From 2453d0a460b700bca5513b2a9a333ec45a1a966c Mon Sep 17 00:00:00 2001
From: Hussein Ait Lahcen <hussein.aitlahcen@gmail.com>
Date: Wed, 29 May 2024 16:25:28 +0200
Subject: [PATCH] feat(galois): introduce wrapped standalone binary

---
 galoisd/galoisd.nix | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/galoisd/galoisd.nix b/galoisd/galoisd.nix
index 4e561d46ef..fefea247d4 100644
--- a/galoisd/galoisd.nix
+++ b/galoisd/galoisd.nix
@@ -97,7 +97,7 @@
           text = ''
             ${ensureAtRepositoryRoot}
 
-            if [[ -f "./.devnet/circuit/r1cs.bin" && -f "./.devnet/circuit/pk.bin" && -f "./.devnet/circuit/vk.bin" ]] 
+            if [[ -f "./.devnet/circuit/r1cs.bin" && -f "./.devnet/circuit/pk.bin" && -f "./.devnet/circuit/vk.bin" ]]
             then
               echo "Circuit is already downloaded"
               exit 0
@@ -110,6 +110,28 @@
             ${pkgs.lib.getExe self'.packages.download-circuit} .
           '';
         };
+
+      # Beware this is only valid for the `serve` command of galoisd
+      galoisd-testnet-standalone =
+        let
+          unpackCircuit = circuit: pkgs.runCommand "galoisd-circuit-${circuit.name}-unpacked" { buildInputs = [ pkgs.unzip ]; } ''
+            unzip ${circuit} -d $out
+          '';
+          unpacked-circuit = unpackCircuit (pkgs.fetchurl {
+            url = "https://circuit.cryptware.io/testnet.zip";
+            hash = "sha256-ImDwglgLdRjd9pxg5B7w2KNSPm1+kTu2k20yw8Rjtzc=";
+          });
+        in
+        mkCi false (pkgs.symlinkJoin {
+          name = "galoisd";
+          paths = [ self'.packages.galoisd ];
+          buildInputs = [ pkgs.makeWrapper ];
+          postBuild = ''
+            wrapProgram $out/bin/galoisd \
+              --append-flags "--cs-path ${unpacked-circuit}/r1cs.bin --vk-path ${unpacked-circuit}/vk.bin --pk-path ${unpacked-circuit}/pk.bin" \
+              --set SSL_CERT_FILE "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+          '';
+        });
     };
   };
 }