cmd/rofl: Add set-trust-root subcommand

Add a `set-trust-root` subcommand that writes the consensus trust root
(block height and hash) into the deployment section of the rofl.yaml
manifest. The block height and hash may be passed as positional
arguments; when omitted, the latest finalized block is used, and when
only the height is given, the corresponding hash is fetched from the
network.

The naming and positional-argument style mirror `oasis network
set-chain-context`.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: anzoman

cmd/rofl/rofl.go

@@ -25,6 +25,7 @@ func init() {
 	Cmd.AddCommand(listCmd)
 	Cmd.AddCommand(setDefaultCmd)
 	Cmd.AddCommand(trustRootCmd)
+	Cmd.AddCommand(setTrustRootCmd)
 	Cmd.AddCommand(build.Cmd)
 	Cmd.AddCommand(identityCmd)
 	Cmd.AddCommand(secretCmd)

cmd/rofl/set_trust_root.go

@@ -0,0 +1,82 @@
+package rofl
+
+import (
+	"context"
+	"fmt"
+	"strconv"
+
+	"github.com/spf13/cobra"
+
+	consensus "github.com/oasisprotocol/oasis-core/go/consensus/api"
+	"github.com/oasisprotocol/oasis-sdk/client-sdk/go/connection"
+
+	buildRofl "github.com/oasisprotocol/cli/build/rofl"
+	"github.com/oasisprotocol/cli/cmd/common"
+	roflCommon "github.com/oasisprotocol/cli/cmd/rofl/common"
+)
+
+var setTrustRootCmd = &cobra.Command{
+	Use:   "set-trust-root [height] [hash]",
+	Short: "Set the trust root in the rofl.yaml manifest",
+	Long: "Set the consensus block height and hash of the trust root in the rofl.yaml manifest.\n\n" +
+		"If no arguments are passed, the latest finalized block is used. If only the height is\n" +
+		"passed, the corresponding block hash is fetched from the network.",
+	Args: cobra.RangeArgs(0, 2),
+	Run: func(_ *cobra.Command, args []string) {
+		// Load manifest and deployment, and configure network/paratime/account selection.
+		manifest, deployment, npa := roflCommon.LoadManifestAndSetNPA(nil)
+
+		var (
+			height uint64
+			hash   string
+		)
+		switch len(args) {
+		case 2:
+			// Both height and hash passed; set them directly without querying the network.
+			h, err := strconv.ParseUint(args[0], 10, 64)
+			if err != nil {
+				cobra.CheckErr(fmt.Errorf("malformed height: %w", err))
+			}
+			height = h
+			hash = args[1]
+		default:
+			// Determine the block height to query (latest by default).
+			queryHeight := consensus.HeightLatest
+			if len(args) == 1 {
+				h, err := strconv.ParseInt(args[0], 10, 64)
+				if err != nil {
+					cobra.CheckErr(fmt.Errorf("malformed height: %w", err))
+				}
+				queryHeight = h
+			}
+
+			// Establish connection with the target network and fetch the block.
+			ctx := context.Background()
+			conn, err := connection.Connect(ctx, npa.Network)
+			cobra.CheckErr(err)
+
+			blk, err := conn.Consensus().Core().GetBlock(ctx, queryHeight)
+			cobra.CheckErr(err)
+
+			height = uint64(blk.Height)
+			hash = blk.Hash.Hex()
+		}
+
+		if deployment.TrustRoot == nil {
+			deployment.TrustRoot = &buildRofl.TrustRootConfig{}
+		}
+		deployment.TrustRoot.Height = height
+		deployment.TrustRoot.Hash = hash
+
+		if err := manifest.Save(); err != nil {
+			cobra.CheckErr(fmt.Errorf("failed to update manifest: %w", err))
+		}
+
+		fmt.Printf("Updated '%s' with trust root: height=%d, hash=%s\n", manifest.SourceFileName(), height, hash)
+	},
+}
+
+func init() {
+	setTrustRootCmd.Flags().AddFlagSet(common.SelectorNPFlags)
+	setTrustRootCmd.Flags().AddFlagSet(roflCommon.DeploymentFlags)
+}

cmd/rofl/set_trust_root_test.go

@@ -0,0 +1,32 @@
+package rofl
+
+import "testing"
+
+func TestSetTrustRootUse(t *testing.T) {
+	if got, want := setTrustRootCmd.Name(), "set-trust-root"; got != want {
+		t.Fatalf("unexpected command name: got %q, want %q", got, want)
+	}
+}
+
+func TestSetTrustRootCommandRegistered(t *testing.T) {
+	found := false
+	for _, c := range Cmd.Commands() {
+		if c == setTrustRootCmd || c.Name() == "set-trust-root" {
+			found = true
+			break
+		}
+	}
+	if !found {
+		t.Fatalf("set-trust-root command not registered under rofl.Cmd")
+	}
+}
+
+func TestSetTrustRootCommandFlags(t *testing.T) {
+	// The command should expose selector flags (network/paratime) and deployment flags.
+	names := []string{"network", "paratime", "no-paratime", "deployment"}
+	for _, n := range names {
+		if setTrustRootCmd.Flags().Lookup(n) == nil {
+			t.Errorf("expected flag %q to be present", n)
+		}
+	}
+}