fix: various qa fixes

.docker/Dockerfile.optimized

@@ -0,0 +1,78 @@
+# syntax=docker/dockerfile:1
+
+FROM golang:1.24.0-alpine AS builder
+
+# Install build dependencies
+RUN apk update && apk add --no-cache make bash nodejs npm git
+
+ARG EXPLORER_BASE_PATH
+ARG WALLET_BASE_PATH
+
+WORKDIR /go/src/github.com/canopy-network/canopy
+
+# ============================================
+# OPTIMIZATION 1: Cache Go module dependencies
+# Copy only go.mod and go.sum first to cache dependencies layer
+# This layer only invalidates when dependencies change
+# ============================================
+COPY go.mod go.sum ./
+RUN --mount=type=cache,target=/go/pkg/mod \
+    go mod download
+
+# ============================================
+# OPTIMIZATION 2: Cache NPM dependencies for wallet
+# Copy only package.json files first to cache npm install layer
+# ============================================
+COPY cmd/rpc/web/wallet/package*.json ./cmd/rpc/web/wallet/
+RUN --mount=type=cache,target=/root/.npm \
+    npm install --prefix ./cmd/rpc/web/wallet
+
+# ============================================
+# OPTIMIZATION 3: Cache NPM dependencies for explorer
+# ============================================
+COPY cmd/rpc/web/explorer/package*.json ./cmd/rpc/web/explorer/
+RUN --mount=type=cache,target=/root/.npm \
+    npm install --prefix ./cmd/rpc/web/explorer
+
+# ============================================
+# OPTIMIZATION 4: Copy web source and build BEFORE copying all source
+# This caches web builds - only invalidates when web files change
+# ============================================
+COPY cmd/rpc/web/wallet/ ./cmd/rpc/web/wallet/
+COPY cmd/rpc/web/explorer/ ./cmd/rpc/web/explorer/
+
+ENV EXPLORER_BASE_PATH=${EXPLORER_BASE_PATH}
+ENV WALLET_BASE_PATH=${WALLET_BASE_PATH}
+
+# Build web assets (cached unless web source changes)
+RUN --mount=type=cache,target=/root/.npm \
+    npm run build --prefix ./cmd/rpc/web/wallet
+RUN --mount=type=cache,target=/root/.npm \
+    npm run build --prefix ./cmd/rpc/web/explorer
+
+# ============================================
+# OPTIMIZATION 5: Copy remaining source code
+# Web builds are already cached above
+# ============================================
+COPY . .
+
+# ============================================
+# OPTIMIZATION 6: Use build cache mounts for Go
+# Preserves Go build cache and module cache between builds
+# This can speed up rebuilds by 5-10x
+# ============================================
+RUN --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/go/pkg/mod \
+    go build -a -o bin ./cmd/main/...
+
+# ============================================
+# Final stage - minimal runtime image
+# ============================================
+FROM alpine:3.19
+
+WORKDIR /app
+
+# Copy only the built binary (web assets are embedded)
+COPY --from=builder /go/src/github.com/canopy-network/canopy/bin ./bin
+
+ENTRYPOINT ["/app/bin"]

.github/workflows/build-test.yaml

@@ -12,6 +12,9 @@ on:
       - staging
     paths:
       - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/**'
 jobs:
   build:
     name: Build
@@ -20,7 +23,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: 1.21
+          go-version: 1.24
       - name: Checkout code
         uses: actions/checkout@v4
       - name: Build Services
@@ -32,7 +35,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: 1.21
+          go-version: 1.24
       - name: Checkout code
         uses: actions/checkout@v4
       - name: Set up cache
@@ -45,4 +48,4 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
       - name: Run Unit tests
-        run: make build/canopy-full && go test ./...
+        run: make build/canopy-full && go test $(go list ./... | grep -v cmd/auto-update)

.gitignore

@@ -44,3 +44,6 @@ vendor
 cmd/web/explorer/.idea
 **/.DS_Store
 /cmd/tps/data
+
+rag
+node_modules

.projectile

@@ -0,0 +1,3 @@
+-/node_modules
+-/rag
+-rag

cache/solidity-files-cache.json

@@ -0,0 +1 @@
+{"_format":"","paths":{"artifacts":"out","build_infos":"out/build-info","sources":"src","tests":"test","scripts":"script","libraries":["lib","node_modules"]},"files":{"cmd/rpc/oracle/testing/contracts/USDC.sol":{"lastModificationDate":1752574865334,"contentHash":"f3edf42ae79e8f47","interfaceReprHash":null,"sourceName":"cmd/rpc/oracle/testing/contracts/USDC.sol","imports":[],"versionRequirement":"^0.8.0","artifacts":{"USDC":{"0.8.20":{"default":{"path":"USDC.sol/USDC.json","build_id":"bea85887a954e3be"}}}},"seenByCompiler":true}},"builds":["bea85887a954e3be"],"profiles":{"default":{"solc":{"optimizer":{"enabled":false,"runs":200},"metadata":{"useLiteralContent":false,"bytecodeHash":"ipfs","appendCBOR":true},"outputSelection":{"*":{"*":["abi","evm.bytecode.object","evm.bytecode.sourceMap","evm.bytecode.linkReferences","evm.deployedBytecode.object","evm.deployedBytecode.sourceMap","evm.deployedBytecode.linkReferences","evm.deployedBytecode.immutableReferences","evm.methodIdentifiers","metadata"]}},"evmVersion":"cancun","viaIR":false,"libraries":{}},"vyper":{"evmVersion":"cancun","outputSelection":{"*":{"*":["abi","evm.bytecode","evm.deployedBytecode"]}}}}},"preprocessed":false,"mocks":[]}

cmd/auto-update/releaser.go

@@ -17,10 +17,14 @@ import (
 	"golang.org/x/mod/semver"
 )
 
+var githubAPIBaseURL = "https://api.github.com"
+
 // GithubRelease represents a GitHub release with the used metadata
 type GithubRelease struct {
-	TagName string `json:"tag_name"`
-	Assets  []struct {
+	TagName    string `json:"tag_name"`
+	Draft      bool   `json:"draft"`
+	Prerelease bool   `json:"prerelease"`
+	Assets     []struct {
 		Name               string `json:"name"`
 		BrowserDownloadURL string `json:"browser_download_url"`
 	} `json:"assets"`
@@ -104,9 +108,11 @@ func (rm *ReleaseManager) Check() (*Release, error) {
 
 // GetLatestRelease returns the latest release from the GitHub API
 func (rm *ReleaseManager) GetLatestRelease() (*Release, error) {
-	// build the URL: https://api.github.com/repos/<owner>/<repo>/releases/latest
-	apiURL, err := url.JoinPath("https://api.github.com", "repos",
-		rm.config.RepoOwner, rm.config.RepoName, "releases", "latest")
+	// Query the releases list and select the newest release that contains the
+	// expected asset. This keeps CLI and plugin streams isolated even when a
+	// repository publishes both kinds of releases.
+	apiURL, err := url.JoinPath(githubAPIBaseURL, "repos",
+		rm.config.RepoOwner, rm.config.RepoName, "releases")
 	if err != nil {
 		return nil, err
 	}
@@ -130,23 +136,29 @@ func (rm *ReleaseManager) GetLatestRelease() (*Release, error) {
 		return nil, fmt.Errorf("unexpected status code %d", resp.StatusCode)
 	}
 	// parse the response
-	var rel GithubRelease
-	if err := json.NewDecoder(resp.Body).Decode(&rel); err != nil {
+	var releases []GithubRelease
+	if err := json.NewDecoder(resp.Body).Decode(&releases); err != nil {
 		return nil, err
 	}
-	// find matching asset
+	// find the first non-draft, non-prerelease with a matching asset. GitHub
+	// returns releases ordered from newest to oldest.
 	targetName := rm.getAssetName()
-	for _, asset := range rel.Assets {
-		if asset.Name == targetName {
-			return &Release{
-				Version:     rel.TagName,
-				DownloadURL: asset.BrowserDownloadURL,
-			}, nil
+	for _, rel := range releases {
+		if rel.Draft || rel.Prerelease {
+			continue
+		}
+		for _, asset := range rel.Assets {
+			if asset.Name == targetName {
+				return &Release{
+					Version:     rel.TagName,
+					DownloadURL: asset.BrowserDownloadURL,
+				}, nil
+			}
 		}
 	}
 	// return based on tagName
 	if rm.config.Type == ReleaseTypeCLI {
-		return nil, fmt.Errorf("unsupported architecture: %s-%s", runtime.GOOS, runtime.GOARCH)
+		return nil, fmt.Errorf("no matching asset found for CLI (looking for %s)", targetName)
 	}
 	return nil, fmt.Errorf("no matching asset found for plugin (looking for %s)", targetName)
 }

cmd/auto-update/releaser_stream_test.go

@@ -0,0 +1,103 @@
+package main
+
+import (
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"runtime"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestGetLatestPluginReleaseFiltersByPluginAssetStream(t *testing.T) {
+	previousBaseURL := githubAPIBaseURL
+	t.Cleanup(func() {
+		githubAPIBaseURL = previousBaseURL
+	})
+
+	assetName := "go-plugin-" + runtime.GOOS + "-" + runtime.GOARCH + ".tar.gz"
+
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		require.Equal(t, "/repos/my-org/my-plugin-repo/releases", r.URL.Path)
+		_, _ = w.Write([]byte(fmt.Sprintf(`[
+			{
+				"tag_name": "v9.9.9",
+				"assets": [{"name": "cli-linux-amd64", "browser_download_url": "https://example.com/cli"}],
+				"draft": false,
+				"prerelease": false
+			},
+			{
+				"tag_name": "plugin-go-v2026.78.100",
+				"assets": [{"name": "%s", "browser_download_url": "https://example.com/go-old"}],
+				"draft": false,
+				"prerelease": false
+			},
+			{
+				"tag_name": "plugin-go-v2026.79.200",
+				"assets": [{"name": "%s", "browser_download_url": "https://example.com/go-new"}],
+				"draft": false,
+				"prerelease": false
+			}
+		]`, assetName, assetName)))
+	}))
+	defer server.Close()
+
+	githubAPIBaseURL = server.URL
+
+	rm := NewReleaseManager(&ReleaseManagerConfig{
+		Type:      ReleaseTypePlugin,
+		RepoOwner: "my-org",
+		RepoName:  "my-plugin-repo",
+		PluginDir: "plugin/go",
+		PluginConfig: &PluginReleaseConfig{
+			AssetName:    "go-plugin-%s-%s.tar.gz",
+			ArchSpecific: true,
+		},
+	}, "v0.0.0", true)
+
+	release, err := rm.GetLatestRelease()
+	require.NoError(t, err)
+	require.Equal(t, "plugin-go-v2026.78.100", release.Version)
+	require.Equal(t, "https://example.com/go-old", release.DownloadURL)
+}
+
+func TestGetLatestCLIReleaseIgnoresPluginOnlyReleases(t *testing.T) {
+	previousBaseURL := githubAPIBaseURL
+	t.Cleanup(func() {
+		githubAPIBaseURL = previousBaseURL
+	})
+
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		require.Equal(t, "/repos/canopy-network/canopy/releases", r.URL.Path)
+		_, _ = w.Write([]byte(`[
+			{
+				"tag_name": "plugin-go-v2026.82.1774298104",
+				"assets": [{"name": "go-plugin-linux-amd64.tar.gz", "browser_download_url": "https://example.com/plugin"}],
+				"draft": false,
+				"prerelease": false
+			},
+			{
+				"tag_name": "v0.1.18+beta",
+				"assets": [{"name": "cli-linux-amd64", "browser_download_url": "https://example.com/cli"}],
+				"draft": false,
+				"prerelease": false
+			}
+		]`))
+	}))
+	defer server.Close()
+
+	githubAPIBaseURL = server.URL
+
+	rm := NewReleaseManager(&ReleaseManagerConfig{
+		Type:      ReleaseTypeCLI,
+		RepoOwner: "canopy-network",
+		RepoName:  "canopy",
+	}, "v0.1.17", true)
+
+	release, err := rm.GetLatestRelease()
+	require.NoError(t, err)
+	require.Equal(t, "v0.1.18+beta", release.Version)
+	require.Equal(t, "https://example.com/cli", release.DownloadURL)
+}
+

cmd/auto-update/releaser_test.go

@@ -0,0 +1,82 @@
+package main
+
+import (
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"runtime"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestGetLatestPluginReleaseFiltersByPluginStream(t *testing.T) {
+	previousBaseURL := githubAPIBaseURL
+	t.Cleanup(func() {
+		githubAPIBaseURL = previousBaseURL
+	})
+
+	assetName := "go-plugin-" + runtime.GOOS + "-" + runtime.GOARCH + ".tar.gz"
+
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		require.Equal(t, "/repos/my-org/my-plugin-repo/releases", r.URL.Path)
+		_, _ = w.Write([]byte(fmt.Sprintf(`[
+			{
+				"tag_name": "v9.9.9",
+				"assets": [{"name": "cli-linux-amd64", "browser_download_url": "https://example.com/cli"}],
+				"draft": false,
+				"prerelease": false
+			},
+			{
+				"tag_name": "plugin-python-v3.4.5",
+				"assets": [{"name": "python-plugin.tar.gz", "browser_download_url": "https://example.com/python"}],
+				"draft": false,
+				"prerelease": false
+			},
+			{
+				"tag_name": "plugin-go-v2026.78.100",
+				"assets": [{"name": "%s", "browser_download_url": "https://example.com/go-old"}],
+				"draft": false,
+				"prerelease": false
+			},
+			{
+				"tag_name": "plugin-go-v2026.79.200",
+				"assets": [{"name": "%s", "browser_download_url": "https://example.com/go-new"}],
+				"draft": false,
+				"prerelease": false
+			}
+		]`, assetName, assetName)))
+	}))
+	defer server.Close()
+
+	githubAPIBaseURL = server.URL
+
+	rm := NewReleaseManager(&ReleaseManagerConfig{
+		Type:      ReleaseTypePlugin,
+		RepoOwner: "my-org",
+		RepoName:  "my-plugin-repo",
+		PluginDir: "plugin/go",
+		PluginConfig: &PluginReleaseConfig{
+			AssetName:    "go-plugin-%s-%s.tar.gz",
+			ArchSpecific: true,
+		},
+	}, "v0.0.0", true)
+
+	release, err := rm.GetLatestRelease()
+	require.NoError(t, err)
+	require.Equal(t, "plugin-go-v2026.79.200", release.Version)
+	require.Equal(t, "https://example.com/go-new", release.DownloadURL)
+}
+
+func TestShouldUpdateAcceptsPluginPrefixedSemver(t *testing.T) {
+	rm := NewReleaseManager(&ReleaseManagerConfig{
+		Type:      ReleaseTypePlugin,
+		PluginDir: "plugin/go",
+	}, "v2026.78.100", true)
+
+	release := &Release{Version: "plugin-go-v2026.79.200"}
+	err := rm.ShouldUpdate(release)
+	require.NoError(t, err)
+	require.True(t, release.ShouldUpdate)
+	require.Equal(t, "v2026.79.200", release.Version)
+}