genlayer 0.40.0-clarke.1 → 0.40.0-clarke.3

package/.github/workflows/e2e-wallet.yml

@@ -0,0 +1,63 @@
+# Tier-2 browser-wallet signing e2e (Playwright + mock provider on anvil).
+#
+# INFORMATIONAL / NOT A REQUIRED GATE (initially). This job drives a headless
+# chromium against the real bridge page with a viem-backed mock window.ethereum
+# that signs+broadcasts to an ephemeral anvil, exercising the full
+# connect -> sign -> receipt loop with zero MetaMask. Keep it OFF the required
+# status checks in branch protection until it has proven stable across a few
+# weeks of PRs, then promote it to required.
+#
+# Distinct filename from the synced cross-repo e2e.yml (the /run-e2e cucumber
+# pipeline) so the two never collide.
+name: E2E Wallet (Tier 2)
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  push:
+    branches:
+      - v0.40
+      - v0.40-dev
+
+jobs:
+  e2e-wallet:
+    name: Browser-wallet e2e (anvil lanes)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install libsecret runtime
+        run: sudo apt-get update && sudo apt-get install -y libsecret-1-0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build the project
+        run: npm run build
+
+      - name: Install Foundry (anvil)
+        uses: foundry-rs/foundry-toolchain@v1
+
+      - name: Install Playwright chromium
+        run: npx playwright install --with-deps chromium
+
+      - name: Run Tier-2 e2e (anvil lanes)
+        run: npm run test:e2e
+
+      - name: Upload Playwright report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report
+          path: |
+            playwright-report/
+            test-results/
+          retention-days: 7
+          if-no-files-found: ignore

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## [0.40.0-clarke.3](https://github.com/genlayerlabs/genlayer-cli/compare/v0.40.0-clarke.2...v0.40.0-clarke.3) (2026-07-10)
+
+### Features
+
+* **staking:** non-interactive wizard mode ([#384](https://github.com/genlayerlabs/genlayer-cli/issues/384)) ([ef47935](https://github.com/genlayerlabs/genlayer-cli/commit/ef47935f81f17119caafb4d3121874a27308a40c))
+* **staking:** wizard guides identity on the vesting funding path ([#386](https://github.com/genlayerlabs/genlayer-cli/issues/386)) ([6249e26](https://github.com/genlayerlabs/genlayer-cli/commit/6249e26d68ce12236e4fda6512480778d2990621))
+
+### Bug Fixes
+
+* **account:** clear error for password prompts with no TTY ([#390](https://github.com/genlayerlabs/genlayer-cli/issues/390)) ([0ce6b1b](https://github.com/genlayerlabs/genlayer-cli/commit/0ce6b1b19d4d6fb17ce52569a74574212c8d0d53))
+* **balances:** degrade gracefully when staking is unavailable ([#389](https://github.com/genlayerlabs/genlayer-cli/issues/389)) ([8cdcb8a](https://github.com/genlayerlabs/genlayer-cli/commit/8cdcb8aea4c17fcb4f671f5d03bf7decf784618b)), closes [#2](https://github.com/genlayerlabs/genlayer-cli/issues/2)
+* **balances:** wallet-only view when consensus infra is not deployed ([#391](https://github.com/genlayerlabs/genlayer-cli/issues/391)) ([f2d9c98](https://github.com/genlayerlabs/genlayer-cli/commit/f2d9c9837f88be42e53e0a4dcc94322e1d15b5b6)), closes [#389](https://github.com/genlayerlabs/genlayer-cli/issues/389)
+* **cli:** read commands honor a live wallet session (connect-once identity) ([#385](https://github.com/genlayerlabs/genlayer-cli/issues/385)) ([923475d](https://github.com/genlayerlabs/genlayer-cli/commit/923475d93e36dbb8146f2dcb9ff5d80799af99a4))
+* **staking:** route set-operator/validator-claim/set-identity/trace through the SDK ([#387](https://github.com/genlayerlabs/genlayer-cli/issues/387)) ([e70b31b](https://github.com/genlayerlabs/genlayer-cli/commit/e70b31b039bbb67b568628adc7219909e9d0d1af))
+* **staking:** validator-deposit/exit work through the CLI ([#382](https://github.com/genlayerlabs/genlayer-cli/issues/382)) ([3de9a6a](https://github.com/genlayerlabs/genlayer-cli/commit/3de9a6a2ee07bd596d3706228d9584f529ce1e16))
+* **wallet:** harden bridge (verify signer, Host check, constant-time token, 0700, url scrub, body cap) ([#383](https://github.com/genlayerlabs/genlayer-cli/issues/383)) ([e55f917](https://github.com/genlayerlabs/genlayer-cli/commit/e55f917f269ece99c98dee6337695c7e5c459b95))
+
+## [0.40.0-clarke.2](https://github.com/genlayerlabs/genlayer-cli/compare/v0.40.0-clarke.1...v0.40.0-clarke.2) (2026-07-09)
+
+### Features
+
+* **staking:** browser-wallet signing for validator-join and wizard ([#367](https://github.com/genlayerlabs/genlayer-cli/issues/367)) ([ab128c0](https://github.com/genlayerlabs/genlayer-cli/commit/ab128c0b76b4f9d97ed660d91a556a5f769cef6f))
+
 ## [0.40.0-clarke.1](https://github.com/genlayerlabs/genlayer-cli/compare/v0.40.0-rc2...v0.40.0-clarke.1) (2026-07-08)
 
 ## [0.40.0-rc2](https://github.com/genlayerlabs/genlayer-cli/compare/v0.40.0-rc1...v0.40.0-rc2) (2026-07-08)

package/CLAUDE.md

@@ -26,7 +26,9 @@ npx vitest -t "test name pattern"         # Run specific test by name
 ### Entry Point & Command Structure
 - `src/index.ts` - Main entry, initializes Commander program and registers all command groups
 - Commands organized in `src/commands/<domain>/index.ts` - each exports `initialize*Commands(program)` function
-- Command domains: general (init/up/stop), account, contracts, config, localnet, update, scaffold, network, transactions, staking
+- Command domains: general (init/up/stop), account, contracts, config, localnet, update, scaffold, network, transactions, staking, vesting, wallet, balances
+- Custom networks: `network add <alias> --base <built-in>` registers a custom network profile (RPC/contract-address overrides); resolved by alias everywhere via `--network`
+- Browser-wallet signing: write commands (staking/vesting/deploy/write) accept `--wallet browser` to sign in MetaMask through a local bridge (`addWalletModeOption` in `src/lib/wallet/walletOption.ts`); `wallet connect` starts a persistent session so the key never leaves MetaMask
 
 ### Core Classes
 - `BaseAction` (`src/lib/actions/BaseAction.ts`) - Base class for all CLI actions. Provides:

package/README.md

@@ -151,15 +151,34 @@ USAGE:
    genlayer network set [network]    Set the network to use
    genlayer network info             Show current network configuration and contract addresses
    genlayer network list             List available networks
+   genlayer network add <alias>      Add a custom network profile
+   genlayer network remove <alias>   Remove a custom network profile
+
+OPTIONS (add):
+   --base <built-in-alias>    Built-in base network to derive from (required)
+   --rpc <url>                Node RPC URL override
+   --chain-id <n>             Chain ID override
+   --consensus-main <addr>    ConsensusMain contract address override
+   --consensus-data <addr>    ConsensusData contract address override
+   --staking <addr>           Staking contract address override
+   --fee-manager <addr>       FeeManager contract address override
+   --deployment <path.json>   Consensus deployments JSON file to read addresses from
 
 EXAMPLES:
    genlayer network set
-   genlayer network set testnet
-   genlayer network set mainnet
+   genlayer network set testnet-bradbury
    genlayer network info
    genlayer network list
+
+   # Register a custom network on top of a built-in base, then use it by alias
+   genlayer network add my-devnet --base testnet-bradbury --rpc https://rpc.example.com --chain-id 4221
+   genlayer network set my-devnet
+   genlayer deploy --network my-devnet
 ```
 
+Custom networks are stored by alias and can be selected anywhere a built-in
+network can, via `--network <alias>` (or `genlayer network set <alias>`).
+
 #### Deploy and Call Intelligent Contracts
 
 Deploy and interact with intelligent contracts.
@@ -478,6 +497,7 @@ COMMON OPTIONS (all commands):
 OPTIONS (validator-join):
    --amount <amount>             Amount to stake (in wei or with 'gen' suffix)
    --operator <address>          Operator address (defaults to signer)
+   --wallet <mode>               'keystore' (default) or 'browser' (sign in MetaMask)
 
 OPTIONS (delegator-join):
    --validator <address>         Validator address to delegate to
@@ -497,6 +517,14 @@ EXAMPLES:
    # Join as validator with 42000 GEN
    genlayer staking validator-join --amount 42000gen
 
+   # Sign the validator-join with a browser wallet (MetaMask) instead of a keystore.
+   # The CLI serves a page on 127.0.0.1 and opens it; connect + confirm in the wallet.
+   # Remote/SSH: forward the printed port first (ssh -L <port>:127.0.0.1:<port> ...).
+   genlayer staking validator-join --amount 42000gen --wallet browser --network testnet-bradbury
+
+   # The wizard can also use a browser wallet as the owner (operator keystore is still generated locally):
+   genlayer staking wizard --wallet browser
+
    # Join as delegator with 42 GEN
    genlayer staking delegator-join --validator 0x... --amount 42gen
 
@@ -576,6 +604,80 @@ EXAMPLES:
    genlayer staking prime-all
 ```
 
+#### Browser Wallet Signing
+
+By default, write commands sign with your encrypted keystore. Any write command
+(`deploy`, `write`, and the `staking`/`vesting` commands) also accepts
+`--wallet browser` to sign in MetaMask instead: the CLI serves a small page on
+`127.0.0.1`, opens it, and you connect and confirm in the wallet. Your private
+key never leaves MetaMask.
+
+To avoid reconnecting for every command, open a persistent session once with
+`wallet connect` and reuse it across subsequent `--wallet browser` commands.
+
+```bash
+USAGE:
+   genlayer wallet connect [options]   Start a persistent browser-wallet session (connect once)
+   genlayer wallet status              Show the current session (address, network, heartbeat)
+   genlayer wallet disconnect          End the active session
+
+EXAMPLES:
+   # Connect once, then reuse across commands
+   genlayer wallet connect --network testnet-bradbury
+   genlayer deploy --wallet browser
+   genlayer write 0x123...abc updateValue --args 42 --wallet browser
+   genlayer wallet status
+   genlayer wallet disconnect
+```
+
+For remote/SSH hosts, forward the printed port first
+(`ssh -L <port>:127.0.0.1:<port> ...`). The default signing mode can be set via
+the `walletMode` config value.
+
+#### Balances
+
+Show wallet and vesting balances plus committed stake for an address
+(read-only, no keystore unlock).
+
+```bash
+USAGE:
+   genlayer balances [options]
+
+OPTIONS:
+   --beneficiary <address>  Address to inspect (defaults to the active account)
+   --account <name>         Account whose address to use (no unlock)
+   --network <network>      Built-in or custom network alias
+   --rpc <rpcUrl>           RPC URL for the network
+
+EXAMPLES:
+   genlayer balances
+   genlayer balances --beneficiary 0x123...abc --network testnet-bradbury
+```
+
+#### Vesting
+
+Manage vesting contracts and vesting-backed validators. Beneficiaries can list
+their vesting contracts, delegate/withdraw vested tokens, and run validators
+whose stake is committed from a vesting contract rather than their wallet.
+
+```bash
+USAGE:
+   genlayer vesting list                     List beneficiary vesting contracts and state
+   genlayer vesting delegate <validator>     Delegate vesting-held tokens to a validator
+   genlayer vesting withdraw --amount <amt>   Withdraw vested tokens to the beneficiary
+   genlayer vesting validator create [operator] --amount <amt>  Create a vesting-backed validator
+   genlayer vesting validator list           List validator wallets owned by a vesting contract
+```
+
+The `staking wizard` can fund a validator from either your wallet or a vesting
+contract, and sign with a keystore key or a browser wallet — the recommended
+path for creating a vesting-backed validator interactively:
+
+```bash
+genlayer staking wizard
+genlayer staking wizard --wallet browser
+```
+
 ### Running the CLI from the repository
 
 First, install the dependencies and start the build process