feat: passkey support in explorer

.github/workflows/main.yml

@@ -43,13 +43,10 @@ jobs:
             env: testnet
           - app: fee-payer
             env: moderato
-          - app: fee-payer
-            env: mainnet
           #### other (single-env-apps)
-          - app: contract-verification
-          - app: key-manager
           - app: og
           - app: tokenlist
+          - app: contract-verification
 
     steps:
       - uses: actions/checkout@v6

.github/workflows/pull-request.yml

@@ -35,8 +35,6 @@ jobs:
             env: moderato
           - app: explorer
             env: devnet
-          - app: explorer
-            env: presto
           #### fee-payer
           - app: fee-payer
             env: privy
@@ -88,68 +86,9 @@ jobs:
           environment: ${{ env.CLOUDFLARE_ENV }}
           command: versions upload
 
-      - name: Save Deployment Info
-        if: always()
-        shell: bash
-        run: |
-          mkdir -p deployment-info
-
-          if [[ "${{ steps.changes.outputs.relevant }}" != "true" ]]; then
-            STATUS="skipped"
-            DEPLOYMENT_URL=""
-            ALIAS_URL=""
-          elif [[ "${{ steps.deploy.outcome }}" == "success" ]]; then
-            STATUS="success"
-            DEPLOYMENT_URL="${{ steps.deploy.outputs.deployment-url }}"
-            ALIAS_URL="${{ steps.deploy.outputs.pages-deployment-alias-url }}"
-          else
-            STATUS="failed"
-            DEPLOYMENT_URL=""
-            ALIAS_URL=""
-          fi
-
-          FILENAME="deployment-info/${{ matrix.app }}${{ matrix.env && format('-{0}', matrix.env) || '' }}.json"
-          cat > "$FILENAME" << EOF
-          {
-            "app": "${{ matrix.app }}",
-            "env": "${{ matrix.env }}",
-            "status": "$STATUS",
-            "deployment_url": "$DEPLOYMENT_URL",
-            "deployment_alias_url": "$ALIAS_URL"
-          }
-          EOF
-
-          cat "$FILENAME"
-
-      - name: Upload Deployment Info
-        if: always()
-        uses: actions/upload-artifact@v6
-        with:
-          name: deployment-${{ matrix.app }}${{ matrix.env && format('-{0}', matrix.env) || '' }}
-          path: deployment-info/${{ matrix.app }}${{ matrix.env && format('-{0}', matrix.env) || '' }}.json
-          retention-days: 1
-
-  comment-deployments:
-    name: Post Deployment Table
-    runs-on: ubuntu-latest
-    needs: deploy-preview
-    if: always()
-    permissions:
-      pull-requests: write
-      contents: read
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Download All Deployment Artifacts
-        uses: actions/download-artifact@v7
-        with:
-          pattern: deployment-*
-          path: deployments
-          merge-multiple: true
-
-      - name: Post Deployment Table
-        uses: ./.github/actions/post-deployment-table
+      - name: Comment Preview URL on PR
+        if: steps.changes.outputs.relevant == 'true'
+        uses: moojing/cf-preview-bot@v1
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          deployments-path: deployments
+          deployment_url: ${{ steps.deploy.outputs.deployment-url }}
+          branch_preview_url: ${{ steps.deploy.outputs.pages-deployment-alias-url }}

.github/workflows/test-verification.yml

@@ -3,62 +3,70 @@ name: Test Contract Verification
 on:
   workflow_dispatch:
     inputs:
-      networks:
-        description: "Networks to test (comma-separated: devnet,mainnet,testnet)"
+      rpc-url:
+        description: 'RPC URL'
         required: false
-        default: "devnet,mainnet,testnet"
+        default: 'https://rpc.testnet.tempo.xyz'
       verifier-url:
-        description: "Verifier URL"
+        description: 'Verifier URL'
         required: false
-        default: "https://contracts.porto.workers.dev"
+        default: 'https://contracts.porto.workers.dev'
   schedule:
-    - cron: "0 */6 * * *"
+    - cron: '0 */6 * * *'
+
+defaults:
+  run:
+    shell: bash
+    working-directory: apps/contract-verification
 
 env:
+  ACTIONS_RUNNER_DEBUG: true
+  TEMPO_RPC_URL: ${{ github.event.inputs.rpc-url || 'https://rpc.testnet.tempo.xyz' }}
   VERIFIER_URL: ${{ github.event.inputs.verifier-url || 'https://contracts.porto.workers.dev' }}
 
 jobs:
-  tempo-check:
+  verify-vyper:
+    env:
+      GH_TOKEN: ${{ github.token }}
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        network: [devnet, mainnet, testnet]
-    name: tempo-check (${{ matrix.network }})
     steps:
-      - name: Check if network is selected
-        id: check
-        run: |
-          NETWORKS="${{ github.event.inputs.networks || 'devnet,mainnet,testnet' }}"
-          if [[ "$NETWORKS" == *"${{ matrix.network }}"* ]]; then
-            echo "skip=false" >> "$GITHUB_OUTPUT"
-          else
-            echo "skip=true" >> "$GITHUB_OUTPUT"
-          fi
+      - name: Checkout
+        uses: actions/checkout@v6
 
       - name: Install Foundry
-        if: steps.check.outputs.skip != 'true'
         uses: foundry-rs/foundry-toolchain@master
         with:
           version: nightly
           network: tempo
 
-      - name: Fetch tempo-deploy.sh
-        if: steps.check.outputs.skip != 'true'
-        run: |
-          curl --location \
-            --fail \
-            --silent \
-            --show-error \
-            --request GET \
-            --url https://raw.githubusercontent.com/tempoxyz/tempo-foundry/tempo/.github/scripts/tempo-deploy.sh \
-            --output tempo-deploy.sh
-          chmod +x tempo-deploy.sh
+      - name: Install uv
+        uses: astral-sh/setup-uv@main
+        with:
+          version: latest
+          python-version: '3.14'
+
+      - name: Install vyper Compiler
+        run: uv tool install vyper
+
+      - name: Test Vyper (small counter)
+        run: ./scripts/test-vyper.sh
+
+  verify-solidity:
+    env:
+      GH_TOKEN: ${{ github.token }}
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: apps/contract-verification
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Install Foundry
+        uses: foundry-rs/foundry-toolchain@master
+        with:
+          version: nightly
+          network: tempo
 
-      - name: Run tempo-deploy
-        if: steps.check.outputs.skip != 'true'
-        env:
-          ETH_RPC_URL: ${{ matrix.network == 'mainnet' && secrets.TEMPO_MAINNET_RPC_URL || matrix.network == 'testnet' && secrets.TEMPO_TESTNET_RPC_URL || secrets.TEMPO_DEVNET_RPC_URL }}
-          TEMPO_FEE_TOKEN: ${{ matrix.network == 'mainnet' && '0x20c00000000000000000000016c6514b53947fdc' || '0x20c0000000000000000000000000000000000002' }}
-          VERIFIER_URL: ${{ matrix.network == 'mainnet' && 'https://contracts.tempo.xyz' || env.VERIFIER_URL }}
-        run: ./tempo-deploy.sh
+      - name: Test Solidity
+        run: ./scripts/test-big-boy.sh

.github/workflows/verify.yml

@@ -23,5 +23,3 @@ jobs:
       - name: Check code and types
         run: pnpm gen:types && pnpm check
 
-      - name: Run Tempo Lints
-        run: pnpm lint:tempo

README.md

@@ -10,7 +10,6 @@ Monorepo for Tempo Apps
 | [`apps/fee-payer`](apps/fee-payer) | Fee payer. | [`sponsor.testnet.tempo.xyz`](<https://sponsor.testnet.tempo.xyz>) |
 | [`apps/tokenlist`](apps/tokenlist) | Tempo Tokenlist Registry & API. | [`tokenlist.tempo.xyz`](<https://tokenlist.tempo.xyz>) |
 | [`apps/contract-verification`](apps/contract-verification) | Smart contract verification service. | [`contracts.tempo.xyz`](<https://contracts.tempo.xyz>) |
-| [`apps/key-manager`](apps/key-manager) | WebAuthn key management service. | [`keys.tempo.xyz`](<https://keys.tempo.xyz>) |
 
 ## Contributing
 

apps/contract-verification/container/compiler.ts

@@ -69,7 +69,7 @@ export async function getVyperPath(requestedVersion: string) {
 	await NodeFS.mkdir(VYPER_CACHE_DIR, { recursive: true })
 
 	// Sanitize the version string
-	// Vyper versions can be: 0.3.10, v0.3.10, 0.3.10+commit.XXXXXXX
+	// Vyper versions can be: 0.3.10, 0.4.0, 0.4.1, v0.3.10, 0.3.10+commit.XXXXXXX
 	const cleaned = requestedVersion.replace(/^v/, '')
 	const match = cleaned.match(/^(\d+\.\d+\.\d+)(?:\+commit\.[0-9a-f]+)?$/)
 	if (!match) throw new Error(`Unsupported Vyper version: ${requestedVersion}`)

apps/contract-verification/env.d.ts

@@ -4,10 +4,6 @@ interface EnvironmentVariables {
 	readonly WHITELISTED_ORIGINS: string
 	readonly VITE_LOG_LEVEL: 'info' | 'warn' | 'silent'
 
-	readonly VITEST_ENV: 'devnet' | 'testnet' | 'mainnet'
-
-	readonly TEMPO_RPC_KEY: string
-
 	readonly CLOUDFLARE_ACCOUNT_ID: string
 	readonly CLOUDFLARE_DATABASE_ID: string
 	readonly CLOUDFLARE_D1_TOKEN: string

apps/contract-verification/package.json

@@ -11,48 +11,40 @@
 		"dev": "vite dev",
 		"preview": "vite preview",
 		"build": "vite build",
-		"check": "pnpm check:biome && pnpm check:types",
-		"check:biome": "biome check --write --unsafe",
+		"check": "biome check . --write --unsafe",
 		"check:types": "tsgo --project tsconfig.json --noEmit",
-		"test": "vitest --run",
-		"vitest": "vitest",
 		"gen:types": "test -f .env || cp .env.example .env; CLOUDFLARE_ENV= wrangler types",
 		"tail": "wrangler tail",
 		"db:studio": "drizzle-kit studio --config='drizzle.config.ts'",
 		"db:push": "CLOUDFLARE_D1_ENVIRONMENT='remote' drizzle-kit push --config='drizzle.config.ts'"
 	},
 	"dependencies": {
-		"@cloudflare/containers": "^0.1.0",
+		"@cloudflare/containers": "^0.0.31",
 		"cbor-x": "^1.6.0",
 		"drizzle-orm": "^0.45.1",
 		"hono": "catalog:",
 		"hono-rate-limiter": "catalog:",
 		"ox": "catalog:",
 		"semver": "^7.7.3",
 		"tempo.ts": "catalog:",
-		"viem": "catalog:",
-		"zod": "catalog:"
+		"viem": "catalog:"
 	},
 	"devDependencies": {
 		"@biomejs/biome": "catalog:",
 		"@cloudflare/vite-plugin": "catalog:",
-		"@cloudflare/vitest-pool-workers": "catalog:",
 		"@cloudflare/workers-types": "catalog:",
-		"@libsql/client": "^0.17.0",
+		"@libsql/client": "^0.15.15",
 		"@scalar/api-reference": "catalog:",
 		"@total-typescript/ts-reset": "catalog:",
-		"@types/bun": "^1.3.6",
+		"@types/bun": "^1.3.5",
 		"@types/node": "catalog:",
 		"@types/semver": "^7.7.1",
-		"dotenv": "catalog:",
-		"@vitest/ui": "catalog:",
-		"dbmate": "^2.29.3",
+		"dbmate": "^2.28.0",
 		"drizzle-kit": "^0.31.8",
 		"esbuild": "catalog:",
 		"typescript": "catalog:",
 		"vite": "catalog:",
 		"vite-plugin-devtools-json": "catalog:",
-		"vitest": "catalog:",
 		"wrangler": "catalog:"
 	},
 	"license": "MIT"

apps/contract-verification/scripts/Mail.s.sol

@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: UNLICENSED
+pragma solidity ^0.8.13;
+
+import {Script} from "forge-std/Script.sol";
+import {ITIP20} from "tempo-std/interfaces/ITIP20.sol";
+import {ITIP20RolesAuth} from "tempo-std/interfaces/ITIP20RolesAuth.sol";
+import {StdPrecompiles} from "tempo-std/StdPrecompiles.sol";
+import {StdTokens} from "tempo-std/StdTokens.sol";
+import {Mail} from "../src/Mail.sol";
+
+contract MailScript is Script {
+    function setUp() public {}
+
+    function run() public {
+        vm.startBroadcast();
+
+        // StdPrecompiles.TIP_FEE_MANAGER.setUserToken(StdTokens.ALPHA_USD_ADDRESS);
+
+        // ITIP20 token =
+        //     ITIP20(StdPrecompiles.TIP20_FACTORY.createToken("testUSD", "tUSD", "USD", StdTokens.PATH_USD, msg.sender));
+
+        // ITIP20RolesAuth(address(token)).grantRole(token.ISSUER_ROLE(), msg.sender);
+
+        // token.mint(msg.sender, 1_000_000 * 10 ** token.decimals());
+
+        ITIP20 token = ITIP20(StdTokens.PATH_USD);
+        new Mail(token);
+
+        vm.stopBroadcast();
+    }
+}