|
| 1 | +#!/usr/bin/env bash |
| 2 | +# |
| 3 | +# upgrade-dev-contract.sh — Step 2 of a dev-cluster upgrade: get the contract |
| 4 | +# WASM (published release or a local build), borsh-serialize it, propose the |
| 5 | +# update and vote it in with the cluster's member accounts. Run only after the |
| 6 | +# nodes are on the new version. |
| 7 | +# |
| 8 | +# Usage: ./scripts/ops/dev-cluster/upgrade-dev-contract.sh <VERSION> <testnet|mainnet> |
| 9 | +# Env: MPC_WASM_SOURCE=release|build skips the source prompt; |
| 10 | +# MPC_SIGN_WITH overrides the signing method (default sign-with-keychain); |
| 11 | +# MPC_OPS_CACHE (default ~/.cache/mpc-ops) holds the artifacts. |
| 12 | +# |
| 13 | + |
| 14 | +set -euo pipefail |
| 15 | + |
| 16 | +SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" |
| 17 | +# shellcheck source=../common.sh |
| 18 | +source "${SCRIPT_DIR}/../common.sh" |
| 19 | +# shellcheck source=dev-common.sh |
| 20 | +source "${SCRIPT_DIR}/dev-common.sh" |
| 21 | + |
| 22 | +write_u32_le() { |
| 23 | + local n=$1 i |
| 24 | + for i in 0 8 16 24; do |
| 25 | + # shellcheck disable=SC2059 |
| 26 | + printf "\\x$(printf '%02x' $(( (n >> i) & 0xFF )))" |
| 27 | + done |
| 28 | +} |
| 29 | + |
| 30 | +# Echoes the wasm path; progress goes to stderr so it stays capturable. |
| 31 | +fetch_wasm() { |
| 32 | + local version=$1 dir=$2 source=${MPC_WASM_SOURCE:-} |
| 33 | + local wasm="${dir}/mpc-contract-v${version}.wasm" |
| 34 | + |
| 35 | + if [[ -z "$source" ]]; then |
| 36 | + local choice |
| 37 | + read -rp "WASM source — (r)eleased ${version} or local (b)uild? [r] " choice >&2 |
| 38 | + case "${choice:-r}" in |
| 39 | + r|R) source=release ;; |
| 40 | + b|B) source=build ;; |
| 41 | + *) die "Unknown source '${choice}'." ;; |
| 42 | + esac |
| 43 | + fi |
| 44 | + |
| 45 | + if [[ "$source" == release ]]; then |
| 46 | + if [[ -f "$wasm" ]]; then |
| 47 | + step "==> Reusing ${wasm}" >&2 |
| 48 | + else |
| 49 | + step "==> Downloading contract WASM from release ${version}..." >&2 |
| 50 | + require_cmds gh tar |
| 51 | + run_cmd gh release download "$version" --repo near/mpc \ |
| 52 | + --pattern "mpc-contract-v${version}.tar.gz" --dir "$dir" --clobber >&2 |
| 53 | + run_cmd tar xzf "${dir}/mpc-contract-v${version}.tar.gz" -C "$dir" >&2 |
| 54 | + [[ -f "$wasm" ]] || die "Expected ${wasm} after extracting the tarball." |
| 55 | + fi |
| 56 | + else |
| 57 | + require_cmds cargo git |
| 58 | + local root built |
| 59 | + root=$(git -C "$SCRIPT_DIR" rev-parse --show-toplevel) |
| 60 | + step "==> Building the contract from ${root} (local build — not a released artifact)..." >&2 |
| 61 | + ( cd "$root" && run_cmd cargo near build non-reproducible-wasm --features abi \ |
| 62 | + --profile=release-contract --manifest-path crates/contract/Cargo.toml --locked >&2 ) |
| 63 | + # Named, not globbed: target/near also holds tee_verifier and |
| 64 | + # test_parallel_contract. |
| 65 | + built="${root}/target/near/mpc_contract/mpc_contract.wasm" |
| 66 | + [[ -f "$built" ]] || die "Expected ${built} after the cargo-near build." |
| 67 | + cp "$built" "$wasm" |
| 68 | + fi |
| 69 | + echo "$wasm" |
| 70 | +} |
| 71 | + |
| 72 | +[[ $# -eq 2 ]] || die "Usage: $0 <VERSION> <testnet|mainnet>" |
| 73 | +VERSION=$1 |
| 74 | +check_version "$VERSION" |
| 75 | +resolve_dev_cluster "$2" |
| 76 | +require_cmds near |
| 77 | + |
| 78 | +CACHE="${MPC_OPS_CACHE:-$HOME/.cache/mpc-ops}/${VERSION}" |
| 79 | +mkdir -p "$CACHE" |
| 80 | + |
| 81 | +WASM=$(fetch_wasm "$VERSION" "$CACHE") |
| 82 | +echo " wasm sha256: $(sha256_of "$WASM")" |
| 83 | + |
| 84 | +SERIALIZED="${CACHE}/serialized.bin" |
| 85 | +WASM_SIZE=$(wc -c < "$WASM") |
| 86 | +# borsh ProposeUpdateArgs { code: Some(wasm), config: None } |
| 87 | +{ |
| 88 | + printf '\x01' |
| 89 | + write_u32_le "$WASM_SIZE" |
| 90 | + cat "$WASM" |
| 91 | + printf '\x00' |
| 92 | +} > "$SERIALIZED" |
| 93 | +[[ "$(wc -c < "$SERIALIZED")" -eq $((WASM_SIZE + 6)) ]] \ |
| 94 | + || die "serialized.bin has an unexpected length." |
| 95 | +step "==> ${SERIALIZED} ready ($(wc -c < "$SERIALIZED") bytes)" |
| 96 | + |
| 97 | +PROPOSER=${MEMBER_ACCOUNTS%% *} |
| 98 | +PROPOSE_CMD=(near contract call-function as-transaction "$CONTRACT" propose_update |
| 99 | + file-args "$SERIALIZED" prepaid-gas '100.0 Tgas' attached-deposit "$PROPOSE_DEPOSIT" |
| 100 | + sign-as "$PROPOSER" network-config "$NEAR_NET" "$SIGN_WITH" send) |
| 101 | + |
| 102 | +step "About to propose the ${VERSION} contract on ${CONTRACT} (${NEAR_NET})" |
| 103 | +echo " proposer: ${PROPOSER}, deposit ${PROPOSE_DEPOSIT}" |
| 104 | +show_cmd "${PROPOSE_CMD[@]}" |
| 105 | +confirm "Send propose_update?" || { echo "Aborted before proposing."; exit 0; } |
| 106 | + |
| 107 | +"${PROPOSE_CMD[@]}" \ |
| 108 | + || die "propose_update failed (an account low on NEAR is the usual cause — top it up)." |
| 109 | + |
| 110 | +step "==> Pending proposals:" |
| 111 | +near_view proposed_updates || true |
| 112 | + |
| 113 | +# near-cli's result format is too unstable to parse an id out of. |
| 114 | +read -rp "UpdateId to vote on: " UPDATE_ID |
| 115 | +[[ "$UPDATE_ID" =~ ^[0-9]+$ ]] || die "'${UPDATE_ID}' is not a numeric UpdateId." |
| 116 | + |
| 117 | +# The deciding vote deploys + migrates inline, hence 300 Tgas. |
| 118 | +for account in $MEMBER_ACCOUNTS; do |
| 119 | + vote_cmd=(near contract call-function as-transaction "$CONTRACT" vote_update |
| 120 | + json-args "{\"id\": ${UPDATE_ID}}" prepaid-gas '300.0 Tgas' attached-deposit '0 NEAR' |
| 121 | + sign-as "$account" network-config "$NEAR_NET" "$SIGN_WITH" send) |
| 122 | + show_cmd "${vote_cmd[@]}" |
| 123 | + confirm "Vote for update ${UPDATE_ID} as ${account}?" || { echo " skipped."; continue; } |
| 124 | + "${vote_cmd[@]}" || echo " vote failed for ${account}." |
| 125 | +done |
| 126 | + |
| 127 | +step "==> Contract version (expect ${VERSION} once threshold was reached):" |
| 128 | +near_view version || true |
0 commit comments