Reindex optimizations 1

.claude/CLAUDE.md

@@ -17,9 +17,9 @@ go run github.com/99designs/gqlgen generate  # Regenerate GraphQL code
 
 `make test` skips the slow packages listed in `SLOW_PACKAGES` in the Makefile
 (libp2p clusters, docker devnet, zk proving, multi-second suites) and the
-non-host-runnable ones (`modules/wasm/e2e/go_wasm*` wasm guests,
-`modules/oracle/price` WIP). New packages are quick by default — add genuinely
-slow ones to `SLOW_PACKAGES`.
+non-host-runnable `modules/wasm/e2e/go_wasm*` wasm guests (their nested go.mod
+excludes them from host builds). New packages are quick by default — add
+genuinely slow ones to `SLOW_PACKAGES`.
 
 `make test-regression` runs the single `TestFullNetworkRegression` (in
 `tests/devnet`) with a 130m timeout (TSS stages wait on ~5-min epoch boundaries

Makefile

@@ -87,8 +87,8 @@ install: all
 # picked up by `make test` automatically.
 #
 # NON_HOST_PACKAGES never run under either target: the wasm-guest packages under
-# modules/wasm/e2e/go_wasm are built for the wasm target (build-excluded on the
-# host) and modules/oracle/price is WIP that does not compile.
+# modules/wasm/e2e/go_wasm are built for the wasm target (their own nested
+# go.mod excludes them on the host).
 
 empty :=
 space := $(empty) $(empty)
@@ -103,13 +103,11 @@ SLOW_PACKAGES := \
 	modules/hive/streamer \
 	modules/block-producer \
 	modules/state-processing \
-	modules/wasm/e2e \
 	modules/e2e \
 	cmd/mapping-bot/mapper \
 	cmd/zk-tx-signer
 
-NON_HOST_PACKAGES := \
-	modules/oracle/price
+NON_HOST_PACKAGES :=
 
 # --- Known-failing exclusions (TEMPORARY — remove each entry once fixed) --------
 # These currently fail and are excluded from BOTH `make test` and `make test-full`
@@ -171,6 +169,16 @@ LIST_TEST_PKGS := go list -e -f '{{if or .TestGoFiles .XTestGoFiles}}{{.ImportPa
 # `ok` could reflect a stale run — undesirable for a deliberate test invocation.
 GO_TEST := go test -count=1
 
+# On macOS the `go` tool strips DYLD_LIBRARY_PATH from test binaries, so a
+# cgo-linked test binary cannot locate libwasmedge at runtime unless the rpath
+# is embedded at link time. Add it when a local WasmEdge install exists.
+WASMEDGE_LIB_DIR := $(HOME)/.wasmedge/lib
+ifeq ($(wildcard $(WASMEDGE_LIB_DIR)/libwasmedge.dylib),)
+GO_TEST := $(GO_TEST)
+else
+GO_TEST := CGO_LDFLAGS="-Wl,-rpath,$(WASMEDGE_LIB_DIR)" $(GO_TEST)
+endif
+
 # Quick unit tests across the whole repo. Intended to stay under ~5 minutes.
 test:
 	@echo "==> Quick tests (target < 5 min)"

cmd/contract-deployer/main.go

@@ -35,6 +35,15 @@ func main() {
 	p2pConf := p2pInterface.NewConfig(args.dataDir)
 	sysConfig := systemconfig.FromNetwork(args.network)
 	if args.sysconfigPath != "" {
+		// L8-03 (FULL-PRUNED 2026-07-09): a -sysconfig override rewrites ConsensusParams/
+		// OracleParams, which the node repo requires to be network-baked and identical on
+		// every node (params.go:118-129). Restrict it to devnet/mocknet — the SAME guard as
+		// cmd/vsc-node/main.go — so a production -sysconfig can't silently redirect a deploy
+		// to the wrong contract id / gateway.
+		if args.network != "devnet" && args.network != "mocknet" {
+			fmt.Println("Error: sysconfig overrides only allowed on devnet/mocknet, not", args.network)
+			os.Exit(1)
+		}
 		if err := sysConfig.LoadOverrides(args.sysconfigPath); err != nil {
 			fmt.Println("Error loading sysconfig overrides:", err)
 			os.Exit(1)

cmd/devnet-setup/main.go

@@ -12,6 +12,7 @@ import (
 	"time"
 	"vsc-node/modules/aggregate"
 	"vsc-node/modules/common"
+	"vsc-node/modules/common/delegationmode"
 	"vsc-node/modules/common/params"
 	systemconfig "vsc-node/modules/common/system-config"
 	"vsc-node/modules/db"
@@ -116,6 +117,13 @@ func main() {
 		})
 		idConf.SetUsername(witnessName)
 		idConf.SetActiveKey(args.wif)
+		// Consensus 0.5.0: nodes must opt in to receive third-party consensus
+		// delegation (default is Deactivated). Devnet nodes announce "custom" so
+		// the delegation stake/unstake paths are exercisable; "custom" keeps
+		// pendulum rewards at the node account, so reward-distribution devnet
+		// tests stay byte-identical to the pre-feature behaviour (only "share"
+		// splits to delegators). Use delegationmode.Share to exercise the split.
+		idConf.SetDelegationMode(delegationmode.Custom)
 
 		// Devnet integration-test hook (gated): when DEVNET_DETERMINISTIC_BLS=1,
 		// override the randomly-generated BLS seed with a DETERMINISTIC per-witness

cmd/genesis-elector/main.go

@@ -42,6 +42,15 @@ func main() {
 	electionDb := elections.New(vscDb)
 	sysConfig := systemconfig.FromNetwork(args.network)
 	if args.sysconfigPath != "" {
+		// L8-03 (FULL-PRUNED 2026-07-09): a -sysconfig override rewrites ConsensusParams/
+		// OracleParams, which the node repo requires to be network-baked and identical on
+		// every node (params.go:118-129). Restrict it to devnet/mocknet — the SAME guard as
+		// cmd/vsc-node/main.go — so a production -sysconfig can't silently fork this binary's
+		// view of consensus params off the network.
+		if args.network != "devnet" && args.network != "mocknet" {
+			fmt.Println("Error: sysconfig overrides only allowed on devnet/mocknet, not", args.network)
+			os.Exit(1)
+		}
 		if err := sysConfig.LoadOverrides(args.sysconfigPath); err != nil {
 			fmt.Println("Error loading sysconfig overrides:", err)
 			os.Exit(1)

cmd/mapping-bot/contract-interface/const.go

@@ -15,3 +15,21 @@ const LastHeightKey = "h"
 
 const PrimaryPublicKeyStateKey = "pubkey"
 const BackupPublicKeyStateKey = "backupkey"
+
+// ---------------------------------------------------------------------------
+// BTC vault-rotation-v2 (must stay byte-identical to the contract's
+// btc-mapping-contract/contract/constants: a mismatch silently reads the wrong
+// state key and the rotation driver goes blind).
+// ---------------------------------------------------------------------------
+
+// VaultRegistryKey holds the packed vault-generation registry (the "v" list).
+// Absent/empty on a non-vault contract and on a pre-rotation deploy — the
+// rotation driver treats both as "nothing to do".
+const VaultRegistryKey = "v"
+
+// MigrationSweepPrefix keys the per-sweep migration record ("ms-<txid>"). Its
+// presence means a migration sweep is in flight and not yet settled.
+const MigrationSweepPrefix = "ms" + DirPathDelimiter
+
+// PendingUnmapPrefix keys the per-unmap record ("us-<txid>", delete-at-confirm).
+const PendingUnmapPrefix = "us" + DirPathDelimiter

cmd/mapping-bot/main.go

@@ -42,6 +42,15 @@ func main() {
 
 	sysConfig := systemconfig.FromNetwork(args.network)
 	if args.sysconfigPath != "" {
+		// L8-03 (FULL-PRUNED 2026-07-09): a -sysconfig override rewrites ConsensusParams/
+		// OracleParams, which the node repo requires to be network-baked and identical on
+		// every node (params.go:118-129). Restrict it to devnet/mocknet — the SAME guard as
+		// cmd/vsc-node/main.go — so a production -sysconfig can't silently misdirect this
+		// privileged oracle binary (its BTC L1 endpoint / target contract id).
+		if args.network != "devnet" && args.network != "mocknet" {
+			fmt.Println("Error: sysconfig overrides only allowed on devnet/mocknet, not", args.network)
+			os.Exit(1)
+		}
 		if err := sysConfig.LoadOverrides(args.sysconfigPath); err != nil {
 			fmt.Println("Error loading sysconfig overrides:", err)
 			os.Exit(1)
@@ -187,6 +196,7 @@ func main() {
 			// At head — still run unmap/confirmations, then sleep before checking again
 			bot.HandleUnmap()
 			bot.HandleConfirmations()
+			bot.HandleVaultRotation()
 			releaseBlockLease(bot, blockHeight, instanceID)
 			time.Sleep(chainCfg.SleepInterval)
 			cancel()
@@ -219,6 +229,11 @@ func main() {
 			defer wg.Done()
 			bot.HandleUnmap()
 			bot.HandleConfirmations()
+			// Drive the vault-rotation lifecycle (build the next migration tranche /
+			// write off an un-sweepable residual / advance retire→purge). Runs after
+			// confirmations so a sweep that just settled is seen as settled. No-op on a
+			// contract with no vault registry, and internally rate-limited.
+			bot.HandleVaultRotation()
 		}()
 		wg.Wait()
 		releaseBlockLease(bot, blockHeight, instanceID)

cmd/mapping-bot/mapper/call_contract_l2.go

@@ -42,7 +42,9 @@ func (b *Bot) callContractL2(
 		return "", fmt.Errorf("fetch L2 nonce: %w", err)
 	}
 
-	rcLimit := b.BotConfig.RcLimit()
+	// Per-action: the vault-rotation ops need a far higher ceiling than the bot's
+	// configured default, which every other action keeps unchanged (see rcLimitFor).
+	rcLimit := b.rcLimitFor(action)
 	call := &transactionpool.VscContractCall{
 		ContractId: b.BotConfig.ContractId(),
 		Action:     action,