feat(l2): merge ZK-DEX e2e and CI fixes into app-customized-framework

.dockerignore

@@ -16,6 +16,9 @@
 # Documentation
 docs/
 
+# Git history (not needed in Docker builds, vergen uses env var fallback)
+.git/
+
 # Local development
 hive/
 ethereum-package/

.github/scripts/check-hive-results.sh

@@ -63,6 +63,8 @@ KNOWN_FLAKY_TESTS=(
   "Invalid Missing Ancestor Syncing ReOrg, Timestamp, EmptyTxs=False, CanonicalReOrg=False, Invalid P8"
   "Invalid Missing Ancestor Syncing ReOrg, Timestamp, EmptyTxs=False, CanonicalReOrg=True, Invalid P8"
   "Invalid Missing Ancestor Syncing ReOrg, Transaction Value, EmptyTxs=False, CanonicalReOrg=False, Invalid P9"
+  "Invalid Missing Ancestor Syncing ReOrg, Transaction Value, EmptyTxs=False, CanonicalReOrg=True, Invalid P9"
+  "Invalid Missing Ancestor Syncing ReOrg, Transaction Nonce, EmptyTxs=False, CanonicalReOrg=False, Invalid P9"
 )
 
 # Build a jq filter that excludes known-flaky tests.

.github/workflows/pr-main_l2_tdx_build.yaml

@@ -3,8 +3,9 @@ on:
   workflow_dispatch:
   push:
     branches: ["main"]
-  pull_request:
-    branches: ["**"]
+  # Disabled: not needed for app chain
+  # pull_request:
+  #   branches: ["**"]
 
 permissions:
   contents: read

.github/workflows/pr-main_mdbook.yml

@@ -6,9 +6,6 @@ on:
       - main
     paths:
       - "docs/**"
-  pull_request:
-    paths:
-      - "docs/**"
   workflow_dispatch:
 
 permissions:
@@ -53,7 +50,7 @@ jobs:
       - name: Check links
         uses: lycheeverse/lychee-action@v2
         with:
-          args: --no-progress --exclude 'localhost' docs/
+          args: --no-progress --timeout 30 --exclude 'localhost' --exclude 'medium\.com' --exclude 'github\.com/lambdaclass/ethrex' --exclude 'docs\.taiko\.xyz' --exclude 'ephema\.io' --exclude 'share\.firefox\.dev' docs/
           fail: true
 
   deploy:

.github/workflows/pr_github_status_l1.yaml

@@ -1,18 +1,12 @@
 name: PR Status
 
 on:
-  pull_request:
-    types:
-      [
-        opened,
-        reopened,
-        synchronize,
-        edited,
-        ready_for_review,
-        converted_to_draft,
-      ]
-  pull_request_review:
-    types: [submitted]
+  # Disabled: lambdaclass project status tracking
+  # pull_request:
+  #   types: [opened, reopened, synchronize, edited, ready_for_review, converted_to_draft]
+  # pull_request_review:
+  #   types: [submitted]
+  workflow_dispatch:
 
 permissions:
   contents: read

.github/workflows/pr_loc.yaml

@@ -1,8 +1,10 @@
 name: PR Lines of Code Analysis
 
 on:
-  pull_request:
-    branches: ["**"]
+  # Disabled: not needed for app chain
+  # pull_request:
+  #   branches: ["**"]
+  workflow_dispatch:
 
 permissions:
   contents: read

.github/workflows/pr_perf_blocks_exec.yaml

@@ -1,8 +1,10 @@
 name: Benchmark Block execution
 
 on:
-  pull_request:
-    branches: ["**"]
+  # Disabled: not needed for app chain
+  # pull_request:
+  #   branches: ["**"]
+  workflow_dispatch:
 
 permissions:
   contents: read

.github/workflows/pr_perf_changelog.yml

@@ -1,7 +1,9 @@
 name: Perf Changelog
 on:
-  pull_request:
-    types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled]
+  # Disabled: not needed for app chain
+  # pull_request:
+  #   types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled]
+  workflow_dispatch:
 
 permissions:
   contents: read

.github/workflows/pr_perf_levm.yaml

@@ -1,11 +1,12 @@
 name: Benchmark LEVM vs REVM
 
 on:
-  pull_request:
-    branches: ["**"]
-    paths:
-      - "crates/vm/levm/**"
-      - ".github/workflows/pr_perf_levm.yaml"
+  # Disabled: not needed for app chain
+  # pull_request:
+  #   branches: ["**"]
+  #   paths:
+  #     - "crates/vm/levm/**"
+  #     - ".github/workflows/pr_perf_levm.yaml"
   workflow_dispatch:
 
 permissions:

.gitignore

@@ -88,6 +88,9 @@ GEMINI.md
 dev_ethrex_l1/
 dev_ethrex_l2/
 
+# ZK-DEX localnet runtime directory
+.zk-dex-localnet/
+
 # Logs
 logs/
 
@@ -137,17 +140,20 @@ core.*
 
 __pycache__/
 
-# Next.js build artifacts
+# Next.js build output
 .next/
 
-# SP1 guest program build artifacts
-crates/guest-program/bin/sp1/out/
-crates/guest-program/bin/sp1-tokamon/
-crates/guest-program/bin/sp1-zk-dex/
+# SP1 guest program build artifacts (ELF/VK binaries)
+crates/guest-program/bin/*/out/
 
-# Local L2 config files
-zk-dex-l2-*.toml
+# SP1 guest program lock files (generated per build)
+crates/guest-program/bin/sp1-tokamon/Cargo.lock
+crates/guest-program/bin/sp1-zk-dex/Cargo.lock
 
-# Platform build artifacts
-platform/
+# Platform local SQLite WAL/SHM files
+platform/server/db/*.sqlite-shm
+platform/server/db/*.sqlite-wal
+
+# Generated L2 config files
+zk-dex-l2-*.toml
 

Dockerfile

@@ -59,13 +59,17 @@ COPY cmd ./cmd
 COPY metrics ./metrics
 COPY tooling ./tooling
 COPY fixtures/genesis ./fixtures/genesis
-COPY .git ./.git
 COPY Cargo.* ./
 COPY fixtures ./fixtures
 COPY .cargo/ ./.cargo
 
 ENV COMPILE_CONTRACTS=true
 
+# Fallback git info for Docker builds without .git directory.
+# vergen build scripts check these env vars before trying to open .git.
+ENV VERGEN_GIT_SHA=docker-build
+ENV VERGEN_GIT_BRANCH=docker-build
+
 RUN cargo build --profile $PROFILE $BUILD_FLAGS
 
 RUN mkdir -p /ethrex/bin && \

Dockerfile.sp1

@@ -0,0 +1,131 @@
+# Dockerfile.sp1 — SP1 ZK-DEX prover image with GPU support
+#
+# Extends the standard ethrex Dockerfile with SP1 toolchain installation
+# for building and proving with real ZK proofs.
+#
+# Build:
+#   docker build -f Dockerfile.sp1 -t ethrex:sp1 .
+#
+# Build args:
+#   GUEST_PROGRAMS: Comma-separated guest programs (default: evm-l2,zk-dex)
+
+FROM rust:1.90 AS chef
+
+RUN apt-get update && apt-get install -y \
+    build-essential \
+    clang \
+    libclang-dev \
+    libc6 \
+    libssl-dev \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+RUN cargo install cargo-chef
+
+WORKDIR /ethrex
+
+
+# --- Planner Stage ---
+FROM chef AS planner
+
+COPY benches ./benches
+COPY crates ./crates
+COPY metrics ./metrics
+COPY cmd ./cmd
+COPY test ./test
+COPY tooling ./tooling
+COPY Cargo.* .
+COPY .cargo/ ./.cargo
+
+RUN cargo chef prepare --recipe-path recipe.json
+
+
+# --- Builder Stage ---
+FROM chef AS builder
+
+ARG PROFILE="release"
+ARG BUILD_FLAGS="--features l2,l2-sql,sp1"
+ARG GUEST_PROGRAMS="evm-l2,zk-dex"
+
+# Install SP1 toolchain (succinct)
+ENV SP1_DIR=/root/.sp1
+RUN curl -L https://sp1.succinct.xyz | bash \
+    && ${SP1_DIR}/bin/sp1up
+
+# Add succinct toolchain to PATH
+ENV PATH="${SP1_DIR}/bin:${PATH}"
+ENV RUSTUP_TOOLCHAIN=succinct
+
+# Dependency cache
+COPY --from=planner /ethrex/recipe.json recipe.json
+RUN RUSTUP_TOOLCHAIN=stable cargo chef cook --release --recipe-path recipe.json $BUILD_FLAGS
+
+# Install solc 0.8.31
+RUN SOLC_URL="https://github.com/ethereum/solidity/releases/download/v0.8.31/solc-static-linux"; \
+    if [ "$(uname -m)" = "aarch64" ]; then SOLC_URL="${SOLC_URL}-arm"; fi; \
+    curl -L -o /usr/bin/solc "$SOLC_URL" && chmod +x /usr/bin/solc
+
+# Copy source
+COPY benches ./benches
+COPY crates ./crates
+COPY cmd ./cmd
+COPY metrics ./metrics
+COPY tooling ./tooling
+COPY fixtures/genesis ./fixtures/genesis
+COPY Cargo.* ./
+COPY fixtures ./fixtures
+COPY .cargo/ ./.cargo
+
+ENV COMPILE_CONTRACTS=true
+ENV GUEST_PROGRAMS=${GUEST_PROGRAMS}
+
+# Fallback git info for Docker builds without .git directory.
+# vergen build scripts check these env vars before trying to open .git.
+ENV VERGEN_GIT_SHA=docker-build
+ENV VERGEN_GIT_BRANCH=docker-build
+
+# Build with SP1 features and guest programs
+# RUSTUP_TOOLCHAIN=stable ensures the host build uses stable,
+# while sp1_build internally uses the succinct toolchain for guest programs
+RUN RUSTUP_TOOLCHAIN=stable cargo build --profile $PROFILE $BUILD_FLAGS
+
+RUN mkdir -p /ethrex/bin && \
+    cp /ethrex/target/${PROFILE}/ethrex /ethrex/bin/ethrex
+
+
+# --- Final Image ---
+FROM ubuntu:24.04
+WORKDIR /usr/local/bin
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    libssl3 \
+    ca-certificates \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Docker CLI (needed by SP1 Groth16 gnark wrapper)
+RUN curl -fsSL https://download.docker.com/linux/static/stable/$(uname -m)/docker-27.5.1.tgz \
+    | tar xz --strip-components=1 -C /usr/local/bin docker/docker
+
+COPY cmd/ethrex/networks ./cmd/ethrex/networks
+COPY --from=builder /ethrex/bin/ethrex .
+
+# Copy guest program VK files so the deployer can register them on L1.
+# The deployer resolves VK paths via canonicalize() on:
+#   env!("CARGO_MANIFEST_DIR")/../../crates/guest-program/bin/sp1-zk-dex/out/...
+# where CARGO_MANIFEST_DIR = /ethrex/cmd/ethrex (baked at compile time).
+# We need /ethrex/cmd/ethrex/ to exist for canonicalize() to resolve "../..".
+RUN mkdir -p /ethrex/cmd/ethrex
+COPY --from=builder /ethrex/crates/guest-program/bin/sp1/out/riscv32im-succinct-zkvm-vk-* \
+    /ethrex/crates/guest-program/bin/sp1/out/
+COPY --from=builder /ethrex/crates/guest-program/bin/sp1-zk-dex/out/riscv32im-succinct-zkvm-vk-* \
+    /ethrex/crates/guest-program/bin/sp1-zk-dex/out/
+
+EXPOSE 8545
+EXPOSE 8551
+EXPOSE 30303/tcp
+EXPOSE 30303/udp
+EXPOSE 9090
+EXPOSE 1729
+EXPOSE 3900
+
+ENTRYPOINT [ "./ethrex" ]

cmd/ethrex/build.rs

@@ -21,13 +21,22 @@ fn main() -> Result<(), Box<dyn Error>> {
         .host_triple(true)
         .build()?;
 
-    // Export git commit hash and branch name as environment variables
-    let git2 = Git2Builder::default().branch(true).sha(false).build()?;
-
-    Emitter::default()
-        .add_instructions(&rustc)?
-        .add_instructions(&git2)?
-        .emit()?;
+    // Export git commit hash and branch name as environment variables.
+    // In Docker builds without .git, fall back to env vars (set in Dockerfile).
+    if let (Ok(branch), Ok(sha)) = (
+        std::env::var("VERGEN_GIT_BRANCH"),
+        std::env::var("VERGEN_GIT_SHA"),
+    ) {
+        Emitter::default().add_instructions(&rustc)?.emit()?;
+        println!("cargo:rustc-env=VERGEN_GIT_BRANCH={}", branch.trim());
+        println!("cargo:rustc-env=VERGEN_GIT_SHA={}", sha.trim());
+    } else {
+        let git2 = Git2Builder::default().branch(true).sha(true).build()?;
+        Emitter::default()
+            .add_instructions(&rustc)?
+            .add_instructions(&git2)?
+            .emit()?;
+    }
 
     #[cfg(feature = "l2")]
     {