canic-core 0.68.23

Canic — a canister orchestration and management toolkit for the Internet Computer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75

//! Module: workflow::rpc::capability::verifier
//!
//! Responsibility: route typed capability proofs to verifier implementations.
//! Does not own: envelope validation, request dispatch, or capability DTO schemas.
//! Boundary: applies proof-mode-specific checks against immutable request context.

use crate::{
    dto::{error::Error, rpc::Request},
    workflow::rpc::capability::{RootCapabilityProof, proof::verify_root_structural_proof},
};
use async_trait::async_trait;

///
/// VerifiedCapability
///
/// Marker output for successful proof verification.
///

pub(super) struct VerifiedCapability;

///
/// VerificationInput
///
/// Immutable verification context shared by all proof verifiers.
///

pub(super) struct VerificationInput<'a> {
    pub(super) capability: &'a Request,
}

///
/// CapabilityProofVerifier
///
/// Pluggable proof verifier contract for capability envelopes.
///

#[async_trait]
pub(super) trait CapabilityProofVerifier {
    /// Verify one proof mode against shared capability context.
    async fn verify(&self, input: &VerificationInput<'_>) -> Result<VerifiedCapability, Error>;
}

///
/// StructuralVerifier
///
/// Verifies topology-only structural proofs.
///

struct StructuralVerifier;

#[async_trait]
impl CapabilityProofVerifier for StructuralVerifier {
    /// Validate structural preconditions for supported capability families.
    async fn verify(&self, input: &VerificationInput<'_>) -> Result<VerifiedCapability, Error> {
        verify_root_structural_proof(input.capability)?;
        Ok(VerifiedCapability)
    }
}

///
/// verify_root_capability_proof
///
/// Route proof verification through the mode-specific verifier implementation.
///
pub(super) async fn verify_root_capability_proof(
    capability: &Request,
    _capability_version: u16,
    proof: RootCapabilityProof,
) -> Result<VerifiedCapability, Error> {
    let input = VerificationInput { capability };

    match proof {
        RootCapabilityProof::Structural => StructuralVerifier.verify(&input).await,
    }
}