@iexec-nox/nox-protocol-contracts 0.1.0-beta.8 → 0.1.0

package/contracts/shared/HandleUtils.sol

@@ -0,0 +1,35 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.27;
+
+import {TEEType} from "./TypeUtils.sol";
+
+library HandleUtils {
+    /// @dev Bit 0 of the attrs byte. When set, the handle is guaranteed unique on-chain.
+    bytes1 internal constant ATTR_IS_UNIQUE_HANDLE = 0x01;
+
+    /**
+     * @notice Checks if a handle is a public handle (isUniqueHandle bit == 0).
+     * A public handle wraps a plaintext value known on-chain, has no ACL,
+     * and is accessible by everyone.
+     * @param handle The handle to check
+     * @return True if the handle is a public handle
+     */
+    function isPublicHandle(bytes32 handle) internal pure returns (bool) {
+        return (handle[6] & ATTR_IS_UNIQUE_HANDLE) == 0;
+    }
+
+    /**
+     * @notice Returns the zero handle for the given TEE type on the current chain.
+     * The zero handle represents the default zero value for a given type and is a public handle.
+     * It follows the standard handle format but with a zeroed pre-handle:
+     *   [0]=version(0x00)  [1-4]=chainId  [5]=teeType  [6]=attrs(0x00)  [7-31]=0x00..00
+     * @param teeType The TEE type to encode
+     * @return The typed null handle
+     */
+    function zeroHandle(TEEType teeType) internal view returns (bytes32) {
+        return
+            // [0]=version is implicitly 0x00
+            (bytes32(bytes4(uint32(block.chainid))) >> (1 * 8)) |
+            (bytes32(bytes1(uint8(teeType))) >> (5 * 8));
+    }
+}

package/contracts/shared/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+-----------
+
+Copyright (c) 2026 iExec
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.

package/contracts/shared/TypeUtils.sol

@@ -1,5 +1,5 @@
-// SPDX-License-Identifier: Apache-2.0
-pragma solidity ^0.8.24;
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.27;
 
 /**
  * @notice Enum values MUST NOT be reordered or removed once deployed.
@@ -113,11 +113,9 @@ enum TEEType {
 }
 
 error NonArithmeticType();
+error UnsupportedArithmeticType();
 
 library TypeUtils {
-    /// @dev Bit 0 of the attrs byte. When set, the handle is guaranteed unique on-chain.
-    bytes1 internal constant ATTR_IS_UNIQ_HANDLE = 0x01;
-
     /**
      * @notice Extracts the TEE type from a handle.
      * The type is stored at byte position 5 in the handle.
@@ -128,25 +126,25 @@ library TypeUtils {
         return TEEType(uint8(handle[5]));
     }
 
-    /**
-     * @notice Checks if a handle is a public handle (isUniqHandle bit == 0).
-     * A public handle wraps a plaintext value known on-chain, has no ACL,
-     * and is accessible by everyone.
-     * @param handle The handle to check
-     * @return True if the handle is a public handle
-     */
-    function isPublicHandle(bytes32 handle) internal pure returns (bool) {
-        return (handle[6] & ATTR_IS_UNIQ_HANDLE) == 0;
-    }
-
     /**
      * @notice Validates that a TEE type is supported for arithmetic operations.
-     * Only unsigned integers (Uint8-Uint256) and signed integers (Int8-Int256) are supported.
-     * Reverts with NonArithmeticType if the type is not arithmetic.
+     * Only the following arithmetic types are supported:
+     *  - uint16
+     *  - uint256
+     *  - int16
+     *  - int256
      * @param teeType The TEE type to validate
+     * @dev Reverts with NonArithmeticType when the type is not an arithmetic type.
+     * @dev Reverts with UnsupportedArithmeticType when the type is not supported.
      */
     function validateArithmeticType(TEEType teeType) internal pure {
         uint8 t = uint8(teeType);
         require(t >= uint8(TEEType.Uint8) && t <= uint8(TEEType.Int256), NonArithmeticType());
+        bool supportedType =
+            teeType == TEEType.Uint16 ||
+                teeType == TEEType.Uint256 ||
+                teeType == TEEType.Int16 ||
+                teeType == TEEType.Int256;
+        require(supportedType, UnsupportedArithmeticType());
     }
 }

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@iexec-nox/nox-protocol-contracts",
-  "version": "0.1.0-beta.8",
+  "version": "0.1.0",
   "description": "Nox protocol smart contracts",
   "keywords": [
     "Nox",
     "Confidential DeFi",
     "cDeFi"
   ],
-  "license": "Apache-2.0",
-  "packageManager": "pnpm@10.28.2",
+  "license": "MIT",
+  "packageManager": "pnpm@10.33.0",
   "type": "module",
   "files": [
     "/contracts/interfaces/",
@@ -20,13 +20,14 @@
     "clean": "pnpm hardhat clean",
     "build": "pnpm hardhat build",
     "test": "pnpm hardhat test",
+    "test:gas": "pnpm hardhat test solidity --gas-stats",
     "coverage": "pnpm hardhat test solidity --coverage",
     "deploy": "pnpm hardhat run scripts/deploy.ts",
     "deploy:production": "pnpm hardhat run scripts/deploy.ts --build-profile production",
     "set-gateway": "pnpm hardhat run scripts/set-gateway.ts",
     "set-kms-public-key": "pnpm hardhat run scripts/set-kms-public-key.ts",
-    "upgrade": "pnpm hardhat run scripts/upgrade.ts",
-    "upgrade:production": "pnpm hardhat run scripts/upgrade.ts --build-profile production",
+    "upgrade": "bash scripts/upgrade.sh",
+    "upgrade:production": "bash scripts/upgrade.sh --build-profile production",
     "verify": "pnpm hardhat ignition verify",
     "format": "pnpm prettier --write .",
     "format:check": "pnpm prettier --check ."
@@ -42,17 +43,20 @@
     "encrypted-types": "^0.0.4"
   },
   "devDependencies": {
-    "@nomicfoundation/hardhat-ignition": "^3.0.9",
-    "@nomicfoundation/hardhat-toolbox-viem": "^5.0.2",
-    "@types/node": "^22.19.13",
-    "forge-std": "github:foundry-rs/forge-std#v1.9.4",
-    "hardhat": "^3.1.11",
+    "@nomicfoundation/hardhat-ethers": "^4.0.6",
+    "@nomicfoundation/hardhat-ignition": "^3.1.0",
+    "@nomicfoundation/hardhat-toolbox-viem": "^5.0.3",
+    "@openzeppelin/hardhat-upgrades": "4.0.0-alpha.0",
+    "@types/node": "^25.5.0",
+    "ethers": "^6.16.0",
+    "forge-std": "github:foundry-rs/forge-std#v1.15.0",
+    "hardhat": "^3.2.0",
     "husky": "^9.1.7",
-    "lint-staged": "^16.3.1",
+    "lint-staged": "^16.4.0",
     "prettier": "^3.8.1",
-    "prettier-plugin-solidity": "^2.2.1",
-    "typescript": "^5.9.3",
-    "viem": "^2.46.3"
+    "prettier-plugin-solidity": "^2.3.1",
+    "typescript": "^6.0.2",
+    "viem": "^2.47.6"
   },
   "homepage": "https://github.com/iExec-Nox/nox-protocol-contracts#readme",
   "repository": {