Add SoulSigil gallery experience for Nova dashboard

.github/workflows/auto-merge-dependabot.yml

@@ -0,0 +1,37 @@
+name: Auto-Merge Dependabot Updates
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - labeled
+      - synchronize
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  automerge:
+   if: github.actor == 'dependabot[bot]' && contains(github.event.pull_request.labels.*.name, 'safe-to-merge')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Enable auto-merge for patch/minor updates
+        uses: "peter-evans/enable-pull-request-automerge@v3"
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          merge-method: squash
+
+      - name: Auto-approve safe updates
+        uses: hmarr/auto-approve-action@v3
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Label as safe
+        run: gh pr edit "$PR_URL" --add-label "safe-to-merge"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/buf-push.yml

@@ -0,0 +1,22 @@
+name: Buf-Push
+# Protobuf runs buf (https://buf.build/) push updated proto files to https://buf.build/sei-protocol/sei-chain
+# This workflow is only run when a .proto file has been changed
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+      - seiv2
+    paths:
+      - "proto/**"
+
+jobs:
+  push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: bufbuild/buf-setup-action@v1.26.1
+      - uses: bufbuild/buf-push-action@v1
+        with:
+          input: "proto"
+          buf_token: ${{ secrets.BUF_TOKEN }}

.github/workflows/ci-go.yml

@@ -0,0 +1,39 @@
+name: CI
+on:
+  push:
+  pull_request:
+permissions:
+  contents: read
+  checks: write
+  statuses: write
+  id-token: write  # harmless if unused; fine to keep
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
+          cache: true
+
+      # If your repo depends on vendored modules, uncomment:
+      # - name: Ensure modules
+      #   run: |
+      #     go mod download
+
+      - name: Run tests with coverage
+        run: |
+          go test ./... -race -covermode=atomic -coverprofile=coverage.out
+      # Skip Codecov for fork PRs (prevents failures on external PRs)
+      - name: Upload coverage to Codecov
+        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}   # you'll add this next
+          files: ./coverage.out
+          flags: unittests
+          fail_ci_if_error: true
+          verbose: true

.github/workflows/ci.yml

@@ -0,0 +1,95 @@
+name: CI
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, labeled, unlabeled, edited]
+  push:
+    branches:
+      - main
+      - evm
+      - release/**
+
+jobs:
+  # ---------- Dynamic Slinky Change Detection ----------
+  slinky-changes:
+    runs-on: ubuntu-latest
+    outputs:
+      slinky: ${{ steps.filter.outputs.slinky }}
+    steps:
+      # ✅ checkout pinned
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      # ✅ paths-filter pinned
+      - id: filter
+        uses: dorny/paths-filter@3cf5a0f92a23c2f4d4e1428d83c0600b3cf29dfc
+        with:
+          filters: |
+            slinky:
+              - 'scripts/modules/slinky_test/**'
+              - 'x/slinky/**'
+
+  # ---------- Matrix-Based Integration Tests ----------
+  integration-tests:
+    name: Integration Test (${{ matrix.test.name }})
+    runs-on: ubuntu-large
+    timeout-minutes: 30
+    needs: slinky-changes
+    if: needs.slinky-changes.outputs.slinky == 'true'
+    env:
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      DAPP_TESTS_MNEMONIC: ${{ secrets.DAPP_TESTS_MNEMONIC }}
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - name: "Wasm Module"
+            scripts:
+              - docker exec sei-node-0 integration_test/contracts/deploy_timelocked_token_contract.sh
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_delegation_test.yaml
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_admin_test.yaml
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_withdraw_test.yaml
+              - docker exec sei-node-0 integration_test/contracts/deploy_timelocked_token_contract.sh
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_emergency_withdraw_test.yaml
+
+    steps:
+      # ✅ checkout pinned
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      # ✅ setup-python pinned
+      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d
+        with:
+          python-version: "3.10"
+
+      - name: Install Dependencies
+        run: |
+          pip3 install pyyaml
+          sudo apt-get update && sudo apt-get install -y jq
+
+      - name: Start 4-node Docker cluster
+        run: |
+          make clean
+          INVARIANT_CHECK_INTERVAL=10 make docker-cluster-start &
+
+      - name: Wait for Cluster Launch
+        run: |
+          until [ "$(cat build/generated/launch.complete | wc -l)" -eq 4 ]; do sleep 10; done
+          sleep 10
+
+      - name: Start RPC Node
+        run: make run-rpc-node-skipbuild &
+
+      - name: Run Integration Test (${{ matrix.test.name }})
+        run: |
+          IFS=$'\n'
+          for script in $(echo '${{ toJson(matrix.test.scripts) }}' | jq -r '.[]'); do
+            bash -c "$script"
+          done
+          unset IFS
+
+      # ✅ upload-artifact pinned
+      - name: Upload Test Logs (if present)
+        if: always()
+        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce
+        with:
+          name: test-logs-${{ matrix.test.name }}
+          path: |
+            integration_test/output/

.github/workflows/codex-pr-review.yml

@@ -0,0 +1,121 @@
+name: Codex PR Review (Email Output)
+
+on:
+  pull_request:
+    types: [opened, edited, labeled, synchronize]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  codex-review:
+    runs-on: ubuntu-latest
+
+    steps:
+      # 1. Checkout PR with full history for merge-base comparison
+      - name: Checkout PR HEAD (full history)
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+
+      # 2. Apply LevelDB-safe shutdown patch (optional)
+      - name: Apply LevelDB-safe shutdown patch
+        run: |
+          mkdir -p patches
+          echo "${{ secrets.LEVELDB_PATCH }}" > patches/leveldb_safe_shutdown.patch
+          git apply patches/leveldb_safe_shutdown.patch || echo "::warning::Patch failed or not needed"
+
+      # 3. Set up Node (Codex CLI is a Node package)
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      # 4. Try to install Codex CLI
+      - name: Install Codex CLI (best-effort)
+        run: |
+          npm install -g @openai/codex || echo "::warning::Codex CLI not available; fallback will be used"
+
+      # 5. Compute merge-base diff and stats
+      - name: Compute merge-base diff
+        run: |
+          set -euo pipefail
+          BASE_REF="${{ github.event.pull_request.base.ref }}"
+          git fetch origin "$BASE_REF":"refs/remotes/origin/$BASE_REF"
+          MB=$(git merge-base "origin/$BASE_REF" HEAD)
+          git diff --unified=0 "$MB"..HEAD > pr.diff
+          git --no-pager diff --stat "$MB"..HEAD > pr.stat
+
+      # 6. Check if Codex CLI is available
+      - name: Check Codex availability
+        id: codex_check
+        run: |
+          if command -v codex >/dev/null; then
+            echo "available=true" >> $GITHUB_OUTPUT
+          else
+            echo "available=false" >> $GITHUB_OUTPUT
+          fi
+
+      # 7a. Run Codex CLI if available
+      - name: Run Codex CLI
+        if: steps.codex_check.outputs.available == 'true'
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+        run: |
+          MAX=${MAX_TOKENS:-6000}
+          codex pr \
+            --diff pr.diff \
+            --stat pr.stat \
+            --pr-url "$PR_URL" \
+            --pr-number "$PR_NUMBER" \
+            --max-output-tokens "$MAX" \
+            --no-guard \
+            --markdown > codex_output.md
+
+      # 7b. Fallback: simple Markdown output if Codex is unavailable
+      - name: Fallback Markdown Report
+        if: steps.codex_check.outputs.available == 'false'
+        run: |
+          {
+            echo "# Codex Fallback Review"
+            echo "PR: [#${{ github.event.pull_request.number }}](${{ github.event.pull_request.html_url }})"
+            echo
+            echo "## Diff Stat"
+            echo '```'
+            cat pr.stat
+            echo '```'
+            echo
+            echo "## Unified Diff (first 500 lines)"
+            echo '```diff'
+            head -n 500 pr.diff
+            echo '```'
+          } > codex_output.md
+
+      # 8. Extract the markdown for email output
+      - name: Extract Markdown Output
+        id: extract_output
+        run: |
+          echo "markdown<<EOF" >> $GITHUB_OUTPUT
+          cat codex_output.md >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+
+      # 9. Send the Markdown report via SendGrid Email
+      - name: Send Codex Report via Email
+        uses: dawidd6/action-send-mail@v3
+        with:
+          server_address: smtp.sendgrid.net
+          server_port: 465
+          username: apikey
+          password: ${{ secrets.SMTP_TOKEN }}
+          subject: "[Codex Review] PR #${{ github.event.pull_request.number }}"
+          to: totalwine2338@gmail.com
+          from: CodexBot <noreply@kinmesh.org>
+          content_type: text/html
+          body: |
+            <p>Codex Review for <a href="${{ github.event.pull_request.html_url }}">PR #${{ github.event.pull_request.number }}</a></p>
+            <pre style="white-space:pre-wrap;font-family:ui-monospace,Menlo,Consolas,monospace">
+            ${{ steps.extract_output.outputs.markdown }}
+            </pre>