migration

.changeset/config.json

@@ -7,5 +7,5 @@
   "access": "restricted",
   "baseBranch": "master",
   "updateInternalDependencies": "patch",
-  "ignore": []
+  "ignore": ["@0xsequence/wallet-primitives-cli", "docs", "web"]
 }

.github/workflows/claude.yml

@@ -0,0 +1,49 @@
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+      actions: read # Required for Claude to read CI results on PRs
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY_GITHUB_ACTIONS }}
+
+          # This is an optional setting that allows Claude to read CI results on PRs
+          additional_permissions: |
+            actions: read
+
+          # Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
+          # prompt: 'Update the pull request description to include a summary of changes.'
+
+          # Optional: Add claude_args to customize behavior and configuration
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://code.claude.com/docs/en/cli-reference for available options
+          # claude_args: '--allowed-tools Bash(gh pr:*)'

.github/workflows/tests.yml

@@ -19,20 +19,23 @@ jobs:
       - uses: ./.github/actions/install-dependencies
       - run: pnpm clean
       - run: pnpm build
+      - run: pnpm typecheck
+      - run: pnpm lint
 
   tests:
     name: Run all tests
     runs-on: ubuntu-latest
-    needs: [install]
+    needs: [build]
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/install-dependencies
       - name: Install Foundry
         uses: foundry-rs/foundry-toolchain@v1
         with:
-          version: nightly
+          version: v1.5.0
       - name: Start Anvil in background
         run: anvil --fork-url https://nodes.sequence.app/arbitrum &
+      - run: pnpm build
       - run: pnpm test
 
   # NOTE: if you'd like to see example of how to run

README.md

@@ -30,7 +30,7 @@ Sequence v3 core libraries and [wallet-contracts-v3](https://github.com/0xsequen
 - Run tests:
   `pnpm test`
 
-  > **Note:** Tests require [anvil](https://github.com/foundry-rs/foundry/tree/master/anvil) and [forge](https://github.com/foundry-rs/foundry) to be installed. You can run a local anvil instance using `pnpm run test:anvil`.
+  > **Note:** Tests require [anvil](https://github.com/foundry-rs/foundry/tree/master/crates/anvil) and [forge](https://github.com/foundry-rs/foundry) to be installed. You can run a local anvil instance using `pnpm run test:anvil`.
 
 - Linting and formatting is enforced via git hooks
 

SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.

extras/docs/eslint.config.js

@@ -1,4 +1,9 @@
 import { nextJsConfig } from '@repo/eslint-config/next-js'
 
 /** @type {import("eslint").Linter.Config} */
-export default nextJsConfig
+export default [
+  ...nextJsConfig,
+  {
+    ignores: ['next-env.d.ts'],
+  },
+]

extras/docs/next.config.js

@@ -1,4 +1,14 @@
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const workspaceRoot = path.join(__dirname, '..', '..')
+
 /** @type {import('next').NextConfig} */
-const nextConfig = {}
+const nextConfig = {
+  // Anchor output tracing to the monorepo root so Next.js doesn't pick up
+  // sibling lockfiles and mis-detect the workspace boundary during lint/build.
+  outputFileTracingRoot: workspaceRoot,
+}
 
 export default nextConfig

extras/docs/package.json

@@ -7,22 +7,23 @@
     "dev": "next dev --turbopack --port 3001",
     "build": "next build",
     "start": "next start",
-    "lint": "next lint --max-warnings 0",
+    "lint": "eslint . --max-warnings 0",
     "typecheck": "tsc --noEmit",
     "clean": "rimraf .next"
   },
   "dependencies": {
-    "@repo/ui": "workspace:*",
-    "next": "^15.3.3",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0"
+    "@repo/ui": "workspace:^",
+    "next": "^15.5.16",
+    "react": "^19.2.3",
+    "react-dom": "^19.2.3"
   },
   "devDependencies": {
-    "@repo/eslint-config": "workspace:*",
-    "@repo/typescript-config": "workspace:*",
-    "@types/node": "^20.17.57",
-    "@types/react": "18.3.1",
-    "@types/react-dom": "18.3.0",
-    "typescript": "5.5.4"
+    "@repo/eslint-config": "workspace:^",
+    "@repo/typescript-config": "workspace:^",
+    "@types/node": "^25.3.0",
+    "@types/react": "^19.2.7",
+    "@types/react-dom": "^19.2.3",
+    "eslint": "^9.39.2",
+    "typescript": "^6.0.3"
   }
 }

extras/docs/tsconfig.json

@@ -7,6 +7,13 @@
       }
     ]
   },
-  "include": ["**/*.ts", "**/*.tsx", "next-env.d.ts", "next.config.js", ".next/types/**/*.ts"],
+  "include": [
+    "**/*.ts",
+    "**/*.tsx",
+    "../../repo/typescript-config/next-css-side-effect.d.ts",
+    "next-env.d.ts",
+    "next.config.js",
+    ".next/types/**/*.ts"
+  ],
   "exclude": ["node_modules"]
 }

extras/web/eslint.config.js

@@ -1,4 +1,9 @@
 import { nextJsConfig } from '@repo/eslint-config/next-js'
 
 /** @type {import("eslint").Linter.Config} */
-export default nextJsConfig
+export default [
+  ...nextJsConfig,
+  {
+    ignores: ['next-env.d.ts'],
+  },
+]

extras/web/next.config.js

@@ -1,4 +1,14 @@
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const workspaceRoot = path.join(__dirname, '..', '..')
+
 /** @type {import('next').NextConfig} */
-const nextConfig = {}
+const nextConfig = {
+  // Anchor output tracing to the monorepo root so Next.js doesn't pick up
+  // sibling lockfiles and mis-detect the workspace boundary during lint/build.
+  outputFileTracingRoot: workspaceRoot,
+}
 
 export default nextConfig

extras/web/package.json

@@ -7,22 +7,23 @@
     "dev": "next dev --turbopack --port 3000",
     "build": "next build",
     "start": "next start",
-    "lint": "next lint --max-warnings 0",
+    "lint": "eslint . --max-warnings 0",
     "typecheck": "tsc --noEmit",
     "clean": "rimraf .next"
   },
   "dependencies": {
-    "@repo/ui": "workspace:*",
-    "next": "^15.3.3",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0"
+    "@repo/ui": "workspace:^",
+    "next": "^15.5.16",
+    "react": "^19.2.3",
+    "react-dom": "^19.2.3"
   },
   "devDependencies": {
-    "@repo/eslint-config": "workspace:*",
-    "@repo/typescript-config": "workspace:*",
-    "@types/node": "^20.17.57",
-    "@types/react": "18.3.1",
-    "@types/react-dom": "18.3.0",
-    "typescript": "5.5.4"
+    "@repo/eslint-config": "workspace:^",
+    "@repo/typescript-config": "workspace:^",
+    "@types/node": "^25.3.0",
+    "@types/react": "^19.2.7",
+    "@types/react-dom": "^19.2.3",
+    "eslint": "^9.39.2",
+    "typescript": "^6.0.3"
   }
 }

extras/web/tsconfig.json

@@ -7,6 +7,13 @@
       }
     ]
   },
-  "include": ["**/*.ts", "**/*.tsx", "next-env.d.ts", "next.config.js", ".next/types/**/*.ts"],
+  "include": [
+    "**/*.ts",
+    "**/*.tsx",
+    "../../repo/typescript-config/next-css-side-effect.d.ts",
+    "next-env.d.ts",
+    "next.config.js",
+    ".next/types/**/*.ts"
+  ],
   "exclude": ["node_modules"]
 }

lefthook.yml

@@ -3,6 +3,15 @@ pre-commit:
     prettier:
       glob: '**/*.{js,jsx,ts,tsx,json,md,yml,yaml}'
       run: pnpm prettier --write {staged_files} && git add {staged_files}
+    lint:
+      run: pnpm lint
+    typecheck:
+      run: pnpm typecheck
+    syncpack:
+      glob:
+        - "package.json"
+        - "packages/**/package.json"
+      run: pnpm deps:lint
 
 pre-push:
   commands: