v1.2.6-a

.claude/rules/architecture.md

@@ -65,6 +65,6 @@ Located in `src/types/index.ts`:
 - **Vite** (`vite.config.ts`) - Fast bundler with TypeScript, CSS, and asset loading
 - **GitHub Pages**: Set `GITHUB_PAGES=true` for `/explorer/` base path
 - **Environment Variables**: Injected via Vite's `define` option:
-  - `REACT_APP_COMMIT_HASH` - Git commit hash
-  - `REACT_APP_OPENSCAN_NETWORKS` - Comma-separated chain IDs to display
-  - `REACT_APP_ENVIRONMENT` - production/development
+  - `OPENSCAN_COMMIT_HASH` - Git commit hash
+  - `OPENSCAN_NETWORKS` - Comma-separated chain IDs to display
+  - `OPENSCAN_ENVIRONMENT` - production/development

.claude/rules/commands.md

@@ -50,9 +50,15 @@ npm run test:run
 # Run unit tests in watch mode
 npm run test
 
-# Run e2e tests (Playwright)
+# Run e2e tests (Playwright) — both `chromium` (live) and `mocked` projects
 npm run test:e2e
 
+# Run a single spec file
+npx playwright test e2e/tests/shared/errors.spec.ts
+
+# Run only the chromium project (skips hermetic `shared/mocked/` specs)
+npx playwright test --project=chromium
+
 # Run e2e tests with UI
 npm run test:e2e:ui
 
@@ -87,7 +93,7 @@ Networks are defined in `src/config/networks.ts`. To control which networks are
 
 ```bash
 # Show only specific networks (comma-separated chain IDs)
-REACT_APP_OPENSCAN_NETWORKS="1,31337" npm start
+OPENSCAN_NETWORKS="1,31337" npm start
 
 # Show all networks (default)
 npm start

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  # Keep third-party GitHub Actions pinned to SHAs up to date. Dependabot
+  # updates the pinned SHA and the trailing `# vX` tag comment together.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "github-actions"

.github/workflows/deploy-gh-pages.yml

@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
           bun-version: latest
 

.github/workflows/e2e-all.yml

@@ -2,6 +2,8 @@ name: E2E Tests - All
 
 on:
   workflow_dispatch:
+  # Called by `e2e-nightly.yml`.
+  workflow_call:
 
 jobs:
   e2e-eth-mainnet:
@@ -15,3 +17,15 @@ jobs:
   e2e-bitcoin:
     uses: ./.github/workflows/e2e-bitcoin.yml
     secrets: inherit
+
+  e2e-shared:
+    uses: ./.github/workflows/e2e-shared.yml
+    secrets: inherit
+
+  e2e-solana:
+    uses: ./.github/workflows/e2e-solana.yml
+    secrets: inherit
+
+  e2e-testnets:
+    uses: ./.github/workflows/e2e-testnets.yml
+    secrets: inherit

.github/workflows/e2e-bitcoin.yml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
           bun-version: latest
 

.github/workflows/e2e-eth-mainnet.yml

@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
           bun-version: latest
 

.github/workflows/e2e-evm-networks.yml

@@ -24,12 +24,16 @@ jobs:
             tests: "e2e/tests/evm-networks/bsc.spec.ts"
           - name: polygon
             tests: "e2e/tests/evm-networks/polygon.spec.ts"
+          - name: avalanche
+            tests: "e2e/tests/evm-networks/avalanche.spec.ts"
+          - name: l2-fields
+            tests: "e2e/tests/evm-networks/l2-fields.spec.ts"
 
     steps:
       - uses: actions/checkout@v4
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
           bun-version: latest
 

.github/workflows/e2e-nightly.yml

@@ -0,0 +1,22 @@
+name: E2E Tests - Nightly
+
+# Run the full e2e matrix once a day against live RPCs. Catches
+# provider-side drift (method deprecations, response schema changes,
+# stale data) between PR cycles without gating merges on cron-scheduled
+# flakes.
+#
+# Failures here do not block merges — they're a signal to investigate.
+# If a test starts failing consistently in nightly but passes on PR, the
+# root cause is almost always upstream (provider change, chain upgrade),
+# not the PR.
+
+on:
+  schedule:
+    # 06:00 UTC — after US-west engineers are offline, before EU starts.
+    - cron: "0 6 * * *"
+  workflow_dispatch:
+
+jobs:
+  e2e-all:
+    uses: ./.github/workflows/e2e-all.yml
+    secrets: inherit

.github/workflows/e2e-shared.yml

@@ -0,0 +1,62 @@
+name: E2E Tests - Shared (cross-network)
+
+on:
+  pull_request:
+    branches: [main]
+  workflow_call:
+  workflow_dispatch:
+
+jobs:
+  e2e-shared:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        shard:
+          # Live (chromium project): cross-network specs that don't need
+          # hermetic RPC control.
+          - name: errors
+            tests: "e2e/tests/shared/errors.spec.ts"
+          - name: search
+            tests: "e2e/tests/shared/search.spec.ts"
+          - name: settings
+            tests: "e2e/tests/shared/settings.spec.ts"
+          - name: contract-interaction
+            tests: "e2e/tests/shared/contract-interaction.spec.ts"
+          - name: ai-and-worker
+            tests: "e2e/tests/shared/ai-and-worker.spec.ts"
+          - name: event-logs
+            tests: "e2e/tests/shared/event-logs.spec.ts"
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Install Playwright browsers
+        run: bunx playwright install --with-deps chromium
+
+      - name: Build application
+        run: ./scripts/build-production.sh
+
+      - name: Run Shared E2E tests (${{ matrix.shard.name }})
+        run: bunx playwright test ${{ matrix.shard.tests }} --project=chromium
+        env:
+          CI: true
+          INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
+          ALCHEMY_API_KEY: ${{ secrets.ALCHEMY_API_KEY }}
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: playwright-report-shared-${{ matrix.shard.name }}
+          path: playwright-report/
+          retention-days: 7

.github/workflows/e2e-solana.yml

@@ -0,0 +1,49 @@
+name: E2E Tests - Solana
+
+on:
+  pull_request:
+    branches: [main]
+  workflow_call:
+  workflow_dispatch:
+
+# Solana smoke specs discover their RPC endpoints through the
+# `@openscan/metadata` CDN (same path the app uses), so no dedicated
+# Solana RPC secret is required. If the metadata fetch is slow in CI the
+# `buildRpcUrls` helper also seeds no-op from env vars; the default
+# fallback is public RPC, which is rate-limited and may cause occasional
+# retries — the test-level retry budget in `playwright.config.ts`
+# absorbs this.
+
+jobs:
+  e2e-solana:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Install Playwright browsers
+        run: bunx playwright install --with-deps chromium
+
+      - name: Build application
+        run: ./scripts/build-production.sh
+
+      - name: Run Solana E2E smoke
+        run: bunx playwright test e2e/tests/solana/ --project=chromium
+        env:
+          CI: true
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: playwright-report-solana
+          path: playwright-report/
+          retention-days: 7

.github/workflows/e2e-testnets.yml

@@ -0,0 +1,50 @@
+name: E2E Tests - Testnets
+
+on:
+  pull_request:
+    branches: [main]
+  workflow_call:
+  workflow_dispatch:
+
+# Testnet smoke. RPCs are discovered via `@openscan/metadata` (same path
+# the app uses) so no per-testnet secret is required. Public testnet
+# endpoints can be rate-limited and intermittently slow — Playwright's
+# per-test retry budget absorbs most of that. If a specific testnet
+# starts systematically flaking, open a dedicated follow-up rather than
+# hiding the signal by relaxing timeouts here.
+
+jobs:
+  e2e-testnets:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Install Playwright browsers
+        run: bunx playwright install --with-deps chromium
+
+      - name: Build application
+        run: ./scripts/build-production.sh
+
+      - name: Run Testnet E2E smoke
+        run: bunx playwright test e2e/tests/testnets/ --project=chromium
+        env:
+          CI: true
+          INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
+          ALCHEMY_API_KEY: ${{ secrets.ALCHEMY_API_KEY }}
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: playwright-report-testnets
+          path: playwright-report/
+          retention-days: 7