aranya-runtime 0.24.0

The Aranya core runtime
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

#![cfg(feature = "testing")]

use alloc::vec::Vec;
use core::convert::Infallible;

use aranya_crypto::{DeviceId, policy::CmdId};
use aranya_policy_vm::{CommandContext, MachineError, ffi::ffi};
use buggy::{BugExt as _, bug};

use crate::testing::hash_for_testing_only;

pub struct TestFfiEnvelope {
    pub device: DeviceId,
}

#[ffi(
    module = "envelope",
    def = r#"
struct Envelope {
    // The parent command ID.
    parent_id id,
    // The author's device ID.
    author_id id,
    // Uniquely identifies the command.
    command_id id,
    // The encoded command.
    payload bytes,
    // The signature over the command and its contextual
    // bindings.
    signature bytes,
}
"#
)]
impl TestFfiEnvelope {
    #[ffi_export(def = "function do_seal(payload bytes) struct Envelope")]
    fn seal<CE>(
        &self,
        ctx: &CommandContext,
        _eng: &CE,
        payload: Vec<u8>,
    ) -> Result<Envelope, MachineError> {
        #[derive(serde::Serialize)]
        struct HashedFields<'a> {
            parent_id: CmdId,
            author_id: DeviceId,
            payload: &'a [u8],
        }

        let CommandContext::Seal(ctx) = ctx else {
            bug!("envelope::do_seal called outside seal context");
        };

        let parent_id = ctx.head_id;
        let author_id = self.device;

        let data = postcard::to_allocvec(&HashedFields {
            parent_id,
            author_id,
            payload: &payload,
        })
        .assume("can serialize `HashedFields`")?;

        let command_id = hash_for_testing_only(&data);

        Ok(Envelope {
            parent_id: parent_id.as_base(),
            author_id: author_id.as_base(),
            command_id: command_id.as_base(),
            payload,
            // TODO(chip): use an actual signature
            signature: b"LOL".to_vec(),
        })
    }

    #[ffi_export(def = "function do_open(envelope_input struct Envelope) bytes")]
    fn open<CE>(
        &self,
        _ctx: &CommandContext,
        _eng: &CE,
        envelope_input: Envelope,
    ) -> Result<Vec<u8>, Infallible> {
        Ok(envelope_input.payload)
    }
}