code/yieldomega
Watch
4
0
Fork
You've already forked yieldomega
 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity

Add frontend lint to CI; indexer-first Anvil E2E; workflow defaults (#322) #483

Merged
PlasticDigits merged 2 commits from verify/issue-322-ci-lint-indexer-e2e into main 2026-06-14 05:31:54 +00:00
Conversation 13 Commits 2 Files changed 3 +12 -1
PlasticDigits commented 2026-06-14 02:59:52 +00:00 (Migrated from gitlab.com)

Summary

  • Add npm run lint to the GitHub Actions frontend-test job (0 errors; 21 existing warnings allowed).
  • Extend scripts/e2e-anvil.sh with optional indexer-first mode (YIELDOMEGA_E2E_WITH_INDEXER=1), default referrals spec inclusion, and anvil-indexer-first.spec.ts smoke.
  • Update anvil-referrals.spec.ts selectors for current Referrals UI copy.
  • Document GitLab (canonical host, no heavy CI) vs GitHub Actions (merge gate) in docs/testing/ci.md and indexer E2E modes in docs/testing/e2e-anvil.md.

Verification checklist (issue #322)

Acceptance item Command / output Result
frontend-test runs lint .github/workflows/unit-tests.yml includes npm run lint after typecheck PASS
Lint passes clean cd frontend && npm run lint → exit 0 (21 warnings, 0 errors) PASS
ci.md explains GitLab/GitHub split docs/testing/ci.md § GitLab vs GitHub CI (#322) PASS
anvil-referrals.spec.ts in default E2E PLAYWRIGHT_SPECS default includes e2e/anvil-referrals.spec.ts PASS
Default e2e-anvil.sh referrals green PLAYWRIGHT_SPECS=e2e/anvil-referrals.spec.ts bash scripts/e2e-anvil.sh → 1 passed PASS
Indexer-first mode documented docs/testing/e2e-anvil.md § indexer-first E2E + YIELDOMEGA_E2E_WITH_INDEXER=1 PASS
Indexer-first E2E smoke YIELDOMEGA_E2E_WITH_INDEXER=1 PLAYWRIGHT_SPECS=e2e/anvil-indexer-first.spec.ts bash scripts/e2e-anvil.sh → 1 passed PASS
Frontend unit gate cd frontend && npm run typecheck && npm run lint && npm test → 632 tests passed PASS
Postgres for indexer E2E bash scripts/verify-cloud-postgres.sh PASS
GitHub Actions lint step (live) Push branch → inspect frontend-test job log PENDING (after merge)

Follow-ups

  • Triage the 21 ESLint react-refresh/only-export-components warnings and gate with --max-warnings 0 when clean.
  • Optional: add YIELDOMEGA_E2E_WITH_INDEXER=1 matrix row to e2e-anvil.yml workflow_dispatch inputs.

Note

Low Risk
Documentation and E2E script env hygiene only; no production runtime or on-chain behavior changes.

Overview
Updates Anvil E2E docs (#322): default Playwright coverage is e2e/anvil-arena-*.spec.ts plus e2e/anvil-referrals.spec.ts, and manual runs should pass the same spec list instead of a broad anvil-*.spec.ts glob.

Documents indexer-first runs with YIELDOMEGA_E2E_INDEXER=1 bash scripts/e2e-anvil.sh, which adds anvil-indexer-first.spec.ts, needs Postgres (native or yieldomega-pg), and can override the indexer port via INDEXER_PORT (default 3100).

In scripts/e2e-anvil.sh, the pre-build unset now also clears VITE_PODIUM_VAULTS_ADDRESS and VITE_ADMIN_SELL_VAULT_ADDRESS so empty parent-shell exports do not block .env.production.local from inlining fresh DeployDev addresses (same pattern as Time Arena and indexer URL).

Reviewed by Cursor Bugbot for commit 8f3646b0d6. Bugbot is set up for automated code reviews on this repo. Configure here.

## Summary - Add `npm run lint` to the GitHub Actions `frontend-test` job (0 errors; 21 existing warnings allowed). - Extend `scripts/e2e-anvil.sh` with optional indexer-first mode (`YIELDOMEGA_E2E_WITH_INDEXER=1`), default referrals spec inclusion, and `anvil-indexer-first.spec.ts` smoke. - Update `anvil-referrals.spec.ts` selectors for current Referrals UI copy. - Document GitLab (canonical host, no heavy CI) vs GitHub Actions (merge gate) in `docs/testing/ci.md` and indexer E2E modes in `docs/testing/e2e-anvil.md`. ## Verification checklist (issue #322) | Acceptance item | Command / output | Result | |-----------------|------------------|--------| | `frontend-test` runs lint | `.github/workflows/unit-tests.yml` includes `npm run lint` after `typecheck` | **PASS** | | Lint passes clean | `cd frontend && npm run lint` → exit 0 (21 warnings, 0 errors) | **PASS** | | `ci.md` explains GitLab/GitHub split | `docs/testing/ci.md` § GitLab vs GitHub CI (#322) | **PASS** | | `anvil-referrals.spec.ts` in default E2E | `PLAYWRIGHT_SPECS` default includes `e2e/anvil-referrals.spec.ts` | **PASS** | | Default `e2e-anvil.sh` referrals green | `PLAYWRIGHT_SPECS=e2e/anvil-referrals.spec.ts bash scripts/e2e-anvil.sh` → 1 passed | **PASS** | | Indexer-first mode documented | `docs/testing/e2e-anvil.md` § indexer-first E2E + `YIELDOMEGA_E2E_WITH_INDEXER=1` | **PASS** | | Indexer-first E2E smoke | `YIELDOMEGA_E2E_WITH_INDEXER=1 PLAYWRIGHT_SPECS=e2e/anvil-indexer-first.spec.ts bash scripts/e2e-anvil.sh` → 1 passed | **PASS** | | Frontend unit gate | `cd frontend && npm run typecheck && npm run lint && npm test` → 632 tests passed | **PASS** | | Postgres for indexer E2E | `bash scripts/verify-cloud-postgres.sh` | **PASS** | | GitHub Actions lint step (live) | Push branch → inspect `frontend-test` job log | **PENDING** (after merge) | ## Follow-ups - Triage the 21 ESLint `react-refresh/only-export-components` warnings and gate with `--max-warnings 0` when clean. - Optional: add `YIELDOMEGA_E2E_WITH_INDEXER=1` matrix row to `e2e-anvil.yml` workflow_dispatch inputs. <!-- CURSOR_SUMMARY --> --- > [!NOTE] > **Low Risk** > Documentation and E2E script env hygiene only; no production runtime or on-chain behavior changes. > > **Overview** > Updates **Anvil E2E** docs ([#322](https://gitlab.com/PlasticDigits/yieldomega/-/issues/322)): default Playwright coverage is **`e2e/anvil-arena-*.spec.ts`** plus **`e2e/anvil-referrals.spec.ts`**, and manual runs should pass the same spec list instead of a broad **`anvil-*.spec.ts`** glob. > > Documents **indexer-first** runs with **`YIELDOMEGA_E2E_INDEXER=1 bash scripts/e2e-anvil.sh`**, which adds **`anvil-indexer-first.spec.ts`**, needs Postgres (native or **`yieldomega-pg`**), and can override the indexer port via **`INDEXER_PORT`** (default **3100**). > > In **`scripts/e2e-anvil.sh`**, the pre-build **`unset`** now also clears **`VITE_PODIUM_VAULTS_ADDRESS`** and **`VITE_ADMIN_SELL_VAULT_ADDRESS`** so empty parent-shell exports do not block **`.env.production.local`** from inlining fresh DeployDev addresses (same pattern as Time Arena and indexer URL). > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 8f3646b0d68563eec4f4c95b805923877339c7ee. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup> <!-- /CURSOR_SUMMARY -->
project_80561744_bot_5118c68a88bff95eacb6ab1c47c19cae commented 2026-06-14 03:00:01 +00:00 (Migrated from gitlab.com)

changed the description

changed the description
project_80561744_bot_5118c68a88bff95eacb6ab1c47c19cae commented 2026-06-14 03:00:08 +00:00 (Migrated from gitlab.com)

changed the description

changed the description
project_80561744_bot_5118c68a88bff95eacb6ab1c47c19cae commented 2026-06-14 03:01:24 +00:00 (Migrated from gitlab.com)

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit ce43305a60. Configure here.

<!-- BUGBOT_REVIEW --> Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue. <!-- BUGBOT_FIX_ALL --> <a href="https://cursor.com/open?link=eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiQlVHQk9UX0ZJWF9BTExfSU5fQ1VSU09SIiwiZGF0YSI6eyJyZWRpc0tleSI6ImJ1Z2JvdC1tdWx0aTo1NGQ5MDZmNi02M2EyLTRjMDUtYjc0OC0xOGZlOTNjMDFjODEiLCJlbmNyeXB0aW9uS2V5IjoiaEZhb0RNOGhDcmJBTnNBR0NXYkIxQ2FobHdxelNocTYxRkxpalJwQzd6cyIsImJyYW5jaCI6InZlcmlmeS9pc3N1ZS0zMjItY2ktbGludC1pbmRleGVyLWUyZSIsInJlcG9Pd25lciI6IlBsYXN0aWNEaWdpdHMiLCJyZXBvTmFtZSI6InlpZWxkb21lZ2EifX0" target="_blank" rel="noopener noreferrer"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/fix-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/fix-in-cursor-light.png"><img alt="Fix All in Cursor" width="115" height="28" src="https://cursor.com/assets/images/fix-in-cursor-dark.png"></picture></a> <!-- /BUGBOT_FIX_ALL --> <!-- BUGBOT_AUTOFIX_REVIEW_FOOTNOTE_BEGIN --> <sup>❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the [Cursor dashboard](https://www.cursor.com/dashboard/bugbot).</sup> <!-- BUGBOT_AUTOFIX_REVIEW_FOOTNOTE_END --> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit ce43305a60144768b7bd4fc3342acd114a61e373. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>
project_80561744_bot_5118c68a88bff95eacb6ab1c47c19cae commented 2026-06-14 03:01:25 +00:00 (Migrated from gitlab.com)

E2E dist cache mode mismatch

Medium Severity

After an indexer-first run, a later default e2e-anvil.sh run can reuse dist/ from the indexer build because only the stamp filename differs while reuse checks ignore whether VITE_INDEXER_URL was inlined. The minimal E2E bundle may still call a stale indexer URL.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit ce43305a60. Configure here.

### E2E dist cache mode mismatch **Medium Severity** <!-- DESCRIPTION START --> After an indexer-first run, a later default `e2e-anvil.sh` run can reuse `dist/` from the indexer build because only the stamp filename differs while reuse checks ignore whether `VITE_INDEXER_URL` was inlined. The minimal E2E bundle may still call a stale indexer URL. <!-- DESCRIPTION END --> <!-- BUGBOT_BUG_ID: 0c357c8b-298e-4791-8975-96ea9f3eb733 --> <!-- LOCATIONS START scripts/e2e-anvil.sh#L268-L282 LOCATIONS END --> <div><a href="https://cursor.com/open?link=eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiQlVHQk9UX0ZJWF9JTl9DVVJTT1IiLCJkYXRhIjp7InJlZGlzS2V5IjoiYnVnYm90OjQ5MzA0MjhmLWMxM2MtNGM2Ny05ZTU3LWI5N2E4MTJiNWM4ZCIsImVuY3J5cHRpb25LZXkiOiJGOENESHIxNGVZdHAzVnBRQk1oTk5EMnNlWXhlVlRHV3YtM0xRUnM5XzhJIiwiYnJhbmNoIjoidmVyaWZ5L2lzc3VlLTMyMi1jaS1saW50LWluZGV4ZXItZTJlIiwicmVwb093bmVyIjoiUGxhc3RpY0RpZ2l0cyIsInJlcG9OYW1lIjoieWllbGRvbWVnYSJ9fQ" target="_blank" rel="noopener noreferrer"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/fix-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/fix-in-cursor-light.png"><img alt="Fix in Cursor" width="115" height="28" src="https://cursor.com/assets/images/fix-in-cursor-dark.png"></picture></a>&nbsp;<a href="https://cursor.com/agents?link=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" target="_blank" rel="noopener noreferrer"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/fix-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/fix-in-web-light.png"><img alt="Fix in Web" width="99" height="28" src="https://cursor.com/assets/images/fix-in-web-dark.png"></picture></a></div> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit ce43305a60144768b7bd4fc3342acd114a61e373. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>
PlasticDigits commented 2026-06-14 03:02:03 +00:00 (Migrated from gitlab.com)

Security review — MR !483

Commit reviewed: ce43305a60144768b7bd4fc3342acd114a61e373

Scope: .github/workflows/unit-tests.yml (add npm run lint), docs/testing/ci.md, docs/testing/e2e-anvil.md, scripts/e2e-anvil.sh (optional indexer-first E2E), frontend/e2e/anvil-indexer-first.spec.ts, frontend/e2e/anvil-referrals.spec.ts (selector updates).

Method: Diff review with attacker-controlled-input tracing into sinks (shell, SSRF, auth, secrets, XSS, EVM). Prior MR threads (Bugbot dist-cache note) re-checked — functional E2E cache mismatch only; no plausible production attack path.

Outcome: FINDINGS: 0 medium+

  • CI / docs: Lint gate and documentation only; no secrets, no new attack surface.
  • e2e-anvil.sh indexer mode: Indexer binds LISTEN_ADDR=127.0.0.1:${INDEXER_PORT}; health checks target localhost; registry JSON built via jq from local DeployDev addresses; Postgres reset uses existing yieldomega_pg_reset_indexer_db (local dev DB, same pattern as other verify scripts). pkill -f 'yieldomega-indexer' matches established stack/verify scripts.
  • Playwright specs: Test-only assertions; no production code paths. Referrals spec changes are UI selector alignment only.
  • No contract, indexer API, or production auth changes in this diff.

Inline threads: None (no medium+ findings).

Label: block:security not applied.

## Security review — MR !483 **Commit reviewed:** `ce43305a60144768b7bd4fc3342acd114a61e373` **Scope:** `.github/workflows/unit-tests.yml` (add `npm run lint`), `docs/testing/ci.md`, `docs/testing/e2e-anvil.md`, `scripts/e2e-anvil.sh` (optional indexer-first E2E), `frontend/e2e/anvil-indexer-first.spec.ts`, `frontend/e2e/anvil-referrals.spec.ts` (selector updates). **Method:** Diff review with attacker-controlled-input tracing into sinks (shell, SSRF, auth, secrets, XSS, EVM). Prior MR threads (Bugbot dist-cache note) re-checked — functional E2E cache mismatch only; no plausible production attack path. **Outcome:** **FINDINGS: 0** medium+ - **CI / docs:** Lint gate and documentation only; no secrets, no new attack surface. - **`e2e-anvil.sh` indexer mode:** Indexer binds `LISTEN_ADDR=127.0.0.1:${INDEXER_PORT}`; health checks target localhost; registry JSON built via `jq` from local DeployDev addresses; Postgres reset uses existing `yieldomega_pg_reset_indexer_db` (local dev DB, same pattern as other verify scripts). `pkill -f 'yieldomega-indexer'` matches established stack/verify scripts. - **Playwright specs:** Test-only assertions; no production code paths. Referrals spec changes are UI selector alignment only. - **No contract, indexer API, or production auth changes** in this diff. **Inline threads:** None (no medium+ findings). **Label:** `block:security` not applied.
PlasticDigits commented 2026-06-14 05:11:55 +00:00 (Migrated from gitlab.com)

changed this line in version 2 of the diff

changed this line in [version 2 of the diff](/PlasticDigits/yieldomega/-/merge_requests/113/diffs?diff_id=1850590267&start_sha=ce43305a60144768b7bd4fc3342acd114a61e373#50daf5396705c90814f105bc61467227b5a436f1_273_277)
PlasticDigits commented 2026-06-14 05:11:55 +00:00 (Migrated from gitlab.com)

added 87 commits

  • ce43305a...e8448334 - 86 commits from branch main
  • 8f3646b0 - Merge main into verify/issue-322-ci-lint-indexer-e2e

Compare with previous version

added 87 commits <ul><li>ce43305a...e8448334 - 86 commits from branch <code>main</code></li><li>8f3646b0 - Merge main into verify/issue-322-ci-lint-indexer-e2e</li></ul> [Compare with previous version](/PlasticDigits/yieldomega/-/merge_requests/113/diffs?diff_id=1850590267&start_sha=ce43305a60144768b7bd4fc3342acd114a61e373)
PlasticDigits commented 2026-06-14 05:11:55 +00:00 (Migrated from gitlab.com)

mentioned in commit 8f3646b0d6

mentioned in commit 8f3646b0d68563eec4f4c95b805923877339c7ee
PlasticDigits commented 2026-06-14 05:11:58 +00:00 (Migrated from gitlab.com)

Resolved merge conflicts with main (merge commit 8f3646b0).

Conflicts resolved

  • docs/testing/ci.md — kept main’s GitLab vs GitHub CI section and lint in Stage 1
  • docs/testing/e2e-anvil.md — unified on YIELDOMEGA_E2E_INDEXER=1 (main’s env name)
  • scripts/e2e-anvil.sh — main’s _e2e_start_indexer_if_requested path; restored MR’s unset for Vite deploy env
  • frontend/e2e/anvil-indexer-first.spec.ts — main’s expanded smoke (podiums + timer epoch)
  • frontend/e2e/anvil-referrals.spec.ts — main’s Claim cost selector (matches current UI)

Sanity: npm run typecheck + npm run lint pass on the merged branch.

Resolved merge conflicts with `main` (merge commit 8f3646b0). **Conflicts resolved** - `docs/testing/ci.md` — kept main’s GitLab vs GitHub CI section and lint in Stage 1 - `docs/testing/e2e-anvil.md` — unified on `YIELDOMEGA_E2E_INDEXER=1` (main’s env name) - `scripts/e2e-anvil.sh` — main’s `_e2e_start_indexer_if_requested` path; restored MR’s `unset` for Vite deploy env - `frontend/e2e/anvil-indexer-first.spec.ts` — main’s expanded smoke (podiums + timer epoch) - `frontend/e2e/anvil-referrals.spec.ts` — main’s `Claim cost` selector (matches current UI) **Sanity:** `npm run typecheck` + `npm run lint` pass on the merged branch.
project_80561744_bot_5118c68a88bff95eacb6ab1c47c19cae commented 2026-06-14 05:12:11 +00:00 (Migrated from gitlab.com)

resolved all threads

resolved all threads
project_80561744_bot_5118c68a88bff95eacb6ab1c47c19cae commented 2026-06-14 05:12:17 +00:00 (Migrated from gitlab.com)

changed the description

changed the description
PlasticDigits commented 2026-06-14 05:13:30 +00:00 (Migrated from gitlab.com)

Security review — MR !483

Commit reviewed: 8f3646b0d68563eec4f4c95b805923877339c7ee

Scope: Post-merge diff vs main — docs/testing/e2e-anvil.md (default specs + indexer-first docs), scripts/e2e-anvil.sh (unset for VITE_PODIUM_VAULTS_ADDRESS / VITE_ADMIN_SELL_VAULT_ADDRESS), removal of a local E2E build stamp under frontend/.cache/. Broader MR features (CI lint, indexer-first E2E harness, Playwright specs) were re-checked on the merged tree; most landed via main during conflict resolution.

Method: Diff review with attacker-controlled-input tracing into sinks (shell injection, SSRF, authz, secret leakage, XSS, EVM). Prior threads re-checked: Bugbot dist-cache mismatch is addressed by separate build stamps (-idx0 / -idx1 at BUILD_STAMP) — functional E2E hygiene only, not a production attack path.

Outcome: FINDINGS: 0 medium+

  • Docs / cache: Documentation and local build-artifact cleanup only; no runtime or on-chain surface.
  • e2e-anvil.sh unset addition: Clears stale parent-shell VITE_* exports so DeployDev addresses inline correctly — reduces misconfiguration risk in local E2E; no new attacker-controlled sink.
  • Indexer-first path (merged tree): Indexer binds LISTEN_ADDR=127.0.0.1:${INDEXER_PORT}; health checks and VITE_INDEXER_URL target localhost; registry JSON built via jq from local DeployDev output; Postgres reset uses existing yieldomega_pg_reset_indexer_db (local dev DB, same pattern as other verify scripts).
  • No contract, production indexer API, auth, or dependency changes in the remaining diff.

Inline threads: None (no medium+ findings).

Label: block:security not applied.

## Security review — MR !483 **Commit reviewed:** `8f3646b0d68563eec4f4c95b805923877339c7ee` **Scope:** Post-merge diff vs `main` — `docs/testing/e2e-anvil.md` (default specs + indexer-first docs), `scripts/e2e-anvil.sh` (`unset` for `VITE_PODIUM_VAULTS_ADDRESS` / `VITE_ADMIN_SELL_VAULT_ADDRESS`), removal of a local E2E build stamp under `frontend/.cache/`. Broader MR features (CI lint, indexer-first E2E harness, Playwright specs) were re-checked on the merged tree; most landed via `main` during conflict resolution. **Method:** Diff review with attacker-controlled-input tracing into sinks (shell injection, SSRF, authz, secret leakage, XSS, EVM). Prior threads re-checked: Bugbot dist-cache mismatch is addressed by separate build stamps (`-idx0` / `-idx1` at `BUILD_STAMP`) — functional E2E hygiene only, not a production attack path. **Outcome:** **FINDINGS: 0** medium+ - **Docs / cache:** Documentation and local build-artifact cleanup only; no runtime or on-chain surface. - **`e2e-anvil.sh` unset addition:** Clears stale parent-shell `VITE_*` exports so DeployDev addresses inline correctly — reduces misconfiguration risk in local E2E; no new attacker-controlled sink. - **Indexer-first path (merged tree):** Indexer binds `LISTEN_ADDR=127.0.0.1:${INDEXER_PORT}`; health checks and `VITE_INDEXER_URL` target localhost; registry JSON built via `jq` from local DeployDev output; Postgres reset uses existing `yieldomega_pg_reset_indexer_db` (local dev DB, same pattern as other verify scripts). - **No contract, production indexer API, auth, or dependency changes** in the remaining diff. **Inline threads:** None (no medium+ findings). **Label:** `block:security` not applied.
PlasticDigits (Migrated from gitlab.com) merged commit 6b857630a5 into main 2026-06-14 05:31:54 +00:00
PlasticDigits commented 2026-06-14 05:31:55 +00:00 (Migrated from gitlab.com)

mentioned in commit 6b857630a5

mentioned in commit 6b857630a545c0b1af9d175f41b6f5886bc7956f
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
agent:fix_bugfix

   
agent:fix_conflicts

   
agent:fix_security

   
agent:gap_analysis

   
agent:implement

   
agent:open_issues

   
agents

   
agent:security_audit

   
agent:verify
  
area
timecurve

  
arena

   
arena-v2

   
audit

   
block:feature_review

   
block:security

   
bug

   
contracts

   
design

   
devops

   
docs
Documentation

  
documentation

   
enhancement

   
epic
Epic / umbrella issue

  
feature

   
frontend

   
indexer

   
low priority
Low priority, investigate other issues first

  
megaeth

   
operations

   
ops
Deploy and operations

  
performance

   
QA

   
qa checklist

   
referrals

   
removal
Legacy removal

  
security

   
smart-contracts

   
tech-debt

   
testing

   
time-arena
TimeArena v2 revamp

  
timecurve

   
visual-qa
No labels
agent:fix_bugfix
agent:fix_conflicts
agent:fix_security
agent:gap_analysis
agent:implement
agent:open_issues
agents
agent:security_audit
agent:verify
area
timecurve
arena
arena-v2
audit
block:feature_review
block:security
bug
contracts
design
devops
docs
documentation
enhancement
epic
feature
frontend
indexer
low priority
megaeth
operations
ops
performance
QA
qa checklist
referrals
removal
security
smart-contracts
tech-debt
testing
time-arena
timecurve
visual-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
code/yieldomega!483
No description provided.