ic-query 0.94.0

Internet Computer query library for CloudEngine, NNS, SNS, ICRC, system canisters, and public network metadata
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96

use super::*;
use crate::{cache_file::create_managed_parent_directory, tests::temp_dir};
use std::fs;
#[cfg(all(feature = "sns-host", unix))]
use std::os::unix::fs::{PermissionsExt, symlink};

#[cfg(feature = "sns-host")]
#[test]
fn collection_discovery_requires_a_complete_candidate_and_entry_scan() {
    let root = temp_dir("ic-query-collection-scan-limit");
    let network = root.join("sns/ic");
    for entity in ["b", "a"] {
        super::super::write_managed_text_atomically(
            &root,
            &network.join(entity).join("proposals/full.json"),
            "{}",
        )
        .unwrap();
    }
    let paths =
        collect_managed_collection_files(&root, &network, "proposals", "full.json", 2).unwrap();
    assert_eq!(
        paths,
        vec![
            network.join("a/proposals/full.json"),
            network.join("b/proposals/full.json")
        ]
    );
    super::super::write_managed_text_atomically(
        &root,
        &network.join("c/proposals/full.json"),
        "{}",
    )
    .unwrap();
    assert!(matches!(
        collect_managed_collection_files(&root, &network, "proposals", "full.json", 2),
        Err(CacheFileError::ScanLimitExceeded {
            resource: "collection candidates",
            maximum: 2,
            ..
        })
    ));
    // Nonmatching entities must consume the entry allowance too.
    for entity in 0..14 {
        create_managed_parent_directory(&root, &network.join(entity.to_string()).join("probe"))
            .unwrap();
    }
    assert!(matches!(
        collect_managed_collection_files(&root, &network, "neurons", "full.json", 1),
        Err(CacheFileError::ScanLimitExceeded {
            resource: "directory entries",
            maximum: 16,
            ..
        })
    ));
    fs::remove_dir_all(root).unwrap();
}

#[cfg(all(feature = "sns-host", unix))]
#[test]
fn collection_discovery_preserves_confinement_and_permission_errors() {
    let root = temp_dir("ic-query-collection-scan-authority");
    let network = root.join("sns/ic");
    let path = network.join("entity/proposals/full.json");
    super::super::write_managed_text_atomically(&root, &path, "{}").unwrap();
    fs::set_permissions(&path, fs::Permissions::from_mode(0o664)).unwrap();
    assert!(matches!(
        collect_managed_collection_files(&root, &network, "proposals", "full.json", 2),
        Err(CacheFileError::UnsafeManagedPermissions { .. })
    ));
    fs::remove_file(&path).unwrap();
    symlink(&path, network.join("linked")).unwrap();
    assert!(matches!(
        collect_managed_collection_files(&root, &network, "proposals", "full.json", 2),
        Err(CacheFileError::Confinement { .. })
    ));
    fs::remove_dir_all(root).unwrap();
}

#[cfg(all(unix, feature = "sns-host"))]
#[test]
fn zero_budget_scans_project_unadmitted_entries_without_following_them() {
    let root = temp_dir("ic-query-zero-scan-budget");
    let outside = temp_dir("ic-query-zero-scan-outside");
    symlink(&outside, root.join("link")).unwrap();
    assert!(matches!(
        collect_managed_collection_files(&root, &root, "proposals", "full.json", 0),
        Err(CacheFileError::ScanLimitExceeded {
            resource: "directory entries",
            maximum: 0,
            ..
        })
    ));
    fs::remove_dir_all(root).unwrap();
    fs::remove_dir_all(outside).unwrap();
}