feat(test-suite): e2e asserts KMSGeneration canonical-only topology

Adds two tests to the multi-chain isolation suite that verify on-chain
state across all host RPCs:
- KMSGeneration must have code only on the canonical host, not extras.
- ProtocolConfig must have code on every host chain.

Plumbs PROTOCOL_CONFIG_CONTRACT_ADDRESS and KMS_GENERATION_CONTRACT_ADDRESS
through the fhevm-cli test-suite env so the e2e process can read them.

Part of zama-ai/fhevm-internal#1268

Author: Eikix

test-suite/e2e/test/multiChain/multiChainIsolation.ts

@@ -48,6 +48,38 @@ describe('Multi-Chain State Isolation', function () {
     }
   });
 
+  describe('Canonical Host Contracts Topology', function () {
+    it('KMSGeneration is deployed only on the canonical host', async function () {
+      const kmsGenAddress = process.env.KMS_GENERATION_CONTRACT_ADDRESS;
+      expect(kmsGenAddress, 'KMS_GENERATION_CONTRACT_ADDRESS must be set in the e2e env').to.match(
+        /^0x[0-9a-fA-F]{40}$/,
+      );
+
+      const canonicalCode = await getProvider(this.chains[0]).getCode(kmsGenAddress!);
+      expect(canonicalCode, 'KMSGeneration should be deployed on the canonical host').to.not.eq('0x');
+
+      for (let i = 1; i < this.chains.length; i++) {
+        const extraCode = await getProvider(this.chains[i]).getCode(kmsGenAddress!);
+        expect(
+          extraCode,
+          `KMSGeneration should not be deployed on non-canonical chain ${this.chains[i].rpcUrl}`,
+        ).to.eq('0x');
+      }
+    });
+
+    it('ProtocolConfig is deployed on every host chain', async function () {
+      const protocolConfigAddress = process.env.PROTOCOL_CONFIG_CONTRACT_ADDRESS;
+      expect(protocolConfigAddress, 'PROTOCOL_CONFIG_CONTRACT_ADDRESS must be set in the e2e env').to.match(
+        /^0x[0-9a-fA-F]{40}$/,
+      );
+
+      for (const chain of this.chains) {
+        const code = await getProvider(chain).getCode(protocolConfigAddress!);
+        expect(code, `ProtocolConfig should be deployed on ${chain.rpcUrl}`).to.not.eq('0x');
+      }
+    });
+  });
+
   describe('User Input Across Chains', function () {
     it('encrypted input and FHE computation work independently on both chains', async function () {
       const erc20A = this.chainA.erc20 as unknown as EncryptedERC20;

test-suite/fhevm/src/generate/env.ts

@@ -171,6 +171,8 @@ const applyDiscoveryEnv = (
     ACL_CONTRACT_ADDRESS: primaryHost.ACL_CONTRACT_ADDRESS,
     INPUT_VERIFIER_CONTRACT_ADDRESS: primaryHost.INPUT_VERIFIER_CONTRACT_ADDRESS,
     FHEVM_EXECUTOR_CONTRACT_ADDRESS: primaryHost.FHEVM_EXECUTOR_CONTRACT_ADDRESS,
+    PROTOCOL_CONFIG_CONTRACT_ADDRESS: primaryHost.PROTOCOL_CONFIG_CONTRACT_ADDRESS,
+    KMS_GENERATION_CONTRACT_ADDRESS: primaryHost.KMS_GENERATION_CONTRACT_ADDRESS,
   });
 };