Rudy/feat/delegation

.github/workflows/test-suite-e2e-tests.yml

@@ -152,6 +152,14 @@ jobs:
         run: |
           ./fhevm-cli deploy
 
+      - name: Public Decryption test
+        working-directory: test-suite/fhevm
+        run: |
+          timeout 5m ./fhevm-cli test delegate-public-decryption
+          ./fhevm-cli logs coprocessor-host-listener
+          ./fhevm-cli logs coprocessor-gw-listener
+          exit 1
+
       - name: Input proof test (uint64)
         working-directory: test-suite/fhevm
         run: |

coprocessor/fhevm-engine/db-migration/migrations/20251013083601_delegations.sql

@@ -0,0 +1,13 @@
+CREATE TABLE IF NOT EXISTS delegate_user_decrypt (
+    delegator BYTEA NOT NULL,
+    delegate BYTEA NOT NULL,
+    contract_address BYTEA NOT NULL,
+    delegation_counter BIGINT NOT NULL,
+    old_expiry_date BIGINT NOT NULL, -- 0 = first time delegation
+    expiry_date BIGINT NOT NULL, -- 0 = revoke
+    host_chain_id BIGINT NOT NULL,
+    block_number BIGINT NOT NULL,
+    block_hash BYTEA NOT NULL, -- to check finality
+    transaction_id BYTEA,
+    UNIQUE(delegator, delegate, contract_address, delegation_counter, old_expiry_date, expiry_date, block_number, block_hash, transaction_id)
+);

coprocessor/fhevm-engine/gw-listener/Dockerfile

@@ -22,6 +22,7 @@ WORKDIR /app
 COPY coprocessor/fhevm-engine ./coprocessor/fhevm-engine
 COPY coprocessor/proto ./coprocessor/proto
 COPY gateway-contracts/contracts/ ./gateway-contracts/contracts/
+COPY gateway-contracts/rust_bindings/ ./gateway-contracts/rust_bindings
 COPY --from=contract_builder /app/gateway-contracts/artifacts/contracts /app/gateway-contracts/artifacts/contracts
 COPY .git/HEAD ./coprocessor/fhevm-engine/BUILD_ID
 

coprocessor/fhevm-engine/host-listener/Dockerfile

@@ -23,6 +23,7 @@ COPY coprocessor/fhevm-engine ./coprocessor/fhevm-engine
 COPY coprocessor/proto ./coprocessor/proto
 COPY host-contracts/contracts/ ./host-contracts/contracts/
 COPY --from=contract_builder /app/host-contracts/artifacts/contracts /app/host-contracts/artifacts/contracts
+COPY gateway-contracts/rust_bindings ./gateway-contracts/rust_bindings
 COPY .git/HEAD ./coprocessor/fhevm-engine/BUILD_ID
 
 WORKDIR /app/coprocessor/fhevm-engine

coprocessor/fhevm-engine/host-listener/build.rs

@@ -7,7 +7,10 @@ use semver::Version;
 use std::{env, fs, path::Path, process::Command};
 
 fn build_contracts() {
-    println!("cargo:rerun-if-changed=../../../host-contracts/contracts");
+    println!(
+        "cargo:rerun-if-changed=../../../host-contracts/contracts/ACL.sol"
+    );
+    println!("cargo:rerun-if-changed=../../../host-contracts/contracts/FHEVMExecutor.sol");
     // Step 1: Copy ../../contracts/.env.example to ../../contracts/.env
     let env_example = Path::new("../../../host-contracts/.env.example");
     let env_dest = Path::new("../../../host-contracts/.env");

coprocessor/fhevm-engine/host-listener/contracts/ACLTest.sol

@@ -9,4 +9,21 @@ contract ACLTest is ACLEvents {
         emit Allowed(msg.sender, account, handle);
     }
 
+
+    function delegateForUserDecryption(
+        address delegate,
+        address contractAddress,
+        uint64 delegationCounter,
+        uint64 oldExpiryDate,
+        uint64 newExpiryDate
+    ) public virtual {
+        emit DelegatedForUserDecryption(
+            msg.sender,
+            delegate,
+            contractAddress,
+            delegationCounter,
+            oldExpiryDate,
+            newExpiryDate
+        );
+    }
 }

coprocessor/fhevm-engine/host-listener/src/cmd/mod.rs

@@ -780,6 +780,7 @@ impl InfiniteLogIter {
 }
 
 async fn db_insert_block(
+    chain_id: u64,
     db: &mut Database,
     block_logs: &BlockLogs<Log>,
     acl_contract_address: &Option<Address>,
@@ -794,13 +795,23 @@ async fn db_insert_block(
     let mut retries = 10;
     loop {
         let res = db_insert_block_no_retry(
+            chain_id,
             db,
             block_logs,
             acl_contract_address,
             tfhe_contract_address,
         )
         .await;
         let Err(err) = res else {
+            // Notify the database of the new block
+            // Delayed delegation rely on this signal to reconsider ready delegation
+            if !block_logs.catchup {
+                if let Err(err) =
+                    db.block_notification(block_logs.summary.number).await
+                {
+                    error!(error = %err, "Error notifying listener for new block");
+                };
+            }
             return Ok(());
         };
         if retries == 0 {
@@ -820,6 +831,7 @@ async fn db_insert_block(
 }
 
 async fn db_insert_block_no_retry(
+    chain_id: u64,
     db: &mut Database,
     block_logs: &BlockLogs<Log>,
     acl_contract_address: &Option<Address>,
@@ -828,6 +840,8 @@ async fn db_insert_block_no_retry(
     let mut tx = db.new_transaction().await?;
     let mut is_allowed = HashSet::<Handle>::new();
     let mut tfhe_event_log = vec![];
+    let block_hash = block_logs.summary.hash;
+    let block_number = block_logs.summary.number;
     for log in &block_logs.logs {
         let current_address = Some(log.inner.address);
         let is_acl_address = &current_address == acl_contract_address;
@@ -844,7 +858,9 @@ async fn db_insert_block_no_retry(
                     &mut tx,
                     &event,
                     &log.transaction_hash,
-                    &log.block_number,
+                    chain_id,
+                    block_hash.as_ref(),
+                    block_number,
                 )
                 .await?;
                 continue;
@@ -859,7 +875,7 @@ async fn db_insert_block_no_retry(
                     event,
                     transaction_hash: log.transaction_hash,
                     is_allowed: false, // updated in the next loop
-                    block_number: log.block_number,
+                    block_number,
                 };
                 tfhe_event_log.push(log);
                 continue;
@@ -993,6 +1009,7 @@ pub async fn main(args: Args) -> anyhow::Result<()> {
 
     while let Some(block_logs) = log_iter.next().await {
         let _ = db_insert_block(
+            chain_id,
             &mut db,
             &block_logs,
             &acl_contract_address,