canic-core 0.100.29

Canic — a canister orchestration and management toolkit for the Internet Computer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

//! Module: ops::component_runtime
//!
//! Responsibility: derive canonical evidence hashes for managed Component runtime authority.
//! Does not own: Directory validation, storage mutation, endpoint authorization, or activation.
//! Boundary: callers supply a complete passive authority and receive one domain-separated hash.

use crate::{
    InternalError, InternalErrorOrigin, dto::component_registry::ComponentRuntimeDirectoryAuthority,
};
use sha2::{Digest, Sha256};

///
/// ComponentRuntimeOps
///

pub struct ComponentRuntimeOps;

impl ComponentRuntimeOps {
    /// Hash one exact Fleet and Component Directory authority.
    pub fn directory_authority_hash(
        authority: &ComponentRuntimeDirectoryAuthority,
    ) -> Result<[u8; 32], InternalError> {
        const DOMAIN: &[u8] = b"canic.component-runtime.directory-authority.v1";
        let payload = candid::encode_one(authority).map_err(|error| {
            InternalError::invariant(
                InternalErrorOrigin::Ops,
                format!("Component runtime Directory authority cannot be encoded: {error}"),
            )
        })?;
        let mut hasher = Sha256::new();
        hasher.update(DOMAIN);
        hasher.update((payload.len() as u64).to_be_bytes());
        hasher.update(payload);
        Ok(hasher.finalize().into())
    }
}