canic-host 0.110.51

Host-side App build and desired-state Fleet reconciliation library for Canic workspaces
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! Module: fleet_ensure::policy::creation_fee
//!
//! Responsibility: reject ambiguous creation-fee authority before paid effects.
//! Boundary: inspects the exact operation's direct creates and Root forecasts;
//! existing canisters on unrelated subnets do not consume creation fees.

use crate::fleet_ensure::{
    model::{CanisterPlan, DesiredFleet, EnsureAction, EstateFundingDomainPlan},
    policy::EnsurePolicyError,
};
use std::collections::BTreeSet;

/// A scalar fee can authorize creation on at most one exact target subnet.
/// Checking both compilation and retained apply keeps old reviewed documents
/// from bypassing the same restriction. No numerical fee is inferred here.
pub fn validate_creation_fee_scope(
    desired: &DesiredFleet,
    canisters: &[CanisterPlan],
    domains: &[EstateFundingDomainPlan],
) -> Result<(), EnsurePolicyError> {
    let mut subnets = BTreeSet::new();
    for action in canisters.iter().flat_map(|canister| &canister.actions) {
        if let EnsureAction::Create { subnet, .. } = action {
            subnets.insert(subnet.clone());
        }
    }
    for domain in domains {
        if domain.required_creation_count == 0 && domain.pending_creation_count == 0 {
            continue;
        }
        let root = desired
            .canisters
            .iter()
            .find(|canister| canister.name == domain.root)
            .ok_or_else(|| EnsurePolicyError::EstateFundingTopology {
                reason: format!("creation forecast has no declared Root {}", domain.root),
            })?;
        subnets.insert(root.subnet.clone());
    }
    if subnets.len() > 1 {
        return Err(EnsurePolicyError::MixedSubnetCreationFees {
            subnets: subnets.into_iter().collect(),
        });
    }
    Ok(())
}