canic-host 0.110.42

Host-side App build and desired-state Fleet reconciliation library for Canic workspaces
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

//! Materialize exact sealed Candid into the maintained selected-environment binding layout.

use crate::{
    durable_io, fleet_ensure::model::DesiredFleet, local_fleet::LocalFleetError, release_set,
};
use canic_core::cdk::utils::hash::{hex_bytes, sha256_hex};
use std::path::Path;

fn failure(error: impl std::fmt::Display) -> LocalFleetError {
    LocalFleetError::Preparation(error.to_string())
}

/// Reuse the complete selected release manifests; a missing or altered sidecar never gets rebuilt.
pub fn stage(workspace: &Path, desired: &DesiredFleet) -> Result<(), LocalFleetError> {
    let bootstrap = desired
        .bootstrap
        .as_ref()
        .ok_or(LocalFleetError::Identity)?;
    let protocol = desired.protocol.as_ref().ok_or(LocalFleetError::Identity)?;
    let release = bootstrap.release_build_id;
    let current = release_set::load_persisted_current_release_set_manifest(workspace, release)
        .map_err(failure)?;
    let infrastructure =
        release_set::load_persisted_canic_infrastructure_artifact_manifest(workspace, release)
            .map_err(failure)?;
    let config = release_set::AppConfigSnapshot::load(&workspace.join(&protocol.app_config))
        .map_err(failure)?;
    let deployment = config
        .model()
        .compile_component_deployment_configuration()
        .map_err(failure)?;
    let application = release_set::load_persisted_application_artifact_union(
        workspace,
        &deployment.component_topology,
        release,
    )
    .map_err(failure)?;
    if infrastructure.digest != current.manifest.infrastructure_artifact_manifest_sha256
        || application.digest != current.manifest.application_artifact_union_sha256
    {
        return Err(LocalFleetError::Identity);
    }
    for entry in &infrastructure.manifest.entries {
        publish(
            workspace,
            &desired.environment,
            entry.protocol_role.as_str(),
            &entry.wasm_relative_path,
            entry.candid_sha256,
        )?;
    }
    for entry in &application.union.entries {
        publish(
            workspace,
            &desired.environment,
            entry.role.as_str(),
            &entry.wasm_relative_path,
            entry.candid_sha256,
        )?;
    }
    Ok(())
}

fn publish(
    workspace: &Path,
    environment: &str,
    role: &str,
    wasm: &str,
    digest: [u8; 32],
) -> Result<(), LocalFleetError> {
    crate::component_operation::policy::validate_label(role)
        .map_err(|_| LocalFleetError::Identity)?;
    release_set::validate_release_artifact_relative_path(wasm).map_err(failure)?;
    let bytes = durable_io::read_regular_bytes(
        &workspace.join(wasm).with_extension("did"),
        crate::frontend::ops::MAX_FRONTEND_FILE_BYTES,
    )?;
    if sha256_hex(&bytes) != hex_bytes(digest) {
        return Err(LocalFleetError::Identity);
    }
    let destination = crate::icp::local_canister_candid_path(workspace, environment, role);
    durable_io::write_bytes(&destination, &bytes)?;
    Ok(())
}