Runbook Validator, Relayer e Multisig

bitsongd query hyperlane mailboxes --output json --node $NODE | jq '.mailboxes'
bitsongd query hyperlane hooks merkle-tree-hooks --output json --node $NODE | jq '.merkle_tree_hooks'
bitsongd query hyperlane hooks igps --output json --node $NODE | jq '.igps'
bitsongd query hyperlane ism isms --output json --node $NODE | jq '.isms'

export CHAIN_ID="crescendo-1"
export DOMAIN_ID="71717171"
export REMOTE_DOMAIN="84532"
export DENOM="utbtsg"
export NODE="tcp://178.104.0.132:26657"            # nodo pubblico BitSong (IP diretto)
export EVM_RPC="https://api.developer.coinbase.com/rpc/v1/base-sepolia/<API_KEY>"
export KEY_NAME="<tua-chiave>"

# Bridge (valori reali sopra)
export MAILBOX_ID="0x68797065726c616e650000000000000000000000000000000000000000000000"
export MERKLE_HOOK_ID="0x726f757465725f706f73745f6469737061746368000000030000000000000000"
export IGP_ID="0x726f757465725f706f73745f6469737061746368000000040000000000000001"
export ROUTING_ISM_ID="0x726f757465725f69736d00000000000000000000000000010000000000000001"

# AWS (validator/relayer in produzione)
export AWS_REGION="eu-central-1"
export S3_BUCKET="<tuo-bucket-checkpoint>"
export HYPERLANE_IMAGE="ghcr.io/hyperlane-xyz/hyperlane-agent:agents-v2.2.0"

docker run -d \
  --name hl-relayer --restart unless-stopped --network host \
  --user 0:0 --ulimit nofile=65536:65536 \
  --env-file $HOME/hl/agent.env \
  -e CONFIG_FILES=/config/agent-config.json \
  -v $HOME/hl/config/agent-config.json:/config/agent-config.json:ro \
  -v $HOME/hl/db/relayer:/hyperlane_db \
  $HYPERLANE_IMAGE ./relayer \
  --db /hyperlane_db --relayChains bitsong,basesepolia \
  --gasPaymentEnforcement '[{"type":"none"}]' \
  --chains.bitsong.signer.type cosmosKey --chains.bitsong.signer.key $COSMOS_SIGNER_KEY --chains.bitsong.signer.prefix bitsong \
  --chains.basesepolia.signer.type aws --chains.basesepolia.signer.region $AWS_REGION --chains.basesepolia.signer.id alias/hl-relayer \
  --metrics-port 9301 --log.format json --log.level info

docker logs -f --tail 100 hl-relayer

# Ordina V1,V2,V3 in modo crescente (per byte) prima di creare l'ISM
export V1="0x<addr-piu-basso>"; export V2="0x<addr-medio>"; export V3="0x<addr-piu-alto>"

# Nota: con --gas auto il binario stampa "gas estimate: N" prima del JSON → estrai il txhash così
TX_HASH=$(bitsongd tx hyperlane ism create-message-id-multisig "$V1,$V2,$V3" 2 \
    --from <owner-key> --keyring-backend test --chain-id $CHAIN_ID --node $NODE \
    --gas auto --gas-adjustment 1.5 --fees 10000${DENOM} --output json -y 2>&1 \
    | grep -o '"txhash":"[A-Fa-f0-9]*"' | head -1 | cut -d'"' -f4)
echo "TX: $TX_HASH"

NEW_ISM_ID=$(bitsongd query tx $TX_HASH --output json --node $NODE | \
  jq -r 'first(.events[] | select(.type | test("MultisigIsm")) | .attributes[] | select(.key=="ism_id") | .value | fromjson)')
echo "Nuovo MultisigISM (2/3): $NEW_ISM_ID"

ACTIVE_ISM=$(bitsongd query hyperlane ism isms --output json --node $NODE \
  | jq -r '.isms[] | select(."@type" | test("RoutingISM")) | .routes[] | select(.domain==84532) | .ism')
echo "ISM attuale (da sostituire): $ACTIVE_ISM"

bitsongd tx hyperlane ism remove-routing-ism-domain $ROUTING_ISM_ID $REMOTE_DOMAIN \
    --from <owner-key> --keyring-backend test --chain-id $CHAIN_ID --node $NODE \
    --gas auto --gas-adjustment 1.5 --fees 10000${DENOM} -y

bitsongd tx hyperlane ism set-routing-ism-domain $ROUTING_ISM_ID $REMOTE_DOMAIN $NEW_ISM_ID \
    --from <owner-key> --keyring-backend test --chain-id $CHAIN_ID --node $NODE \
    --gas auto --gas-adjustment 1.5 --fees 10000${DENOM} -y

ACTIVE_ISM=$(bitsongd query hyperlane ism isms --output json --node $NODE \
  | jq -r '.isms[] | select(."@type" | test("RoutingISM")) | .routes[] | select(.domain==84532) | .ism')
echo "ISM attivo: $ACTIVE_ISM  (atteso: $NEW_ISM_ID)"
bitsongd query hyperlane ism isms --output json --node $NODE \
  | jq --arg id "$ACTIVE_ISM" '.isms[] | select(.id==$id) | {id, validators, threshold}'

export HYP_ERC20_ADDR="0x27d0F8cBF125995f91407e9E5F70EF52c4412878"   # verifica l'indirizzo corrente
FACTORY="0xfc6e546510dC9d76057F1f76633FCFfC188CB213"
VALS="[$V1,$V2,$V3]"   # stessi 3 indirizzi, ordinati

# 1. Predici e deploya l'ISM 2/3 (qui con la KMS del relayer: AWS_KMS_KEY_ID=alias/hl-relayer ... --aws)
NEW_EVM_ISM=$(cast call $FACTORY "deploy(address[],uint8)(address)" "$VALS" 2 --rpc-url $EVM_RPC)
cast send $FACTORY "deploy(address[],uint8)" "$VALS" 2 --aws --rpc-url $EVM_RPC
echo "Nuovo ISM EVM: $NEW_EVM_ISM"

# 2. Aggancialo all'HypERC20 (OWNER key dell'HypERC20)
cast send $HYP_ERC20_ADDR "setInterchainSecurityModule(address)" $NEW_EVM_ISM \
    --private-key <owner-evm-key> --rpc-url $EVM_RPC

# 3. Verifica
cast call $HYP_ERC20_ADDR "interchainSecurityModule()(address)" --rpc-url $EVM_RPC

export TOKEN_ID="0x726f757465725f61707000000000000000000000000000010000000000000000"
export HYP_ERC20_ADDR="0x27d0F8cBF125995f91407e9E5F70EF52c4412878"

RECIPIENT_ADDR="0x<evm-recipient>"
RECIPIENT_BYTES32=$(printf "0x%064s" "${RECIPIENT_ADDR#0x}" | tr ' ' '0')

REQUIRED_FEE=$(bitsongd query hyperlane hooks quote-gas-payment $IGP_ID $REMOTE_DOMAIN 300000 -o json --node $NODE | jq -r '.gas_payment[0].amount')

bitsongd tx warp transfer $TOKEN_ID $REMOTE_DOMAIN $RECIPIENT_BYTES32 7777 \
    --max-hyperlane-fee "${REQUIRED_FEE}utbtsg" \
    --from $KEY_NAME --keyring-backend test --chain-id $CHAIN_ID --node $NODE \
    --gas auto --gas-adjustment 1.5 --fees 10000${DENOM} --output json -y

cast call "$HYP_ERC20_ADDR" "totalSupply()(uint256)" --rpc-url "$EVM_RPC"
cast call "$HYP_ERC20_ADDR" "balanceOf(address)(uint256)" "$RECIPIENT_ADDR" --rpc-url "$EVM_RPC"

# Destinatario Cosmos (bech32) → bytes32
COSMOS_RECIPIENT="bitsong1..."
ADDR_HEX=$(bitsongd keys parse "$COSMOS_RECIPIENT" 2>&1 | grep -i bytes | awk '{print $2}')
RECIPIENT_BYTES32="0x$(printf '%064s' "$ADDR_HEX" | tr ' ' '0')"

# Quota il gas EVM e brucia verso BitSong (dominio 71717171).
# Se il detentore è una chiave KMS, firma con --aws (AWS_KMS_KEY_ID=alias/…); altrimenti --private-key.
VAL=$(cast call "$HYP_ERC20_ADDR" "quoteGasPayment(uint32)(uint256)" $DOMAIN_ID --rpc-url $EVM_RPC)
cast send "$HYP_ERC20_ADDR" "transferRemote(uint32,bytes32,uint256)" \
    "$DOMAIN_ID" "$RECIPIENT_BYTES32" 4444 --value "$VAL" \
    --aws --rpc-url "$EVM_RPC"

bitsongd query bank balances "$COSMOS_RECIPIENT" --node $NODE --output json | jq '.balances'