Merge pull request #223 from Lay3rLabs/221-add-script-for-transferring-ownership-of-all-contracts

Supeeerpower · web-flow · commit d8c13204bc8c · 2025-08-06T13:13:19.000+02:00
221 Transfer Ownership Script
diff --git a/README.md b/README.md
@@ -260,6 +260,34 @@ docker run --rm --network host -v ./.nodes:/root/.nodes \
 | `REGISTRY_ADDRESS`   | if not mounted        | From `.nodes/avs_deploy.json` | Volume | AVS registrar address                         |
 | `FUNDED_KEY`         | if not mounted        | From `.nodes/deployer`        | Volume | Deployer private key                          |
 
+### Transfer Ownership
+
+Transfers ownership of the service contracts to new owners.
+
+```bash
+PROXY_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+PROXY_OWNER_ADDRESS=$(cast wallet addr --private-key "$PROXY_OWNER")
+echo "Proxy owner address: $PROXY_OWNER_ADDRESS"
+AVS_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+AVS_OWNER_ADDRESS=$(cast wallet addr --private-key "$AVS_OWNER")
+echo "Avs owner address: $AVS_OWNER_ADDRESS"
+
+# WAVS_SERVICE_MANAGER_ADDRESS=$(jq -r '.addresses.WavsServiceManager' .nodes/avs_deploy.json)
+
+docker run --rm --network host -v ./.nodes:/root/.nodes \
+   --env-file .env \
+   wavs-middleware transfer_ownership ${PROXY_OWNER} ${AVS_OWNER}
+```
+
+| Environment Variable           | Required              | Default                       | Source | Description                                    |
+| ------------------------------ | --------------------- | ----------------------------- | ------ | ---------------------------------------------- |
+| `DEPLOY_ENV`                   | for non-default value | `LOCAL`                       | `.env` | Deployment environment (`LOCAL` or `TESTNET`)  |
+| `RPC_URL`                      | for non-default value | `http://localhost:8545`       | `.env` | RPC URL                                        |
+| `WAVS_SERVICE_MANAGER_ADDRESS` | if not mounted        | From `.nodes/avs_deploy.json` | volume | Service manager contract address               |
+| `FUNDED_KEY`                   | if not mounted        | From `.nodes/deployer`        | Volume | Deployer private key                           |
+| `PROXY_OWNER`                  | Yes                   | -                             | Params | New owner for proxy admin                      |
+| `AVS_OWNER`                    | Yes                   | -                             | Params | New owner for AVS registrar and stake registry |
+
 ### Delegate to Operator
 
 Delegates tokens to an operator.
@@ -433,6 +461,32 @@ docker run --rm --network host -v ./.nodes:/root/.nodes \
 | `DEPLOY_FILE_MOCK`             | for non-default value | `mock`                      | Command line | File name to store mock deployment            |
 | `CONFIGURE_FILE`               | for non-default value | `wavs-mock-config`          | Command line | File name to read configuration data          |
 
+### 5. Mock Transfer Ownership
+
+Transfers ownership of the mock service contracts to new owners.
+
+```bash
+PROXY_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+PROXY_OWNER_ADDRESS=$(cast wallet addr --private-key "$PROXY_OWNER")
+echo "Proxy owner address: $PROXY_OWNER_ADDRESS"
+AVS_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+AVS_OWNER_ADDRESS=$(cast wallet addr --private-key "$AVS_OWNER")
+echo "Avs owner address: $AVS_OWNER_ADDRESS"
+
+docker run --rm --network host -v ./.nodes:/root/.nodes \
+   --env-file .env \
+   wavs-middleware -m mock transfer_ownership ${PROXY_OWNER} ${AVS_OWNER}
+```
+
+| Environment Variable           | Required              | Default                     | Source       | Description                                    |
+| ------------------------------ | --------------------- | --------------------------- | ------------ | ---------------------------------------------- |
+| `DEPLOY_ENV`                   | for non-default value | `LOCAL`                     | `.env`       | Deployment environment (`LOCAL` or `TESTNET`)  |
+| `MOCK_RPC_URL`                 | for non-default value | `http://localhost:8546`     | Command line | RPC URL for mock blockchain                    |
+| `MOCK_DEPLOYER_KEY`            | if not mounted        | From `.nodes/mock-deployer` | Volume       | Deployer private key                           |
+| `WAVS_SERVICE_MANAGER_ADDRESS` | if not mounted        | From `.nodes/mock.json`     | Volume       | Service manager contract address               |
+| `PROXY_OWNER`                  | Yes                   | -                           | Params       | New owner for proxy admin                      |
+| `AVS_OWNER`                    | Yes                   | -                           | Params       | New owner for AVS registrar and stake registry |
+
 ## Deploy Testnet
 
 Same as the local deploy, change `DEPLOY_ENV` to `"TESTNET"` and make sure the `FUNDED_KEY` is actually funded on testnet
diff --git a/docker/ECDSA_CLI.md b/docker/ECDSA_CLI.md
@@ -121,14 +121,24 @@ docker run --rm --network host -v ./.nodes:/root/.nodes \
 docker run --rm --network host -v ./.nodes:/root/.nodes \
    --env-file .env \
    wavs-middleware unpause
+
+PROXY_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+PROXY_OWNER_ADDRESS=$(cast wallet addr --private-key "$PROXY_OWNER")
+echo "Proxy owner address: $PROXY_OWNER_ADDRESS"
+AVS_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+AVS_OWNER_ADDRESS=$(cast wallet addr --private-key "$AVS_OWNER")
+echo "Avs owner address: $AVS_OWNER_ADDRESS"
+
+docker run --rm --network host -v ./.nodes:/root/.nodes \
+   --env-file .env \
+   wavs-middleware transfer_ownership ${PROXY_OWNER} ${AVS_OWNER}
 ```
 
 ```bash
 MOCK_DEPLOYER_KEY=$(cast wallet new --json | jq -r '.[0].private_key')
 MOCK_DEPLOYER_ADDRESS=$(cast wallet addr --private-key "$MOCK_DEPLOYER_KEY")
 
 docker run --rm --network host -v ./.nodes:/root/.nodes \
-   --env-file .env \
    -e MOCK_DEPLOYER_KEY=${MOCK_DEPLOYER_KEY} \
    wavs-middleware -m mock deploy
 
@@ -137,4 +147,14 @@ docker run --rm --network host -v ./.nodes:/root/.nodes \
    -v $LOCAL_CONFIG_PATH:/wavs/contracts/deployments/wavs-mock-config.json \
    --env-file .env \
    wavs-middleware -m mock configure
+
+PROXY_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+PROXY_OWNER_ADDRESS=$(cast wallet addr --private-key "$PROXY_OWNER")
+echo "Proxy owner address: $PROXY_OWNER_ADDRESS"
+AVS_OWNER=$(cast wallet new --json | jq -r '.[0].private_key')
+AVS_OWNER_ADDRESS=$(cast wallet addr --private-key "$AVS_OWNER")
+echo "Avs owner address: $AVS_OWNER_ADDRESS"
+
+docker run --rm --network host -v ./.nodes:/root/.nodes \
+   wavs-middleware -m mock transfer_ownership ${PROXY_OWNER} ${AVS_OWNER}
 ```
diff --git a/justfile b/justfile
@@ -5,4 +5,10 @@ help:
 
 # builds middleware
 docker-build TAG="local":
-    {{SUDO}} docker build . -t ghcr.io/lay3rlabs/wavs-middleware:{{TAG}}
+  {{SUDO}} docker build . -t ghcr.io/lay3rlabs/wavs-middleware:{{TAG}}
+
+docker-push TAG="local":
+  {{SUDO}} docker push ghcr.io/lay3rlabs/wavs-middleware:{{TAG}}
+
+dos2unix:
+  find ./scripts -type f -exec dos2unix {} +
diff --git a/scripts/ecdsa/eigen/transfer_ownership.sh b/scripts/ecdsa/eigen/transfer_ownership.sh
@@ -0,0 +1,39 @@
+#!/bin/bash
+
+# -x echos all lines for debug
+# set -x
+
+set -o errexit -o nounset -o pipefail
+command -v shellcheck >/dev/null && shellcheck "$0"
+
+SCRIPT_DIR="$(realpath "$(dirname "$0")")"
+# shellcheck source=../../helper.sh
+# shellcheck disable=SC1091
+source "$SCRIPT_DIR/../../helper.sh"
+
+# shellcheck source=../foundry_profile.sh
+# shellcheck disable=SC1091
+source "$SCRIPT_DIR/../foundry_profile.sh"
+
+# Parse command line arguments in key=value format
+parse_args "$@"
+
+# Check required parameters with defaults
+check_param "DEPLOY_ENV" "${DEPLOY_ENV:-LOCAL}"
+DEFAULT_SERVICE_MANAGER=$(jq -r '.addresses.WavsServiceManager' "$HOME/.nodes/avs_deploy.json" 2>/dev/null || true)
+check_param "WAVS_SERVICE_MANAGER_ADDRESS" "${WAVS_SERVICE_MANAGER_ADDRESS:-$DEFAULT_SERVICE_MANAGER}"
+check_param "PROXY_OWNER" "${PROXY_OWNER:-$1}"
+check_param "AVS_OWNER" "${AVS_OWNER:-$2}"
+
+# Set up environment based on DEPLOY_ENV
+setup_environment
+
+# Read the deployer private key
+deployer_private_key=$(load_deployment_data "$HOME/.nodes/deployer")
+check_param "FUNDED_KEY" "${FUNDED_KEY:-$deployer_private_key}"
+deployer_address=$(cast wallet address "$FUNDED_KEY")
+echo "Deployer address: $deployer_address"
+
+ensure_balance "$deployer_address"
+
+transfer_ecdsa_ownership "$WAVS_SERVICE_MANAGER_ADDRESS" "$PROXY_OWNER" "$AVS_OWNER" "$FUNDED_KEY" "eigen"
diff --git a/scripts/ecdsa/mock/transfer_ownership.sh b/scripts/ecdsa/mock/transfer_ownership.sh
@@ -0,0 +1,43 @@
+#!/bin/bash
+
+# -x echos all lines for debug
+# set -x
+
+set -o errexit -o nounset -o pipefail
+command -v shellcheck >/dev/null && shellcheck "$0"
+
+SCRIPT_DIR="$(realpath "$(dirname "$0")")"
+# shellcheck source=../../helper.sh
+# shellcheck disable=SC1091
+source "$SCRIPT_DIR/../../helper.sh"
+
+# shellcheck source=../foundry_profile.sh
+# shellcheck disable=SC1091
+source "$SCRIPT_DIR/../foundry_profile.sh"
+
+# Parse command line arguments in key=value format
+parse_args "$@"
+
+# Check required parameters with defaults
+check_param "DEPLOY_ENV" "${DEPLOY_ENV:-LOCAL}"
+DEFAULT_SERVICE_MANAGER=$(jq -r '.addresses.WavsServiceManager' "$HOME/.nodes/mock.json" 2>/dev/null || true)
+check_param "WAVS_SERVICE_MANAGER_ADDRESS" "${WAVS_SERVICE_MANAGER_ADDRESS:-$DEFAULT_SERVICE_MANAGER}"
+check_param "PROXY_OWNER" "${PROXY_OWNER:-$1}"
+check_param "AVS_OWNER" "${AVS_OWNER:-$2}"
+
+# Set up environment based on DEPLOY_ENV
+if [ "$DEPLOY_ENV" = "TESTNET" ]; then
+    check_param "RPC_URL" "${MOCK_RPC_URL:-}"
+else
+    check_param "RPC_URL" "${MOCK_RPC_URL:-http://localhost:8546}"
+fi
+
+# Read the deployer private key
+deployer_private_key=$(load_deployment_data "$HOME/.nodes/mock-deployer")
+check_param "MOCK_DEPLOYER_KEY" "${MOCK_DEPLOYER_KEY:-$deployer_private_key}"
+mock_deployer_address=$(cast wallet address "$MOCK_DEPLOYER_KEY")
+echo "Deployer address: $mock_deployer_address"
+
+ensure_balance "$mock_deployer_address"
+
+transfer_ecdsa_ownership "$WAVS_SERVICE_MANAGER_ADDRESS" "$PROXY_OWNER" "$AVS_OWNER" "$MOCK_DEPLOYER_KEY" "mock"
diff --git a/scripts/helper.sh b/scripts/helper.sh
@@ -144,3 +144,54 @@ load_deployment_data() {
         fi
     fi
 }
+
+transfer_ecdsa_ownership() {
+    # Arguments (all optional, will fallback to env/params if not provided)
+    # $1 - WAVS_SERVICE_MANAGER_ADDRESS
+    # $2 - PROXY_OWNER
+    # $3 - AVS_OWNER
+    # $4 - FUNDED_KEY
+
+    local wsm_address="${1}"
+    local proxy_owner="${2}"
+    local avs_owner="${3}"
+    local funded_key="${4}"
+    local mode="${5}"
+
+    local avs_registrar_address
+    if [ "$mode" == "eigen" ]; then
+        # Get the AllocationManager address from the WAVS Service Manager
+        local allocation_manager_address
+        allocation_manager_address=$(cast call "$wsm_address" "getAllocationManager()(address)" --rpc-url "$RPC_URL")
+        echo "Allocation manager address: $allocation_manager_address"
+        # Get the AVS Registrar address from the AllocationManager for the WAVS Service Manager
+        avs_registrar_address=$(cast call "$allocation_manager_address" "getAVSRegistrar(address)(address)" "$wsm_address" --rpc-url "$RPC_URL")
+        echo "AVS registrar address: $avs_registrar_address"
+    fi
+    # Get the StakeRegistry address from the WAVS Service Manager
+    local stake_registry_address
+    stake_registry_address=$(cast call "$wsm_address" "getStakeRegistry()(address)" --rpc-url "$RPC_URL")
+    echo "Stake registry address: $stake_registry_address"
+
+    # Get the ProxyAdmin of the WAVS Service Manager
+    local proxy_admin_address
+    proxy_admin_address=$(cast storage "$wsm_address" "0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103" --rpc-url "$RPC_URL" | tail -n1 | sed 's/^0x000000000000000000000000//')
+    proxy_admin_address="0x$proxy_admin_address"
+    echo "Proxy admin address: $proxy_admin_address"
+
+    echo "Transferring proxy ownership to $proxy_owner"
+    cast send "$proxy_admin_address" "transferOwnership(address)" "$proxy_owner" --private-key "$funded_key" --rpc-url "$RPC_URL"
+
+    if [ "$mode" == "eigen" ]; then
+        echo "Transferring avs registrar ownership to $avs_owner"
+        cast send "$avs_registrar_address" "transferOwnership(address)" "$avs_owner" --private-key "$funded_key" --rpc-url "$RPC_URL"
+    fi
+
+    echo "Transferring stake registry ownership to $avs_owner"
+    cast send "$stake_registry_address" "transferOwnership(address)" "$avs_owner" --private-key "$funded_key" --rpc-url "$RPC_URL"
+
+    echo "Transferring allocation manager ownership to $avs_owner"
+    cast send "$wsm_address" "transferOwnership(address)" "$avs_owner" --private-key "$funded_key" --rpc-url "$RPC_URL"
+
+    echo "Ownership transferred successfully"
+}
