feat(bridge_ui): opt-in aggkit bridge-service backend via aggkit-proxy, 2-L2 enclave + bridge tracker (rc5)

.github/scripts/monitor.sh

@@ -63,6 +63,11 @@ case "${sequencer_type}" in
   "op-reth")
     rpc_name="op-el-1-op-reth-op-node${deployment_suffix}"
     ;;
+  "anvil")
+    # The anvil L2 is its own RPC endpoint (no separate sequencer/rpc split,
+    # unlike cdk-erigon/op-reth). constants.L2_RPC_MAPPING[anvil] = "l2-anvil".
+    rpc_name="l2-anvil${deployment_suffix}"
+    ;;
   *)
     log_error "Unsupported sequencer type: ${sequencer_type}"
     exit 1
@@ -82,6 +87,9 @@ case "${sequencer_type}" in
   "op-reth")
     target=50 # blocks
     ;;
+  "anvil")
+    target=20 # blocks -- anvil self-produces one block per l2_anvil_block_time (default 1s)
+    ;;
   *)
     log_error "Unsupported sequencer type: ${sequencer_type}"
     exit 1
@@ -126,6 +134,18 @@ for step in $(seq 1 "${num_steps}"); do
             exit 0
           fi
           ;;
+        "anvil")
+          # anvil advances "finalized" itself (--slots-in-an-epoch), same
+          # latest/safe/finalized triple as op-reth (S3/S4 measured this).
+          LATEST_BLOCK=$(cast bn --rpc-url "${rpc_url}")
+          SAFE_BLOCK=$(cast bn safe --rpc-url "${rpc_url}")
+          FINALIZED_BLOCK=$(cast bn finalized --rpc-url "${rpc_url}")
+          log_info "Got blocks: latest=${LATEST_BLOCK}, safe=${SAFE_BLOCK}, finalized=${FINALIZED_BLOCK}"
+          if [[ "${LATEST_BLOCK}" -ge "${target}" && "${SAFE_BLOCK}" -ge "${target}" && "${FINALIZED_BLOCK}" -ge "${target}" ]]; then
+            log_info "Target blocks reached for all block types (latest, safe and finalized)"
+            exit 0
+          fi
+          ;;
         *)
           log_error "Unsupported sequencer type: ${sequencer_type}"
           exit 1
@@ -184,6 +204,9 @@ case "${consensus_contract_type}" in
       "op-reth")
         log_error "Target blocks have not been reached for all block types (latest, safe and finalized)"
         ;;
+      "anvil")
+        log_error "Target blocks have not been reached for all block types (latest, safe and finalized)"
+        ;;
       *)
         log_error "Unsupported sequencer type: ${sequencer_type}"
         exit 1

.github/tests/cdk-erigon/rollup.yml

@@ -5,3 +5,25 @@ args:
   sequencer_type: cdk-erigon
   consensus_contract_type: rollup
   zkevm_prover_image: hermeznetwork/zkevm-prover:v8.0.0-RC16-fork.12
+  # K9: pin agglayer below the DEFAULT_IMAGES 0.6.0-rc.8 default (K3). Upstream
+  # agglayer PR #1637 ("feat(rpc): disable the interop_sendTx method", closing
+  # issue #1632, first shipped in 0.6.0-rc.6) permanently and unconditionally
+  # disables the interop_sendTx JSON-RPC method (always returns error -10009
+  # "The interop_sendTx method is disabled" -- there is no config flag to
+  # re-enable it; the upstream commit explicitly deprecates the whole legacy
+  # flow). consensus_contract_type "rollup"/"cdk-validium" rely on that exact
+  # method: cdk-node's Aggregator (SettlementBackend = "agglayer" in
+  # static_files/chain/cdk-erigon/cdk-node/config.toml) relays each verified
+  # batch's proof-settlement tx through it, so with it disabled
+  # zkevm_verifiedBatchNumber never advances past 0 and
+  # .github/scripts/monitor.sh's "latest, virtual and verified" check times
+  # out -- confirmed via the cdk-node aggregator log repeating
+  # `failed to send tx to the agglayer: -10009 The interop_sendTx method is
+  # disabled` for the entire run. 0.6.0-rc.5 (the DEFAULT_IMAGES value before
+  # K3) still has the legacy flow and is confirmed working in CI (verified
+  # batches progressed normally to the target, see anvil-rollup.yml's
+  # identical pin, applied first in K7c). rc.5 already understands the
+  # [settlement.pessimistic-proof-tx-config] schema K3 introduced (present
+  # since agglayer's agglayer-settlement-service, PR #1393, well before rc.5),
+  # so this override does not require any config.toml template change.
+  agglayer_image: ghcr.io/agglayer/agglayer:0.6.0-rc.5

.github/tests/cdk-erigon/validium.yml

@@ -5,3 +5,25 @@ args:
   sequencer_type: cdk-erigon
   consensus_contract_type: cdk-validium
   zkevm_prover_image: hermeznetwork/zkevm-prover:v8.0.0-RC16-fork.12
+  # K9: pin agglayer below the DEFAULT_IMAGES 0.6.0-rc.8 default (K3). Upstream
+  # agglayer PR #1637 ("feat(rpc): disable the interop_sendTx method", closing
+  # issue #1632, first shipped in 0.6.0-rc.6) permanently and unconditionally
+  # disables the interop_sendTx JSON-RPC method (always returns error -10009
+  # "The interop_sendTx method is disabled" -- there is no config flag to
+  # re-enable it; the upstream commit explicitly deprecates the whole legacy
+  # flow). consensus_contract_type "rollup"/"cdk-validium" rely on that exact
+  # method: cdk-node's Aggregator (SettlementBackend = "agglayer" in
+  # static_files/chain/cdk-erigon/cdk-node/config.toml) relays each verified
+  # batch's proof-settlement tx through it, so with it disabled
+  # zkevm_verifiedBatchNumber never advances past 0 and
+  # .github/scripts/monitor.sh's "latest, virtual and verified" check times
+  # out -- confirmed via the cdk-node aggregator log repeating
+  # `failed to send tx to the agglayer: -10009 The interop_sendTx method is
+  # disabled` for the entire run. 0.6.0-rc.5 (the DEFAULT_IMAGES value before
+  # K3) still has the legacy flow and is confirmed working in CI (verified
+  # batches progressed normally to the target, see anvil-rollup.yml's
+  # identical pin, applied first in K7c). rc.5 already understands the
+  # [settlement.pessimistic-proof-tx-config] schema K3 introduced (present
+  # since agglayer's agglayer-settlement-service, PR #1393, well before rc.5),
+  # so this override does not require any config.toml template change.
+  agglayer_image: ghcr.io/agglayer/agglayer:0.6.0-rc.5

.github/tests/other/anvil/anvil-l2-rollup.yml

@@ -0,0 +1,65 @@
+# S15 (dev-ui-ci-snapshot plan): single-chain anvil-L2 CI fixture. Exercises
+# sequencer_type: anvil end to end -- the new anvil L2 launcher path added in
+# S3, extended by S4 (template branches), S4b (anvil_image v1.5.1 bump for
+# certificate settlement) and S5. Wired into test.yml's run-with-anvil-l2 job
+# so kurtosis-cdk's own CI covers the anvil-L2 bring-up on every PR, not just
+# this plan's snapshot workflow.
+#
+# Modeled on params-aggkit-anvil-l2l2-run1.yml, minus agglayer_extra_rollups
+# (single chain, no rollup 2) -- that pair is for the 2-L2 snapshot topology,
+# this file is a standalone single `kurtosis run`.
+
+deployment_stages:
+  deploy_op_succinct: false
+  # Legacy zkevm-bridge-service is not needed; the aggkit-001 process serves
+  # the bridge REST API itself (--components=...,bridge) unconditionally.
+  # See params-aggkit-anvil-l2l2-run1.yml for the same choice, and S15's
+  # evidence (04-agglayer-config-data.json / 05-zkevmbridge-config-data.json)
+  # for confirmation that the legacy bridge-service template ALSO renders
+  # cleanly for anvil now (S4 fixed it), in case a future step wants it on.
+  deploy_cdk_bridge_infra: false
+  # postgres-001 is otherwise deployed by default and unused by the anvil
+  # path (databases.star returns CENTRAL_ENV_DBS for anvil, which nothing
+  # reads when deploy_cdk_bridge_infra is false and sequencer_type is anvil).
+  deploy_databases: false
+
+args:
+  # Anvil on both layers -- L1 AND its own L2.
+  l1_engine: anvil
+  # Deliberately NOT setting l1_rpc_url/l1_ws_url/l1_beacon_url: this job is
+  # the CI regression net for set_l1_client_args()'s anvil early-return. If
+  # that guard is ever removed, the L1 URLs get clobbered back to the
+  # ethereum-package service names and this job fails.
+  sequencer_type: anvil
+  # Mandatory for sequencer_type: anvil (args_sanity_check rule V1).
+  consensus_contract_type: ecdsa-multisig
+
+  aggkit_image: ghcr.io/agglayer/aggkit:0.11.0-rc5
+  # "autoclaim" so destination network 1 gets an AutoClaim claimer -- see
+  # aggkit_autoclaim_destinations below. "bridge" so this same process also
+  # serves the bridge REST API (port 5577) -- there is no longer a separate
+  # aggkit-001-bridge service.
+  aggkit_components: "aggsender,aggoracle,autoclaim,bridge"
+
+  # aggsender multisig committee: 1 validator, threshold 1.
+  use_agg_sender_validator: true
+  agg_sender_validator_total_number: 1
+  agg_sender_multisig_threshold: 1
+
+  # Off for determinism, same choice as the 2-L2 anvil params (no dedicated
+  # test-runner/bridge-spammer wiring for the anvil bridge topology yet --
+  # this job verifies bridge/GER bytecode and aggkit sync-status directly).
+  additional_services: []
+
+  l2_chain_id: 20201
+  l2_network_id: 1
+
+  aggkit_autoclaim_destinations: [1]
+  aggkit_autoclaim_bridge_urls:
+    - network_id: 1
+      bridge_url: "http://aggkit-001:5577"
+
+# NOTE: deliberately NO optimism_package: block -- sequencer_type: anvil
+# rejects one entirely (args_sanity_check rule V4: "sequencer_type 'anvil'
+# does not use the optimism-package; remove the optimism_package block from
+# your args file").

.github/tests/other/anvil/anvil-rollup.yml

@@ -1,3 +1,32 @@
 args:
   l1_engine: anvil
+  # An anvil L1 cannot be combined with the default sequencer_type (op-reth):
+  # the optimism-package's op-node launcher unconditionally requires an
+  # `el_cl_genesis_data` artifact that only the ethereum-package L1 flow
+  # produces, and src/l1/anvil.star never creates one, so the run dies at
+  # Starlark validation time. args_sanity_check now rejects that combination
+  # with an explicit message; pin cdk-erigon here, which is the pairing this
+  # fixture was always meant to exercise.
+  sequencer_type: cdk-erigon
   consensus_contract_type: rollup
+  # K7c: pin agglayer below the DEFAULT_IMAGES 0.6.0-rc.8 default (K3). Upstream
+  # agglayer PR #1637 ("feat(rpc): disable the interop_sendTx method", closing
+  # issue #1632, first shipped in 0.6.0-rc.6) permanently and unconditionally
+  # disables the interop_sendTx JSON-RPC method (always returns error -10009
+  # "The interop_sendTx method is disabled" -- there is no config flag to
+  # re-enable it; the upstream commit explicitly deprecates the whole legacy
+  # flow). consensus_contract_type "rollup"/"cdk-validium" rely on that exact
+  # method: cdk-node's Aggregator (SettlementBackend = "agglayer" in
+  # static_files/chain/cdk-erigon/cdk-node/config.toml) relays each verified
+  # batch's proof-settlement tx through it, so with it disabled
+  # zkevm_verifiedBatchNumber never advances past 0 and
+  # .github/scripts/monitor.sh's "latest, virtual and verified" check times
+  # out -- confirmed via the cdk-node aggregator log repeating
+  # `failed to send tx to the agglayer: -10009 The interop_sendTx method is
+  # disabled` for the entire run. 0.6.0-rc.5 (the DEFAULT_IMAGES value before
+  # K3) still has the legacy flow and is confirmed working in CI (verified
+  # batches progressed normally to the target). rc.5 already understands the
+  # [settlement.pessimistic-proof-tx-config] schema K3 introduced (present
+  # since agglayer's agglayer-settlement-service, PR #1393, well before rc.5),
+  # so this override does not require any config.toml template change.
+  agglayer_image: ghcr.io/agglayer/agglayer:0.6.0-rc.5