Feature/siewwwin

.github/workflows/ci.yml

@@ -0,0 +1,120 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+      - 'feature/**'
+  pull_request:
+    branches:
+      - main
+
+# Cancel in-progress runs on the same branch when a new push lands.
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  typescript:
+    name: TypeScript (typecheck + SDK build)
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.11
+
+      - name: Cache bun install
+        uses: actions/cache@v4
+        with:
+          path: ~/.bun/install/cache
+          key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock', 'bun.lockb') }}
+          restore-keys: |
+            ${{ runner.os }}-bun-
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      # SDK build first so workspaces consuming @rhemify-monorepo/sdk via the
+      # built dist/ (the package.json main field) don't typecheck against
+      # stale artifacts. Same reason we rebuild locally between phases.
+      - name: Build @rhemify-monorepo/sdk
+        run: bun --cwd packages/sdk run build
+
+      # Turborepo fan-out runs tsc across every workspace.
+      - name: Type-check workspaces
+        run: bun run check-types
+
+  go-server:
+    name: Go intelligence server (vet + build + test)
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    defaults:
+      run:
+        working-directory: apps/server
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.24'
+          cache: true
+          cache-dependency-path: apps/server/go.sum
+
+      - name: go mod download
+        run: go mod download
+
+      - name: go vet
+        run: go vet ./...
+
+      - name: go build
+        run: go build ./...
+
+      - name: go test
+        run: go test ./...
+
+  anchor-programs:
+    name: Anchor programs (cargo check)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      # Cache cargo registry + git + each program's target dir. Two crates,
+      # both depend on anchor-lang 1.0 which has substantial transitive deps —
+      # cold builds are ~5 min, cached compile is ~30s.
+      - name: Cache cargo
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            programs/rhemify-anchor/target
+            programs/rhemify-dwallet/target
+          key: ${{ runner.os }}-cargo-anchor-${{ hashFiles('programs/**/Cargo.lock', 'programs/**/Cargo.toml') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-anchor-
+
+      # cargo test runs check + builds tests + executes them on the host
+      # target. SBF compile (cargo-build-sbf) is still a developer-machine
+      # step before devnet deploy; that path stays out of CI to keep job
+      # runtime under a minute on cache hit.
+      #
+      # Test surface today: PDA seed derivation invariants, squat defense
+      # for the user-scoped seeds, program-ID pinning. See
+      # programs/*/tests/pda_seeds.rs for what's covered. Full integration
+      # tests against an SVM (Mollusk / litesvm) are a future chunk.
+      - name: cargo test — rhemify-anchor
+        working-directory: programs/rhemify-anchor
+        run: cargo test --all-targets
+
+      - name: cargo test — rhemify-dwallet
+        working-directory: programs/rhemify-dwallet
+        run: cargo test --all-targets

.gitignore

@@ -102,4 +102,9 @@ skills/
 .test-wallet.json
 .env.test
 local.db
+apps/web/local.db
+
+# Compiled Go binaries (apps/server) — these belong in CI artifacts, never in tree
+apps/server/bin/
+apps/server/seed
 .vercel

Anchor.toml

@@ -6,12 +6,12 @@ resolution = true
 skip-lint = false
 
 [programs.devnet]
-rhemify_anchor = "RhemTrceAnch1111111111111111111111111111111"
-rhemify_dwallet = "GcGz6uD7FxF6rSjCAU1xBV4ZW1E9EFDa4JA5yPKv1cdL"
+rhemify_anchor = "HYWjBbLMEz98KnppVkUnHmkUZ4pyQ8abaDRTtUedUkxV"
+rhemify_dwallet = "GPgdzfwQ4qG1QcqePY3uR6Uo8SvCwqxRYg7oDsXd5opc"
 
 [programs.localnet]
-rhemify_anchor = "AnNz2XESvXbyt2uNnFaZD3Wr6qZpmHC4iuHzmcxMoPRg"
-rhemify_dwallet = "GcGz6uD7FxF6rSjCAU1xBV4ZW1E9EFDa4JA5yPKv1cdL"
+rhemify_anchor = "HYWjBbLMEz98KnppVkUnHmkUZ4pyQ8abaDRTtUedUkxV"
+rhemify_dwallet = "GPgdzfwQ4qG1QcqePY3uR6Uo8SvCwqxRYg7oDsXd5opc"
 
 [provider]
 cluster = "localnet"