feat: hgctl uam & rewards support (#227)

## User Access Management (UAM) Commands

Implements comprehensive User Access Management functionality for
EigenLayer PermissionController integration.

  Features

  Admin Management
  - Multi-admin support with two-step acceptance workflow
- Commands: add, accept, remove-admin, remove-pending, is-admin,
is-pending, list-admins, list-pending
  - Last admin protection prevents removing the final admin

  Appointee Management
  - Grant/revoke granular function-level permissions on target contracts
  - Commands: set, remove, list, list-permissions, can-call
  - Support for multiple appointees per function selector

  Testing

  - 13 admin lifecycle integration tests
- 18 appointee lifecycle integration tests covering multi-selector
scenarios
  - All tests passing with proper output capture

  Documentation

  - Comprehensive README section with lifecycle examples
  - Added 8 UAM commands to Key Commands Overview table
  - Detailed usage examples for both admin and appointee workflows

  Implementation Notes

  - Structured logging for proper test harness integration
  - Follows existing hgctl patterns and conventions
  
## Rewards Support 
- Feature parity with Eigenlayer-cli.

### Testing
Added comprehensive unit test coverage for rewards commands (setClaimer,
claim, show):

  - Set up mock generation infrastructure using gomock
  - Refactored commands to extract testable business logic functions
- Created 14 unit tests covering success paths, defaults, validation
errors, and client failures
  - All tests use interface-based mocking to bypass middleware
  - Created test logger utility for clean test output

Author: FromTheRain

contracts/script/local/CheckL1State.s.sol

@@ -108,7 +108,10 @@ contract CheckL1State is Script {
         console.log("");
     }
 
-    function checkOperatorSetConfig(address avs, uint32 operatorSetId) internal view {
+    function checkOperatorSetConfig(
+        address avs,
+        uint32 operatorSetId
+    ) internal view {
         OperatorSet memory operatorSet = OperatorSet({avs: avs, id: operatorSetId});
 
         // Check if table calculator is configured
@@ -170,7 +173,10 @@ contract CheckL1State is Script {
         console.log("");
     }
 
-    function checkStakerState(address staker, IStrategy strategy) internal view {
+    function checkStakerState(
+        address staker,
+        IStrategy strategy
+    ) internal view {
         console.log("Address:", staker);
 
         // Check deposited shares
@@ -215,7 +221,11 @@ contract CheckL1State is Script {
         console.log("");
     }
 
-    function checkOperatorState(address operator, address avs, uint32 operatorSetId) internal view {
+    function checkOperatorState(
+        address operator,
+        address avs,
+        uint32 operatorSetId
+    ) internal view {
         console.log("Address:", operator);
 
         OperatorSet memory operatorSet = OperatorSet({avs: avs, id: operatorSetId});
@@ -228,9 +238,9 @@ contract CheckL1State is Script {
         }
 
         // Check allocated magnitude for STETH strategy
-        try ALLOCATION_MANAGER.getAllocation(operator, operatorSet, STETH_STRATEGY) returns (
-            IAllocationManager.Allocation memory allocation
-        ) {
+        try ALLOCATION_MANAGER.getAllocation(
+            operator, operatorSet, STETH_STRATEGY
+        ) returns (IAllocationManager.Allocation memory allocation) {
             console.log("STETH allocation - current magnitude:", allocation.currentMagnitude);
             console.log("STETH allocation - pending diff:", uint256(uint128(allocation.pendingDiff)));
             console.log("STETH allocation - effect block:", allocation.effectBlock);
@@ -239,9 +249,9 @@ contract CheckL1State is Script {
         }
 
         // Check allocated magnitude for WETH strategy
-        try ALLOCATION_MANAGER.getAllocation(operator, operatorSet, WETH_STRATEGY) returns (
-            IAllocationManager.Allocation memory allocation
-        ) {
+        try ALLOCATION_MANAGER.getAllocation(
+            operator, operatorSet, WETH_STRATEGY
+        ) returns (IAllocationManager.Allocation memory allocation) {
             console.log("WETH allocation - current magnitude:", allocation.currentMagnitude);
             console.log("WETH allocation - pending diff:", uint256(uint128(allocation.pendingDiff)));
             console.log("WETH allocation - effect block:", allocation.effectBlock);
@@ -274,9 +284,10 @@ contract CheckL1State is Script {
         console.log("\n--- Executor Operator Set (ID: 1) ---");
 
         // Try to get operator infos
-        try IBN254TableCalculator(BN254_TABLE_CALCULATOR).getOperatorInfos(executorOpSet) returns (
-            IOperatorTableCalculatorTypes.BN254OperatorInfo[] memory operatorInfos
-        ) {
+        try IBN254TableCalculator(BN254_TABLE_CALCULATOR)
+            .getOperatorInfos(
+                executorOpSet
+            ) returns (IOperatorTableCalculatorTypes.BN254OperatorInfo[] memory operatorInfos) {
             console.log("Number of operators with BN254 keys:", operatorInfos.length);
 
             if (operatorInfos.length == 0) {
@@ -301,9 +312,10 @@ contract CheckL1State is Script {
 
         // Try to calculate the full operator table
         console.log("\n--- Calculated Operator Table ---");
-        try IBN254TableCalculator(BN254_TABLE_CALCULATOR).calculateOperatorTable(executorOpSet) returns (
-            IOperatorTableCalculatorTypes.BN254OperatorSetInfo memory opSetInfo
-        ) {
+        try IBN254TableCalculator(BN254_TABLE_CALCULATOR)
+            .calculateOperatorTable(
+                executorOpSet
+            ) returns (IOperatorTableCalculatorTypes.BN254OperatorSetInfo memory opSetInfo) {
             console.log("Operator Info Tree Root:");
             console.logBytes32(opSetInfo.operatorInfoTreeRoot);
             console.log("Number of operators:", opSetInfo.numOperators);
@@ -341,10 +353,11 @@ contract CheckL1State is Script {
         for (uint256 i = 0; i < potentialVerifiers.length && verifierAddress == address(0); i++) {
             if (potentialVerifiers[i] == address(0)) continue;
 
-            try IBN254CertificateVerifier(potentialVerifiers[i]).getOperatorSetInfo(
-                executorOpSet,
-                0 // timestamp 0 as a probe
-            ) returns (IOperatorTableCalculatorTypes.BN254OperatorSetInfo memory) {
+            try IBN254CertificateVerifier(potentialVerifiers[i])
+                .getOperatorSetInfo(
+                    executorOpSet,
+                    0 // timestamp 0 as a probe
+                ) returns (IOperatorTableCalculatorTypes.BN254OperatorSetInfo memory) {
                 verifierAddress = potentialVerifiers[i];
             } catch {
                 // This address doesn't work, try next
@@ -372,9 +385,10 @@ contract CheckL1State is Script {
         }
 
         // Try to get operator set info for the executor operator set
-        try IBN254CertificateVerifier(verifierAddress).getOperatorSetInfo(executorOpSet, latestTimestamp) returns (
-            IOperatorTableCalculatorTypes.BN254OperatorSetInfo memory opSetInfo
-        ) {
+        try IBN254CertificateVerifier(verifierAddress)
+            .getOperatorSetInfo(
+                executorOpSet, latestTimestamp
+            ) returns (IOperatorTableCalculatorTypes.BN254OperatorSetInfo memory opSetInfo) {
             console.log("\n--- Stored Operator Set Info ---");
             console.log("Operator Info Tree Root:");
             console.logBytes32(opSetInfo.operatorInfoTreeRoot);

contracts/script/local/CheckL2State.s.sol

@@ -80,9 +80,9 @@ contract CheckL2State is Script {
 
         IBN254CertificateVerifier verifier = IBN254CertificateVerifier(bn254Verifier);
 
-        try verifier.getOperatorSetInfo(bn254OpSet, timestamp) returns (
-            IBN254CertificateVerifier.BN254OperatorSetInfo memory info
-        ) {
+        try verifier.getOperatorSetInfo(
+            bn254OpSet, timestamp
+        ) returns (IBN254CertificateVerifier.BN254OperatorSetInfo memory info) {
             console.log("\nOperator Set Info Retrieved:");
             console.log("  Number of operators:", info.numOperators);
 

contracts/script/local/CreateTask.s.sol

@@ -9,7 +9,10 @@ import {ITaskMailbox, ITaskMailboxTypes} from "@eigenlayer-contracts/src/contrac
 contract CreateTask is Script {
     function setUp() public {}
 
-    function run(address taskMailbox, address avs) public {
+    function run(
+        address taskMailbox,
+        address avs
+    ) public {
         // Load the private key from the environment variable
         uint256 appPrivateKey = vm.envUint("PRIVATE_KEY_APP");
         address app = vm.addr(appPrivateKey);
@@ -20,9 +23,7 @@ contract CreateTask is Script {
         // Call createTask
         OperatorSet memory executorOperatorSet = OperatorSet({avs: avs, id: 1});
         ITaskMailboxTypes.TaskParams memory taskParams = ITaskMailboxTypes.TaskParams({
-            refundCollector: app,
-            executorOperatorSet: executorOperatorSet,
-            payload: bytes("Hello World")
+            refundCollector: app, executorOperatorSet: executorOperatorSet, payload: bytes("Hello World")
         });
         bytes32 taskHash = ITaskMailbox(taskMailbox).createTask(taskParams);
         console.log("Created task with hash:");

contracts/script/local/DeployAVSL1Contracts.s.sol

@@ -37,8 +37,7 @@ contract DeployAVSL1Contracts is Script {
         uint32[] memory executorOperatorSetIds = new uint32[](1);
         executorOperatorSetIds[0] = 1;
         ITaskAVSRegistrarBaseTypes.AvsConfig memory initialConfig = ITaskAVSRegistrarBaseTypes.AvsConfig({
-            aggregatorOperatorSetId: 0,
-            executorOperatorSetIds: executorOperatorSetIds
+            aggregatorOperatorSetId: 0, executorOperatorSetIds: executorOperatorSetIds
         });
 
         // Deploy ProxyAdmin

contracts/script/local/DeployTaskMailbox.s.sol

@@ -16,7 +16,10 @@ contract DeployTaskMailbox is Script {
 
     IAllocationManager public ALLOCATION_MANAGER = IAllocationManager(0x948a420b8CC1d6BFd0B6087C2E7c344a2CD0bc39);
 
-    function run(address bn254CertVerifier, address ecdsaCertVerifier) public {
+    function run(
+        address bn254CertVerifier,
+        address ecdsaCertVerifier
+    ) public {
         // Load the private key from the environment variable
         uint256 deployerPrivateKey = vm.envUint("PRIVATE_KEY_DEPLOYER");
         address deployer = vm.addr(deployerPrivateKey);

contracts/script/local/RegisterOperator.s.sol

@@ -65,9 +65,7 @@ contract RegisterOperator is Script {
         ALLOCATION_MANAGER.registerForOperatorSets(
             operator,
             IAllocationManagerTypes.RegisterParams({
-                avs: avsAddr,
-                operatorSetIds: operatorSetIds,
-                data: abi.encode(socket)
+                avs: avsAddr, operatorSetIds: operatorSetIds, data: abi.encode(socket)
             })
         );
         console.log(

contracts/script/local/SetupAVSTaskMailboxConfig.s.sol

@@ -13,7 +13,10 @@ import {IAVSTaskHook} from "@eigenlayer-contracts/src/contracts/interfaces/IAVST
 contract SetupAVSTaskMailboxConfig is Script {
     function setUp() public {}
 
-    function run(address taskMailbox, address taskHook) public {
+    function run(
+        address taskMailbox,
+        address taskHook
+    ) public {
         // Load the private key from the environment variable
         uint256 avsPrivateKey = vm.envUint("PRIVATE_KEY_AVS");
         address avs = vm.addr(avsPrivateKey);
@@ -22,19 +25,19 @@ contract SetupAVSTaskMailboxConfig is Script {
         console.log("AVS address:", avs);
 
         // Set the Executor Operator Set Task Config
-        ITaskMailboxTypes.ExecutorOperatorSetTaskConfig memory executorOperatorSetTaskConfig = ITaskMailboxTypes
-            .ExecutorOperatorSetTaskConfig({
-            taskHook: IAVSTaskHook(taskHook),
-            taskSLA: 60,
-            feeToken: IERC20(address(0)),
-            curveType: IKeyRegistrarTypes.CurveType.BN254,
-            feeCollector: address(0),
-            consensus: ITaskMailboxTypes.Consensus({
-                consensusType: ITaskMailboxTypes.ConsensusType.STAKE_PROPORTION_THRESHOLD,
-                value: abi.encode(uint16(10_000))
-            }),
-            taskMetadata: bytes("")
-        });
+        ITaskMailboxTypes.ExecutorOperatorSetTaskConfig memory executorOperatorSetTaskConfig =
+            ITaskMailboxTypes.ExecutorOperatorSetTaskConfig({
+                taskHook: IAVSTaskHook(taskHook),
+                taskSLA: 60,
+                feeToken: IERC20(address(0)),
+                curveType: IKeyRegistrarTypes.CurveType.BN254,
+                feeCollector: address(0),
+                consensus: ITaskMailboxTypes.Consensus({
+                    consensusType: ITaskMailboxTypes.ConsensusType.STAKE_PROPORTION_THRESHOLD,
+                    value: abi.encode(uint16(10_000))
+                }),
+                taskMetadata: bytes("")
+            });
         ITaskMailbox(taskMailbox).setExecutorOperatorSetTaskConfig(OperatorSet(avs, 1), executorOperatorSetTaskConfig);
         ITaskMailboxTypes.ExecutorOperatorSetTaskConfig memory executorOperatorSetTaskConfigStored =
             ITaskMailbox(taskMailbox).getExecutorOperatorSetTaskConfig(OperatorSet(avs, 1));

hgctl-go/Makefile

@@ -66,6 +66,20 @@ lint: ## Run linter
 	@go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
 	@golangci-lint run $(GO_PACKAGES)
 
+.PHONY: deps
+deps: ## Install development dependencies
+	@echo "Installing mockgen..."
+	@$(GO) install go.uber.org/mock/mockgen@latest
+	@echo "Dependencies installed"
+
+.PHONY: gen-mocks
+gen-mocks: ## Generate mocks for testing
+	@echo "Generating mocks..."
+	@mkdir -p internal/mocks
+	@mockgen -source=internal/client/rewards.go -destination=internal/mocks/mock_rewards_client.go -package=mocks RewardsClientInterface
+	@mockgen -source=internal/client/contract.go -destination=internal/mocks/mock_contract_client.go -package=mocks ContractClientInterface
+	@echo "Mocks generated successfully"
+
 install: build ## Install binary
 	@mkdir -p ~/bin
 	@cp $(BIN)/$(APP_NAME) ~/bin/