Upgrade to Arcium 0.6.3

Arcium 0.6.3 fixes the timeout bug from 0.6.2 where arcium test ignored
Anchor.toml's startup_wait setting. This should allow GitHub Actions to pass
with the 300 second timeout configured in Anchor.toml.

Changes:
- Update GitHub Actions workflow to download arcium 0.6.3 binary
- Update README to reflect 0.6.3 fixes the timeout issue
- Update run-tests.bash comments to reference 0.6.3
- Update helpers.ts header comment to 0.6.3
- Note: arcup should work in 0.6.3 (bootstrap bug fixed)
- finalize_computation_definition instruction now requires a third account
  (comp_def_raw) - the first raw circuit account must exist before finalizing
- Updated Arcium IDL from arcium-client 0.6.3
- Use arcup to install Arcium 0.6.3 (bootstrap bug fixed)
- No longer need direct binary download hack from 0.6.2
- Updated buildFinalizeCompDefInstruction to include comp_def_raw account

Author: mikemaccana

.github/workflows/test.yml

@@ -13,25 +13,15 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      # Use setup-arcium@v0.5.4 to install Rust, Solana, Anchor, and arcup
-      # Then override with Arcium 0.6.2 binary since arcup 0.6.2 has bootstrap bug
+      # Use setup-arcium to install Rust, Solana, Anchor, and Arcium
       - uses: arcium-hq/setup-arcium@v0.5.4
         with:
           runner-arch-os: "x86_64_linux"
-          arcium-version: "0.5.4"
+          arcium-version: "0.6.3"
           solana-cli-version: "2.3.11"
           anchor-version: "0.32.1"
           node-version: "22.12.0"
 
-      # Override with Arcium 0.6.2 binary
-      # arcup 0.6.2 has bootstrap bug (panics with "index not found" at arcup/src/config.rs:29:51)
-      # so we download the 0.6.2 binary directly instead of using arcup
-      - name: Override with Arcium CLI 0.6.2
-        run: |
-          curl "https://bin.arcium.com/download/arcium_x86_64_linux_0.6.2" -o ~/.cargo/bin/arcium
-          chmod +x ~/.cargo/bin/arcium
-          arcium --version
-
       # Verify Docker is running and can pull images
       # Arcium requires Docker to run MPC nodes during tests
       - name: Verify Docker

Anchor.toml

@@ -21,8 +21,8 @@ wallet = "~/.config/solana/id.json"
 test = "npx tsx tests/election.ts"
 
 [test]
-# GitHub Actions environment can be very slow - 300s (5 minutes) allows Solana localnet
-# and Arcium MPC nodes enough time to initialize. Local development typically uses ~90s.
-startup_wait = 300000
+# GitHub Actions can be extremely slow - 10 minutes allows Solana localnet and Arcium
+# MPC nodes time to initialize on slow CI runners. Local development uses ~2 minutes.
+startup_wait = 600000
 shutdown_wait = 2000
 upgradeable = false

README.md

@@ -1,7 +1,7 @@
 # Private Elections on Solana with Arcium
 
 > [!NOTE]
-> Tests work on local machines but currently fail on GitHub Actions due to a bug in Arcium CLI 0.6.2 where it ignores Anchor.toml's `startup_wait` setting and uses a hardcoded ~60 second timeout. GitHub Actions runners are too slow for this timeout. Tests pass locally with the 300 second timeout configured in Anchor.toml.
+> This project uses Arcium 0.6.3. GitHub Actions CI runners can be very slow and use a 600 second (10 minute) startup_wait configured in Anchor.toml. Local development typically completes in ~2 minutes.
 
 Based on the https://github.com/arcium-hq/examples 'voting' app with a [significant number of fixes](https://github.com/quiknode-labs/arcium-election/commits/main/).
 
@@ -15,11 +15,12 @@ Prerequisites:
 
 Run `npm test`. That script will:
 
-- Set the correct Arcium version (0.4.0)
-- Set the correct Anchor version (0.32.1)
-- Unset RUSTUP_TOOLCHAIN to use Arcium's custom Rust version
-- Remove the old test-ledger, so the old compdef accounts are cleared out
-- Run `arcium test` to build and run the tests
+- Set the correct Anchor version (0.32.1) if avm is available
+- Unset RUSTUP_TOOLCHAIN to use Rust 1.92.0 (from rust-toolchain.toml)
+- Kill any running Solana validator and remove test ledger for clean state
+- Remove Docker containers to clear cached MXE state
+- Build the program and generate Codama client
+- Run `arcium test` to test with Arcium 0.6.3
 
 ## How the Election program works, and how Arcium works
 

run-tests.bash

@@ -20,8 +20,8 @@ set -euo pipefail
 #  'Program 11111111111111111111111111111111 invoke [3]'
 #  'Allocate: account Address { address: FLpEeHKkzCKwVvC7LMV3GBSLAsmhWSvEx2z4PYKWZk6U, base: None } already in use'
 
-# Arcium version is set by directly installing the 0.6.2 binary (in GitHub Actions)
-# or by the user having arcium 0.6.2 in their PATH (local development)
+# Arcium version is set by directly installing the 0.6.3 binary (in GitHub Actions)
+# or by the user having arcium 0.6.3+ in their PATH (local development)
 
 # TODO: Upgrade to Agave 3.x when resolved
 # Currently using Agave 2.3.11 due to Agave 3.x panic with bind-address 0.0.0.0
@@ -38,17 +38,6 @@ fi
 # to ensure we use stable Rust 1.92.0 which has select_unpredictable stabilized
 unset RUSTUP_TOOLCHAIN
 
-# TODO: Remove --platform linux/amd64 workaround when Arcium publishes ARM64 Docker images
-# BUG: Arcium 0.6.2 Docker images (arx-node:latest, trusted-dealer:latest) only support amd64
-# This causes "no matching manifest for linux/arm64/v8" errors on Apple Silicon Macs
-# Workaround: Pre-pull images with --platform flag to force Rosetta 2 emulation
-# The images need to be pulled before arcium test starts docker compose
-if [[ $(uname -m) == "arm64" ]]; then
-  echo "Detected Apple Silicon (ARM64), pulling amd64 Docker images via Rosetta 2..."
-  docker pull --platform linux/amd64 arcium/trusted-dealer:latest > /dev/null 2>&1
-  docker pull --platform linux/amd64 arcium/arx-node:latest > /dev/null 2>&1
-fi
-
 # Kill any running validator process and wait for it to terminate
 if pgrep -f "solana-test-validator" > /dev/null; then
   # Send TERM signal and wait for process to terminate

tests/arcium-solana-kit/arcium.json

@@ -2,7 +2,7 @@
   "address": "Arcj82pX7HxYKLR92qvgZUAd7vGS1k4hQvAFcPATFdEQ",
   "metadata": {
     "name": "arcium",
-    "version": "0.6.2",
+    "version": "0.6.3",
     "spec": "0.1.0",
     "description": "The Arcium program"
   },
@@ -1090,6 +1090,10 @@
         {
           "name": "mxe_program",
           "type": "pubkey"
+        },
+        {
+          "name": "output_len_bytes",
+          "type": "u32"
         }
       ]
     },
@@ -1863,6 +1867,55 @@
               }
             ]
           }
+        },
+        {
+          "name": "comp_def_raw",
+          "docs": [
+            "At least the first raw circuit account must exist before finalizing"
+          ],
+          "pda": {
+            "seeds": [
+              {
+                "kind": "const",
+                "value": [
+                  67,
+                  111,
+                  109,
+                  112,
+                  117,
+                  116,
+                  97,
+                  116,
+                  105,
+                  111,
+                  110,
+                  68,
+                  101,
+                  102,
+                  105,
+                  110,
+                  105,
+                  116,
+                  105,
+                  111,
+                  110,
+                  82,
+                  97,
+                  119
+                ]
+              },
+              {
+                "kind": "account",
+                "path": "comp_def_acc"
+              },
+              {
+                "kind": "const",
+                "value": [
+                  0
+                ]
+              }
+            ]
+          }
         }
       ],
       "args": [

tests/arcium-solana-kit/helpers.ts

@@ -22,7 +22,7 @@ const arciumIdl = JSON.parse(await readFile(arciumIdlPath, "utf-8"));
 /**
  * All Arcium helper functions for working with Solana Kit.
  * Re-implementation of @arcium-hq/client without web3.js dependency.
- * Updated for Arcium 0.6.2
+ * Updated for Arcium 0.6.3
  */
 
 const MEMPOOL_SEED = "Mempool";
@@ -503,10 +503,12 @@ export const awaitComputationFinalization = async (
  * Re-implementation of @arcium-hq/client's buildFinalizeCompDefTx without Anchor.
  *
  * This function creates a Solana Kit instruction for the finalize_computation_definition
- * instruction from the Arcium IDL. The instruction structure from IDL:
+ * instruction from the Arcium IDL. The instruction structure from IDL (0.6.3):
  * - Discriminator: [174, 66, 159, 51, 199, 243, 219, 38]
  * - Args: comp_offset (u32), mxe_program (pubkey)
- * - Accounts: signer (writable, signer), comp_def_acc (writable, PDA)
+ * - Accounts: signer (writable, signer), comp_def_acc (writable, PDA), comp_def_raw (PDA)
+ *
+ * Breaking change in 0.6.3: Added comp_def_raw as third account (PDA at index 0)
  *
  * @param connection - The Kite connection
  * @param signer - The signer KeyPairSigner
@@ -540,12 +542,15 @@ export const buildFinalizeCompDefInstruction = async (
     new Uint8Array(offsetBytes)
   );
 
+  const compDefRaw = await getComputationDefinitionRawAddress(connection, compDefAcc, 0);
+
   return {
     programAddress: ARCIUM_PROGRAM_ID,
     data: instructionData,
     accounts: [
       { address: signer.address, role: AccountRole.WRITABLE_SIGNER },
       { address: compDefAcc, role: AccountRole.WRITABLE },
+      { address: compDefRaw, role: AccountRole.READONLY },
     ],
   };
 };