feat(v0.2.0): Universal Multi-VM Execution Profiler, Atupa Studio, and Protocol Deep Audits

.github/workflows/gas-regression.yml

@@ -10,26 +10,31 @@
 #   6. Fails CI if any threshold in atupa.toml is exceeded
 #
 # REQUIRED SECRETS (in repo Settings → Secrets):
-#   ATUPA_RPC_URL  — Optional: override Anvil with a real mainnet fork RPC
+#   ATUPA_RPC_URL  — Optional: override Anvil with a real RPC endpoint
 #
-# REQUIRED REPO VARIABLES:
-#   PROFILE_SCRIPT — relative path to a forge/cast script that outputs a TX hash
-#                    to stdout (default: script/ProfileScript.s.sol)
+# REPO VARIABLES (optional):
+#   PROFILE_SCRIPT — relative path to a forge/cast script (default: script/ProfileScript.s.sol)
+#   ATUPA_PROTOCOL — optional protocol adapter (aave | lido)
 # ─────────────────────────────────────────────────────────────────────────────
 
 name: ⛽ Atupa Gas Regression
 
 on:
   pull_request:
     branches: [ main ]
-  # Allow manual trigger for debugging
   workflow_dispatch:
     inputs:
       base_tx:
-        description: 'Override base transaction hash'
+        description: 'Override base transaction hash / signature'
         required: false
       target_tx:
-        description: 'Override target transaction hash'
+        description: 'Override target transaction hash / signature'
+        required: false
+      protocol:
+        description: 'Optional protocol deep diff (aave | lido)'
+        required: false
+      vm:
+        description: 'Explicit VM runtime (evm | stylus | starknet | solana | stellar)'
         required: false
 
 permissions:
@@ -38,7 +43,6 @@ permissions:
 
 env:
   CARGO_TERM_COLOR: always
-  # Use Anvil by default; override with a real RPC via secret for mainnet-fork
   RPC_URL: ${{ secrets.ATUPA_RPC_URL || 'http://127.0.0.1:8545' }}
   ANVIL_PORT: 8545
   ANVIL_MNEMONIC: 'test test test test test test test test test test test junk'
@@ -78,7 +82,6 @@ jobs:
             --steps-tracing \
             --silent &
           echo "ANVIL_PID=$!" >> $GITHUB_ENV
-          # Wait for Anvil to be ready
           for i in $(seq 1 20); do
             cast block-number --rpc-url http://127.0.0.1:${{ env.ANVIL_PORT }} &>/dev/null && break
             sleep 0.5
@@ -94,15 +97,13 @@ jobs:
           PROFILE_SCRIPT="${{ vars.PROFILE_SCRIPT || 'script/ProfileScript.s.sol' }}"
 
           if [ -f "$PROFILE_SCRIPT" ]; then
-            # Forge deployment path: run script, capture TX hash from stdout
             TX_HASH=$(forge script "$PROFILE_SCRIPT" \
               --rpc-url http://127.0.0.1:${{ env.ANVIL_PORT }} \
               --private-key $PRIVATE_KEY \
               --broadcast \
               --json 2>/dev/null \
               | jq -r '.receipts[-1].transactionHash' 2>/dev/null)
           else
-            # Fallback: Use a simple cast send to a known deployed contract
             echo "⚠️  No PROFILE_SCRIPT found. Sending dummy ETH transfer for baseline."
             TX_HASH=$(cast send \
               --rpc-url http://127.0.0.1:${{ env.ANVIL_PORT }} \
@@ -141,7 +142,6 @@ jobs:
         with:
           key: atupa-ci-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
 
-
       - name: Install Foundry
         uses: foundry-rs/foundry-toolchain@v1
 
@@ -197,10 +197,9 @@ jobs:
   diff:
     name: 🏮 Atupa Gas Diff
     runs-on: ubuntu-latest
-    # Support manual override of hashes via workflow_dispatch
     needs: [ baseline, target ]
     permissions:
-      pull-requests: write   # Required for posting PR comments
+      pull-requests: write
 
     steps:
       - name: Checkout PR branch
@@ -214,7 +213,6 @@ jobs:
         with:
           key: atupa-ci-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
 
-
       - name: Install Foundry (for Anvil)
         uses: foundry-rs/foundry-toolchain@v1
 
@@ -245,16 +243,19 @@ jobs:
           echo "  Base:   $BASE"
           echo "  Target: $TARGET"
 
-      # Use the Atupa composite action (the action.yml we just created)
+      # Execute Atupa composite action
       - name: Run Atupa Gas Diff
         uses: ./
         with:
           base_tx:     ${{ steps.hashes.outputs.base }}
           target_tx:   ${{ steps.hashes.outputs.target }}
           rpc_url:     'http://127.0.0.1:${{ env.ANVIL_PORT }}'
+          protocol:    ${{ github.event.inputs.protocol || vars.ATUPA_PROTOCOL || '' }}
+          vm:          ${{ github.event.inputs.vm || '' }}
           config:      'atupa.toml'
           post_comment: 'true'
           upload_svg:   'true'
+          upload_json:  'true'
 
       - name: Stop Anvil
         if: always()

.github/workflows/release.yml

@@ -2,8 +2,9 @@
 # Atupa Release — Automated Binary Compilation & Publishing
 #
 # Triggered when a new version tag (v*) is pushed.
-# Performs a cross-platform matrix build (Linux, macOS, Windows), 
-# bundles the Studio frontend into the binary, and creates a GitHub Release.
+# Performs a cross-platform matrix build (Linux, macOS, Windows),
+# bundles the Studio frontend into the binary, generates SHA-256 checksums,
+# and creates a GitHub Release before publishing crates in order.
 # ─────────────────────────────────────────────────────────────────────────────
 
 name: 🚀 Release
@@ -107,6 +108,7 @@ jobs:
           cd target/${{ matrix.target }}/release
           tar czf ../../../${{ matrix.asset_name }} atupa
           cd ../../../
+          sha256sum ${{ matrix.asset_name }} > ${{ matrix.asset_name }}.sha256
 
       - name: Package Binary (Windows)
         if: runner.os == 'Windows'
@@ -115,12 +117,16 @@ jobs:
           cd target/${{ matrix.target }}/release
           Compress-Archive -Path atupa.exe -DestinationPath ../../../${{ matrix.asset_name }}
           cd ../../../
+          $hash = (Get-FileHash -Path ${{ matrix.asset_name }} -Algorithm SHA256).Hash.ToLower()
+          "$hash  ${{ matrix.asset_name }}" | Out-File -FilePath "${{ matrix.asset_name }}.sha256" -Encoding ascii
 
       # 🚀 Upload to the release created in Phase 1
       - name: Upload Asset to Release
         uses: softprops/action-gh-release@v2
         with:
-          files: ${{ matrix.asset_name }}
+          files: |
+            ${{ matrix.asset_name }}
+            ${{ matrix.asset_name }}.sha256
           tag_name: ${{ github.ref_name }}
 
   # ── Phase 3: Publish to Crates.io ──────────────────────────────────────────
@@ -159,4 +165,5 @@ jobs:
             echo "⚠️  CRATES_IO_TOKEN not found. Skipping publish step."
             exit 0
           fi
+          chmod +x ./publish.sh
           ./publish.sh

.github/workflows/rust.yml

@@ -1,4 +1,4 @@
-name: Rust
+name: Rust CI
 
 on:
   push:
@@ -11,47 +11,53 @@ env:
 
 jobs:
   fmt:
-    name: Format Check
+    name: 🎨 Format Check
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt
       - uses: Swatinem/rust-cache@v2
-      - name: Run fmt
+      - name: Check code formatting
         run: cargo fmt --all -- --check
 
   clippy:
-    name: Lint (Clippy)
+    name: 🔍 Lint (Clippy)
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/setup-node@v4
         with:
-          components: clippy
-      - uses: Swatinem/rust-cache@v2
-      - name: Build Studio
+          node-version: 22
+      - name: Build Studio Frontend
         run: |
           cd studio
-          npm install
+          npm ci || npm install
           npm run build
+      - uses: Swatinem/rust-cache@v2
       - name: Run clippy
-        run: cargo clippy --workspace --all-targets -- -D warnings
+        run: cargo clippy --workspace --all-targets
 
   test:
-    name: Test Suite
+    name: 🧪 Workspace Test Suite
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
-      - name: Build Studio
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: 'npm'
+          cache-dependency-path: 'studio/package-lock.json'
+      - name: Build Studio Frontend
         run: |
           cd studio
-          npm install
+          npm ci || npm install
           npm run build
-      - name: Cargo Check
+      - uses: Swatinem/rust-cache@v2
+      - name: Workspace Check
         run: cargo check --workspace
-      - name: Run tests
+      - name: Run all workspace tests
         run: cargo test --workspace

.gitignore

@@ -59,3 +59,6 @@ artifacts/
 # Playground
 playground/out/
 playground/cache/
+
+
+demo