d-bis/proxmox
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add MEV executor readiness and deploy tooling

Browse Source
This commit is contained in:
defiQUG
2026-04-13 12:45:19 -07:00
parent 400bfe799f
commit 43a30cb7c5
4 changed files with 165 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

108
scripts/deployment/deploy-mev-execution-contracts.sh
View File

@@ -10,6 +10,8 @@ RPC_URL="${RPC_URL:-}"
PRIVATE_KEY="${PRIVATE_KEY:-}"
FLASH_LOAN_PROVIDER="${FLASH_LOAN_PROVIDER:-}"
TREASURY="${TREASURY:-}"
EXECUTOR_OWNER="${EXECUTOR_OWNER:-}"
PAUSE_ON_DEPLOY="${PAUSE_ON_DEPLOY:-1}"
CONFIG_PATH="${MEV_CONFIG_PATH:-$CONFIG_PATH_DEFAULT}"
OUTPUT_PATH="${MEV_EXECUTION_DEPLOY_OUTPUT:-$OUTPUT_DEFAULT}"
DRY_RUN=0
@@ -30,6 +32,8 @@ Required env or options:
Optional env or options:
TREASURY Treasury address; defaults to deployer in Foundry script
EXECUTOR_OWNER Optional final owner; deploy initiates 2-step ownership transfer
PAUSE_ON_DEPLOY 1/true to pause immediately after deploy (default: 1)
MEV_CONFIG_PATH Config file to inspect for current values
MEV_EXECUTION_DEPLOY_OUTPUT Output JSON path
@@ -38,6 +42,8 @@ Options:
--private-key KEY
--flash-loan-provider ADDRESS
--treasury ADDRESS
--executor-owner ADDRESS
--pause-on-deploy BOOL
--config PATH
--output PATH
--dry-run
@@ -63,6 +69,14 @@ while [[ $# -gt 0 ]]; do
TREASURY="$2"
shift 2
;;
--executor-owner)
EXECUTOR_OWNER="$2"
shift 2
;;
--pause-on-deploy)
PAUSE_ON_DEPLOY="$2"
shift 2
;;
--config)
CONFIG_PATH="$2"
shift 2
@@ -97,6 +111,7 @@ require_cmd() {
require_cmd forge
require_cmd jq
require_cmd python3
require_cmd cast
if [[ -z "$RPC_URL" ]]; then
echo "RPC_URL is required" >&2
@@ -122,6 +137,10 @@ mkdir -p "$(dirname "$OUTPUT_PATH")"
CHAIN_ID="$(cast chain-id --rpc-url "$RPC_URL")"
BROADCAST_PATH="$CONTRACTS_DIR/broadcast/Deploy.s.sol/$CHAIN_ID/run-latest.json"
DEPLOYER_ADDRESS=""
if [[ -n "$PRIVATE_KEY" ]]; then
DEPLOYER_ADDRESS="$(cast wallet address --private-key "$PRIVATE_KEY")"
fi
cat <<EOF
MEV execution contract deployment
@@ -131,6 +150,9 @@ output artifact: $OUTPUT_PATH
chain id: $CHAIN_ID
flash loan provider: $FLASH_LOAN_PROVIDER
treasury: ${TREASURY:-"(defaults to deployer)"}
executor owner: ${EXECUTOR_OWNER:-"(deployer remains owner)"}
pause on deploy: $PAUSE_ON_DEPLOY
deployer address: ${DEPLOYER_ADDRESS:-"(not resolved in dry-run without private key)"}
mode: $( [[ "$DRY_RUN" -eq 1 ]] && echo "dry-run" || echo "broadcast" )
EOF
@@ -141,6 +163,10 @@ if [[ "$DRY_RUN" -eq 1 ]]; then
if [[ -n "$TREASURY" ]]; then
printf 'TREASURY=%q ' "$TREASURY"
fi
if [[ -n "$EXECUTOR_OWNER" ]]; then
printf 'EXECUTOR_OWNER=%q ' "$EXECUTOR_OWNER"
fi
printf 'PAUSE_ON_DEPLOY=%q ' "$PAUSE_ON_DEPLOY"
printf 'forge script script/Deploy.s.sol --rpc-url %q --private-key %q --broadcast\n' "$RPC_URL" '${PRIVATE_KEY}'
exit 0
fi
@@ -148,9 +174,13 @@ fi
(
cd "$CONTRACTS_DIR"
export FLASH_LOAN_PROVIDER
export PAUSE_ON_DEPLOY
if [[ -n "$TREASURY" ]]; then
export TREASURY
fi
if [[ -n "$EXECUTOR_OWNER" ]]; then
export EXECUTOR_OWNER
fi
forge script script/Deploy.s.sol --rpc-url "$RPC_URL" --private-key "$PRIVATE_KEY" --broadcast
)
@@ -159,43 +189,60 @@ if [[ ! -f "$BROADCAST_PATH" ]]; then
exit 1
fi
python3 - "$BROADCAST_PATH" "$OUTPUT_PATH" "$CONFIG_PATH" "$FLASH_LOAN_PROVIDER" "$TREASURY" "$CHAIN_ID" <<'PY'
EXECUTOR_CONTRACT="$(jq -r '.transactions[] | select(.contractName=="ArbitrageExecutor") | .contractAddress' "$BROADCAST_PATH" | tail -1)"
UNISWAP_V2_ADAPTER="$(jq -r '.transactions[] | select(.contractName=="UniswapV2Adapter") | .contractAddress' "$BROADCAST_PATH" | tail -1)"
if [[ -z "$EXECUTOR_CONTRACT" || "$EXECUTOR_CONTRACT" == "null" || -z "$UNISWAP_V2_ADAPTER" || "$UNISWAP_V2_ADAPTER" == "null" ]]; then
echo "Could not extract deployed contract addresses from broadcast artifact" >&2
exit 1
fi
ONCHAIN_OWNER="$(cast call "$EXECUTOR_CONTRACT" "owner()(address)" --rpc-url "$RPC_URL" 2>/dev/null || true)"
ONCHAIN_PENDING_OWNER="$(cast call "$EXECUTOR_CONTRACT" "pendingOwner()(address)" --rpc-url "$RPC_URL" 2>/dev/null || true)"
ONCHAIN_PAUSED="$(cast call "$EXECUTOR_CONTRACT" "paused()(bool)" --rpc-url "$RPC_URL" 2>/dev/null || true)"
ONCHAIN_PROVIDER="$(cast call "$EXECUTOR_CONTRACT" "flashLoanProvider()(address)" --rpc-url "$RPC_URL" 2>/dev/null || true)"
ONCHAIN_TREASURY="$(cast call "$EXECUTOR_CONTRACT" "treasury()(address)" --rpc-url "$RPC_URL" 2>/dev/null || true)"
python3 - "$OUTPUT_PATH" "$CONFIG_PATH" "$BROADCAST_PATH" "$CHAIN_ID" "$EXECUTOR_CONTRACT" "$UNISWAP_V2_ADAPTER" "$FLASH_LOAN_PROVIDER" "$TREASURY" "$DEPLOYER_ADDRESS" "$EXECUTOR_OWNER" "$PAUSE_ON_DEPLOY" "$ONCHAIN_OWNER" "$ONCHAIN_PENDING_OWNER" "$ONCHAIN_PAUSED" "$ONCHAIN_PROVIDER" "$ONCHAIN_TREASURY" <<'PY'
import json
import re
import sys
from pathlib import Path
broadcast_path = Path(sys.argv[1])
output_path = Path(sys.argv[2])
config_path = Path(sys.argv[3])
flash_loan_provider = sys.argv[4]
treasury = sys.argv[5] or None
chain_id = int(sys.argv[6])
data = json.loads(broadcast_path.read_text())
transactions = data.get("transactions", [])
executor = None
adapter = None
for tx in transactions:
contract_name = tx.get("contractName")
address = tx.get("contractAddress")
if contract_name == "ArbitrageExecutor" and address:
executor = address
elif contract_name == "UniswapV2Adapter" and address:
adapter = address
if not executor or not adapter:
raise SystemExit("Could not extract deployed contract addresses from broadcast artifact")
output_path = Path(sys.argv[1])
config_path = Path(sys.argv[2])
broadcast_path = Path(sys.argv[3])
chain_id = int(sys.argv[4])
executor_contract = sys.argv[5]
uniswap_v2_adapter = sys.argv[6]
flash_loan_provider = sys.argv[7]
treasury = sys.argv[8] or None
deployer_address = sys.argv[9] or None
executor_owner = sys.argv[10] or None
pause_on_deploy = sys.argv[11]
onchain_owner = sys.argv[12] or None
onchain_pending_owner = sys.argv[13] or None
onchain_paused = sys.argv[14] or None
onchain_provider = sys.argv[15] or None
onchain_treasury = sys.argv[16] or None
artifact = {
"chain_id": chain_id,
"broadcast_artifact": str(broadcast_path),
"config_path": str(config_path),
"executor_contract": executor,
"uniswap_v2_adapter": adapter,
"executor_contract": executor_contract,
"uniswap_v2_adapter": uniswap_v2_adapter,
"flash_loan_provider": flash_loan_provider,
"treasury": treasury,
"deployer_address": deployer_address,
"requested_executor_owner": executor_owner,
"pause_on_deploy": pause_on_deploy,
"onchain": {
"owner": onchain_owner,
"pending_owner": onchain_pending_owner,
"paused": onchain_paused,
"flash_loan_provider": onchain_provider,
"treasury": onchain_treasury,
},
}
output_path.write_text(json.dumps(artifact, indent=2) + "\n")
@@ -206,12 +253,15 @@ print("")
print(json.dumps(artifact, indent=2))
print("")
print("next config values:")
print(f'chains.{chain_id}.execution.executor_contract = "{executor}"')
print(f'chains.{chain_id}.execution.executor_contract = "{executor_contract}"')
print(f'chains.{chain_id}.execution.flash_loan_provider = "{flash_loan_provider}"')
print("")
print("next operator checks:")
print(f"- verify code exists at {executor}")
print(f"- confirm the signer EOA is the executor owner")
print(f"- verify code exists at {executor_contract}")
print(f"- verify owner(): {onchain_owner}")
if onchain_pending_owner and onchain_pending_owner.lower() != "0x0000000000000000000000000000000000000000":
print(f"- pendingOwner() is set to {onchain_pending_owner}; that address must call acceptOwnership()")
print(f"- verify paused(): {onchain_paused}")
print("- set router addresses for every V2-style dex used by execution")
print("- keep MEV_SUBMIT_DISABLED=1 until signer/config readiness is green")
PY

71
scripts/verify/check-mev-execution-readiness.sh
View File

@@ -10,6 +10,7 @@ ENV_PATH="${MEV_ENV_FILE:-$ENV_DEFAULT}"
BASE_URL="${MEV_BASE_URL:-}"
API_KEY="${MEV_API_KEY:-}"
CHAIN_ID="${MEV_CHAIN_ID:-1}"
RPC_URL_OVERRIDE="${MEV_RPC_URL:-}"
usage() {
cat <<'EOF'
@@ -26,6 +27,7 @@ Options:
--base URL Optional admin API base URL, e.g. https://mev.defi-oracle.io
--api-key KEY Optional API key for protected routes
--chain ID Chain ID to inspect (default: 1)
--rpc-url URL Optional RPC URL for on-chain executor checks
-h, --help Show this help
Exit codes:
@@ -57,6 +59,10 @@ while [[ $# -gt 0 ]]; do
CHAIN_ID="$2"
shift 2
;;
--rpc-url)
RPC_URL_OVERRIDE="$2"
shift 2
;;
-h|--help)
usage
exit 0
@@ -79,7 +85,7 @@ if [[ ! -f "$ENV_PATH" ]]; then
exit 2
fi
python3 - "$CONFIG_PATH" "$ENV_PATH" "$BASE_URL" "$API_KEY" "$CHAIN_ID" <<'PY'
python3 - "$CONFIG_PATH" "$ENV_PATH" "$BASE_URL" "$API_KEY" "$CHAIN_ID" "$RPC_URL_OVERRIDE" <<'PY'
import json
import os
import subprocess
@@ -93,6 +99,7 @@ env_path = Path(sys.argv[2])
base_url = sys.argv[3].rstrip("/")
api_key = sys.argv[4]
chain_id = sys.argv[5]
rpc_url_override = sys.argv[6]
def parse_env_file(path: Path) -> dict[str, str]:
@@ -117,6 +124,19 @@ def is_zero_address(value: str | None) -> bool:
}
def run_cast_call(address: str, signature: str, rpc_url: str) -> str | None:
try:
result = subprocess.run(
["cast", "call", address, signature, "--rpc-url", rpc_url],
check=True,
capture_output=True,
text=True,
)
except Exception: # noqa: BLE001
return None
return result.stdout.strip() or None
config = tomllib.loads(config_path.read_text())
env_values = parse_env_file(env_path)
chain_key = str(chain_id)
@@ -154,6 +174,7 @@ else:
executor_contract = execution.get("executor_contract", "")
flash_loan_provider = execution.get("flash_loan_provider", "")
relay_url = execution.get("relay_url", "")
rpc_url = rpc_url_override or chain.get("rpc_url", "")
add_row(
f"chains.{chain_key}.execution.executor_contract",
str(config_path),
@@ -198,6 +219,54 @@ else:
if is_zero_address(router):
issues.append(f"chain {chain_key}: router missing for dex {dex}")
if rpc_url and not is_zero_address(executor_contract):
owner = run_cast_call(executor_contract, "owner()(address)", rpc_url)
pending_owner = run_cast_call(executor_contract, "pendingOwner()(address)", rpc_url)
paused = run_cast_call(executor_contract, "paused()(bool)", rpc_url)
onchain_provider = run_cast_call(executor_contract, "flashLoanProvider()(address)", rpc_url)
onchain_treasury = run_cast_call(executor_contract, "treasury()(address)", rpc_url)
if owner is None:
add_row(f"chains.{chain_key}.onchain.owner", rpc_url, "(unavailable)", "missing")
issues.append(f"chain {chain_key}: failed to read owner() from executor")
else:
add_row(f"chains.{chain_key}.onchain.owner", rpc_url, owner, "ok")
if signer_address and owner.lower() != signer_address.lower():
issues.append(f"chain {chain_key}: executor owner does not match signer address")
if pending_owner is None:
add_row(f"chains.{chain_key}.onchain.pendingOwner", rpc_url, "(unavailable)", "missing")
issues.append(f"chain {chain_key}: failed to read pendingOwner() from executor")
else:
pending_status = "ok" if is_zero_address(pending_owner) else "blocking"
add_row(f"chains.{chain_key}.onchain.pendingOwner", rpc_url, pending_owner, pending_status)
if not is_zero_address(pending_owner):
issues.append(f"chain {chain_key}: pendingOwner must accept ownership")
if paused is None:
add_row(f"chains.{chain_key}.onchain.paused", rpc_url, "(unavailable)", "missing")
issues.append(f"chain {chain_key}: failed to read paused() from executor")
else:
paused_normalized = paused.lower()
paused_status = "ok" if paused_normalized == "false" else "blocking"
add_row(f"chains.{chain_key}.onchain.paused", rpc_url, paused, paused_status)
if paused_normalized != "false":
issues.append(f"chain {chain_key}: executor is paused")
if onchain_provider is None:
add_row(f"chains.{chain_key}.onchain.flashLoanProvider", rpc_url, "(unavailable)", "missing")
issues.append(f"chain {chain_key}: failed to read flashLoanProvider() from executor")
else:
provider_status = "ok" if onchain_provider.lower() == flash_loan_provider.lower() else "blocking"
add_row(f"chains.{chain_key}.onchain.flashLoanProvider", rpc_url, onchain_provider, provider_status)
if onchain_provider.lower() != flash_loan_provider.lower():
issues.append(f"chain {chain_key}: on-chain flashLoanProvider does not match config")
if onchain_treasury is None:
add_row(f"chains.{chain_key}.onchain.treasury", rpc_url, "(unavailable)", "missing")
else:
add_row(f"chains.{chain_key}.onchain.treasury", rpc_url, onchain_treasury, "ok")
print("MEV execution readiness")
print(f"config: {config_path}")
print(f"env: {env_path}")