fips-core 0.4.0

Reusable FIPS mesh, endpoint, transport, and protocol library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134

use super::*;

fn advert(
    npub: &str,
    epoch: u8,
    capabilities: Vec<LocalInstanceCapability>,
) -> LocalInstanceAdvertisement {
    LocalInstanceAdvertisement {
        npub: npub.to_string(),
        startup_epoch: [epoch; 8],
        capabilities,
    }
}

#[test]
fn default_config_uses_one_disabled_fixed_loopback_anchor() {
    let config = LocalInstanceDiscoveryConfig::default();

    assert!(!config.enabled);
    assert_eq!(
        config.rendezvous_addr,
        "127.0.0.1:21211".parse::<std::net::SocketAddrV4>().unwrap()
    );
    assert!(config.has_valid_rendezvous_addr());
    assert_eq!(config.retry_interval_ms, 1_000);
}

#[test]
fn config_allows_test_port_but_rejects_obsolete_filesystem_fields() {
    let config: LocalInstanceDiscoveryConfig = serde_json::from_str(
        r#"{"enabled":true,"rendezvous_addr":"127.0.0.1:32112","retry_interval_ms":7}"#,
    )
    .unwrap();

    assert_eq!(config.rendezvous_addr.port(), 32_112);
    assert_eq!(config.retry_interval_ms, 7);
    assert!(
        serde_json::from_str::<LocalInstanceDiscoveryConfig>(
            r#"{"enabled":true,"dir":"/tmp/fips"}"#
        )
        .is_err()
    );

    let mut invalid = config;
    invalid.rendezvous_addr = "0.0.0.0:21211".parse().unwrap();
    assert!(!invalid.has_valid_rendezvous_addr());
}

#[test]
fn directory_clones_share_deterministic_in_memory_snapshots() {
    let directory = LocalCapabilityDirectory::new();
    let clone = directory.clone();
    directory.upsert(advert(
        "npub-z",
        1,
        vec![LocalInstanceCapability::service("hashtree.blob/1", 39_018)],
    ));
    clone.upsert(advert(
        "npub-a",
        2,
        vec![LocalInstanceCapability::service("nostr.pubsub/1", 7_368)],
    ));

    assert_eq!(
        directory
            .snapshot()
            .into_iter()
            .map(|provider| provider.npub)
            .collect::<Vec<_>>(),
        ["npub-a", "npub-z"]
    );
    assert_eq!(clone.snapshot().len(), 2);
}

#[test]
fn replace_is_atomic_and_last_duplicate_identity_wins() {
    let directory = LocalCapabilityDirectory::new();
    directory.upsert(advert("npub-old", 1, Vec::new()));
    directory.replace([
        advert("npub-provider", 1, Vec::new()),
        advert("npub-provider", 2, Vec::new()),
    ]);

    assert_eq!(directory.snapshot().len(), 1);
    assert_eq!(directory.snapshot()[0].startup_epoch, [2; 8]);
}

#[test]
fn service_provider_priority_and_ties_are_deterministic() {
    let service = |priority| {
        LocalInstanceCapability::service("hashtree.blob/1", 39_018).with_priority(priority)
    };
    let adverts = vec![
        advert("npub-z", 1, vec![service(20)]),
        advert("npub-b", 1, vec![service(30)]),
        advert("npub-a", 2, vec![service(30)]),
        advert(
            "npub-unrelated",
            1,
            vec![LocalInstanceCapability::service("nostr.pubsub/1", 7_368)],
        ),
    ];

    assert_eq!(
        rank_capability_providers(&adverts, "hashtree.blob/1")
            .into_iter()
            .map(|provider| provider.npub.as_str())
            .collect::<Vec<_>>(),
        ["npub-a", "npub-b", "npub-z"]
    );
    assert_eq!(
        select_capability_provider(&adverts, "hashtree.blob/1")
            .unwrap()
            .npub,
        "npub-a"
    );
}

#[test]
fn provider_prefers_its_highest_priority_duplicate_capability() {
    let provider = advert(
        "npub-provider",
        1,
        vec![
            LocalInstanceCapability::service("hashtree.blob/1", 40_000).with_priority(1),
            LocalInstanceCapability::service("hashtree.blob/1", 39_018).with_priority(2),
        ],
    );

    assert_eq!(
        provider.capability("hashtree.blob/1").unwrap().fsp_port,
        Some(39_018)
    );
}