Add a prt option to rollupsContracts, and move to rollups-contracts 3.0.0-alpha.10

[tuler]

Three commits, reviewable in order.

1. Default rollups-contracts → 3.0.0-alpha.10

Version and three hashes. Additive in its ABIs — it now publishes the ERC-165/20/721/1155 interfaces its contracts compile against (12 names), and no existing ABI changed. Every deployment address changed, though, so this breaks @cartesi/client, @cartesi/codec and @cartesi/react for anyone reading an address off them; hence their major changesets.

2. rollupsContracts({ prt: true })

Following review: not a second plugin, an option. A PRT (Permissionless Refereed Tournaments) deployment is a rollups deployment — same InputBox, portals and factories, at the same addresses — plus the consensus and tournament contracts that settle epochs by tournament rather than by authority.

export default defineConfig({
    out: "src/generated.ts",
    plugins: [rollupsContracts({ prt: true })],
});

So what it generates is a strict superset of rollupsContracts(), verified on the output: all 52 contracts present with identical ABIs and identical addresses, plus 31 PRT-only, for 83 total. It is one or the other in a config, never both.

Where each piece comes from

dave publishes the PRT contracts and the deployment addresses, but does not rebuild the rollups contracts — 44 of them have no artifact in its release, InputBox, Inputs, Outputs and all five portals among them. So Release.artifacts takes a list, and prt reads:

Source	Provides
rollups-contracts artifacts	ABIs of the rollups contracts
dave contract artifacts	ABIs of the PRT contracts
dave deployments + anvil	addresses for both, livenets and devnet

The union covers every address dave publishes: the only deployment without an artifact is TestUsdWithdrawalOutputBuilder, which the existing interface alias already handles.

What this retires

Modelling PRT as a superset rather than a sibling removed two workarounds the separate plugin needed:

• SHARED_CONTRACTS and excludeSharedContracts are gone. One plugin emitting a merged set cannot collide with itself, so the seven-name exclusion list — and its standing instruction to re-check on every version bump — disappears.
• externalDeployments is gone. With merged artifacts every dave address resolves to an ABI, so "deployment without a build artifact" goes back to being a plain error.

The one constraint the option must carry is that the releases pair: dave alpha.4 is built and deployed against rollups-contracts alpha.10, so prt: true picks both defaults together, and the docs flag it for anyone overriding prt alone.

Review fixes folded in

• ABI comparison is now order-insensitive (thread). Entries are compared as sets of canonicalized entries, with keys sorted recursively — JSON.stringify was order-sensitive both across entries and within them. This check matters more now that the shared interfaces land in one merged set instead of being excluded from one of two plugins.
• Extractions are cleaned up when a sibling download fails (thread). Pre-existing on the base branch: the try only began after Promise.all resolved, so a rejection stranded whatever had already extracted.

3. modern-tar → 0.8.4

0.8.0 is breaking only in the web entrypoint. This package imports unpackTar from modern-tar/fs, whose signature, options and path-traversal guards are byte-identical between the two versions.

Verification

Each commit was verified independently, so the history bisects.

• rollupsContracts(): 52 contracts. prt: true: 83, a verified strict superset (no ABI or address differs). prt: { anvil: false }: no chain 31337.
• A JSON-only dave release still fails with … predates dave 3.0.0-alpha.4, and rollups-contracts alpha.7 with … predates rollups-contracts 3.0.0-alpha.8.
• Order-shuffled equivalent ABIs compare equal; genuinely different ones still raise a conflict.
• A run whose second download 404s leaves 0 temp directories.
• All 8 packages build and lint, docs build, suites pass (client 12, codec 70, react 122), changeset version accepts all four changesets.

One caveat about the sandbox, not the diff: turbo run build hits fetch failed when several packages download release tarballs concurrently. It reproduces on the base branch with this diff stashed; building packages one at a time succeeds.

🤖 Generated with Claude Code

https://claude.ai/code/session_017dyPxGkLKcxgyECXkVKqae

[changeset-bot]

🦋 Changeset detected

Latest commit: 298f0f9

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 4 packages

Name	Type
@cartesi/client	Major
@cartesi/codec	Major
@cartesi/react	Major
@cartesi/wagmi-plugin	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
cartesi-playground	Ready	Preview	Sep 2, 2026 3:17pm UTC

[guidanoli]

Thank you for taking my suggestions into consideration.
Looks good to me!