Skip to content

Fix FrontendRegistry upgrade storage order#68

Merged
Noc2 merged 10 commits into
mainfrom
cursor/critical-bug-management-7b24
Jul 1, 2026
Merged

Fix FrontendRegistry upgrade storage order#68
Noc2 merged 10 commits into
mainfrom
cursor/critical-bug-management-7b24

Conversation

@cursor

@cursor cursor Bot commented Jul 1, 2026

Copy link
Copy Markdown

Description

Fixes a critical upgrade-safety regression in FrontendRegistry where the new access-recorder mappings were inserted before existing fee-accounting storage.

Changes

  • Move accessRecorderForFrontend and frontendForAccessRecorder after existing fee-creditor / pending-withdrawal fields so they consume reserved gap slots.
  • Update the FrontendRegistry storage-layout snapshot to preserve slots 9-14 for existing fee state.
  • Add a Node regression test that locks the fee-accounting slots and recorder append slots.

Testing

Describe how you tested your changes:

  • Foundry tests pass (yarn foundry:test)
  • Contract size gate passes (yarn workspace @rateloop/foundry check:sizes)
  • Lint passes (yarn next:lint)
  • Type check passes (yarn next:check-types)
  • Base Sepolia readiness passes (yarn base-sepolia:check) when staging deployment/env wiring changed
  • Base mainnet readiness passes (yarn base-mainnet:check) when production deployment/env wiring changed
  • Node/workspace tests pass for changed packages (node scripts/run-node-tests.mjs packages/foundry/scripts-js/storageLayoutUpgradeSafety.test.js)
  • E2E smoke checked when user-visible app flows changed (yarn e2e:ci:app or focused Playwright spec)
  • Tested locally with yarn start

Note: forge is not installed in this runner, so compiler-backed Foundry/storage-layout checks could not be executed here.

Security

  • This PR does not disclose a private vulnerability. If it fixes a sensitive issue, coordinate disclosure via hawigxyz@proton.me.

Related Issues

Closes #

Open in Web View Automation 

Co-authored-by: David Hawig <Noc2@users.noreply.github.com>
@vercel

vercel Bot commented Jul 1, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
rate-loop-nextjs Ready Ready Preview, Comment Jul 1, 2026 3:49pm

Request Review

Co-authored-by: David Hawig <Noc2@users.noreply.github.com>
@Noc2
Noc2 marked this pull request as ready for review July 1, 2026 12:24
@Noc2
Noc2 self-requested a review as a code owner July 1, 2026 12:24

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 62fe94d7c4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread packages/nextjs/lib/confidentiality/context.ts
@Noc2
Noc2 merged commit 15d0c2a into main Jul 1, 2026
48 of 53 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants