feat: migrate raindex to soldeer for dependency management

.github/workflows/copilot-setup-steps.yml

@@ -1,5 +1,4 @@
 name: Copilot Agent Setup
-
 on:
   workflow_dispatch:
   push:
@@ -16,36 +15,28 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          fetch-depth: 0
-
       - uses: nixbuild/nix-quick-install-action@v30
         with:
           nix_conf: |
             keep-env-derivations = true
             keep-outputs = true
-
       - name: Restore and save Nix store
         uses: nix-community/cache-nix-action@v6
         with:
           primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
           restore-prefixes-first-match: nix-${{ runner.os }}-
           gc-max-store-size-linux: 1G
-
       - name: Prepare environment files
         run: |
           set -euxo pipefail
           cp -f .env.example .env
           cp -f packages/webapp/.env.example packages/webapp/.env
           cp -f .env.example crates/common/.env
-
       - name: Prepare repository dependencies
         run: ./prep-all.sh
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.WALLETCONNECT_PROJECT_ID || 'test' }}
           COMMIT_SHA: ${{ github.sha }}
-
       # forwards status to telegram chat if this ci fails or gets canceled, only runs for default branch
       - name: Forward CI Status
         if: always()

.github/workflows/copy-artifacts.yaml

@@ -0,0 +1,9 @@
+name: copy-artifacts
+on: [push]
+jobs:
+  copy-artifacts:
+    # Build from committed sources and assert the committed meta/pointer
+    # artifacts are still current (no prelude — committing the artifacts is what
+    # removes the need for one). secrets: inherit carries CACHIX_AUTH_TOKEN.
+    uses: rainlanguage/rainix/.github/workflows/rainix-copy-artifacts.yaml@main
+    secrets: inherit

.github/workflows/deploy-subgraph.yaml

@@ -1,7 +1,6 @@
 name: Deploy subgraph
 on:
   workflow_dispatch:
-
 jobs:
   deploy:
     permissions:
@@ -13,13 +12,8 @@ jobs:
       GOLDSKY_SUBGRAPH_NAME: raindex
     steps:
       - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          fetch-depth: 0
-
       - name: Free disk space
         uses: jlumbroso/free-disk-space@v1.3.1
-
       - uses: nixbuild/nix-quick-install-action@v30
         with:
           nix_conf: |
@@ -31,9 +25,7 @@ jobs:
           primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
           restore-prefixes-first-match: nix-${{ runner.os }}-
           gc-max-store-size-linux: 1G
-
       - run: nix develop -c subgraph-deploy
-
       # forwards status to telegram chat if this ci fails or gets canceled, only runs for default branch
       - name: Forward CI Status
         if: always()

.github/workflows/git-clean.yaml

@@ -4,11 +4,9 @@ on:
     branches:
       - main
   pull_request:
-
 concurrency:
   group: ${{ github.ref }}-git-clean
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
 jobs:
   git-clean:
     permissions:
@@ -17,13 +15,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          fetch-depth: 0
-
       - name: Free disk space
         uses: jlumbroso/free-disk-space@v1.3.1
-
       - uses: nixbuild/nix-quick-install-action@v30
         with:
           nix_conf: |
@@ -40,17 +33,13 @@ jobs:
           # before trying to save a new cache
           # 1G = 1073741824
           gc-max-store-size-linux: 1G
-
       # Build metas etc. required to do a correct pointer build.
       - run: ./pointers.sh
-
       # Format the repo after generating pointers so that the pointer files are
       # formatted too.
       - run: nix develop -c forge fmt
-
       # Check if the repo is clean after generating pointers and formatting.
       - run: git diff --exit-code
-
       # forwards status to telegram chat if this ci fails or gets canceled, only runs for default branch
       - name: Forward CI Status
         if: always() # This ensures it runs regardless of previous step outcomes

.github/workflows/manual-rs-release.yml

@@ -1,6 +1,5 @@
 name: Manual rs release
 on: [workflow_dispatch]
-
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -9,10 +8,6 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          submodules: recursive
-
       - uses: nixbuild/nix-quick-install-action@v30
         with:
           nix_conf: |
@@ -29,9 +24,7 @@ jobs:
           # before trying to save a new cache
           # 1G = 1073741824
           gc-max-store-size-linux: 1G
-
       - run: nix develop --command cargo release --workspace
-
       # forwards status to telegram chat if this ci fails or gets canceled, only runs for default branch
       - name: Forward CI Status
         if: always()

.github/workflows/manual-sol-artifacts.yaml

@@ -13,65 +13,9 @@ on:
           - arb-generic-pool-order-taker
           - arb-route-processor-order-taker
           - arb-generic-pool-flash-borrower
-
 jobs:
   deploy:
-    runs-on: ubuntu-latest
-    permissions:
-      id-token: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          fetch-depth: 0
-
-      - uses: nixbuild/nix-quick-install-action@v30
-        with:
-          nix_conf: |
-            keep-env-derivations = true
-            keep-outputs = true
-      - name: Restore and save Nix store
-        uses: nix-community/cache-nix-action@v6
-        with:
-          # restore and save a cache using this key
-          primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
-          # if there's no cache hit, restore a cache by this prefix
-          restore-prefixes-first-match: nix-${{ runner.os }}-
-          # collect garbage until the Nix store size (in bytes) is at most this number
-          # before trying to save a new cache
-          # 1G = 1073741824
-          gc-max-store-size-linux: 1G
-
-      - run: nix develop -c rainix-sol-prelude
-      - run: nix develop -c rainix-rs-prelude
-      - run: nix develop -c raindex-prelude
-
-      - name: deploy to all supported networks
-        run: nix develop -c rainix-sol-artifacts
-        env:
-          DEPLOYMENT_SUITE: ${{ inputs.suite }}
-          DEPLOY_BROADCAST: "1"
-          DEPLOYMENT_KEY: ${{ secrets.PRIVATE_KEY }}
-          ETH_RPC_URL: ${{ secrets.CI_DEPLOY_BASE_RPC_URL || vars.CI_DEPLOY_BASE_RPC_URL || '' }}
-
-          CI_DEPLOY_ARBITRUM_RPC_URL: ${{ secrets.CI_DEPLOY_ARBITRUM_RPC_URL || vars.CI_DEPLOY_ARBITRUM_RPC_URL || '' }}
-          CI_DEPLOY_BASE_RPC_URL: ${{ secrets.CI_DEPLOY_BASE_RPC_URL || vars.CI_DEPLOY_BASE_RPC_URL || '' }}
-          CI_DEPLOY_BASE_SEPOLIA_RPC_URL: ${{ secrets.CI_DEPLOY_BASE_SEPOLIA_RPC_URL || vars.CI_DEPLOY_BASE_SEPOLIA_RPC_URL || '' }}
-          CI_DEPLOY_FLARE_RPC_URL: ${{ secrets.CI_DEPLOY_FLARE_RPC_URL || vars.CI_DEPLOY_FLARE_RPC_URL || '' }}
-          CI_DEPLOY_POLYGON_RPC_URL: ${{ secrets.CI_DEPLOY_POLYGON_RPC_URL || vars.CI_DEPLOY_POLYGON_RPC_URL || '' }}
-
-          CI_DEPLOY_ARBITRUM_ETHERSCAN_API_KEY: ${{ secrets.CI_DEPLOY_ARBITRUM_ETHERSCAN_API_KEY || vars.CI_DEPLOY_ARBITRUM_ETHERSCAN_API_KEY || '' }}
-          CI_DEPLOY_BASE_ETHERSCAN_API_KEY: ${{ secrets.CI_DEPLOY_BASE_ETHERSCAN_API_KEY || vars.CI_DEPLOY_BASE_ETHERSCAN_API_KEY || '' }}
-          CI_DEPLOY_BASE_SEPOLIA_ETHERSCAN_API_KEY: ${{ secrets.CI_DEPLOY_BASE_SEPOLIA_ETHERSCAN_API_KEY || vars.CI_DEPLOY_BASE_SEPOLIA_ETHERSCAN_API_KEY || '' }}
-          CI_DEPLOY_FLARE_ETHERSCAN_API_KEY: ${{ secrets.CI_DEPLOY_FLARE_ETHERSCAN_API_KEY || vars.CI_DEPLOY_FLARE_ETHERSCAN_API_KEY || '' }}
-          CI_DEPLOY_POLYGON_ETHERSCAN_API_KEY: ${{ secrets.CI_DEPLOY_POLYGON_ETHERSCAN_API_KEY || vars.CI_DEPLOY_POLYGON_ETHERSCAN_API_KEY || '' }}
-
-      # forwards status to telegram chat if this ci fails or gets canceled, only runs for default branch
-      - name: Forward CI Status
-        if: always()
-        uses: rainlanguage/github-chore/.github/actions/telegram-status-report@main
-        with:
-          status: ${{ job.status }}
-          telegram-bot-token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          telegram-chat-id: ${{ secrets.TELEGRAM_CHAT_ID }}
+    uses: rainlanguage/rainix/.github/workflows/rainix-manual-sol-artifacts.yaml@main
+    with:
+      suite: ${{ inputs.suite }}
+    secrets: inherit

.github/workflows/rainix-sol.yaml

@@ -0,0 +1,6 @@
+name: rainix-sol
+on: [push]
+jobs:
+  rainix-sol:
+    uses: rainlanguage/rainix/.github/workflows/rainix-sol.yaml@main
+    secrets: inherit

.github/workflows/rainix.yaml

@@ -4,28 +4,25 @@ on:
     branches:
       - main
   pull_request:
-
 concurrency:
   group: ${{ github.ref }}-rainix
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
 jobs:
+  # Rust / wasm / JS bindings run on raindex's own devshell: they need sqlite3
+  # (rusqlite) and the forge-build artifacts, which the slim rainix rs reusables
+  # don't provide. Solidity + artifact checks live in rainix-sol.yaml and
+  # copy-artifacts.yaml (rainix reusables).
   standard-tests:
     permissions:
       id-token: write
       contents: read
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest]
-        task: [raindex-rs-test, rainix-rs-artifacts]
+        task: [raindex-rs-test, "cargo build --release"]
         is-not-main:
           - ${{ github.ref != 'refs/heads/main' }}
         include:
-          # Solidity doesn't need to be tested on multiple platforms
-          - os: ubuntu-latest
-            task: rainix-sol-test
-          - os: ubuntu-latest
-            task: rainix-sol-static
           # We don't need to do rust static analysis on multiple platforms
           - os: ubuntu-latest
             task: rainix-rs-static
@@ -39,9 +36,6 @@ jobs:
           # Testing JS/TS bindings doesnt need to run on multiple platforms
           - os: ubuntu-latest
             task: test-js-bindings
-          # Legal doesnt need to run on multiple platforms
-          - os: ubuntu-latest
-            task: rainix-sol-legal
         exclude:
           - is-not-main: true
             os: macos-latest
@@ -51,16 +45,11 @@ jobs:
       COMMIT_SHA: ${{ github.sha }}
     steps:
       - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-          fetch-depth: 0
-
       - name: Free disk space
         if: matrix.os == 'ubuntu-latest'
         uses: jlumbroso/free-disk-space@v1.3.1
         with:
           large-packages: ${{ matrix.task != 'rainix-wasm-browser-test' }}
-
       - uses: nixbuild/nix-quick-install-action@v30
         with:
           nix_conf: |
@@ -76,22 +65,12 @@ jobs:
           # collect garbage until the Nix store size is at most this number
           # before trying to save a new cache
           gc-max-store-size-linux: 10G
-
       - run: ./pointers.sh
-
       - name: Run ${{ matrix.task }}
-        env:
-          ETH_RPC_URL: ${{ secrets.CI_DEPLOY_BASE_RPC_URL || vars.CI_DEPLOY_BASE_RPC_URL || '' }}
-          CI_DEPLOY_ARBITRUM_RPC_URL: ${{ secrets.CI_DEPLOY_ARBITRUM_RPC_URL || vars.CI_DEPLOY_ARBITRUM_RPC_URL || '' }}
-          CI_DEPLOY_BASE_RPC_URL: ${{ secrets.CI_DEPLOY_BASE_RPC_URL || vars.CI_DEPLOY_BASE_RPC_URL || '' }}
-          CI_DEPLOY_BASE_SEPOLIA_RPC_URL: ${{ secrets.CI_DEPLOY_BASE_SEPOLIA_RPC_URL || vars.CI_DEPLOY_BASE_SEPOLIA_RPC_URL || '' }}
-          CI_DEPLOY_FLARE_RPC_URL: ${{ secrets.CI_DEPLOY_FLARE_RPC_URL || vars.CI_DEPLOY_FLARE_RPC_URL || '' }}
-          CI_DEPLOY_POLYGON_RPC_URL: ${{ secrets.CI_DEPLOY_POLYGON_RPC_URL || vars.CI_DEPLOY_POLYGON_RPC_URL || '' }}
         run: nix develop -c ${{ matrix.task }}
-
       # forwards status to telegram chat if this ci fails or gets canceled, only runs for default branch
       - name: Forward CI Status
-        if: always() 
+        if: always()
         uses: rainlanguage/github-chore/.github/actions/telegram-status-report@main
         with:
           status: ${{ job.status }}

.github/workflows/test-subgraph.yml

@@ -4,28 +4,20 @@ on:
     branches:
       - main
   pull_request:
-
 concurrency:
   group: ${{ github.ref }}-subgraph
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
 jobs:
   test:
     permissions:
       id-token: write
       contents: read
     runs-on: ubuntu-latest
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          submodules: recursive
-
       - name: Free disk space
         uses: jlumbroso/free-disk-space@v1.3.1
-
       - uses: nixbuild/nix-quick-install-action@v30
         with:
           nix_conf: |
@@ -42,16 +34,12 @@ jobs:
           # before trying to save a new cache
           # 1G = 1073741824
           gc-max-store-size-linux: 1G
-
-      - run: |
-          (cd lib/rain.interpreter/lib/rain.interpreter.interface/lib/rain.math.float && nix develop -c rainix-sol-prelude)
-
+      - name: Install Soldeer dependencies
+        run: nix develop -c forge soldeer install
       - name: Build subgraph
         run: nix develop -c subgraph-build
-
       - name: Matchstick tests
         run: nix develop -c subgraph-test
-
       # forwards status to telegram chat if this ci fails or gets canceled, only runs for default branch
       - name: Forward CI Status
         if: always()