chore(charts): update contracts chart for host-side KMSGeneration and ProtocolConfig

charts/contracts/Chart.yaml

@@ -1,6 +1,6 @@
 name: contracts
 description: A helm chart to manage fhevm Smart Contracts Deployment
-version: 0.7.7
+version: 0.8.0
 apiVersion: v2
 keywords:
   - fhevm

charts/contracts/values-kmsgen.yaml

@@ -1,16 +1,16 @@
 # =============================================================================
 # FHEVM Smart Contracts Configuration
 # =============================================================================
-# This chart handles KMS generation methods from gateway contracts
+# This chart handles KMS generation methods from host contracts
 # =============================================================================
 
 # NOTE: These values are for reference only
-# The chart is for gateway only
+# The chart is for host only
 
 # -----------------------------------------------------------------------------
 # Key generation
 # -----------------------------------------------------------------------------
-# Triggers the generation of an FHE key from the gateway contracts
+# Triggers the generation of an FHE key from the host contracts
 keygen:
   enabled: true
 
@@ -20,8 +20,8 @@ keygen:
   nameOverride:
 
   image:
-    name: ghcr.io/zama-ai/fhevm/gateway-contracts
-    tag: v0.10.0
+    name: ghcr.io/zama-ai/fhevm/host-contracts
+    tag: v0.13.0
 
   # ConfigMap to store deployed contract addresses
   configmap:
@@ -35,7 +35,7 @@ keygen:
       value: ""
 
     # KMSGeneration contract address
-    - name: KMS_GENERATION_ADDRESS
+    - name: KMS_GENERATION_CONTRACT_ADDRESS
       value: ""
 
   resources:
@@ -63,7 +63,7 @@ keygen:
 # -----------------------------------------------------------------------------
 # CRS generation
 # -----------------------------------------------------------------------------
-# Triggers the generation of an CRS from the gateway contracts
+# Triggers the generation of a CRS from the host contracts
 crsgen:
   enabled: true
 
@@ -73,8 +73,8 @@ crsgen:
   nameOverride:
 
   image:
-    name: ghcr.io/zama-ai/fhevm/gateway-contracts
-    tag: v0.10.0
+    name: ghcr.io/zama-ai/fhevm/host-contracts
+    tag: v0.13.0
 
   # ConfigMap to store deployed contract addresses
   configmap:
@@ -88,7 +88,7 @@ crsgen:
       value: ""
 
     # KMSGeneration contract address
-    - name: KMS_GENERATION_ADDRESS
+    - name: KMS_GENERATION_CONTRACT_ADDRESS
       value: ""
 
   resources:
@@ -112,103 +112,3 @@ crsgen:
     # - 0: Default parameters
     # - 1: Test parameters
     - npx hardhat task:triggerCrsgen --params-type 1 --max-bit-length 2048
-
-# -----------------------------------------------------------------------------
-# PRSS initialization
-# -----------------------------------------------------------------------------
-# Triggers the initialization of the PRSS from the gateway contracts
-prssInit:
-  enabled: true
-
-  # Prevent redeployment if already done for current version
-  # preventRedeployment: false
-
-  nameOverride:
-
-  image:
-    name: ghcr.io/zama-ai/fhevm/gateway-contracts
-    tag: v0.10.0
-
-  # ConfigMap to store deployed contract addresses
-  configmap:
-    name: "addresses"
-    annotations:
-
-  # Environment variables
-  env:
-    # Deployer's private key
-    - name: DEPLOYER_PRIVATE_KEY
-      value: ""
-
-    # KMSGeneration contract address
-    - name: KMS_GENERATION_ADDRESS
-      value: ""
-
-  resources:
-    requests:
-      cpu: 100m
-      memory: 256Mi
-    limits:
-      cpu: 500m
-      memory: 512Mi
-
-  # Security context for container execution
-  securityContext:
-    runAsNonRoot: true
-    runAsUser: 10000
-    fsGroup: 10001
-
-  # Commands to run in sequence
-  commands:
-    # Trigger PRSS initialization
-    - npx hardhat task:prssInit
-
-# -----------------------------------------------------------------------------
-# Key resharing for same set of KMS nodes
-# -----------------------------------------------------------------------------
-# Triggers the resharing of the given key ID from the gateway contracts
-keyReshareSameSet:
-  enabled: true
-
-  # Prevent redeployment if already done for current version
-  # preventRedeployment: false
-
-  nameOverride:
-
-  image:
-    name: ghcr.io/zama-ai/fhevm/gateway-contracts
-    tag: v0.10.0
-
-  # ConfigMap to store deployed contract addresses
-  configmap:
-    name: "addresses"
-    annotations:
-
-  # Environment variables
-  env:
-    # Deployer's private key
-    - name: DEPLOYER_PRIVATE_KEY
-      value: ""
-
-    # KMSGeneration contract address
-    - name: KMS_GENERATION_ADDRESS
-      value: ""
-
-  resources:
-    requests:
-      cpu: 100m
-      memory: 256Mi
-    limits:
-      cpu: 500m
-      memory: 512Mi
-
-  # Security context for container execution
-  securityContext:
-    runAsNonRoot: true
-    runAsUser: 10000
-    fsGroup: 10001
-
-  # Commands to run in sequence
-  commands:
-    # Trigger key resharing for same set of KMS nodes
-    - npx hardhat task:keyReshareSameSet --key-id <key-id>

charts/contracts/values-ownership.yaml

@@ -21,7 +21,7 @@ gatewayOwnershipTransfer:
 
   image:
     name: ghcr.io/zama-ai/fhevm/gateway-contracts
-    tag: v0.10.0
+    tag: v0.13.0
 
   # ConfigMap to store deployed contract addresses
   configmap:
@@ -71,7 +71,7 @@ hostOwnershipTransfer:
 
   image:
     name: ghcr.io/zama-ai/fhevm/host-contracts
-    tag: v0.10.0
+    tag: v0.13.0
 
   # ConfigMap to store deployed contract addresses
   configmap:

charts/contracts/values.yaml

@@ -26,7 +26,7 @@ scDeploy:
 
   image:
     name: ghcr.io/zama-ai/fhevm/host-contracts
-    tag: v0.9.0
+    tag: v0.13.0
 
   # ConfigMap to store deployed contract addresses
   configmap:
@@ -39,14 +39,6 @@ scDeploy:
     # ==========================  GATEWAY =====================================
     # =========================================================================
 
-    # KMS generation threshold
-    - name: KMS_GENERATION_THRESHOLD
-      value: 7
-
-    # S3 URL for KMS core storage (replace x with sequential number starting from 0)
-    - name: KMS_NODE_STORAGE_URL_x
-      value: ""
-
     # Deployer's private key
     - name: DEPLOYER_PRIVATE_KEY
       value: ""
@@ -66,16 +58,11 @@ scDeploy:
     - name: PAUSER_ADDRESS_x
       value: ""
 
-    # Initial KMS Context ID
-    # This initial value must match with the value returned from the host-contract KMSVerifier.getCurrentKmsContextId()
-    - name: KMS_CONTEXT_ID
-      value: "3166189940082864718613269121331309980362851143201109172953918312716374638593"
-
     # =========================================================================
     # ==========================  HOST    =====================================
     # =========================================================================
 
-      # Deployer's private key
+    # Deployer's private key
     - name: DEPLOYER_PRIVATE_KEY
       value: ""
 
@@ -94,6 +81,59 @@ scDeploy:
     - name: PAUSER_ADDRESS_x
       value: ""
 
+    # -------------------------------------------------------------------------
+    # ProtocolConfig (KMS node identity, context, thresholds)
+    # -------------------------------------------------------------------------
+    - name: NUM_KMS_NODES
+      value: 13
+
+    # KMS node fields, indexed from 0 up to NUM_KMS_NODES - 1
+    - name: KMS_TX_SENDER_ADDRESS_x
+      value: ""
+
+    - name: KMS_SIGNER_ADDRESS_x
+      value: ""
+
+    - name: KMS_NODE_IP_x
+      value: ""
+
+    - name: KMS_NODE_STORAGE_URL_x
+      value: ""
+
+    - name: PUBLIC_DECRYPTION_THRESHOLD
+      value: 7
+    - name: USER_DECRYPTION_THRESHOLD
+      value: 7
+    - name: KMS_GEN_THRESHOLD
+      value: 7
+    - name: MPC_THRESHOLD
+      value: 3
+
+    # -------------------------------------------------------------------------
+    # KMSVerifier / InputVerifier (references to gateway contracts)
+    # -------------------------------------------------------------------------
+    - name: CHAIN_ID_GATEWAY
+      value: ""
+
+    - name: DECRYPTION_ADDRESS
+      value: ""
+
+    - name: INPUT_VERIFICATION_ADDRESS
+      value: ""
+
+    # -------------------------------------------------------------------------
+    # InputVerifier (coprocessor signer set)
+    # -------------------------------------------------------------------------
+    - name: NUM_COPROCESSORS
+      value: 5
+
+    - name: COPROCESSOR_THRESHOLD
+      value: 3
+
+    # Coprocessor signer addresses, indexed from 0 up to NUM_COPROCESSORS - 1
+    - name: COPROCESSOR_SIGNER_ADDRESS_x
+      value: ""
+
   resources:
     requests:
       cpu: 100m
@@ -145,7 +185,7 @@ scUpgrade:
   oldContracts:
     image:
       name: ghcr.io/zama-ai/fhevm/host-contracts
-      tag: v0.8.1
+      tag: v0.10.0
 
   # Note: The upgrade process uses the new contracts image from scDeploy.image
 
@@ -161,10 +201,12 @@ scUpgrade:
 
     - npx hardhat task:upgradeDecryption
 
+    - npx hardhat task:upgradeKMSGeneration
+
     # =========================================================================
     # ==========================  HOST    =====================================
     # =========================================================================
-    - npx hardhat task:upgradeKmsVerifier
+    - npx hardhat task:upgradeKMSVerifier
 
 
 # -----------------------------------------------------------------------------