SSV Native staking

.github/workflows/defi.yml

@@ -178,6 +178,46 @@ jobs:
             ./contracts/coverage.json
             ./contracts/coverage/**/*
           retention-days: 1
+
+  contracts-hol-forktest:
+    name: "Holesky Fork Tests"
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    env:
+      HARDHAT_CACHE_DIR: ./cache
+      PROVIDER_URL: ${{ secrets.PROVIDER_URL }}
+      HOLESKY_PROVIDER_URL: ${{ secrets.HOLESKY_PROVIDER_URL }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20.x"
+          cache: "yarn"
+          cache-dependency-path: contracts/yarn.lock
+
+      - uses: actions/cache@v4
+        id: hardhat-cache
+        with:
+          path: contracts/cache
+          key: ${{ runner.os }}-hardhat-${{ hashFiles('contracts/cache/*.json') }}
+          restore-keys: |
+            ${{ runner.os }}-hardhat-cache
+
+      - run: yarn install --frozen-lockfile
+        working-directory: ./contracts
+
+      - run: yarn run test:coverage:hol-fork
+        working-directory: ./contracts
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: fork-test-hol-coverage-${{ github.sha }}
+          path: | 
+            ./contracts/coverage.json
+            ./contracts/coverage/**/*
+          retention-days: 1
 
   coverage-uploader:
     name: "Upload Coverage Reports"
@@ -186,6 +226,7 @@ jobs:
       - contracts-unit-coverage
       - contracts-forktest
       - contracts-arb-forktest
+      - contracts-hol-forktest
     env:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
     steps:

.gitignore

@@ -59,6 +59,10 @@ contracts/coverage/
 contracts/coverage.json
 contracts/build/
 contracts/dist/
+contracts/.localKeyValueStorage
+contracts/.localKeyValueStorage.mainnet
+contracts/.localKeyValueStorage.holesky
+contracts/scripts/defender-actions/dist/
 
 todo.txt
 brownie/env-brownie/
@@ -78,4 +82,4 @@ coverage.json
 fork-coverage
 unit-coverage
 
-.VSCodeCounter
+.VSCodeCounter

contracts/.eslintrc.js

@@ -20,6 +20,7 @@ module.exports = {
   },
   plugins: ["no-only-tests"],
   rules: {
+    "no-constant-condition": ["error", { checkLoops: false }],
     "no-only-tests/no-only-tests": "error",
   },
 };

contracts/.prettierignore

@@ -1,2 +1,3 @@
 scripts/compensation/forkDeployment.js
 coverage
+dist

contracts/README.md

@@ -295,6 +295,68 @@ unset DEFENDER_API_KEY
 unset DEFENDER_API_SECRET
 ```
 
+### Deploying Defender Actions
+
+Actions are used to run operational jobs are specific times or intervals.
+
+[rollup](https://rollupjs.org/) is used to bundle Actions source code in
+[/script/defender-actions](./script/defender-actions) into a single file that can be uploaded to Defender. The
+implementation was based off
+[Defender Actions example using Rollup](https://github.com/OpenZeppelin/defender-autotask-examples/tree/master/rollup).
+The rollup config is in [/scripts/defender-actions/rollup.config.cjs](./script/defender-actions/rollup.config.cjs). The
+outputs are written to task specific folders under [/scripts/defender-actions/dist](./script/defender-actions/dist/).
+
+The [defender-autotask CLI](https://www.npmjs.com/package/@openzeppelin/defender-autotask-client) is used to upload the
+Action code to Defender. For this to work, a Defender Team API key with `Manage Actions` capabilities is needed. This
+can be generated by a Defender team admin under the `Manage` tab on the top right of the UI and then `API Keys` on the
+left menu. Best to unselect all capabilities except `Manage Actions`.
+
+Save the Defender Team API key and secret to your `.env` file.
+
+```
+# Open Zeppelin Defender Team API key
+DEFENDER_TEAM_KEY=
+DEFENDER_TEAM_SECRET=
+```
+
+The following will bundle the Actions code ready for upload.
+
+```
+cd ./script/defender-actions
+
+npx rollup -c
+```
+
+The following will upload the different Action bundles to Defender.
+
+```sh
+# change to the defender-actions folder
+cd ./script/defender-actions
+npx rollup -c
+
+# Export the DEFENDER_TEAM_KEY and DEFENDER_TEAM_SECRET environment variables
+export DEFENDER_TEAM_KEY=
+export DEFENDER_TEAM_SECRET=
+# Alternatively, the following can be used but it will export all env var including DEPLOYER_PRIVATE_KEY
+# set -o allexport && source ../../.env && set +o allexport
+
+# Set the DEBUG environment variable to oeth* for the Defender Action
+npx hardhat setActionVars --id 38e44420-f38b-4d4a-86b0-6012a8897ad9
+npx hardhat setActionVars --id f4b5b8d4-82ff-483f-bfae-9fef015790ca
+npx hardhat setActionVars --id 191d9631-70b9-43c5-9db4-1dd985fde05c
+
+# The Defender autotask client uses generic env var names so we'll set them first from the values in the .env file
+export API_KEY=${DEFENDER_TEAM_KEY}
+export API_SECRET=${DEFENDER_TEAM_SECRET}
+# Holesky
+npx defender-autotask update-code 38e44420-f38b-4d4a-86b0-6012a8897ad9 ./dist/registerValidators
+npx defender-autotask update-code 191d9631-70b9-43c5-9db4-1dd985fde05c ./dist/doAccounting
+# Mainnet
+npx defender-autotask update-code f4b5b8d4-82ff-483f-bfae-9fef015790ca ./dist/registerValidators
+```
+
+`rollup` and `defender-autotask-client` can be installed globally to avoid the `npx` prefix.
+
 ## Contract Verification
 
 The Hardhat plug-in [@nomiclabs/hardhat-etherscan](https://www.npmjs.com/package/@nomiclabs/hardhat-etherscan) is used to verify contracts on Etherscan.