v0.2.0

.envrc

@@ -1,2 +1 @@
-use flake 'github:DavidM-D/workspaces?dir=rust'
 use flake .

.github/workflows/deploy-multichain-dev-contract.yml

@@ -0,0 +1,34 @@
+name: Deploy Dev Smart Contract
+on:
+  pull_request:
+    types: [closed]
+    branches:
+      - develop
+
+jobs:
+  deploy-contract:
+    if: github.event.pull_request.merged == true
+    runs-on: ubuntu-latest
+    steps:
+      - name: add JSON contract
+        run: mkdir -p ~/.near-credentials/testnet && echo '${{ secrets.DEV_CONTRACT_JSON }}' > ~/.near-credentials/testnet/v5.multichain-mpc-dev.testnet.json
+
+      - uses: actions/checkout@v4
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 'latest'
+
+      - name: Install near-cli
+        run: 'npm install -g near-cli'
+
+      - name: Install Rust
+        run: "curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y"
+
+      - name: debug
+        run: cat ~/.near-credentials/testnet/v5.multichain-mpc-dev.testnet.json
+
+      - name: Cargo Build
+        run: |
+          source $HOME/.cargo/env && cd ./contract ; rustup target add wasm32-unknown-unknown && cargo build --target wasm32-unknown-unknown --release && \
+          cd .. && (yes || true) | near deploy v5.multichain-mpc-dev.testnet target/wasm32-unknown-unknown/release/mpc_contract.wasm

.github/workflows/integrations.yml

@@ -67,7 +67,7 @@ jobs:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Compile Contract
-        run: cargo build -p mpc-contract --target wasm32-unknown-unknown --release
+        run: cargo build -p mpc-contract --target wasm32-unknown-unknown --release --target-dir target/seperate_wasm
 
       - name: Test
         run: cargo test -p mpc-recovery-integration-tests mpc --jobs 1 -- --test-threads 1

.github/workflows/multichain-contract.yml

@@ -0,0 +1,40 @@
+name: Multichain Contract
+
+on:
+  push:
+    branches:
+      - develop
+  pull_request:
+    paths:
+      - contract/**
+
+env:
+  RUSTFLAGS: -D warnings
+jobs:
+  test:
+    name: Test
+    strategy:
+      matrix:
+        os: [ubuntu-22.04-4core]
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Install stable toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          profile: minimal
+          toolchain: stable
+          target: wasm32-unknown-unknown
+
+      - uses: Swatinem/rust-cache@v1
+
+      - name: Compile Contract
+        run: cargo build -p mpc-contract --target wasm32-unknown-unknown --release --target-dir target/seperate_wasm
+
+      - name: Test Contract
+        run: cd contract && cargo test --target x86_64-unknown-linux-gnu --release
+        env:
+          RUST_LOG: INFO
+          RUST_BACKTRACE: 1

.github/workflows/multichain-dev.yml

@@ -0,0 +1,59 @@
+name: Deploy Multichain Dev.
+on:
+  pull_request:
+    types: [closed]
+    branches:
+      - develop
+
+env:
+  IMAGE: "us-east1-docker.pkg.dev/pagoda-discovery-platform-dev/multichain-public/multichain-dev"
+  TAG: ${{ github.sha }}
+
+jobs:
+  build-mpc-recovery:
+    if: github.event.pull_request.merged == true
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        name: "Checkout mpc-recovery"
+
+      - name: Login to GCP Artifact Registry
+        run: echo "$GOOGLE_CREDENTIALS" | docker login -u _json_key --password-stdin https://us-east1-docker.pkg.dev
+        env:
+          GOOGLE_CREDENTIALS: ${{ secrets.GCP_CREDENTIALS_DEV }}
+
+      - name: Build Docker image and push to Google Artifact Registry
+        id: docker-push-tagged
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          file: ./Dockerfile.multichain
+          tags: "${{ env.IMAGE }}:${{ env.TAG }}"
+
+  deploy:
+    if: github.event.pull_request.merged == true
+    runs-on: ubuntu-latest
+    needs: build-mpc-recovery
+    steps:
+      - id: 'auth'
+        uses: 'google-github-actions/auth@v2'
+        with:
+          credentials_json: '${{ secrets.GCP_CREDENTIALS_DEV }}'
+
+      - name: 'Set up Cloud SDK'
+        uses: 'google-github-actions/setup-gcloud@v2'
+
+      - name: 'Set project'
+        run: 'gcloud config set project pagoda-discovery-platform-dev'
+
+      - name: 'Update Nodes'
+        run: | 
+          gcloud compute instances update-container multichain-dev-0 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }} & \
+          gcloud compute instances update-container multichain-dev-1 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }} & \
+          gcloud compute instances update-container multichain-dev-2 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }} & \
+          gcloud compute instances update-container multichain-dev-3 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }} & \
+          gcloud compute instances update-container multichain-dev-4 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }} & \
+          gcloud compute instances update-container multichain-dev-5 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }} & \
+          gcloud compute instances update-container multichain-dev-6 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }} & \
+          gcloud compute instances update-container multichain-dev-7 --zone us-central1-a --container-image=${{ env.IMAGE }}:${{ env.TAG }}
+

.github/workflows/multichain-integration.yml

@@ -60,8 +60,15 @@ jobs:
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Configure AWS
+        run: |
+          # Fake AWS configuration for LocalStack
+          aws configure set region us-east-1
+          aws --profile default configure set aws_access_key_id "123"
+          aws --profile default configure set aws_secret_access_key "456"
+
       - name: Compile Contract
-        run: cargo build -p mpc-contract --target wasm32-unknown-unknown --release
+        run: cargo build -p mpc-contract --target wasm32-unknown-unknown --release --target-dir target/seperate_wasm
 
       - name: Build MPC Recovery Binary Locally
         run: |

.github/workflows/multichain-prod.yml

@@ -0,0 +1,75 @@
+name: Deploy Multichain Prod.
+on:
+  workflow_dispatch:
+    inputs:
+      network:
+        type: choice
+        options:
+          - mainnet
+          - testnet
+        description: mainnet or testnet network
+        required: true
+      image:
+        description: Full Artifact Registry image with tag (e.g. us-east1-docker.pkg.dev/pagoda-discovery-platform-prod/multichain/multichain-< testnet | mainnet >)
+        required: true
+      tag:
+        description: Image tag that you wish to deploy, either by SHA or Version/latest
+      node_group:
+        type: choice
+        options:
+          - partner
+          - internal
+        description: Do you want to deploy the Parner nodes or internal Pagoda nodes?
+
+jobs:
+  build-mpc-recovery:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        name: "Checkout mpc-recovery"
+
+      - name: Login to GCP Artifact Registry
+        run: echo "$GOOGLE_CREDENTIALS" | docker login -u _json_key --password-stdin https://us-east1-docker.pkg.dev
+        env:
+          GOOGLE_CREDENTIALS: ${{ secrets.GCP_CREDENTIALS_PROD }}
+
+      - name: Build Docker image and push to internal Google Artifact Registry
+        if: ${{ github.event.inputs.node_group == 'internal' }}
+        id: docker-push-tagged
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          file: ./Dockerfile.multichain
+          tags: "${{ github.event.inputs.image }}:${{ github.event.inputs.tag }}"
+
+      - name: Build Docker image and deploy partner nodes
+        if: ${{ github.event.inputs.node_group == 'partner' }}
+        id: docker-push-tagged-partner
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          file: ./Dockerfile.multichain
+          tags: "${{ github.event.inputs.image }}:${{ github.event.inputs.tag }}"
+
+  deploy:
+    if: ${{ github.event.inputs.node_group == 'internal' }}
+    runs-on: ubuntu-latest
+    needs: build-mpc-recovery
+    steps:
+      - id: 'auth'
+        uses: 'google-github-actions/auth@v2'
+        with:
+          credentials_json: '${{ secrets.GCP_CREDENTIALS_PROD }}'
+
+      - name: 'Set up Cloud SDK'
+        uses: 'google-github-actions/setup-gcloud@v2'
+
+      - name: 'Set project'
+        run: 'gcloud config set project pagoda-discovery-platform-prod'
+
+      - name: 'Update Nodes'
+        run: |
+          gcloud compute instances update-container multichain-${{ github.event.inputs.network }}-0 --zone us-central1-a --container-image=${{ github.event.inputs.image }}:${{ github.event.inputs.tag }} & \
+          gcloud compute instances update-container multichain-${{ github.event.inputs.network }}-1 --zone us-central1-a --container-image=${{ github.event.inputs.image }}:${{ github.event.inputs.tag }} & \
+          gcloud compute instances update-container multichain-${{ github.event.inputs.network }}-2 --zone us-central1-a --container-image=${{ github.event.inputs.image }}:${{ github.event.inputs.tag }}
+

.github/workflows/terraform-dev.yml

@@ -1,10 +1,7 @@
 name: Terraform Dev
 
 on:
-  workflow_run:
-    workflows: ["Docker Image"]
-    types:
-      - completed
+  workflow_dispatch:
 
 jobs:
   terraform_dev:
@@ -30,7 +27,7 @@ jobs:
       # Initialize a new or existing Terraform working directory by creating initial files, loading any remote state, downloading modules, etc.
       - name: Terraform Init
         id: init
-        run: terraform init -backend-config backend-config-dev.tfvars
+        run: terraform init
         env:
           GOOGLE_CREDENTIALS: ${{ secrets.GCP_CREDENTIALS_DEV }}
 

.github/workflows/terraform-feature-env-destroy.yml

@@ -29,7 +29,7 @@ jobs:
       # Initialize a new or existing Terraform working directory by creating initial files, loading any remote state, downloading modules, etc.
       - name: Terraform Init
         id: init
-        run: terraform init -backend-config backend-config-dev.tfvars
+        run: terraform init
         env:
           GOOGLE_CREDENTIALS: ${{ secrets.GCP_CREDENTIALS_DEV }}
 

.github/workflows/terraform-feature-env.yml

@@ -1,8 +1,7 @@
 name: Terraform Feature Env
 
 on:
-  pull_request:
-    types: [reopened, opened, synchronize, edited]
+  workflow_dispatch:
 
 jobs:
   terraform_apply:
@@ -30,7 +29,7 @@ jobs:
       # Initialize a new or existing Terraform working directory by creating initial files, loading any remote state, downloading modules, etc.
       - name: Terraform Init
         id: init
-        run: terraform init -backend-config backend-config-dev.tfvars
+        run: terraform init
         env:
           GOOGLE_CREDENTIALS: ${{ secrets.GCP_CREDENTIALS_DEV }}
 

.github/workflows/unit.yml

@@ -25,7 +25,7 @@ jobs:
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Compile Contract
-        run: cargo build -p mpc-contract --target wasm32-unknown-unknown --release
+        run: cargo build -p mpc-contract --target wasm32-unknown-unknown --release --target-dir target/seperate_wasm
       - name: Compile
         run: cargo check
       - name: Test format
@@ -51,4 +51,4 @@ jobs:
         uses: actions-rs/cargo@v1
         with:
           command: audit
-          args: --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2023-0052 --ignore RUSTSEC-2022-0093
+          args: --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2023-0052 --ignore RUSTSEC-2022-0093 --ignore RUSTSEC-2023-0071 --ignore RUSTSEC-2024-0019

.gitignore

@@ -4,3 +4,4 @@
 
 flamegraph*.svg
 tmp
+*.log