Add WorkerModules pallet.

[Neopallium]

Adds the WorkerModules pallet, which stores worker protocol module code, context and
config on-chain so the Polymesh Worker can load and upgrade protocol modules without a node
release. Also adds a develop-only WorkerTesting pallet used to exercise that upgrade path
from the integration tests.

changelog

new features

• New WorkerModules pallet (index 60, all runtimes): root-managed on-chain storage of worker protocol module code, context and config.
• The worker loads protocol modules from chain state; ProtocolConfigHash selects the active config, so protocols can be upgraded without a node release.
• Chains with no uploaded config keep using the built-in (static) DART modules.
• Module code may be zstd-compressed. Limits: 2 MiB code, 2 MiB context, 8 modules per config.
• Backend module version 2 (SCALE-encoded code/context), with version 1 kept for v8.0.x - v8.1.x nodes.
• New WorkerTesting pallet (index 200, develop runtime only) for testing protocol module upgrades.
• Build-time selection of host functions: host_workers (default), host_curves, no_host_fns.
• Deterministic containerised module builds via worker/rebuild.sh, with the artifacts committed under worker/modules/.
• worker-tools gains compress, build-release-config, export-config-json and check-release-config.

new external API

• WorkerModules.register_protocol (root).
• WorkerModules.upload_protocol_module_code (root).
• WorkerModules.upload_protocol_module_context (root).
• WorkerModules.upload_protocol_module_config (root).
• WorkerTesting.test_version, set_protocol_version, set_enable_work_session, submit_work_request (develop runtime only).

new events

• WorkerModules.ProtocolRegistered.
• WorkerModules.ProtocolModuleCodeUploaded.
• WorkerModules.ProtocolModuleContextUploaded.
• WorkerModules.ProtocolModuleConfigUploaded.
• WorkerTesting.TestingProtocolTask (develop runtime only).

other

• Fix mediator affirmations being processed after sender/receiver in ConfidentialAssets instant settlements.
• Isolate the dart-v0 protocol from the workspace so it can be built with its pinned older compiler.
• New CI job check-worker-modules verifies the committed DART module artifacts are reproducible.
• New worker_testing integration test covering the upload/activate/upgrade cycle.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​wasmtime@​43.0.2 ⏵ 48.0.2	-7
	cargo/​log@​0.4.29
	cargo/​picoalloc@​5.2.0

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report