refactor(infra): remove kathy and tidy monorepo docker workflow

[paulbalaji]

Summary

Removes Kathy k8s deployment infrastructure and the helloworld production service. Tidies up the monorepo Docker workflow.

Changes

Monorepo Docker Workflow

• Removed PR commenting (noisy, replaced with job summary)
• Removed GitHub App token generation step
• Removed pull-requests: write permission
• Added workflow summary showing image tags

Kathy K8s Removal

• Deleted helm/helloworld-kathy/ helm chart
• Deleted KathyHelmManager class and deploy-kathy.ts script
• Removed kathy docker tags from docker.ts

Helloworld Production Service Removal

• Deleted scripts/helloworld/kathy.ts and utils.ts
• Deleted config/environments/*/helloworld.ts configs
• Deleted config/environments/*/helloworld/ address/verification JSONs
• Deleted config/kathy.json addresses
• Deleted src/config/helloworld/types.ts
• Removed Role.Kathy and kathy funding configs
• Removed @hyperlane-xyz/helloworld dependency from infra
• Removed HelloWorld deployer/checker from deploy/check scripts
• Removed Modules.HELLO_WORLD from agent-utils

What's Kept (Rust E2E)

• scripts/send-test-messages.ts - Rust e2e uses this via pnpm kathy

Context

Kathy was a production service that sent test messages between chains. It was deployed to k8s but is no longer used. The Rust e2e tests use a separate script (send-test-messages.ts) that doesn't depend on any of the removed helloworld infrastructure.

checkWarpDeploy is now the only remaining user of the monorepo Docker image in k8s deployments.

Test plan

• pnpm -C typescript/infra build passes
• TypeScript type check passes
• Rust e2e can still run via pnpm kathy (uses send-test-messages.ts)

---

Stacked on: #7721

Summary by CodeRabbit

• Removals

  • Removed HelloWorld test configs, static deployment data, deployment scripts, and related utilities.
  • Removed the Kathy agent, Helm chart, Kathy-specific configuration, keys, funding settings, and the Kathy role from public surfaces.

• Chores

  • Simplified Docker CI: narrowed triggers to Docker-relevant changes, removed PR-comment steps, added runtime auth/registry login, environment variable initialization, platform selection, and streamlined build/push summary.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[paulbalaji]

will deal with conflicts once #7721 is merged

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR removes the Kathy agent and HelloWorld subsystem: deletes Kathy role, configs, Helm chart, deployment scripts, HelloWorld types/utilities, JSON data, adjusts funding/role logic, and narrows the monorepo Docker workflow triggers and steps.

Changes

Cohort / File(s)	Summary
CI/CD & Docker Workflow .github/workflows/monorepo-docker.yml	Narrowed Docker workflow triggers; removed GitHub App token & PR-commenting; added Depot CLI/GCR auth, registry/foundry version reads, platform input, and depot build/push steps.
Docker tags config typescript/infra/config/docker.ts	Removed kathy: string from BaseDockerTags; deleted Kathy entries in mainnet/testnet tag objects; checkWarpDeploy set to 'main'.
HelloWorld env configs (deleted) typescript/infra/config/environments/...	Removed HelloWorld config exports and mappings for mainnet3/testnet4 and top-level environments.
HelloWorld JSON data (deleted) typescript/infra/config/environments/*/helloworld/*	Removed address and verification JSON files across mainnet3 and testnet4 (hyperlane and rc).
Environment indexes typescript/infra/config/environments/mainnet3/index.ts, typescript/infra/config/environments/testnet4/index.ts	Removed helloWorld import/property from exported environment objects.
Agent configs typescript/infra/config/environments/mainnet3/agent.ts, .../testnet4/agent.ts	Removed HelloWorld references and metric contexts; dropped Role.Kathy from ReleaseCandidate rolesWithKeys.
Funding configs & types typescript/infra/config/environments/*/funding.ts, typescript/infra/src/config/funding.ts	Removed Kathy from contextsAndRolesToFund; deleted desiredKathyBalancePerChain from KeyFunderConfig and environment funding.
Helm chart - helloworld-kathy (deleted) typescript/infra/helm/helloworld-kathy/...	Entire Helm chart removed: Chart.yaml, _helpers.tpl, templates (pod/statefulset/external-secret), and values.yaml.
HelloWorld scripts & utils (deleted) typescript/infra/scripts/helloworld/*	Deleted Kathy deploy script, Kathy agent loop, and HelloWorld utilities (app builders/getters).
Agent & deploy scripts typescript/infra/scripts/agent-utils.ts, typescript/infra/scripts/check/check-utils.ts, typescript/infra/scripts/deploy.ts	Removed HELLO_WORLD module enum and HelloWorld branches (checker, deployer).
Roles & key management typescript/infra/src/roles.ts, typescript/infra/src/agents/key-utils.ts, typescript/infra/src/funding/key-funder.ts, typescript/infra/src/utils/utils.ts, typescript/infra/src/utils/rpcUrls.ts	Removed Role.Kathy, Kathy key/address helpers, Kathy persistence, Kathy handling in cronjob selection, and narrowed assertFundableRole to exclude Kathy.
Type definitions & environment surface typescript/infra/src/config/environment.ts, typescript/infra/src/config/helloworld/types.ts	Removed HelloWorldConfig from EnvironmentConfig; deleted HelloWorld Kathy/run types and HelloWorldConfig type definitions.
Package & deps typescript/infra/package.json, typescript/infra/config/kathy.json	Removed @hyperlane-xyz/helloworld dependency and deploy-helloworld script; deleted kathy.json.
Docs & tests typescript/keyfunder/README.md, typescript/keyfunder/src/config/types.test.ts	Updated docs and tests to remove or replace hyperlane-kathy references with hyperlane-rebalancer.
Misc tests/comments typescript/infra/scripts/agents/deploy-agents.ts, typescript/infra/src/agents/keys.ts	Minor comment/JSDoc cleanup removing Kathy examples.

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

• refactor(infra): centralize Docker image/tag configuration #7705: Directly touches typescript/infra/config/docker.ts and Kathy Docker tag handling.
• feat: support rebalancer key in key funder cron job #7052: Overlaps KeyFunderConfig and funding role mappings (rebalancer/kathy changes).
• fix(docker): switch back to Alpine base image #7564: Related Docker workflow changes reading solidity/.foundryrc and exposing FOUNDRY_VERSION.

Suggested reviewers

• ltyu
• Mo-Hussain
• antigremlin
• tkporter

Poem

A marsh of files once full o' fuss and fray,
Kathy packs her charts and quietly slips away.
HelloWorld folds, configs trimmed neat,
The repo breathes easy — fewer bits to sweep.
Code walks on, simpler, with a softer sway.

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 57.14% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the PR's main objective: removing Kathy infrastructure and tidying the Docker workflow.
Description check	✅ Passed	The description thoroughly covers all key changes, provides context, and includes a test plan. It goes well beyond template requirements.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch pbio/monorepo-workflow-tidy

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In @.github/workflows/monorepo-docker.yml:
- Around line 9-15: The workflow's PR path filter omits build-input files so
changes to .registryrc and solidity/.foundryrc won't trigger the Docker build;
update the paths list in the monorepo-docker.yml workflow by adding
'.registryrc' and 'solidity/.foundryrc' alongside the existing entries (e.g.,
the list that currently contains 'Dockerfile', 'docker-entrypoint.sh',
'.dockerignore', '.github/workflows/monorepo-docker.yml', 'pnpm-lock.yaml') so
PRs touching those files will run the workflow.

🧹 Nitpick comments (2)

typescript/infra/src/agents/key-utils.ts (1)

503-503: Type the relayer variable to avoid implicit any.

let relayer; falls back to any, which dodges type safety. A simple annotation keeps it honest and matches the rest of the infra typing discipline.

♻️ Suggested tweak

-  let relayer;
+  let relayer: Address | undefined;

.github/workflows/monorepo-docker.yml (1)

76-78: Pin Depot action to a commit SHA for supply-chain safety.

Using a floating tag like @v1 can drift. Pinning to a specific commit keeps builds deterministic and safer.

🔐 Safer pinning pattern

-      - name: Set up Depot CLI
-        uses: depot/setup-action@v1
+      - name: Set up Depot CLI
+        uses: depot/setup-action@<COMMIT_SHA>

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@typescript/infra/src/agents/key-utils.ts`:
- Around line 502-505: The variable relayer is declared without a type causing a
noImplicitAny error; update its declaration to include an explicit type (for
example: let relayer: Relayer | undefined; or if a concrete Relayer type doesn't
exist yet use let relayer: unknown | undefined and narrow it later) so the
compiler knows its type when used in the loop that iterates over keys; ensure
you import or define the Relayer type if you choose the former and adjust
subsequent code to handle the possibly undefined value.

[hyper-gonk]

⚙️ Node Service Docker Images Built Successfully

Service	Tag
🔑 key-funder	7d2f9b9-20260129-142913
🔍 offchain-lookup-server	7d2f9b9-20260129-142913
♻️ rebalancer	7d2f9b9-20260129-142913
🚀 ts-relayer	7d2f9b9-20260129-142913
🕵️ warp-monitor	7d2f9b9-20260129-142913

Full image paths

gcr.io/abacus-labs-dev/hyperlane-key-funder:7d2f9b9-20260129-142913
gcr.io/abacus-labs-dev/hyperlane-offchain-lookup-server:7d2f9b9-20260129-142913
gcr.io/abacus-labs-dev/hyperlane-rebalancer:7d2f9b9-20260129-142913
gcr.io/abacus-labs-dev/hyperlane-ts-relayer:7d2f9b9-20260129-142913
gcr.io/abacus-labs-dev/hyperlane-warp-monitor:7d2f9b9-20260129-142913

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.02%. Comparing base (eaaf2af) to head (7d2f9b9).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7893   +/-   ##
=======================================
  Coverage   77.02%   77.02%           
=======================================
  Files         117      117           
  Lines        2651     2651           
  Branches      244      244           
=======================================
  Hits         2042     2042           
  Misses        593      593           
  Partials       16       16           

Components	Coverage Δ
core	87.80% <ø> (ø)
hooks	71.86% <ø> (ø)
isms	81.10% <ø> (ø)
token	86.67% <ø> (ø)
middlewares	84.98% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.