d-bis/smom-dbis-138
4
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Standardize deployment env and deployer handling

Browse Source
This commit is contained in:
defiQUG
2026-04-22 14:47:28 -07:00
parent 768168de5e
commit c3d4c786fa
51 changed files with 424 additions and 621 deletions
Download Patch File Download Diff File Expand all files Collapse all files

93
scripts/lib/deployment/dotenv.sh
View File

@@ -12,6 +12,77 @@ _LIB_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
[[ -z "${PROJECT_ROOT:-}" ]] && PROJECT_ROOT="$(cd "$_LIB_DIR/../../.." && pwd)"
source "$_LIB_DIR/../forge-scope.sh"
_dep_dotenv_source() {
local f="$1"
[[ -f "$f" ]] || return 0
local had_nounset=0
if [[ $- == *u* ]]; then
had_nounset=1
set +u
fi
set -a
# shellcheck disable=SC1090
source "$f"
set +a
(( had_nounset )) && set -u
}
_dep_export_from_private_key() {
[[ -n "${DEPLOYER_ADDRESS:-}" || -z "${PRIVATE_KEY:-}" ]] && return 0
command -v cast >/dev/null 2>&1 || return 0
local deployer_addr
deployer_addr="$(cast wallet address "$PRIVATE_KEY" 2>/dev/null || true)"
[[ -n "$deployer_addr" ]] || return 0
export DEPLOYER_ADDRESS="$deployer_addr"
export DEPLOYER="${DEPLOYER:-$deployer_addr}"
}
normalize_private_key_env() {
[[ -n "${PRIVATE_KEY:-}" ]] || return 0
if [[ "${PRIVATE_KEY#0x}" == "$PRIVATE_KEY" ]]; then
export PRIVATE_KEY="0x$PRIVATE_KEY"
fi
}
require_private_key_env() {
local hint="${1:-Set PRIVATE_KEY in smom-dbis-138/.env, repo .env, or ~/.secure-secrets/private-keys.env.}"
normalize_private_key_env
if [[ -z "${PRIVATE_KEY:-}" ]]; then
echo "ERROR: PRIVATE_KEY not available. $hint" >&2
return 1
fi
return 0
}
derive_deployer_address() {
if [[ -n "${DEPLOYER_ADDRESS:-}" ]]; then
printf '%s\n' "$DEPLOYER_ADDRESS"
return 0
fi
normalize_private_key_env
if [[ -z "${PRIVATE_KEY:-}" ]]; then
return 1
fi
command -v cast >/dev/null 2>&1 || return 1
local deployer_addr
deployer_addr="$(cast wallet address "$PRIVATE_KEY" 2>/dev/null || true)"
[[ -n "$deployer_addr" ]] || return 1
export DEPLOYER_ADDRESS="$deployer_addr"
export DEPLOYER="${DEPLOYER:-$deployer_addr}"
printf '%s\n' "$deployer_addr"
}
require_deployer_address() {
local deployer_addr
require_private_key_env "${1:-Set PRIVATE_KEY in smom-dbis-138/.env, repo .env, or ~/.secure-secrets/private-keys.env.}" || return 1
deployer_addr="$(derive_deployer_address || true)"
if [[ -z "$deployer_addr" ]]; then
echo "ERROR: Could not derive DEPLOYER_ADDRESS from PRIVATE_KEY." >&2
return 1
fi
printf '%s\n' "$deployer_addr"
}
# Preferred .env: ENV_FILE if set and readable; else PROJECT_ROOT/.env (repo root).
load_deployment_env() {
local root="${PROJECT_ROOT}"
@@ -24,17 +95,9 @@ load_deployment_env() {
export PROJECT_ROOT="$root"
local dotenv="${root}/.env"
[[ -n "${ENV_FILE:-}" && -f "${ENV_FILE}" ]] && dotenv="${ENV_FILE}"
if [[ -f "$dotenv" ]]; then
local had_nounset=0
if [[ $- == *u* ]]; then
had_nounset=1
set +u
fi
set -a
# shellcheck disable=SC1090
source "$dotenv"
set +a
(( had_nounset )) && set -u
_dep_dotenv_source "$dotenv"
if [[ -z "${ENV_FILE:-}" ]]; then
_dep_dotenv_source "${root}/smom-dbis-138/.env"
fi
local secure_secrets_file="${SECURE_SECRETS_FILE:-$HOME/.secure-secrets/private-keys.env}"
if [[ -f "$secure_secrets_file" ]]; then
@@ -65,11 +128,17 @@ load_deployment_env() {
if [[ -z "${PRIVATE_KEY:-}" && -n "${DEPLOYER_PRIVATE_KEY:-}" ]]; then
export PRIVATE_KEY="$DEPLOYER_PRIVATE_KEY"
fi
normalize_private_key_env
_dep_export_from_private_key
export CHAIN_651940_RPC_URL="${CHAIN_651940_RPC_URL:-${ALL_MAINNET_RPC:-}}"
export CHAIN_651940_RPC="${CHAIN_651940_RPC:-${CHAIN_651940_RPC_URL:-${ALL_MAINNET_RPC:-}}}"
export ALLTRA_MAINNET_RPC="${ALLTRA_MAINNET_RPC:-${ALL_MAINNET_RPC:-${CHAIN_651940_RPC_URL:-${CHAIN_651940_RPC:-}}}}"
# Trailing CR/LF on RPC URL lines breaks cast/curl; strip common RPC vars after load.
local _k _v
for _k in RPC_URL_138 RPC_URL CHAIN138_RPC ETHEREUM_MAINNET_RPC GNOSIS_MAINNET_RPC GNOSIS_RPC \
CRONOS_RPC_URL CRONOS_RPC CELO_MAINNET_RPC CELO_RPC BSC_RPC_URL POLYGON_MAINNET_RPC \
BASE_MAINNET_RPC OPTIMISM_MAINNET_RPC ARBITRUM_MAINNET_RPC AVALANCHE_RPC_URL WEMIX_RPC WEMIX_MAINNET_RPC; do
BASE_MAINNET_RPC OPTIMISM_MAINNET_RPC ARBITRUM_MAINNET_RPC AVALANCHE_RPC_URL WEMIX_RPC WEMIX_MAINNET_RPC \
ALL_MAINNET_RPC ALLTRA_MAINNET_RPC CHAIN_651940_RPC CHAIN_651940_RPC_URL; do
_v="${!_k:-}"
[[ -z "$_v" ]] && continue
_v="${_v%$'\r'}"