@coti-io/coti-contracts 1.1.0 → 1.3.0

package/contracts/utils/mpc/MpcInterface.sol

@@ -1,15 +1,18 @@
 // SPDX-License-Identifier: MIT
-
-pragma solidity ^0.8.19;
+pragma solidity 0.8.19;
 
 interface ExtendedOperations {
 
     function OnBoard(bytes1 metaData, uint256 ct) external returns (uint256 result);
+    function OnBoard(bytes1 metaData, uint256 ctHigh, uint256 ctLow) external returns (uint256 result);
     function OffBoard(bytes1 metaData, uint256 ct) external returns (uint256 result);
+    function OffBoard256(bytes1 metaData, uint256 gt) external returns (uint256 ctHigh, uint256 ctLow);
     function OffBoardToUser(bytes1 metaData, uint256 ct, bytes calldata addr) external returns (uint256 result);
+    function OffBoardToUser256(bytes1 metaData, uint256 ct, bytes calldata addr) external returns (uint256 ctHigh, uint256 ctLow);
     function SetPublic(bytes1 metaData, uint256 ct) external returns (uint256 result);
     function Rand(bytes1 metaData) external returns (uint256 result);
     function RandBoundedBits(bytes1 metaData, uint8 numBits) external returns (uint256 result);
+
     function Add(bytes3 metaData, uint256 lhs, uint256 rhs) external returns (uint256 result);
     function CheckedAdd(bytes3 metaData, uint256 lhs, uint256 rhs) external returns (uint256 overflowBit, uint256 result);
     function Sub(bytes3 metaData, uint256 lhs, uint256 rhs) external returns (uint256 result);
@@ -37,8 +40,10 @@ interface ExtendedOperations {
     function Transfer(bytes4 metaData, uint256 a, uint256 b, uint256 amount) external returns (uint256 new_a, uint256 new_b, uint256 res);
     function TransferWithAllowance(bytes5 metaData, uint256 a, uint256 b, uint256 amount, uint256 allowance) external returns (uint256 new_a, uint256 new_b, uint256 res, uint256 new_allowance);
     function ValidateCiphertext(bytes1 metaData, uint256 ciphertext, bytes calldata signature) external returns (uint256 result);
+    function ValidateCiphertext(bytes1 metaData, uint256 ciphertextHigh, uint256 ciphertextLow, bytes calldata signature) external returns (uint256 result);
     function GetUserKey(bytes calldata signedEK) external returns (bytes memory encryptedKey);
     function SHA256Fixed432BitInput(uint256 amount, uint256 seed1, uint256 seed2, uint256 padding1, uint256 padding2, bytes calldata addr) external returns (bytes memory result);
 }
 
 address constant MPC_PRECOMPILE = address(0x0000000000000000000000000000000000000064);
+

package/hardhat/gasPriceBump.ts

@@ -0,0 +1,60 @@
+import { extendProvider } from "hardhat/config";
+import type { EIP1193Provider } from "hardhat/types";
+
+/** Networks where RPC fee hints are multiplied by this factor (130% = +30%). */
+const GAS_PRICE_MULTIPLIER_NUM = 130n;
+const GAS_PRICE_MULTIPLIER_DEN = 100n;
+
+const NETWORKS_WITH_BUMP = new Set(["coti-testnet", "coti-mainnet"]);
+
+function bumpHexFee(value: unknown): unknown {
+    if (typeof value !== "string" || !value.startsWith("0x")) {
+        return value;
+    }
+    const v = BigInt(value);
+    const bumped = (v * GAS_PRICE_MULTIPLIER_NUM) / GAS_PRICE_MULTIPLIER_DEN;
+    return "0x" + bumped.toString(16);
+}
+
+function bumpBlockFeeFields(block: unknown): unknown {
+    if (!block || typeof block !== "object") {
+        return block;
+    }
+    const b = block as Record<string, unknown>;
+    const out = { ...b };
+    if (typeof b.baseFeePerGas === "string") {
+        out.baseFeePerGas = bumpHexFee(b.baseFeePerGas);
+    }
+    return out;
+}
+
+extendProvider((provider: EIP1193Provider, _config, network: string) => {
+    if (!NETWORKS_WITH_BUMP.has(network)) {
+        return provider;
+    }
+
+    const originalRequest = provider.request.bind(provider);
+
+    const wrapped: EIP1193Provider = Object.assign(
+        Object.create(Object.getPrototypeOf(provider)),
+        provider,
+        {
+            request: async (args: { method: string; params?: readonly unknown[] | object }) => {
+                const result = await originalRequest(args);
+                const method = args.method;
+
+                if (method === "eth_gasPrice" || method === "eth_maxPriorityFeePerGas") {
+                    return bumpHexFee(result);
+                }
+
+                if (method === "eth_getBlockByNumber" || method === "eth_getBlockByHash") {
+                    return bumpBlockFeeFields(result);
+                }
+
+                return result;
+            },
+        }
+    );
+
+    return wrapped;
+});

package/hardhat.config.ts

@@ -1,36 +1,87 @@
 import { HardhatUserConfig } from "hardhat/config";
 import "@nomicfoundation/hardhat-toolbox";
+import "@nomicfoundation/hardhat-verify";
 
 import dotenv from "dotenv"
 dotenv.config()
 
+/** Bump estimated gas price / EIP-1559 fees by 30% on COTI networks (see hardhat/gasPriceBump.ts). */
+import "./hardhat/gasPriceBump"
+
+const accounts = process.env.PRIVATE_KEY ? [process.env.PRIVATE_KEY] : [];
+
 const config: HardhatUserConfig = {
   defaultNetwork: "coti-testnet",
+  // Pinned compiler versions for reproducible bytecode; bump only alongside contract pragma / CI review.
   solidity: {
-    version: "0.8.19",
-    settings: {
-      optimizer: {
-        enabled: true,
-        runs: 10000
+    compilers: [
+      {
+        version: "0.8.20",
+        settings: {
+          viaIR: true,
+          optimizer: {
+            enabled: true,
+            runs: 10000
+          },
+          metadata: {
+            // do not include the metadata hash, since this is machine dependent
+            // and we want all generated code to be deterministic
+            // https://docs.soliditylang.org/en/v0.7.6/metadata.html
+            bytecodeHash: 'none',
+          },
+        }
       },
-      metadata: {
-        // do not include the metadata hash, since this is machine dependent
-        // and we want all generated code to be deterministic
-        // https://docs.soliditylang.org/en/v0.7.6/metadata.html
-        bytecodeHash: 'none',
-      },
-    }
+      {
+        version: "0.8.19",
+        settings: {
+          viaIR: true,
+          optimizer: {
+            enabled: true,
+            runs: 10000
+          },
+          metadata: {
+            bytecodeHash: 'none',
+          },
+        }
+      }
+    ]
   },
   networks: {
     "coti-testnet": {
       url: "https://testnet.coti.io/rpc",
       chainId: 7082400,
+      accounts,
     },
     "coti-mainnet": {
       url: "https://mainnet.coti.io/rpc",
       chainId: 2632500,
+      accounts,
     },
   },
+  etherscan: {
+    apiKey: {
+      "coti-testnet": "placeholder",
+      "coti-mainnet": "placeholder",
+    },
+    customChains: [
+      {
+        network: "coti-testnet",
+        chainId: 7082400,
+        urls: {
+          apiURL: "https://testnet.cotiscan.io/api",
+          browserURL: "https://testnet.cotiscan.io/",
+        },
+      },
+      {
+        network: "coti-mainnet",
+        chainId: 2632500,
+        urls: {
+          apiURL: "https://mainnet.cotiscan.io/api",
+          browserURL: "https://mainnet.cotiscan.io/",
+        },
+      },
+    ],
+  },
   mocha: {
     timeout: 100000000
   },

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@coti-io/coti-contracts",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "A library for smart contract development on the COTI network.",
   "author": "COTI Development",
   "repository": {
     "type": "git",
-    "url": "git://github.com/coti-io/coti-contracts.git"
+    "url": "https://github.com/coti-io/coti-contracts.git"
   },
   "homepage": "https://docs.coti.io/coti-v2-documentation/build-on-coti/tools/contracts-library",
   "keywords": [
@@ -19,12 +19,30 @@
     "on-chain-compute"
   ],
   "devDependencies": {
+    "@nomicfoundation/hardhat-chai-matchers": "^2.1.0",
+    "@nomicfoundation/hardhat-ethers": "^3.1.0",
+    "@nomicfoundation/hardhat-ignition": "^0.15.0",
+    "@nomicfoundation/hardhat-ignition-ethers": "^0.15.0",
+    "@nomicfoundation/hardhat-network-helpers": "^1.0.0",
     "@nomicfoundation/hardhat-toolbox": "^5.0.0",
-    "hardhat": "^2.22.8"
+    "@nomicfoundation/hardhat-verify": "^2.0.1",
+    "@nomicfoundation/ignition-core": "^0.15.0",
+    "@typechain/ethers-v6": "^0.5.1",
+    "@typechain/hardhat": "^9.1.0",
+    "@types/chai": "^4.2.0",
+    "@types/mocha": "^10.0.10",
+    "chai": "^4.2.0",
+    "hardhat": "^2.22.8",
+    "hardhat-gas-reporter": "^1.0.8",
+    "solidity-coverage": "^0.8.16",
+    "ts-node": "^10.9.2",
+    "typechain": "^8.3.2",
+    "typescript": "^5.9.3"
   },
   "dependencies": {
     "@coti-io/coti-ethers": "^1.0.5",
-    "@openzeppelin/contracts": "^4.9.6",
+    "@coti-io/coti-sdk-typescript": "^1.0.6",
+    "@openzeppelin/contracts": "4.9.6",
     "dotenv": "^16.4.5"
   }
 }

package/scripts/add-bridge-operators.cjs

@@ -0,0 +1,87 @@
+/**
+ * Grant OPERATOR_ROLE on each privacy bridge via addOperator(account).
+ * Caller must hold DEFAULT_ADMIN_ROLE on every bridge (typically the deployer owner).
+ *
+ * Run with:
+ *   npx hardhat run scripts/add-bridge-operators.cjs --network coti-mainnet
+ *
+ * Optional env:
+ *   OPERATOR_ACCOUNT=0x...  (default: 0x07dd528aC097f2Fb18fdC048e8d94376621b68C9)
+ */
+const hre = require("hardhat");
+
+const CHAIN_IDS = {
+    cotiTestnet: 7082400,
+    cotiMainnet: 2632500,
+    "coti-testnet": 7082400,
+    "coti-mainnet": 2632500,
+};
+
+const DEFAULT_OPERATOR = "0x07dd528aC097f2Fb18fdC048e8d94376621b68C9";
+
+/** Privacy bridge contract addresses per chain (from redeploy-private-and-bridges.cjs output). */
+const BRIDGE_ADDRESSES = {
+    2632500: [
+        { name: "PrivacyBridgeCotiNative", address: "0x44D864973392064304dD88E2BDef39fF1ab11b7b" },
+        { name: "PrivacyBridgeWETH", address: "0x7286c83300f0C7131b4006f3cf9F8e44BeB45c13" },
+        { name: "PrivacyBridgeWBTC", address: "0xc3B7EdEe4f1c0A0bA1AcD341e4982371eC869862" },
+        { name: "PrivacyBridgeUSDT", address: "0x7685B473DAF1c6DeD815Ca64C6fa18Da2227440D" },
+        { name: "PrivacyBridgeUSDCe", address: "0x29334fC23ffa2c44AF1b372336C2296591Eadd86" },
+        { name: "PrivacyBridgeWADA", address: "0xFa2126C07F517013c8d237cc465342da89B96f92" },
+        { name: "PrivacyBridgegCoti", address: "0xD4e0d9AB16b48c68044cB6aeA3A089380d6D8cD4" },
+    ],
+    7082400: [],
+};
+
+async function main() {
+    const networkName = hre.network.name;
+    const chainId = CHAIN_IDS[networkName];
+    if (!chainId) {
+        throw new Error(`Unsupported network: "${networkName}". Use --network coti-testnet or --network coti-mainnet`);
+    }
+
+    const bridges = BRIDGE_ADDRESSES[chainId];
+    if (!bridges?.length) {
+        throw new Error(
+            `No bridge addresses configured for chainId ${chainId}. Add entries to BRIDGE_ADDRESSES in scripts/add-bridge-operators.cjs`
+        );
+    }
+
+    const operatorAccount = process.env.OPERATOR_ACCOUNT || DEFAULT_OPERATOR;
+    if (!hre.ethers.isAddress(operatorAccount)) {
+        throw new Error(`Invalid OPERATOR_ACCOUNT: ${operatorAccount}`);
+    }
+
+    const [signer] = await hre.ethers.getSigners();
+    console.log("Network:", networkName, `(chainId: ${chainId})`);
+    console.log("Signer:", signer.address);
+    console.log("Operator to add:", operatorAccount);
+    console.log("Bridges:", bridges.length);
+
+    const balance = await hre.ethers.provider.getBalance(signer.address);
+    if (balance === 0n) {
+        throw new Error("Signer has no COTI for gas");
+    }
+
+    for (const bridge of bridges) {
+        process.stdout.write(`  ${bridge.name} (${bridge.address})... `);
+        const contract = await hre.ethers.getContractAt("PrivacyBridge", bridge.address, signer);
+
+        const alreadyOperator = await contract.isOperator(operatorAccount);
+        if (alreadyOperator) {
+            console.log("already operator — skip");
+            continue;
+        }
+
+        const tx = await contract.addOperator(operatorAccount, { gasLimit: 5_000_000 });
+        const receipt = await tx.wait();
+        console.log(`✅ tx ${receipt.hash}`);
+    }
+
+    console.log("\nDone.");
+}
+
+main().catch((e) => {
+    console.error(e);
+    process.exitCode = 1;
+});

package/scripts/deploy-coti-price-consumer-mainnet.cjs

@@ -0,0 +1,49 @@
+/**
+ * Deploy CotiPriceConsumer on COTI Mainnet.
+ *
+ * Run with:
+ *   npx hardhat compile
+ *   npx hardhat run deploy/oracle/deploy-coti-price-consumer-mainnet.cjs --network cotiMainnet
+ */
+const hre = require("hardhat");
+
+// Band Protocol StdReferenceProxy on COTI Mainnet
+const BAND_REF_PROXY = "0x9503d502435f8e228b874Ba0F792301d4401b523";
+
+// Maximum staleness in seconds (1 hour).
+const MAX_STALENESS = 3600;
+
+async function main() {
+    const [deployer] = await hre.ethers.getSigners();
+    console.log("Deploying CotiPriceConsumer with account:", deployer.address);
+    console.log("Network:", hre.network.name);
+
+    const balance = await hre.ethers.provider.getBalance(deployer.address);
+    console.log("Balance:", hre.ethers.formatEther(balance), "COTI");
+
+    if (balance === 0n) {
+        throw new Error("Deployer account has no COTI — fund it first");
+    }
+
+    const Factory = await hre.ethers.getContractFactory("CotiPriceConsumer");
+    const contract = await Factory.deploy(BAND_REF_PROXY, MAX_STALENESS, { gasLimit: 5000000 });
+    await contract.waitForDeployment();
+
+    const address = await contract.getAddress();
+    console.log("✅ CotiPriceConsumer deployed to:", address);
+
+    // Quick sanity read
+    try {
+        const price = await contract.getPrice("COTI");
+        const readable = Number(price) / 1e18;
+        console.log("   COTI/USD price (raw 1e18):", price.toString());
+        console.log("   COTI/USD price (USD):     ", `$${readable}`);
+    } catch (err) {
+        console.log("   ⚠️  Could not read price:", err.reason || err.message);
+    }
+}
+
+main().catch((e) => {
+    console.error(e);
+    process.exitCode = 1;
+});

package/scripts/deployCotiNodeRewards.ts

@@ -0,0 +1,51 @@
+import { ethers } from "hardhat";
+
+async function main() {
+  const [deployer] = await ethers.getSigners();
+  if (!deployer) {
+    throw new Error(
+      "No deployer signer found. Set PRIVATE_KEY in your environment."
+    );
+  }
+
+  console.log("Deploying CotiNodeRewards...");
+  console.log("Deployer:", deployer.address);
+  console.log("Owner:", deployer.address);
+
+  const provider = deployer.provider;
+  if (!provider) {
+    throw new Error("No provider found for deployer signer.");
+  }
+
+  // COTI RPC may not support "pending" block queries.
+  // Use legacy gas price + latest nonce + explicit gas limit to avoid
+  // pending-based fee/nonce/gas estimation lookups.
+  const gasPrice = BigInt(await provider.send("eth_gasPrice", []));
+  const nonce = await provider.getTransactionCount(deployer.address, "latest");
+  const gasLimit = BigInt(process.env.REWARDS_DEPLOY_GAS_LIMIT || "6000000");
+
+  const factory = await ethers.getContractFactory("CotiNodeRewards");
+  const deployTxReq = await factory.getDeployTransaction();
+  if (!deployTxReq.data) {
+    throw new Error("Failed to build deploy transaction data.");
+  }
+
+  const sentTx = await deployer.sendTransaction({
+    data: deployTxReq.data,
+    gasPrice,
+    nonce,
+    gasLimit,
+  });
+  console.log("Deployment tx hash:", sentTx.hash);
+  const receipt = await sentTx.wait();
+  if (!receipt || !receipt.contractAddress) {
+    throw new Error("Deployment transaction mined but no contract address found.");
+  }
+
+  console.log("CotiNodeRewards deployed at:", receipt.contractAddress);
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});

package/scripts/deploySoulboundNodeNFT.ts

@@ -0,0 +1,57 @@
+import { ethers } from "hardhat";
+
+async function main() {
+  const [deployer] = await ethers.getSigners();
+  if (!deployer) {
+    throw new Error(
+      "No deployer signer found. Set PRIVATE_KEY in your environment."
+    );
+  }
+
+  const owner = process.env.NFT_OWNER || deployer.address;
+  const name = process.env.NFT_NAME || "Soulbound Node NFT";
+  const symbol = process.env.NFT_SYMBOL || "SNODE";
+
+  console.log("Deploying SoulboundNodeNFT...");
+  console.log("Deployer:", deployer.address);
+  console.log("Owner:", owner);
+  console.log("Name:", name);
+  console.log("Symbol:", symbol);
+
+  const provider = deployer.provider;
+  if (!provider) {
+    throw new Error("No provider found for deployer signer.");
+  }
+
+  // COTI testnet RPC may not support "pending" block queries.
+  // Use legacy gas price + latest nonce + explicit gas limit to avoid
+  // pending-based fee/nonce/gas estimation lookups.
+  const gasPrice = BigInt(await provider.send("eth_gasPrice", []));
+  const nonce = await provider.getTransactionCount(deployer.address, "latest");
+  const gasLimit = BigInt(process.env.NFT_DEPLOY_GAS_LIMIT || "6000000");
+
+  const factory = await ethers.getContractFactory("SoulboundNodeNFT");
+  const deployTxReq = await factory.getDeployTransaction(name, symbol, owner);
+  if (!deployTxReq.data) {
+    throw new Error("Failed to build deploy transaction data.");
+  }
+
+  const sentTx = await deployer.sendTransaction({
+    data: deployTxReq.data,
+    gasPrice,
+    nonce,
+    gasLimit,
+  });
+  console.log("Deployment tx hash:", sentTx.hash);
+  const receipt = await sentTx.wait();
+  if (!receipt || !receipt.contractAddress) {
+    throw new Error("Deployment transaction mined but no contract address found.");
+  }
+
+  console.log("SoulboundNodeNFT deployed at:", receipt.contractAddress);
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});