feat(node): add optional jemalloc global allocator for archive-node memory (#2724)

.github/actionlint.yaml

@@ -3,5 +3,4 @@ self-hosted-runner:
   labels:
     - fireactions-turbo-16
     - fireactions-turbo-8
-    - fireactions-tryruntime
     - Benchmarking

.github/actions/run-typescript-e2e/action.yml

@@ -0,0 +1,52 @@
+name: Run TypeScript E2E suite
+description: Download a prebuilt node and run one Moonwall environment.
+
+inputs:
+  binary:
+    description: Node artifact variant to download.
+    required: true
+  test:
+    description: Moonwall environment to run.
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Download binary
+      uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+      with:
+        name: node-subtensor-${{ inputs.binary }}
+        path: target/release
+
+    - name: Make binary executable
+      shell: bash
+      run: chmod +x target/release/node-subtensor
+
+    - name: Setup Node.js
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      with:
+        node-version-file: ts-tests/.nvmrc
+
+    - name: Setup pnpm
+      uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
+      with:
+        version: 10
+
+    - name: Install e2e dependencies
+      shell: bash
+      working-directory: ts-tests
+      run: pnpm install --frozen-lockfile
+
+    - name: Install lsof (dev foundation RPC port discovery)
+      if: inputs.test == 'dev'
+      shell: bash
+      run: |
+        sudo DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a apt-get update
+        sudo DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a apt-get install -y --no-install-recommends lsof
+
+    - name: Run tests
+      shell: bash
+      working-directory: ts-tests
+      env:
+        MOONWALL_TEST: ${{ inputs.test }}
+      run: pnpm moonwall test "$MOONWALL_TEST"

.github/copilot-instructions.md

@@ -3,9 +3,9 @@
 You are reviewing code for a Substrate-based blockchain with a $4B market cap. Lives and livelihoods depend on the security and correctness of this code. Be thorough, precise, and uncompromising on safety.
 
 ## Branch Strategy
-* Unless this is a hotfix or deployment PR (`devnet` => `testnet`, or `testnet` => `mainnet`), all PRs must target `devnet`
-* Flag PRs targeting `mainnet` directly unless they are hotfixes
-* `testnet` and `mainnet` branches must only receive promotion merges from the branch directly upstream of them
+* All PRs target `main`. Deployment is automated, not PR-driven: merges to `main` ride the release train, which promotes devnet → testnet → mainnet via on-chain `setCode` (see `docs/internals/release-process.mdx`)
+* `devnet`, `testnet`, and `mainnet` are CI-managed mirror branches recording what each network currently runs; they are ruleset-locked and only the release train updates them
+* Flag any PR that targets `devnet`, `testnet`, or `mainnet` — those branches never receive merges
 
 ## CRITICAL: Runtime Safety (Chain-Bricking Prevention)
 The runtime CANNOT panic under any circumstances. A single panic can brick the entire chain.

.github/scripts/classify-runtime-changes.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+if [[ $# -ne 1 ]]; then
+  echo "usage: classify-runtime-changes.sh OUTPUT_FILE" >&2
+  exit 2
+fi
+
+output_file="$1"
+
+runtime=false
+docs=false
+python_sdk=false
+sdk_drift=false
+snapshot_ci=false
+
+# Keep path ownership explicit. SDK-only changes are covered by sdk-checks and
+# the Rust SDK e2e workflow; they should not force clone-upgrade or SDK drift.
+while IFS= read -r path; do
+  case "$path" in
+    common/*|node/*|pallets/*|precompiles/*|primitives/*|runtime/*|support/*|chain-extensions/*|src/*|vendor/*|Cargo.toml|build.rs|rust-toolchain.toml)
+      runtime=true
+      sdk_drift=true
+      ;;
+    clones/*|website/apps/bittensor-website/scripts/*)
+      runtime=true
+      ;;
+    .github/workflows/runtime-checks.yml|.github/workflows/refresh-mainnet-snapshot.yml|.github/actions/rust-setup/*|.github/actions/sccache-setup/*|.github/scripts/sccache-configure.sh)
+      runtime=true
+      ;;
+    .github/scripts/classify-runtime-changes.sh|.github/scripts/test-runtime-change-filter.sh|.github/scripts/snapshot-artifact.sh|.github/scripts/test-snapshot-artifact.sh)
+      runtime=true
+      snapshot_ci=true
+      ;;
+  esac
+
+  case "$path" in
+    website/*|sdk/python/*|.github/workflows/runtime-checks.yml) docs=true ;;
+  esac
+
+  case "$path" in
+    sdk/python/*|sdk/bittensor-core/*|sdk/bittensor-core-py/*|sdk/bittensor-core-wasm/*|Cargo.lock|.github/workflows/runtime-checks.yml)
+      python_sdk=true
+      ;;
+  esac
+
+  case "$path" in
+    .github/workflows/runtime-checks.yml|.github/workflows/refresh-mainnet-snapshot.yml)
+      snapshot_ci=true
+      ;;
+  esac
+done
+
+echo "runtime=$runtime, docs=$docs, python_sdk=$python_sdk, sdk_drift=$sdk_drift, snapshot_ci=$snapshot_ci"
+{
+  echo "runtime=$runtime"
+  echo "docs=$docs"
+  echo "python_sdk=$python_sdk"
+  echo "sdk_drift=$sdk_drift"
+  echo "snapshot_ci=$snapshot_ci"
+} >> "$output_file"