feat: ensure light client uniqueness for each rollup (#130)

* feat: ensure light client uniqueness for each rollup

* chore: update basecoin rev

* nit: add gogoproto.moretags for genesis_state_root

clients/sov-celestia-cw/src/tests/fixture.rs

@@ -89,7 +89,6 @@ impl Fixture {
             .build();
 
         let sov_client_state = ClientStateConfig::builder()
-            .rollup_id(self.chain_id.clone())
             .latest_height(self.trusted_height)
             .tendermint_params(tendermint_params)
             .build();

clients/sov-celestia/src/client_state/execution.rs

@@ -77,7 +77,7 @@ where
         substitute_client_state: Any,
     ) -> Result<(), ClientError> {
         update_on_recovery(
-            self.inner(),
+            self.inner().clone(),
             ctx,
             subject_client_id,
             substitute_client_state,
@@ -206,7 +206,7 @@ where
 }
 
 pub fn update_state_on_upgrade<E>(
-    _client_state: &SovTmClientState,
+    client_state: &SovTmClientState,
     ctx: &mut E,
     client_id: &ClientId,
     upgraded_client_state: Any,
@@ -222,16 +222,24 @@ where
 
     upgraded_client_state.zero_custom_fields();
 
-    // Construct new client state and consensus state relayer chosen client
-    // parameters are ignored. All chain-chosen parameters come from
-    // committed client, all client-chosen parameters come from current
-    // client.
+    // Constructs the new client state. All rollup-chosen parameters come from
+    // `upgraded_client_state` except the `genesis_state_root`. All
+    // relayer-chosen parameters come from the current client.
+    let new_da_params = TmClientParams::new(
+        upgraded_client_state.da_params.chain_id,
+        client_state.da_params.trust_level,
+        client_state.da_params.trusting_period,
+        upgraded_client_state.da_params.unbonding_period,
+        client_state.da_params.max_clock_drift,
+    );
+
     let new_client_state = SovTmClientState::new(
-        upgraded_client_state.rollup_id,
+        client_state.genesis_state_root.clone(),
+        upgraded_client_state.code_commitment,
         upgraded_client_state.latest_height,
         None,
         upgraded_client_state.upgrade_path,
-        upgraded_client_state.da_params,
+        new_da_params,
     );
 
     // The new consensus state is merely used as a trusted kernel against
@@ -287,7 +295,7 @@ where
 /// verified substitute client state in response to a successful client
 /// recovery.
 pub fn update_on_recovery<E>(
-    subject_client_state: &SovTmClientState,
+    subject_client_state: SovTmClientState,
     ctx: &mut E,
     subject_client_id: &ClientId,
     substitute_client_state: Any,
@@ -303,17 +311,18 @@ where
     let trusting_period = substitute_client_state.da_params.trusting_period;
     let latest_height = substitute_client_state.latest_height;
 
-    let new_client_state = SovTmClientState {
-        rollup_id: subject_client_state.rollup_id.clone(),
+    let new_client_state = SovTmClientState::new(
+        subject_client_state.genesis_state_root,
+        subject_client_state.code_commitment,
         latest_height,
-        frozen_height: None,
-        upgrade_path: subject_client_state.upgrade_path.clone(),
-        da_params: TmClientParams {
+        None,
+        subject_client_state.upgrade_path,
+        TmClientParams {
             chain_id,
             trusting_period,
             ..subject_client_state.da_params
         },
-    };
+    );
 
     let host_timestamp = E::host_timestamp(ctx)?;
     let host_height = E::host_height(ctx)?;

clients/sov-celestia/src/client_state/misbehaviour.rs

@@ -1,21 +1,20 @@
 use ibc_client_tendermint::client_state::verify_misbehaviour_header;
 use ibc_client_tendermint::context::TmVerifier;
 use ibc_core::client::types::error::ClientError;
-use ibc_core::host::types::identifiers::{ChainId, ClientId};
+use ibc_core::host::types::identifiers::ClientId;
 use ibc_core::host::types::path::ClientConsensusStatePath;
 use sov_celestia_client_types::client_message::SovTmMisbehaviour;
-use tendermint_light_client_verifier::options::Options;
+use sov_celestia_client_types::client_state::SovTmClientState;
 
 use crate::context::{ConsensusStateConverter, ValidationContext as SovValidationContext};
 
 /// Determines whether or not two conflicting headers at the same height would
 /// have convinced the light client.
 pub fn verify_misbehaviour<V>(
     ctx: &V,
+    client_state: &SovTmClientState,
     misbehaviour: &SovTmMisbehaviour,
     client_id: &ClientId,
-    chain_id: &ChainId,
-    options: &Options,
     verifier: &impl TmVerifier,
 ) -> Result<(), ClientError>
 where
@@ -52,8 +51,8 @@ where
 
     verify_misbehaviour_header(
         &header_1.da_header,
-        chain_id,
-        options,
+        client_state.chain_id(),
+        &client_state.as_light_client_options()?,
         trusted_consensus_state_1.timestamp(),
         trusted_consensus_state_1.da_params.next_validators_hash,
         current_timestamp,
@@ -62,8 +61,8 @@ where
 
     verify_misbehaviour_header(
         &header_2.da_header,
-        chain_id,
-        options,
+        client_state.chain_id(),
+        &client_state.as_light_client_options()?,
         trusted_consensus_state_2.timestamp(),
         trusted_consensus_state_2.da_params.next_validators_hash,
         current_timestamp,

clients/sov-celestia/src/client_state/update_client.rs

@@ -4,7 +4,10 @@ use ibc_core::client::types::error::ClientError;
 use ibc_core::client::types::Height;
 use ibc_core::host::types::identifiers::{ChainId, ClientId};
 use ibc_core::host::types::path::ClientConsensusStatePath;
-use sov_celestia_client_types::client_message::SovTmHeader;
+use sov_celestia_client_types::client_message::{
+    AggregatedProof, CodeCommitment, Root, SovTmHeader,
+};
+use sov_celestia_client_types::client_state::SovTmClientState;
 use sov_celestia_client_types::consensus_state::SovTmConsensusState;
 use sov_celestia_client_types::error::IntoResult;
 use tendermint_light_client_verifier::options::Options;
@@ -17,10 +20,9 @@ use crate::context::{ConsensusStateConverter, ValidationContext as SovValidation
 /// of the DA header and the aggregated proof date validation.
 pub fn verify_header<V>(
     ctx: &V,
+    client_state: &SovTmClientState,
     header: &SovTmHeader,
     client_id: &ClientId,
-    chain_id: &ChainId,
-    options: &Options,
     verifier: &impl TmVerifier,
 ) -> Result<(), ClientError>
 where
@@ -34,13 +36,17 @@ where
         ctx,
         &header.da_header,
         client_id,
-        chain_id,
-        options,
+        client_state.chain_id(),
+        &client_state.as_light_client_options()?,
         verifier,
     )?;
 
-    // TODO: Implement the verification of the `AggregatedProof`.
-    // aggregated_proof.verify()?;
+    verify_aggregated_proof(
+        ctx,
+        client_state.genesis_state_root(),
+        client_state.code_commitment(),
+        &header.aggregated_proof,
+    )?;
 
     Ok(())
 }
@@ -126,6 +132,34 @@ where
     Ok(())
 }
 
+pub fn verify_aggregated_proof<V>(
+    _ctx: &V,
+    genesis_state_root: &Root,
+    code_commitment: &CodeCommitment,
+    aggregated_proof: &AggregatedProof,
+) -> Result<(), ClientError>
+where
+    V: SovValidationContext,
+    V::ConsensusStateRef: ConsensusStateConverter,
+{
+    if !genesis_state_root.matches(aggregated_proof.genesis_state_root()) {
+        return Err(ClientError::Other {
+            description: "genesis state root does not match".to_string(),
+        });
+    }
+
+    if !code_commitment.matches(aggregated_proof.code_commitment()) {
+        return Err(ClientError::Other {
+            description: "code commitment does not match".to_string(),
+        });
+    }
+
+    // TODO: Implement the verification of the `AggregatedProof`.
+    // aggregated_proof.verify()?;
+
+    Ok(())
+}
+
 /// Checks for DA misbehaviour upon receiving a new consensus state as part of a
 /// client update.
 pub fn check_da_misbehaviour_on_update<V>(