* Add builds for op-deployer, bugfixes, artifacts downloads

Adds Docker builds for op-deployer, makes some bugfixes, and adds support for downloading remote artifacts.

* Apply code scanning fix for arbitrary file access during archive extraction ("zip slip")
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* fix compile error

* lint

* fix test

* Update from code review, add docker build

* fix versioning

* remove errant dispatch

* update target

---------
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* op-supervisor: register each L2 block, refactor
Signed-off-by: protolambda <proto@protolambda.com>

* op-supervisor: fix lint and tests

* op-supervisor: minor fixes, logging

* op-supervisor: fix semgrep

---------
Signed-off-by: protolambda <proto@protolambda.com>

* feat(ct): add constructors to interfaces

Adds a pseudo-constructor function called __constructor__ that
will be verified as part of the interface. This pseudo-function
is useful when we want to be able to maintain type safety
in the deploy script where we use vm.getCode.

* add a pseudo-constructor for all remaining contracts with constructors

* fix warning

* update check-interface.sh comment

---------
Co-authored-by: Michael Amadi <amadimichaeld@gmail.com>

That was one ugly file.

* fix: Removing all file I/O features

* fix: comments in code.

* fix: pr comment

* proof-tools: Bump op-challenger version

* optimistic version bump

* update op-challenger version

CI is automatically using the latest version which has broken things. Update to match as a temporary fix until we can install a fixed version in CI.

* Add Emitter Contract

* Emitter Contract and Bindings

* AddL2RPC without Stopping

* Rename testdata folder to contracts

* update generate.sh

* update solidity and gen script

* op-challenger: Use a wrapper to specify the vm type for metrics

Decouples the vm type from the trace type to give the run-trace subcommand more flexibility, allowing it to report separate metrics for cannon and mt-cannon.

Also adjust the run-trace loggers to consistently use `mt-cannon` as the type.

* Use constant.
Co-authored-by: Inphi <mlaw2501@gmail.com>

---------
Co-authored-by: Inphi <mlaw2501@gmail.com>

Fixes the existing dispute interfaces and makes them match the
same style that we're using for all other interfaces.

* vm-runner: User-provided mt-cannon absolute prestate URL

* placate semgrep

Removes autogenerated invariant docs from the contracts package.
These autogenerated docs create confusion about where invariants
should be defined (the answer is in the specs) and no one actually
looks at them anyway. Just adds an additional step into CI for
minimal benefit.

* op-program: Reproducible MT-Cannon prestate

* fix mt-cannon proof gen

Updates the contracts README to use the mermaid diagrams in specs
to avoid duplicated documentation.

Adds a new check to CI that verifies that the semver string
defined in the contract matches the string defined in natspec.

* cannon: Cut todo, reorganize syscalls

* cannon: Rename patchGo to patchGoGC, add comments, cut TODO

* cannon: Only allow gc patching for single-threaded Cannon

* cannon: Cut patch flag from load-elf command altogether

* cannon: Add memory assertions to FuzzStatePreimageRead

* cannon: Rework hint write fuzz test to assert hint expectations

* cannon: Update FuzzStatePreimageWrite to assert on expected preimageKey

* cannon: Remove validation skipping logic from test util

* cannon: Cleanup - simplify code

* cannon: Cleanup - dedupe code

* contracts: Add more MIPS2 tests

* remove unused var

* maint: clean up TODO tags

Cleans up existing TODO tags, particularly those that referenced
old Linear issues. Updates the todo-checker script to allow
<#issue> as well as <issue>.

* feat(ci): add todo-issues check to main CI

Updates the main CI workflow to run the todo-issues check. For
now this check will ignore any bare TODOs. We can update the
script later to reject bare TODOs.

One more PR for adding L2 interfaces.

* op-challenger: Support MT-Cannon in run-trace

* ..

* fix multi_test.go

* annotate metrics with mt-cannon

* preserve prestate encoding; use separate dir for mt-cannon

* Update op-challenger/cmd/run_trace.go
Co-authored-by: Adrian Sutton <adrian@oplabs.co>

---------
Co-authored-by: Adrian Sutton <adrian@oplabs.co>

* refactor: rename var for clarity

* test: add more assertions from ChainAssertions, and some new ones

* chore: ensure unique, clear, consistent revert string IDs

also sorts methods alphabetically for clarity

* fix: var name after rebase

* style: forge fmt

* revert proxyAdmin -> superchainProxyAdmin name change for now

* Update packages/contracts-bedrock/scripts/DeployImplementations.s.sol
Co-authored-by: Maurelian <john@oplabs.co>

* chore: small tweaks from pr feedback

---------
Co-authored-by: Maurelian <john@oplabs.co>

Same idea again, cleaning up the scheduled docker publish with the
same technique as the previous PR.

Cleans up the release job by turning it into a matrix.

Using 10k invariant runs would be ridiculously slow.

* feat(op-e2e): Channel timeout late submission test

* remove finalization of l1 chain

* feat(op-e2e): Open channel closed after sequence window expiry test

Adds a test to the proof actions that proves a block at the safe head
after the batcher has opened a channel, allowed the sequence window to
expire, and then attempted to close their open channel after the fact.

* buffer frame

* include extra tx

* chore(rename): Rename opsm to opsmProxy

* fix: Go bindings updated for proxy.

* fix: linting

* fix: pr comment nits.

Adds `op-deployer inspection *` commands to expose the generated genesis and rollup configs via the CLI or Golang libraries. Also fixes a bug in deployment - I accidentally deleted the code that set the deployer nonce, so live chain deployments were reverting.

GITHUB_TOKEN no longer gets write access by default so it needs to
be provided with write access explicitly.

Semgrep CLI tool recently removed the --time option which caused
CI to suddenly break.

First PR for adding interfaces for L2 contracts. Adds interfaces
for all of the bridging and message passing contracts.

Fixes a couple of fuzz flakes that were found when fuzzing
heavily.