Bump

.bazelignore

@@ -0,0 +1,22 @@
+# Cargo build artifacts
+target/
+.cargo/
+
+# Bazel output bases
+bazel-bin
+bazel-out
+bazel-testlogs
+bazel-nockchain
+
+# Runtime data directories
+.data.nockchain
+.data.hoonc
+
+# Development environments
+.direnv/
+.devenv/
+.vscode/
+.idea/
+
+# Node.js outputs
+node_modules/

.bazelrc

@@ -0,0 +1,81 @@
+# Bazel configuration for the nockchain workspace.
+#
+# Takes effect when this directory is the workspace root.
+
+# Optional, untracked local overrides.
+try-import %workspace%/.bazelrc.local
+
+common --enable_platform_specific_config
+
+# The workspace dependency graph can exceed rules_rust crate_universe's default
+# 600s cargo-bazel splice timeout during analysis on cold caches.
+common --repo_env=CARGO_BAZEL_TIMEOUT=1800
+
+# Pinned nightly toolchain (see MODULE.bazel and rust-toolchain.toml).
+common --@rules_rust//rust/toolchain/channel=nightly
+common --@rules_rust//rust/settings:toolchain_generated_sysroot=True
+common --@rules_rust//rust/settings:rustfmt.toml=//:rustfmt.toml
+
+common --compilation_mode=opt
+common --test_output=errors
+
+# Suppress unused function warnings from vendored C code (secp256k1-sys).
+common --copt=-Wno-unused-function
+
+# Forward toolchain-related environment from the dev shell (see flake.nix).
+# Unset variables are simply not forwarded.
+common --action_env=LIBCLANG_PATH
+common --host_action_env=LIBCLANG_PATH
+common --action_env=CC
+common --host_action_env=CC
+common --action_env=CXX
+common --host_action_env=CXX
+common --repo_env=CC
+common --repo_env=CXX
+common --repo_env=AR
+common --repo_env=RANLIB
+common --action_env=CPLUS_INCLUDE_PATH
+common --host_action_env=CPLUS_INCLUDE_PATH
+common --action_env=LIBRARY_PATH
+common --host_action_env=LIBRARY_PATH
+common --action_env=LD_LIBRARY_PATH
+common --host_action_env=LD_LIBRARY_PATH
+test --test_env=LD_LIBRARY_PATH
+
+# On macOS, rustc may invoke xcrun unless SDKROOT is set.
+common:macos --action_env=SDKROOT
+common:macos --host_action_env=SDKROOT
+common:macos --action_env=DEVELOPER_DIR
+common:macos --host_action_env=DEVELOPER_DIR
+common:macos --action_env=MACOSX_DEPLOYMENT_TARGET
+common:macos --host_action_env=MACOSX_DEPLOYMENT_TARGET
+
+# Prefer Bazel-managed prebuilt protoc from the protobuf module.
+common --@protobuf//bazel/toolchains:prefer_prebuilt_protoc
+# Bazel <9 needs explicit proto toolchain resolution.
+common --incompatible_enable_proto_toolchain_resolution
+
+# Opt-in lint configuration:
+#   bazel build --config=clippy //...
+build:clippy --aspects=@rules_rust//rust:defs.bzl%rust_clippy_aspect
+build:clippy --output_groups=+clippy_checks
+common:clippy --@rules_rust//rust/settings:extra_rustc_flag=-Dwarnings
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Dclippy::unwrap_used
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Aclippy::missing_safety_doc
+# Allowed for the nightly-2026-04-03 toolchain bump: lints the newer clippy newly
+# flags on pre-existing code (deferred to a dedicated cleanup; mirrors the root
+# .bazelrc and [workspace.lints.clippy] in the generated Cargo.toml).
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Aclippy::result_large_err
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Aclippy::unnecessary_cast
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Aclippy::unnecessary_sort_by
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Aclippy::collapsible_match
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Aclippy::manual_checked_ops
+common:clippy --@rules_rust//rust/settings:clippy_flag=-Aclippy::while_let_loop
+
+# Miri configuration for the *_miri test targets (tagged manual):
+#   bazel test --config=miri //crates/...:<name>_miri
+test:miri --test_env=MIRIFLAGS="-Zmiri-ignore-leaks"
+test:miri --test_env=RUST_BACKTRACE=1
+test:miri --@rules_rust//rust/toolchain/channel=nightly
+test:miri --test_timeout=3600
+test:miri --test_size_filters=small,medium

.bazelversion

@@ -0,0 +1 @@
+8.4.2

.env_example

@@ -1,4 +1,3 @@
 RUST_LOG=info,nockchain=debug,nockchain_libp2p_io=info,libp2p=info,libp2p_quic=info
 MINIMAL_LOG_FORMAT=true
-MINING_PUBKEY=EHmKL2U3vXfS5GYAY5aVnGdukfDWwvkQPCZXnjvZVShsSQi3UAuA4tQQpVwGJMzc9FfpTY8pLDkqhBGfWutiF4prrCktUH9oAWJxkXQBzAavKDc95NR3DjmYwnnw8GuugnK
 MINING_PKH=9yPePjfWAdUnzaQKyxcRXKRa5PpUzKKEwtpECBZsUYt9Jd7egSDEWoV

.githooks/pre-commit

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+#
+# Pre-commit hook: auto-format and clippy-fix staged Rust code before a commit.
+#
+# Installed via `make install-hooks` (sets core.hooksPath to .githooks).
+# Skip a single commit with `git commit --no-verify`.
+# Skip just clippy (e.g. for a docs-only commit) with: SKIP_CLIPPY=1 git commit ...
+#
+# `make fmt` / `make clippy-fix` reformat/fix the WHOLE workspace, and this hook
+# stages every file they changed so the fixes land in the commit.
+
+set -euo pipefail
+
+repo_root="$(git rev-parse --show-toplevel)"
+cd "$repo_root"
+
+# Files staged for this commit that are Rust sources or Cargo/rustfmt manifests
+# (newline-delimited; kept portable for macOS's stock bash 3.2 — no mapfile).
+staged_rust="$(
+  git diff --cached --name-only --diff-filter=ACMR \
+    | grep -E '\.rs$|(^|/)Cargo\.(toml|lock)$|(^|/)rustfmt\.toml$' || true
+)"
+
+if [ -z "$staged_rust" ]; then
+  echo "pre-commit: no Rust changes staged, skipping fmt/clippy."
+  exit 0
+fi
+
+echo "pre-commit: formatting Rust code (cargo fmt)..."
+make fmt
+
+if [ "${SKIP_CLIPPY:-0}" = "1" ]; then
+  echo "pre-commit: SKIP_CLIPPY=1 set, skipping clippy."
+else
+  echo "pre-commit: applying clippy autofixes (cargo clippy --fix)..."
+  make clippy-fix
+fi
+
+# Stage every tracked file the fmt/clippy fixes modified so they land in the
+# commit itself.
+git add -u
+echo "pre-commit: staged all formatted/fixed files."

.github/workflows/create-sync-pr.yml

@@ -0,0 +1,34 @@
+name: Create sync PR
+
+on:
+  push:
+    branches:
+      - staging
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  create-pr:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Create or update PR
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          EXISTING_PR=$(gh pr list --repo nockchain/nockchain-staging --head staging --base master --json number --jq '.[0].number')
+          if [ -n "$EXISTING_PR" ]; then
+            echo "PR #$EXISTING_PR already exists"
+          else
+            gh pr create \
+              --repo nockchain/nockchain-staging \
+              --head staging \
+              --base master \
+              --title "sync: update from upstream" \
+              --body "Automated sync from upstream via Copybara."
+          fi

.github/workflows/docs.yml

@@ -0,0 +1,43 @@
+name: Docs checks
+
+on:
+  push:
+    branches: ["master", "nightly"]
+    paths:
+      - "**/*.md"
+      - "scripts/docs/**"
+      - "Makefile"
+      - ".github/workflows/docs.yml"
+  pull_request:
+    branches: ["master", "nightly"]
+    paths:
+      - "**/*.md"
+      - "scripts/docs/**"
+      - "Makefile"
+      - ".github/workflows/docs.yml"
+
+permissions:
+  contents: read
+
+concurrency:
+  group: docs-check-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  docs-check:
+    name: make docs-check
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Ensure ripgrep is available
+        run: |
+          if ! command -v rg >/dev/null 2>&1; then
+            sudo apt-get update
+            sudo apt-get install -y ripgrep
+          fi
+
+      - name: Run docs checks
+        run: make docs-check

.github/workflows/parity.yml

@@ -0,0 +1,109 @@
+name: Compiler parity
+
+# Byte-for-byte artifact parity between hoonc (reference) and honk (native
+# compiler): each kernel plus the hoon-138 arbitrary self-mint, one job per
+# artifact pairing so they run in parallel. Every test is a strict `cmp` of
+# two Bazel-built jams (see assets/native/BUILD.bazel and
+# crates/honk/test-assets/BUILD.bazel) — no dir-hash waiver: both compilers
+# run sandboxed over identical dependency trees, so the artifacts must agree
+# on every byte, including the directory-hash leaf.
+#
+# No remote/disk caching is configured yet: every job cold-builds hoonc, honk,
+# and its jam pair (roughly 1-2h per job). The jam actions declare their
+# memory footprint (rules_hoon/hoon.bzl resource_set) so Bazel does not
+# co-schedule both compiles of a pair on a 16GB runner.
+
+on:
+  push:
+    branches: ["master", "nightly"]
+    paths:
+      - "hoon/**"
+      - "crates/**"
+      - "assets/**"
+      - "rules_hoon/**"
+      - "Cargo.lock"
+      - "Cargo.toml"
+      - "MODULE.bazel"
+      - "MODULE.bazel.lock"
+      - ".bazelrc"
+      - ".bazelversion"
+      - ".github/workflows/parity.yml"
+  pull_request:
+    branches: ["master", "nightly"]
+    paths:
+      - "hoon/**"
+      - "crates/**"
+      - "assets/**"
+      - "rules_hoon/**"
+      - "Cargo.lock"
+      - "Cargo.toml"
+      - "MODULE.bazel"
+      - "MODULE.bazel.lock"
+      - ".bazelrc"
+      - ".bazelversion"
+      - ".github/workflows/parity.yml"
+
+permissions:
+  contents: read
+
+concurrency:
+  group: parity-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  kernel-parity:
+    name: ${{ matrix.kernel }} kernel parity
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    strategy:
+      fail-fast: false
+      matrix:
+        kernel: [dumb, wal, miner, peek, bridge, roswell]
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      # Build the hoonc reference before the test so the two ~10GB kernel
+      # compiles (hoonc + honk) never run concurrently on a 16GB runner; the
+      # test step reuses this action result from the job's local cache.
+      - name: Build hoonc ${{ matrix.kernel }} reference
+        run: bazel build //assets:${{ matrix.kernel }}
+
+      - name: Test ${{ matrix.kernel }} parity (hoonc vs honk, strict cmp)
+        run: bazel test //assets/native:${{ matrix.kernel }}_parity_test
+
+  type-probe-parity:
+    # Small probe pairings: curated type probes + compiler fixtures (strict
+    # cmp of hoonc-vs-honk --arbitrary builds with an empty deps dir) plus
+    # the rejection-parity corpus (ill-typed probes both compilers must
+    # reject; verdict = artifact absence). Every probe is ~1-4s and under
+    # 1GB per side, so one job runs the whole suite; the wall clock is
+    # dominated by the cold compiler builds.
+    name: type probe parity
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Test type-checking parity probes (hoonc vs honk, strict cmp)
+        run: bazel test //crates/honk/test-assets/type-probes:all_parity_test
+
+  hoon-138-parity:
+    # The honk native self-mint peaks ~14GB RSS; ubuntu-latest (16GB) is
+    # tight but the resource_set declaration serializes it against the hoonc
+    # reference build. Move to a larger runner class if it OOMs.
+    name: hoon-138 arbitrary parity
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      # Serialize the two heavy compiles (see the kernel job note); the honk
+      # self-mint alone peaks ~14GB RSS.
+      - name: Build hoonc hoon-138 reference
+        run: bazel build //crates/honk/test-assets:hoon_138_ref
+
+      - name: Test hoon-138 self-mint parity (hoonc vs honk native, strict cmp)
+        run: bazel test //crates/honk/test-assets:hoon_138_arbitrary_parity_test