalid state, broken invariants): Fail loudly with `throw` or `console.error`\n- **NEVER** add silent fallbacks for unexpected issues - they mask bugs\n\n### Backwards-Compatibility\n| Change Location | Backwards-Compat? | Rationale |\n|-----------------|-------------------|-----------|\n| Local/uncommitted | No | Iteration speed; no external impact |\n| In main unreleased | Preferred | Minimize friction for other developers |\n| Released | Required | Prevent breaking downstream integrations |\n\n## Code Review\n\nFor code review guidelines, see `REVIEW.md`.\n\n### PR Review Comment Format\n\n**Use inline comments** for specific feedback on code changes. Use the GitHub API to post reviews:\n\n```bash\ngh api repos/{owner}/{repo}/pulls/{pr}/reviews --input - << 'EOF'\n{\n \"event\": \"COMMENT\",\n \"body\": \"Overall summary (optional)\",\n \"comments\": [\n {\"path\": \"file.ts\", \"line\": 42, \"body\": \"Specific issue here\"},\n {\"path\": \"file.ts\", \"start_line\": 10, \"line\": 15, \"body\": \"Multi-line comment\"}\n ]\n}\nEOF\n```\n\n| Feedback Type | Where |\n| -------------------- | --------------------------------------- |\n| Specific code issue | Inline comment on that line |\n| Repeated pattern | Inline on first, mention others in body |\n| Architecture concern | Summary body |\n\n**Limitation**: Can only comment on lines in the diff (changed lines). Comments on unchanged code fail.\n\n## Tips for AI Coding Sessions\n\n1. **Run tests incrementally** - `pnpm vitest ` for specific test files\n2. **Check existing patterns** - Search codebase for similar implementations\n3. **Use SDK types** - Import from `@hyperlane-xyz/sdk`, don't redefine\n4. **Zustand for state** - Global state in `src/features/store.ts`\n5. **Keep changes minimal** - Only modify what's necessary; avoid scope creep\n6. **Feature folders** - Domain logic in `src/features/`, not scattered\n7. **Chain-aware addresses** - Only lowercase EVM addresses; Solana/Cosmos are case-sensitive\n8. **Check src/utils/** - Functions like `normalizeAddress`, `isNullish` already exist\n9. **CSP updates** - New external scripts need `next.config.js` CSP header updates\n10. **useQuery patterns** - Use built-in `refetch`, don't create custom refresh state\n11. **Flatten conditionals** - Use early returns instead of nested if/else in JSX\n\n## Verify Before Acting\n\n**Always search the codebase before assuming.** Don't hallucinate file paths, function names, or patterns.\n\n- `grep` or search before claiming \"X doesn't exist\"\n- Read the actual file before suggesting changes to it\n- Check `git log` or blame before assuming why code exists\n- Verify imports exist in `package.json` before using them\n\n## When the AI Gets It Wrong\n\nIf output seems wrong, check:\n\n1. **Did I read the actual file?** Or did I assume its contents?\n2. **Did I search for existing patterns?** The codebase likely has examples\n3. **Am I using stale context?** Re-read files that may have changed\n4. **Did I verify the error message?** Run the command and read actual output\n" }, { "path": "CLAUDE.md", "content": "# CLAUDE.md\n\n**Be extremely concise. Sacrifice grammar for concision. Terse responses preferred. No fluff.**\n\nThis file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.\n\n## Project Overview\n\nHyperlane Warp UI Template is a Next.js web application for cross-chain token transfers using [Hyperlane Warp Routes](https://docs.hyperlane.xyz/docs/reference/applications/warp-routes). It enables permissionless bridging of tokens between any supported blockchain.\n\n## Plan Mode\n\n- Make the plan extremely concise. Sacrifice grammar for the sake of concision.\n- At the end of each plan, give me a list of unresolved questions to answer, if any.\n\n## Development Commands\n\n```bash\npnpm install # Install dependencies\npnpm dev # Start development server\npnpm build # Production build\npnpm test # Run tests (vitest)\npnpm lint # ESLint check\npnpm typecheck # TypeScript type checking\npnpm prettier # Format code with Prettier\npnpm clean # Remove build artifacts (dist, cache, .next)\n```\n\n## Architecture\n\n### Stack\n- **Framework**: Next.js 15 with React 18\n- **Styling**: Tailwind CSS + Chakra UI\n- **State**: Zustand with persist middleware (`src/features/store.ts`)\n- **Queries**: TanStack Query\n- **Wallets**: Each blockchain uses distinct, composable wallet providers (EVM/RainbowKit, Solana, Cosmos, Starknet, Radix)\n- **Core Libraries**: `@hyperlane-xyz/sdk`, `@hyperlane-xyz/registry`, `@hyperlane-xyz/widgets`, `@hyperlane-xyz/utils`\n\n### Key Directories\n\n- `src/features/` - Core domain logic organized by feature:\n - `transfer/` - Token transfer flow (form, validation, execution via `useTokenTransfer`)\n - `tokens/` - Token selection, balances, approvals\n - `chains/` - Chain metadata, selection UI\n - `wallet/` - Multi-protocol wallet context providers\n - `warpCore/` - WarpCore configuration assembly\n - `store.ts` - Global Zustand store managing WarpContext, transfers, UI state\n\n- `src/consts/` - Configuration files:\n - `config.ts` - App configuration (feature flags, registry settings)\n - `warpRoutes.yaml` - Warp route token definitions\n - `chains.yaml` / `chains.ts` - Custom chain metadata\n - `app.ts` - App branding (name, colors, fonts)\n\n- `src/components/` - Reusable UI components\n- `src/pages/` - Next.js pages (main UI at `index.tsx`)\n\n### Data Flow\n\n1. **Initialization**: `WarpContextInitGate` loads registry and assembles `WarpCore` from warp route configs\n2. **State Hydration**: Zustand store rehydrates persisted state (chain overrides, transfer history)\n3. **Transfer Flow**: `TransferTokenForm` → `useTokenTransfer` → `WarpCore.getTransferRemoteTxs()` → wallet transaction\n\n### Configuration\n\nEnvironment variables (see `.env.example`):\n- `NEXT_PUBLIC_WALLET_CONNECT_ID` - **Required** for wallet connections\n- `NEXT_PUBLIC_REGISTRY_URL` - **Optional** custom Hyperlane registry URL\n- `NEXT_PUBLIC_RPC_OVERRIDES` - **Optional** JSON map of chain RPC overrides\n\n## Customization\n\nSee `CUSTOMIZE.md` for detailed customization instructions:\n- **Warp Routes**: `src/consts/warpRoutes.yaml` + `warpRouteWhitelist.ts`\n- **Chains**: `src/consts/chains.yaml` or `chains.ts`\n- **Branding**: `src/consts/app.ts`, `tailwind.config.js`, logo files in `src/images/logos/`\n- **Feature Flags**: `src/consts/config.ts` (showTipBox, showAddRouteButton, etc.)\n\n## Testing\n\nTests use Vitest and are co-located with source files using the `*.test.ts` naming convention. Vitest automatically discovers and runs all matching test files.\n\n```bash\n# Run all tests\npnpm test\n\n# Run a single test file\npnpm vitest src/features/transfer/fees.test.ts\n\n# Run tests in watch mode\npnpm vitest --watch\n```\n\n## Engineering Philosophy\n\n### Keep It Simple\nWe handle ONLY the most important cases. Don't add functionality unless it's small or absolutely necessary.\n\n### Error Handling\n- **Expected issues** (external systems, user input): Use explicit error handling, try/catch at boundaries\n- **Unexpected issues** (invalid state, broken invariants): Fail loudly with `throw` or `console.error`\n- **NEVER** add silent fallbacks for unexpected issues - they mask bugs\n\n### Backwards-Compatibility\n| Change Location | Backwards-Compat? | Rationale |\n|-----------------|-------------------|-----------|\n| Local/uncommitted | No | Iteration speed; no external impact |\n| In main unreleased | Preferred | Minimize friction for other developers |\n| Released | Required | Prevent breaking downstream integrations |\n\n## Tips for Claude Code Sessions\n\n1. **Run tests incrementally** - `pnpm vitest ` for specific test files\n2. **Check existing patterns** - Search codebase for similar implementations\n3. **Use SDK types** - Import from `@hyperlane-xyz/sdk`, don't redefine\n4. **Zustand for state** - Global state in `src/features/store.ts`\n5. **Keep changes minimal** - Only modify what's necessary; avoid scope creep\n6. **Feature folders** - Domain logic in `src/features/`, not scattered\n7. **Chain-aware addresses** - Only lowercase EVM addresses; Solana/Cosmos are case-sensitive\n8. **Check src/utils/** - Functions like `normalizeAddress`, `isNullish` already exist\n9. **CSP updates** - New external scripts need `next.config.js` CSP header updates\n10. **useQuery patterns** - Use built-in `refetch`, don't create custom refresh state\n11. **Flatten conditionals** - Use early returns instead of nested if/else in JSX\n\n## Verify Before Acting\n\n**Always search the codebase before assuming.** Don't hallucinate file paths, function names, or patterns.\n\n- `grep` or search before claiming \"X doesn't exist\"\n- Read the actual file before suggesting changes to it\n- Check `git log` or blame before assuming why code exists\n- Verify imports exist in `package.json` before using them\n\n## When Claude Gets It Wrong\n\nIf output seems wrong, check:\n\n1. **Did I read the actual file?** Or did I assume its contents?\n2. **Did I search for existing patterns?** The codebase likely has examples\n3. **Am I using stale context?** Re-read files that may have changed\n4. **Did I verify the error message?** Run the command and read actual output\n" }, { "path": "CUSTOMIZE.md", "content": "# Customizing tokens and branding\n\nFind below instructions for customizing the token list and branding assets of this app.\n\n## Registry\n\nBy default, the app will use the canonical Hyperlane registry published on NPM. See `package.json` for the precise version.\n\nTo use custom chains or custom warp routes, you can either configure a different registry using the `NEXT_PUBLIC_REGISTRY_URL` and `NEXT_PUBLIC_REGISTRY_BRANCH` environment variables or define them manually (see the next two sections).\n\n## Custom Warp Route Configs\n\nThis app requires a set of warp route configs to function. The configs are located in `./src/consts/warpRoutes.yaml` and `./src/consts/warpRoutes.ts`. The output artifacts of a warp route deployment using the [Hyperlane CLI](https://www.npmjs.com/package/@hyperlane-xyz/cli) can be used here.\n\nIn addition to defining your warp route configs, you can control which routes display in the UI via the `warpRouteWhitelist.ts` file.\n\n## Custom Chain Configs\n\nBy default, the app will use only the chains that are included in the configured registry and included in your warp routes.\n\nTo add support for additional chains, or to override a chain's properties (such as RPC URLs), add chain metadata to either `./src/consts/chains.ts` or `./src/consts/chains.yaml`. The same chain configs used in the [Hyperlane CLI](https://www.npmjs.com/package/@hyperlane-xyz/cli) will work here. You may also add an optional `logoURI` field to a chain config to show a custom logo image in the app.\n\n## Default Multi-Collateral Warp Route\n\nBy default, if there are multiples multi-collateral routes surfacing the same asset, the application will pick the token with the lowest fee and the highest collateral in the destination.\n\nYou can override this behavior by updating the file `./src/consts/defaultMultiCollateralRoutes.ts` with an object that includes the `chainName`, `collateralAddressOrDenom` (or just `native` as key) and the default `addressOrDenom`. If there is a matching `origin` and `destination`, `getTransferToken` will pick this route as a priority.\n\n## Tip Card\n\nThe content of the tip card above the form can be customized in `./src/components/tip/TipCard.tsx`\nOr it can be hidden entirely with the `showTipBox` setting in `./src/consts/config.ts`\n\n## Branding\n\n## App name and description\n\nThe values to describe the app itself (e.g. to WalletConnect) are in `./src/consts/app.ts`\n\n### Color Scheme\n\nTo update the color scheme, make changes in the Tailwind config file at `./tailwind.config.js`\nTo modify just the background color, that can be changed in `./src/consts/app.ts`\n\n### Metadata\n\nThe HTML metadata tags are located in `./src/pages/_document.tsx`\n\n### Title / Name Images\n\nThe logo images you should change are:\n\n- `./src/images/logos/app-logo.svg`\n- `./src/images/logos/app-name.svg`\n- `./src/images/logos/app-title.svg`\n\nThese images are primarily used in the header and footer files:\n\n- `./src/components/nav/Header.tsx`\n- `./src/components/nav/Footer.tsx`\n\n### Social links\n\nThe links used in the footer can be found here: `./src/consts/links.ts`\n\n### Public assets / Favicons\n\nThe images and manifest files under `./public` should also be updated.\n" }, { "path": "LICENSE.md", "content": "Apache License\n==============\n\n_Version 2.0, January 2004_ \n_<>_\n\n### Terms and Conditions for use, reproduction, and distribution\n\n#### 1. Definitions\n\n“License” shall mean the terms and conditions for use, reproduction, and\ndistribution as defined by Sections 1 through 9 of this document.\n\n“Licensor” shall mean the copyright owner or entity authorized by the copyright\nowner that is granting the License.\n\n“Legal Entity” shall mean the union of the acting entity and all other entities\nthat control, are controlled by, or are under common control with that entity.\nFor the purposes of this definition, “control” means **(i)** the power, direct or\nindirect, to cause the direction or management of such entity, whether by\ncontract or otherwise, or **(ii)** ownership of fifty percent (50%) or more of the\noutstanding shares, or **(iii)** beneficial ownership of such entity.\n\n“You” (or “Your”) shall mean an individual or Legal Entity exercising\npermissions granted by this License.\n\n“Source” form shall mean the preferred form for making modifications, including\nbut not limited to software source code, documentation source, and configuration\nfiles.\n\n“Object” form shall mean any form resulting from mechanical transformation or\ntranslation of a Source form, including but not limited to compiled object code,\ngenerated documentation, and conversions to other media types.\n\n“Work” shall mean the work of authorship, whether in Source or Object form, made\navailable under the License, as indicated by a copyright notice that is included\nin or attached to the work (an example is provided in the Appendix below).\n\n“Derivative Works” shall mean any work, whether in Source or Object form, that\nis based on (or derived from) the Work and for which the editorial revisions,\nannotations, elaborations, or other modifications represent, as a whole, an\noriginal work of authorship. For the purposes of this License, Derivative Works\nshall not include works that remain separable from, or merely link (or bind by\nname) to the interfaces of, the Work and Derivative Works thereof.\n\n“Contribution” shall mean any work of authorship, including the original version\nof the Work and any modifications or additions to that Work or Derivative Works\nthereof, that is intentionally submitted to Licensor for inclusion in the Work\nby the copyright owner or by an individual or Legal Entity authorized to submit\non behalf of the copyright owner. For the purposes of this definition,\n“submitted” means any form of electronic, verbal, or written communication sent\nto the Licensor or its representatives, including but not limited to\ncommunication on electronic mailing lists, source code control systems, and\nissue tracking systems that are managed by, or on behalf of, the Licensor for\nthe purpose of discussing and improving the Work, but excluding communication\nthat is conspicuously marked or otherwise designated in writing by the copyright\nowner as “Not a Contribution.”\n\n“Contributor” shall mean Licensor and any individual or Legal Entity on behalf\nof whom a Contribution has been received by Licensor and subsequently\nincorporated within the Work.\n\n#### 2. Grant of Copyright License\n\nSubject to the terms and conditions of this License, each Contributor hereby\ngrants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,\nirrevocable copyright license to reproduce, prepare Derivative Works of,\npublicly display, publicly perform, sublicense, and distribute the Work and such\nDerivative Works in Source or Object form.\n\n#### 3. Grant of Patent License\n\nSubject to the terms and conditions of this License, each Contributor hereby\ngrants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,\nirrevocable (except as stated in this section) patent license to make, have\nmade, use, offer to sell, sell, import, and otherwise transfer the Work, where\nsuch license applies only to those patent claims licensable by such Contributor\nthat are necessarily infringed by their Contribution(s) alone or by combination\nof their Contribution(s) with the Work to which such Contribution(s) was\nsubmitted. If You institute patent litigation against any entity (including a\ncross-claim or counterclaim in a lawsuit) alleging that the Work or a\nContribution incorporated within the Work constitutes direct or contributory\npatent infringement, then any patent licenses granted to You under this License\nfor that Work shall terminate as of the date such litigation is filed.\n\n#### 4. Redistribution\n\nYou may reproduce and distribute copies of the Work or Derivative Works thereof\nin any medium, with or without modifications, and in Source or Object form,\nprovided that You meet the following conditions:\n\n* **(a)** You must give any other recipients of the Work or Derivative Works a copy of\nthis License; and\n* **(b)** You must cause any modified files to carry prominent notices stating that You\nchanged the files; and\n* **(c)** You must retain, in the Source form of any Derivative Works that You distribute,\nall copyright, patent, trademark, and attribution notices from the Source form\nof the Work, excluding those notices that do not pertain to any part of the\nDerivative Works; and\n* **(d)** If the Work includes a “NOTICE” text file as part of its distribution, then any\nDerivative Works that You distribute must include a readable copy of the\nattribution notices contained within such NOTICE file, excluding those notices\nthat do not pertain to any part of the Derivative Works, in at least one of the\nfollowing places: within a NOTICE text file distributed as part of the\nDerivative Works; within the Source form or documentation, if provided along\nwith the Derivative Works; or, within a display generated by the Derivative\nWorks, if and wherever such third-party notices normally appear. The contents of\nthe NOTICE file are for informational purposes only and do not modify the\nLicense. You may add Your own attribution notices within Derivative Works that\nYou distribute, alongside or as an addendum to the NOTICE text from the Work,\nprovided that such additional attribution notices cannot be construed as\nmodifying the License.\n\nYou may add Your own copyright statement to Your modifications and may provide\nadditional or different license terms and conditions for use, reproduction, or\ndistribution of Your modifications, or for any such Derivative Works as a whole,\nprovided Your use, reproduction, and distribution of the Work otherwise complies\nwith the conditions stated in this License.\n\n#### 5. Submission of Contributions\n\nUnless You explicitly state otherwise, any Contribution intentionally submitted\nfor inclusion in the Work by You to the Licensor shall be under the terms and\nconditions of this License, without any additional terms or conditions.\nNotwithstanding the above, nothing herein shall supersede or modify the terms of\nany separate license agreement you may have executed with Licensor regarding\nsuch Contributions.\n\n#### 6. Trademarks\n\nThis License does not grant permission to use the trade names, trademarks,\nservice marks, or product names of the Licensor, except as required for\nreasonable and customary use in describing the origin of the Work and\nreproducing the content of the NOTICE file.\n\n#### 7. Disclaimer of Warranty\n\nUnless required by applicable law or agreed to in writing, Licensor provides the\nWork (and each Contributor provides its Contributions) on an “AS IS” BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied,\nincluding, without limitation, any warranties or conditions of TITLE,\nNON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are\nsolely responsible for determining the appropriateness of using or\nredistributing the Work and assume any risks associated with Your exercise of\npermissions under this License.\n\n#### 8. Limitation of Liability\n\nIn no event and under no legal theory, whether in tort (including negligence),\ncontract, or otherwise, unless required by applicable law (such as deliberate\nand grossly negligent acts) or agreed to in writing, shall any Contributor be\nliable to You for damages, including any direct, indirect, special, incidental,\nor consequential damages of any character arising as a result of this License or\nout of the use or inability to use the Work (including but not limited to\ndamages for loss of goodwill, work stoppage, computer failure or malfunction, or\nany and all other commercial damages or losses), even if such Contributor has\nbeen advised of the possibility of such damages.\n\n#### 9. Accepting Warranty or Additional Liability\n\nWhile redistributing the Work or Derivative Works thereof, You may choose to\noffer, and charge a fee for, acceptance of support, warranty, indemnity, or\nother liability obligations and/or rights consistent with this License. However,\nin accepting such obligations, You may act only on Your own behalf and on Your\nsole responsibility, not on behalf of any other Contributor, and only if You\nagree to indemnify, defend, and hold each Contributor harmless for any liability\nincurred by, or claims asserted against, such Contributor by reason of your\naccepting any such warranty or additional liability.\n\n_END OF TERMS AND CONDITIONS_\n\n### APPENDIX: How to apply the Apache License to your work\n\nTo apply the Apache License to your work, attach the following boilerplate\nnotice, with the fields enclosed by brackets `[]` replaced with your own\nidentifying information. (Don't include the brackets!) The text should be\nenclosed in the appropriate comment syntax for the file format. We also\nrecommend that a file or class name and description of purpose be included on\nthe same “printed page” as the copyright notice for easier identification within\nthird-party archives.\n\n Copyright [yyyy] [name of copyright owner]\n \n Licensed under the Apache License, Version 2.0 (the \"License\");\n you may not use this file except in compliance with the License.\n You may obtain a copy of the License at\n \n http://www.apache.org/licenses/LICENSE-2.0\n \n Unless required by applicable law or agreed to in writing, software\n distributed under the License is distributed on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n See the License for the specific language governing permissions and\n limitations under the License.\n\n" }, { "path": "README.md", "content": "# Hyperlane Warp Route UI Template\n\nThis repo contains an example web interface for interchain tokens built with [Hyperlane Warp Route](https://docs.hyperlane.xyz/docs/reference/applications/warp-routes). Warp is a framework to permissionlessly bridge tokens to any chain.\n\n## Architecture\n\nThis app is built with Next & React, Wagmi, RainbowKit, and the Hyperlane SDK.\n\n- Constants that you may want to change are in `./src/consts/`, see the following Customization section for details.\n- The index page is located at `./src/pages/index.tsx`\n- The primary features are implemented in `./src/features/`\n\n## Customization\n\nSee [CUSTOMIZE.md](./CUSTOMIZE.md) for details about adjusting the tokens and branding of this app.\n\n## Development\n\n### Setup\n\n#### Configure\n\nYou need a `projectId` from the WalletConnect Cloud to run the Hyperlane Warp Route UI. Sign up to [WalletConnect Cloud](https://cloud.walletconnect.com) to create a new project.\n\n#### Build\n\n```sh\n# Install dependencies\npnpm install\n\n# Build Next project\npnpm run build\n```\n\n### Run\n\nYou can add `.env.local` file next to `.env.example` where you set `projectId` copied from WalletConnect Cloud.\n\n```sh\n# Start the Next dev server\npnpm run dev\n# Or with a custom projectId\nNEXT_PUBLIC_WALLET_CONNECT_ID= pnpm run dev\n```\n\n### Test\n\n```sh\n# Run unit tests\npnpm test\n\n# Run E2E tests (reuses running dev server, or starts one via Playwright)\npnpm test:e2e\n\n# Run E2E tests with headed browser and slow motion for debugging\nSLOW_MO=2000 pnpm test:e2e --headed --workers=1\n\n# Run a single E2E test file with headed browser\nSLOW_MO=2000 pnpm test:e2e --headed --workers=1 tests/wallet-connect/protocol-wallet-modals.spec.ts\n\n# Lint check code\npnpm run lint\n\n# Check code types\npnpm run typecheck\n```\n\n### Format\n\n```sh\n# Format code using Prettier\npnpm run prettier\n```\n\n### Clean / Reset\n\n```sh\n# Delete build artifacts to start fresh\npnpm run clean\n```\n\n### Local package linking to hyperlane-monorepo\n\nIf you have to make changes to the widgets package to edit e.g. the Connect Button or other components linking\nthe widgets package locally to test it is necessary. To do that you can run the following commands\n\n```sh\n# Link monorepo packages with the warp-ui\npnpm link:monorepo\n# Unlink packages again after testing\npnpm unlink:monorepo\n```\n\n## Embed Widget\n\nThe Warp UI can be embedded as an iframe on any website, giving your users a bridge experience directly in your app.\n\n### Setup\n\nOnce deployed (e.g., to Vercel), the embed is available at `/embed`:\n\n```html\n\n```\n\nYou can pre-select transfer routes using query params:\n\n```text\n/embed?origin=ethereum&destination=arbitrum&originToken=USDC&destinationToken=USDC\n```\n\n### Theme Customization\n\nCustomize colors via URL params (hex values without `#`):\n\n| Param | Description | Default (light) |\n| ------------ | ---------------------------------------------- | --------------- |\n| `accent` | Primary/accent color (buttons, headers, links) | `9A0DFF` |\n| `bg` | Page background | transparent |\n| `card` | Card/surface background | `ffffff` |\n| `text` | Text color | `010101` |\n| `buttonText` | Button text color | `ffffff` |\n| `border` | Border color | `BFBFBF40` |\n| `error` | Error state color | `dc2626` |\n| `mode` | `dark` or `light` — applies preset defaults | `light` |\n\n**Examples:**\n\n```html\n\n