@enclave-e3/contracts 0.1.4 → 0.1.6

package/dist/scripts/deployAndSave/poseidonT3.js

@@ -0,0 +1,41 @@
+import poseidon from "poseidon-solidity";
+import { storeDeploymentArgs } from "../utils";
+/**
+ * Deploy and save PoseidonT3 contract behind a proxy
+ * @param param0
+ */
+export const deployAndSavePoseidonT3 = async ({ hre, }) => {
+    const { ethers } = await hre.network.connect();
+    const chain = hre.globalOptions.network;
+    // First check if the proxy exists
+    if ((await ethers.provider.getCode(poseidon.proxy.address)) === "0x") {
+        // probably on the hardhat network
+        // fund the keyless account
+        const [sender] = await ethers.getSigners();
+        let tx = await sender.sendTransaction({
+            to: poseidon.proxy.from,
+            value: poseidon.proxy.gas,
+        });
+        await tx.wait();
+        // then send the presigned transaction deploying the proxy
+        tx = await ethers.provider.broadcastTransaction(poseidon.proxy.tx);
+        await tx.wait();
+        console.log(`Proxy deployed to: ${poseidon.proxy.address}`);
+    }
+    // Then deploy the hasher, if needed
+    if ((await ethers.provider.getCode(poseidon.PoseidonT3.address)) === "0x") {
+        const [sender] = await ethers.getSigners();
+        let tx = await sender.sendTransaction({
+            to: poseidon.proxy.address,
+            data: poseidon.PoseidonT3.data,
+        });
+        await tx.wait();
+        console.log(`PoseidonT3 deployed to: ${poseidon.PoseidonT3.address}`);
+    }
+    const blockNumber = await ethers.provider.getBlockNumber();
+    storeDeploymentArgs({
+        blockNumber,
+        address: poseidon.PoseidonT3.address,
+    }, "PoseidonT3", chain);
+    return poseidon.PoseidonT3.address;
+};

package/dist/scripts/deployAndSave/slashingManager.d.ts

@@ -0,0 +1,19 @@
+import type { HardhatRuntimeEnvironment } from "hardhat/types/hre";
+import { SlashingManager } from "../../types";
+/**
+ * The arguments for the deployAndSaveSlashingManager function
+ */
+export interface SlashingManagerArgs {
+    admin?: string;
+    bondingRegistry?: string;
+    hre: HardhatRuntimeEnvironment;
+}
+/**
+ * Deploys the SlashingManager contract and saves the deployment arguments
+ * @param param0 - The deployment arguments
+ * @returns The deployed SlashingManager contract
+ */
+export declare const deployAndSaveSlashingManager: ({ admin, bondingRegistry, hre, }: SlashingManagerArgs) => Promise<{
+    slashingManager: SlashingManager;
+}>;
+//# sourceMappingURL=slashingManager.d.ts.map

package/dist/scripts/deployAndSave/slashingManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slashingManager.d.ts","sourceRoot":"","sources":["../../../scripts/deployAndSave/slashingManager.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EACL,eAAe,EAEhB,MAAM,aAAa,CAAC;AAGrB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,yBAAyB,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,GAAU,kCAIhD,mBAAmB,KAAG,OAAO,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;CAClC,CAyDA,CAAC"}

package/dist/scripts/deployAndSave/slashingManager.js

@@ -0,0 +1,38 @@
+import { SlashingManager__factory as SlashingManagerFactory, } from "../../types";
+import { readDeploymentArgs, storeDeploymentArgs } from "../utils";
+/**
+ * Deploys the SlashingManager contract and saves the deployment arguments
+ * @param param0 - The deployment arguments
+ * @returns The deployed SlashingManager contract
+ */
+export const deployAndSaveSlashingManager = async ({ admin, bondingRegistry, hre, }) => {
+    const { ethers } = await hre.network.connect();
+    const [signer] = await ethers.getSigners();
+    const chain = (await signer.provider?.getNetwork())?.name ?? "localhost";
+    const preDeployedArgs = readDeploymentArgs("SlashingManager", chain);
+    if (!admin ||
+        !bondingRegistry ||
+        (preDeployedArgs?.constructorArgs?.admin === admin &&
+            preDeployedArgs?.constructorArgs?.bondingRegistry === bondingRegistry)) {
+        if (!preDeployedArgs?.address) {
+            throw new Error("SlashingManager address not found, it must be deployed first");
+        }
+        const slashingManagerContract = SlashingManagerFactory.connect(preDeployedArgs.address, signer);
+        return { slashingManager: slashingManagerContract };
+    }
+    const slashingManagerFactory = await ethers.getContractFactory("SlashingManager");
+    const slashingManager = await slashingManagerFactory.deploy(admin, bondingRegistry);
+    await slashingManager.waitForDeployment();
+    const blockNumber = await ethers.provider.getBlockNumber();
+    const slashingManagerAddress = await slashingManager.getAddress();
+    storeDeploymentArgs({
+        constructorArgs: {
+            admin,
+            bondingRegistry,
+        },
+        blockNumber,
+        address: slashingManagerAddress,
+    }, "SlashingManager", chain);
+    const slashingManagerContract = SlashingManagerFactory.connect(slashingManagerAddress, signer);
+    return { slashingManager: slashingManagerContract };
+};

package/dist/scripts/deployEnclave.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployEnclave.d.ts","sourceRoot":"","sources":["../../scripts/deployEnclave.ts"],"names":[],"mappings":"AAYA;;GAEG;AACH,eAAO,MAAM,aAAa,GAAU,YAAY,OAAO,kBA6FtD,CAAC"}
+{"version":3,"file":"deployEnclave.d.ts","sourceRoot":"","sources":["../../scripts/deployEnclave.ts"],"names":[],"mappings":"AAkBA;;GAEG;AACH,eAAO,MAAM,aAAa,GAAU,YAAY,OAAO,kBAyLtD,CAAC"}

package/dist/scripts/deployEnclave.js

@@ -4,15 +4,24 @@
 // without even the implied warranty of MERCHANTABILITY
 // or FITNESS FOR A PARTICULAR PURPOSE.
 import hre from "hardhat";
+import { autoCleanForLocalhost } from "./cleanIgnitionState";
+import { deployAndSaveBondingRegistry } from "./deployAndSave/bondingRegistry";
 import { deployAndSaveCiphernodeRegistryOwnable } from "./deployAndSave/ciphernodeRegistryOwnable";
 import { deployAndSaveEnclave } from "./deployAndSave/enclave";
-import { deployAndSaveNaiveRegistryFilter } from "./deployAndSave/naiveRegistryFilter";
+import { deployAndSaveEnclaveTicketToken } from "./deployAndSave/enclaveTicketToken";
+import { deployAndSaveEnclaveToken } from "./deployAndSave/enclaveToken";
+import { deployAndSaveMockStableToken } from "./deployAndSave/mockStableToken";
+import { deployAndSavePoseidonT3 } from "./deployAndSave/poseidonT3";
+import { deployAndSaveSlashingManager } from "./deployAndSave/slashingManager";
 import { deployMocks } from "./deployMocks";
 /**
  * Deploys the Enclave contracts
  */
 export const deployEnclave = async (withMocks) => {
     const { ethers } = await hre.network.connect();
+    // Auto-clean state for local networks to prevent stale state issues
+    const networkName = hre.globalOptions.network ?? "localhost";
+    await autoCleanForLocalhost(networkName);
     const [owner] = await ethers.getSigners();
     const ownerAddress = await owner.getAddress();
     const polynomial_degree = ethers.toBigInt(2048);
@@ -20,41 +29,105 @@ export const deployEnclave = async (withMocks) => {
     const moduli = [ethers.toBigInt("18014398492704769")];
     const encoded = ethers.AbiCoder.defaultAbiCoder().encode(["uint256", "uint256", "uint256[]"], [polynomial_degree, plaintext_modulus, moduli]);
     const THIRTY_DAYS_IN_SECONDS = 60 * 60 * 24 * 30;
+    const SORTITION_SUBMISSION_WINDOW = 10;
     const addressOne = "0x0000000000000000000000000000000000000001";
-    const { enclave } = await deployAndSaveEnclave({
-        params: encoded,
+    const poseidonT3 = await deployAndSavePoseidonT3({ hre });
+    const shouldDeployMocks = process.env.DEPLOY_MOCKS === "true" || withMocks;
+    let feeTokenAddress;
+    if (shouldDeployMocks) {
+        console.log("Deploying mock Fee token...");
+        const { mockStableToken } = await deployAndSaveMockStableToken({
+            initialSupply: 1000000,
+            hre,
+        });
+        feeTokenAddress = await mockStableToken.getAddress();
+        console.log("MockFeeToken deployed to:", feeTokenAddress);
+    }
+    else {
+        throw new Error("Fee token address must be provided for production deployment");
+    }
+    console.log("Deploying ENCL token...");
+    const { enclaveToken } = await deployAndSaveEnclaveToken({
         owner: ownerAddress,
-        maxDuration: THIRTY_DAYS_IN_SECONDS.toString(),
+        hre,
+    });
+    const enclaveTokenAddress = await enclaveToken.getAddress();
+    console.log("EnclaveToken deployed to:", enclaveTokenAddress);
+    console.log("Deploying EnclaveTicketToken...");
+    const { enclaveTicketToken } = await deployAndSaveEnclaveTicketToken({
+        baseToken: feeTokenAddress,
         registry: addressOne,
+        owner: ownerAddress,
         hre,
     });
-    const enclaveAddress = await enclave.getAddress();
-    console.log("Enclave deployed to: ", enclaveAddress);
+    const enclaveTicketTokenAddress = await enclaveTicketToken.getAddress();
+    console.log("EnclaveTicketToken deployed to:", enclaveTicketTokenAddress);
+    console.log("Deploying SlashingManager...");
+    const { slashingManager } = await deployAndSaveSlashingManager({
+        admin: ownerAddress,
+        bondingRegistry: addressOne,
+        hre,
+    });
+    const slashingManagerAddress = await slashingManager.getAddress();
+    console.log("SlashingManager deployed to:", slashingManagerAddress);
+    console.log("Deploying BondingRegistry...");
+    const { bondingRegistry } = await deployAndSaveBondingRegistry({
+        owner: ownerAddress,
+        ticketToken: enclaveTicketTokenAddress,
+        licenseToken: enclaveTokenAddress,
+        registry: addressOne,
+        slashedFundsTreasury: ownerAddress,
+        ticketPrice: ethers.parseUnits("10", 6).toString(),
+        licenseRequiredBond: ethers.parseEther("100").toString(),
+        minTicketBalance: 1,
+        exitDelay: 7 * 24 * 60 * 60,
+        hre,
+    });
+    const bondingRegistryAddress = await bondingRegistry.getAddress();
+    console.log("BondingRegistry deployed to:", bondingRegistryAddress);
+    console.log("Deploying CiphernodeRegistry...");
     const { ciphernodeRegistry } = await deployAndSaveCiphernodeRegistryOwnable({
-        enclaveAddress: enclaveAddress,
+        poseidonT3Address: poseidonT3,
+        enclaveAddress: addressOne,
         owner: ownerAddress,
+        submissionWindow: SORTITION_SUBMISSION_WINDOW,
         hre,
     });
     const ciphernodeRegistryAddress = await ciphernodeRegistry.getAddress();
-    console.log("CiphernodeRegistry deployed to: ", ciphernodeRegistryAddress);
-    const { naiveRegistryFilter } = await deployAndSaveNaiveRegistryFilter({
-        ciphernodeRegistryAddress: ciphernodeRegistryAddress,
+    console.log("CiphernodeRegistry deployed to:", ciphernodeRegistryAddress);
+    console.log("Deploying Enclave...");
+    const { enclave } = await deployAndSaveEnclave({
+        params: [encoded],
         owner: ownerAddress,
+        maxDuration: THIRTY_DAYS_IN_SECONDS.toString(),
+        registry: ciphernodeRegistryAddress,
+        bondingRegistry: bondingRegistryAddress,
+        feeToken: feeTokenAddress,
         hre,
     });
-    const naiveRegistryFilterAddress = await naiveRegistryFilter.getAddress();
-    console.log("NaiveRegistryFilter deployed to: ", naiveRegistryFilterAddress);
-    const registryAddress = await enclave.ciphernodeRegistry();
-    if (registryAddress === ciphernodeRegistryAddress) {
-        console.log(`Enclave contract already has registry`);
-    }
-    else {
-        const tx = await enclave.setCiphernodeRegistry(ciphernodeRegistryAddress);
-        await tx.wait();
-        console.log(`Enclave contract updated with registry`);
-    }
-    // Deploy mocks only if specified
-    const shouldDeployMocks = process.env.DEPLOY_MOCKS === "true" || withMocks;
+    const enclaveAddress = await enclave.getAddress();
+    console.log("Enclave deployed to:", enclaveAddress);
+    ///////////////////////////////////////////
+    // Configure cross-contract dependencies
+    ///////////////////////////////////////////
+    console.log("Configuring cross-contract dependencies...");
+    console.log("Setting Enclave address in CiphernodeRegistry...");
+    await ciphernodeRegistry.setEnclave(enclaveAddress);
+    console.log("Setting BondingRegistry address in CiphernodeRegistry...");
+    await ciphernodeRegistry.setBondingRegistry(bondingRegistryAddress);
+    console.log("Setting Submission Window in CiphernodeRegistry...");
+    console.log("SORTITION_SUBMISSION_WINDOW:", SORTITION_SUBMISSION_WINDOW);
+    await ciphernodeRegistry.setSortitionSubmissionWindow(SORTITION_SUBMISSION_WINDOW);
+    console.log("Setting BondingRegistry address in EnclaveTicketToken...");
+    await enclaveTicketToken.setRegistry(bondingRegistryAddress);
+    console.log("Setting CiphernodeRegistry address in BondingRegistry...");
+    await bondingRegistry.setRegistry(ciphernodeRegistryAddress);
+    console.log("Setting BondingRegistry address in SlashingManager...");
+    await slashingManager.setBondingRegistry(bondingRegistryAddress);
+    console.log("Setting SlashingManager address in BondingRegistry...");
+    await bondingRegistry.setSlashingManager(slashingManagerAddress);
+    console.log("Setting Enclave as reward distributor in BondingRegistry...");
+    await bondingRegistry.setRewardDistributor(enclaveAddress);
     if (shouldDeployMocks) {
         const { decryptionVerifierAddress, e3ProgramAddress } = await deployMocks();
         const encryptionSchemeId = ethers.keccak256(ethers.toUtf8Bytes("fhe.rs:BFV"));
@@ -72,4 +145,17 @@ export const deployEnclave = async (withMocks) => {
         await tx.wait();
         console.log(`Successfully enabled E3 Program in Enclave contract`);
     }
+    console.log(`
+    ============================================
+    Deployment Complete!
+    ============================================
+    MockFeeToken: ${feeTokenAddress}
+    EnclaveToken (ENCL): ${enclaveTokenAddress}
+    EnclaveTicketToken: ${enclaveTicketTokenAddress}
+    SlashingManager: ${slashingManagerAddress}
+    BondingRegistry: ${bondingRegistryAddress}
+    CiphernodeRegistry: ${ciphernodeRegistryAddress}
+    Enclave: ${enclaveAddress}
+    ============================================
+  `);
 };

package/dist/scripts/deployMocks.d.ts

@@ -1,7 +1,6 @@
 export interface MockDeployments {
     computeProviderAddress: string;
     decryptionVerifierAddress: string;
-    inputValidatorAddress: string;
     e3ProgramAddress: string;
 }
 /**

package/dist/scripts/deployMocks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployMocks.d.ts","sourceRoot":"","sources":["../../scripts/deployMocks.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,eAAe;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yBAAyB,EAAE,MAAM,CAAC;IAClC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAa,OAAO,CAAC,eAAe,CAmC3D,CAAC"}
+{"version":3,"file":"deployMocks.d.ts","sourceRoot":"","sources":["../../scripts/deployMocks.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,eAAe;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAa,OAAO,CAAC,eAAe,CA+B3D,CAAC"}

package/dist/scripts/deployMocks.js

@@ -6,7 +6,6 @@
 import hre from "hardhat";
 import { deployAndSaveMockComputeProvider } from "./deployAndSave/mockComputeProvider";
 import { deployAndSaveMockDecryptionVerifier } from "./deployAndSave/mockDecryptionVerifier";
-import { deployAndSaveMockInputValidator } from "./deployAndSave/mockInputValidator";
 import { deployAndSaveMockProgram } from "./deployAndSave/mockProgram";
 /**
  * Deploys the mock contracts and returns the addresses.
@@ -14,14 +13,14 @@ import { deployAndSaveMockProgram } from "./deployAndSave/mockProgram";
  * @returns The addresses of the mock contracts.
  */
 export const deployMocks = async () => {
+    console.log("Deploying Compute Provider");
     const { computeProvider } = await deployAndSaveMockComputeProvider(hre);
     const computeProviderAddress = await computeProvider.getAddress();
+    console.log("Deploying Decryption Verifier");
     const { decryptionVerifier } = await deployAndSaveMockDecryptionVerifier(hre);
     const decryptionVerifierAddress = await decryptionVerifier.getAddress();
-    const { inputValidator } = await deployAndSaveMockInputValidator(hre);
-    const inputValidatorAddress = await inputValidator.getAddress();
+    console.log("Deploying E3 Program");
     const { e3Program } = await deployAndSaveMockProgram({
-        mockInputValidator: inputValidatorAddress,
         hre,
     });
     const e3ProgramAddress = await e3Program.getAddress();
@@ -30,13 +29,11 @@ export const deployMocks = async () => {
         ----------------------------------------------------------------------
         MockComputeProvider:${computeProviderAddress}
         MockDecryptionVerifier:${decryptionVerifierAddress}
-        MockInputValidator:${inputValidatorAddress}
         MockE3Program:${e3ProgramAddress}
         `);
     return {
         computeProviderAddress,
         decryptionVerifierAddress,
-        inputValidatorAddress,
         e3ProgramAddress,
     };
 };

package/dist/scripts/index.d.ts

@@ -1,11 +1,16 @@
 export * from "./deployEnclave";
 export * from "./deployMocks";
 export * from "./utils";
+export * from "./cleanIgnitionState";
+export * from "./deployAndSave/bondingRegistry";
 export * from "./deployAndSave/ciphernodeRegistryOwnable";
 export * from "./deployAndSave/enclave";
-export * from "./deployAndSave/naiveRegistryFilter";
+export * from "./deployAndSave/enclaveTicketToken";
+export * from "./deployAndSave/enclaveToken";
+export * from "./deployAndSave/mockStableToken";
+export * from "./deployAndSave/slashingManager";
 export * from "./deployAndSave/mockComputeProvider";
 export * from "./deployAndSave/mockDecryptionVerifier";
-export * from "./deployAndSave/mockInputValidator";
 export * from "./deployAndSave/mockProgram";
+export * from "./verify";
 //# sourceMappingURL=index.d.ts.map

package/dist/scripts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../scripts/index.ts"],"names":[],"mappings":"AAMA,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yBAAyB,CAAC;AACxC,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../scripts/index.ts"],"names":[],"mappings":"AAMA,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,UAAU,CAAC"}

package/dist/scripts/index.js

@@ -6,10 +6,15 @@
 export * from "./deployEnclave";
 export * from "./deployMocks";
 export * from "./utils";
+export * from "./cleanIgnitionState";
+export * from "./deployAndSave/bondingRegistry";
 export * from "./deployAndSave/ciphernodeRegistryOwnable";
 export * from "./deployAndSave/enclave";
-export * from "./deployAndSave/naiveRegistryFilter";
+export * from "./deployAndSave/enclaveTicketToken";
+export * from "./deployAndSave/enclaveToken";
+export * from "./deployAndSave/mockStableToken";
+export * from "./deployAndSave/slashingManager";
 export * from "./deployAndSave/mockComputeProvider";
 export * from "./deployAndSave/mockDecryptionVerifier";
-export * from "./deployAndSave/mockInputValidator";
 export * from "./deployAndSave/mockProgram";
+export * from "./verify";

package/dist/scripts/proxy.d.ts

@@ -0,0 +1,22 @@
+import { type Provider } from "ethers";
+/**
+ * ERC-1967 admin slot: keccak256("eip1967.proxy.admin") - 1
+ * This is where TransparentUpgradeableProxy stores the ProxyAdmin address
+ * https://docs.openzeppelin.com/contracts/5.x/api/proxy#ERC1967Utils-getAdmin--
+ */
+export declare const ERC1967_ADMIN_SLOT = "0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103";
+/**
+ * Gets the ProxyAdmin address from a TransparentUpgradeableProxy
+ * @param provider The ethers provider
+ * @param proxyAddress The address of the proxy contract
+ * @returns The address of the auto-deployed ProxyAdmin
+ */
+export declare function getProxyAdmin(provider: Provider, proxyAddress: string): Promise<string>;
+/**
+ * Verifies that the ProxyAdmin is owned by the expected owner
+ * @param proxyAdmin The ProxyAdmin contract instance
+ * @param expectedOwner The expected owner address
+ * @throws Error if owner doesn't match
+ */
+export declare function verifyProxyAdminOwner(proxyAdmin: any, expectedOwner: string): Promise<void>;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/scripts/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../scripts/proxy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,QAAQ,EAAc,MAAM,QAAQ,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,uEACuC,CAAC;AAEvE;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,GAAG,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/scripts/proxy.js

@@ -0,0 +1,36 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import { getAddress } from "ethers";
+/**
+ * ERC-1967 admin slot: keccak256("eip1967.proxy.admin") - 1
+ * This is where TransparentUpgradeableProxy stores the ProxyAdmin address
+ * https://docs.openzeppelin.com/contracts/5.x/api/proxy#ERC1967Utils-getAdmin--
+ */
+export const ERC1967_ADMIN_SLOT = "0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103";
+/**
+ * Gets the ProxyAdmin address from a TransparentUpgradeableProxy
+ * @param provider The ethers provider
+ * @param proxyAddress The address of the proxy contract
+ * @returns The address of the auto-deployed ProxyAdmin
+ */
+export async function getProxyAdmin(provider, proxyAddress) {
+    const adminSlotValue = await provider.getStorage(proxyAddress, ERC1967_ADMIN_SLOT);
+    // Extract the address from the storage slot (last 20 bytes)
+    const addressHex = "0x" + adminSlotValue.slice(-40);
+    return getAddress(addressHex);
+}
+/**
+ * Verifies that the ProxyAdmin is owned by the expected owner
+ * @param proxyAdmin The ProxyAdmin contract instance
+ * @param expectedOwner The expected owner address
+ * @throws Error if owner doesn't match
+ */
+export async function verifyProxyAdminOwner(proxyAdmin, expectedOwner) {
+    const actualOwner = await proxyAdmin.owner();
+    if (actualOwner.toLowerCase() !== expectedOwner.toLowerCase()) {
+        throw new Error(`ProxyAdmin owner mismatch. Expected ${expectedOwner}, got ${actualOwner}`);
+    }
+}

package/dist/scripts/runVerification.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runVerification.d.ts.map

package/dist/scripts/runVerification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runVerification.d.ts","sourceRoot":"","sources":["../../scripts/runVerification.ts"],"names":[],"mappings":""}

package/dist/scripts/runVerification.js

@@ -0,0 +1,16 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import hre from "hardhat";
+import { verifyContracts } from "./verify";
+async function main() {
+    const { ethers } = await hre.network.connect();
+    const [signer] = await ethers.getSigners();
+    const chain = (await signer.provider?.getNetwork())?.name ?? "localhost";
+    verifyContracts(chain);
+}
+main().catch((error) => {
+    console.error(error);
+});

package/dist/scripts/upgrade/bondingRegistry.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Upgrades the BondingRegistry contract implementation and saves the deployment arguments
+ * This keeps the same proxy address, only updates the implementation
+ */
+export declare const upgradeBondingRegistry: () => Promise<void>;
+//# sourceMappingURL=bondingRegistry.d.ts.map

package/dist/scripts/upgrade/bondingRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bondingRegistry.d.ts","sourceRoot":"","sources":["../../../scripts/upgrade/bondingRegistry.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,eAAO,MAAM,sBAAsB,qBAiDlC,CAAC"}

package/dist/scripts/upgrade/bondingRegistry.js

@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import hre from "hardhat";
+import { upgradeAndSaveBondingRegistry } from "../deployAndSave/bondingRegistry";
+import { readDeploymentArgs } from "../utils";
+/**
+ * Upgrades the BondingRegistry contract implementation and saves the deployment arguments
+ * This keeps the same proxy address, only updates the implementation
+ */
+export const upgradeBondingRegistry = async () => {
+    const { ethers } = await hre.network.connect();
+    const [signer] = await ethers.getSigners();
+    const signerAddress = await signer.getAddress();
+    const chain = (await signer.provider?.getNetwork())?.name ?? "localhost";
+    console.log("Signer:", signerAddress);
+    const preDeployedArgs = readDeploymentArgs("BondingRegistry", chain);
+    if (!preDeployedArgs?.address) {
+        throw new Error("BondingRegistry proxy not found. Deploy first before upgrading.");
+    }
+    if (!preDeployedArgs?.proxyRecords?.implementationAddress) {
+        throw new Error("Existing deployment is not proxy-based. Cannot upgrade non-proxy deployments.");
+    }
+    console.log("BondingRegistry Proxy Address (from deployments):", preDeployedArgs.address);
+    const code = await ethers.provider.getCode(preDeployedArgs.address);
+    if (code === "0x") {
+        throw new Error(`No contract found at proxy address ${preDeployedArgs.address}`);
+    }
+    console.log("Proxy contract exists on-chain");
+    const { bondingRegistry, implementationAddress } = await upgradeAndSaveBondingRegistry({
+        ownerAddress: signerAddress,
+        hre,
+    });
+    const bondingRegistryAddress = await bondingRegistry.getAddress();
+    console.log(`
+    ============================================
+    Upgrade Complete!
+    ============================================
+    Proxy Address: ${bondingRegistryAddress}
+    New Implementation: ${implementationAddress}
+    ============================================
+  `);
+};
+upgradeBondingRegistry().catch((error) => {
+    console.error(error);
+    process.exit(1);
+});

package/dist/scripts/upgrade/ciphernodeRegistryOwnable.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Upgrades the CiphernodeRegistryOwnable contract implementation and saves the deployment arguments
+ * This keeps the same proxy address, only updates the implementation
+ */
+export declare const upgradeCiphernodeRegistryOwnable: () => Promise<void>;
+//# sourceMappingURL=ciphernodeRegistryOwnable.d.ts.map

package/dist/scripts/upgrade/ciphernodeRegistryOwnable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciphernodeRegistryOwnable.d.ts","sourceRoot":"","sources":["../../../scripts/upgrade/ciphernodeRegistryOwnable.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,eAAO,MAAM,gCAAgC,qBAsD5C,CAAC"}

package/dist/scripts/upgrade/ciphernodeRegistryOwnable.js

@@ -0,0 +1,52 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import hre from "hardhat";
+import { upgradeAndSaveCiphernodeRegistryOwnable } from "../deployAndSave/ciphernodeRegistryOwnable";
+import { deployAndSavePoseidonT3 } from "../deployAndSave/poseidonT3";
+import { readDeploymentArgs } from "../utils";
+/**
+ * Upgrades the CiphernodeRegistryOwnable contract implementation and saves the deployment arguments
+ * This keeps the same proxy address, only updates the implementation
+ */
+export const upgradeCiphernodeRegistryOwnable = async () => {
+    const { ethers } = await hre.network.connect();
+    const [signer] = await ethers.getSigners();
+    const signerAddress = await signer.getAddress();
+    const chain = (await signer.provider?.getNetwork())?.name ?? "localhost";
+    console.log("Signer:", signerAddress);
+    const poseidonT3 = await deployAndSavePoseidonT3({ hre });
+    const preDeployedArgs = readDeploymentArgs("CiphernodeRegistryOwnable", chain);
+    if (!preDeployedArgs?.address) {
+        throw new Error("CiphernodeRegistryOwnable proxy not found. Deploy first before upgrading.");
+    }
+    if (!preDeployedArgs?.proxyRecords?.implementationAddress) {
+        throw new Error("Existing deployment is not proxy-based. Cannot upgrade non-proxy deployments.");
+    }
+    console.log("CiphernodeRegistryOwnable Proxy Address (from deployments):", preDeployedArgs.address);
+    const code = await ethers.provider.getCode(preDeployedArgs.address);
+    if (code === "0x") {
+        throw new Error(`No contract found at proxy address ${preDeployedArgs.address}`);
+    }
+    console.log("Proxy contract exists on-chain");
+    const { ciphernodeRegistry, implementationAddress } = await upgradeAndSaveCiphernodeRegistryOwnable({
+        poseidonT3Address: poseidonT3,
+        ownerAddress: signerAddress,
+        hre,
+    });
+    const ciphernodeRegistryAddress = await ciphernodeRegistry.getAddress();
+    console.log(`
+    ============================================
+    Upgrade Complete!
+    ============================================
+    Proxy Address: ${ciphernodeRegistryAddress}
+    New Implementation: ${implementationAddress}
+    ============================================
+  `);
+};
+upgradeCiphernodeRegistryOwnable().catch((error) => {
+    console.error(error);
+    process.exit(1);
+});

package/dist/scripts/upgrade/enclave.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Upgrades the Enclave contract implementation and saves the deployment arguments
+ * This keeps the same proxy address, only updates the implementation
+ */
+export declare const upgradeEnclave: () => Promise<void>;
+//# sourceMappingURL=enclave.d.ts.map

package/dist/scripts/upgrade/enclave.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../../../scripts/upgrade/enclave.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,eAAO,MAAM,cAAc,qBA8C1B,CAAC"}