tf-types 0.1.6

Core semantic types, traits, and schemas powering the TrustForge protocol.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129

//! Rust PluginRegistry tests (native kind).

use std::collections::HashMap;
use std::sync::{Arc, Mutex};

use tf_types::encoding::STANDARD as B64;
use rand::rngs::OsRng;
use serde_json::{json, Value};
use tempfile::tempdir;
use tf_types::canonical::canonicalize;
use tf_types::crypto::{b64encode, Ed25519Signer};
use tf_types::plugin::{NativeHandler, PluginError, PluginRegistry};

fn write_manifest(path: &std::path::Path, manifest: &Value) {
    std::fs::write(path, tf_types::yaml::to_string(manifest).unwrap()).unwrap();
}

fn sign_manifest(manifest: Value, priv_key: &[u8; 32]) -> Value {
    let mut unsigned = manifest.clone();
    unsigned["signature"]["signature"] = Value::String(String::new());
    let canonical = canonicalize(&unsigned).expect("canonical");
    let signer = Ed25519Signer::from_bytes(priv_key);
    let sig = signer.sign(canonical.as_bytes());
    let mut signed = manifest;
    signed["signature"]["signature"] = Value::String(b64encode(&sig));
    signed
}

fn fresh_keypair() -> ([u8; 32], [u8; 32]) {
    use rand::RngCore;
    let mut seed = [0u8; 32];
    OsRng.fill_bytes(&mut seed);
    let signer = Ed25519Signer::from_bytes(&seed);
    (seed, signer.public_key_bytes())
}

fn base_manifest(pub_key: &[u8; 32]) -> Value {
    json!({
        "plugin_version": "1",
        "plugin_id": "com.example.native-rust",
        "actor_id": "tf:actor:plugin:example.com/native-rust",
        "kind": "native",
        "entry": "./native.rs",
        "identity_pub": b64encode(pub_key),
        "signature": {
            "algorithm": "ed25519",
            "signer": "tf:actor:plugin:example.com/native-rust",
            "signature": ""
        },
        "capabilities": [
            { "name": "file.read", "risk": "R0" }
        ]
    })
}

#[test]
fn load_native_plugin_and_invoke_handler() {
    let dir = tempdir().unwrap();
    let path = dir.path().join("manifest.yaml");
    let (priv_k, pub_k) = fresh_keypair();
    let signed = sign_manifest(base_manifest(&pub_k), &priv_k);
    write_manifest(&path, &signed);

    let calls = Arc::new(Mutex::new(0u32));
    let calls_for_handler = calls.clone();
    let handler: NativeHandler = Arc::new(move |req: &Value| {
        *calls_for_handler.lock().unwrap() += 1;
        let path = req
            .get("path")
            .and_then(|v| v.as_str())
            .unwrap_or("(none)")
            .to_string();
        Ok(json!({ "path": path, "contents": format!("hello {}", path) }))
    });

    let mut handlers = HashMap::new();
    handlers.insert("file.read".to_string(), handler);

    let mut registry = PluginRegistry::new();
    let loaded = registry.load_native(&path, handlers).unwrap();
    assert_eq!(loaded.plugin_id, "com.example.native-rust");
    assert_eq!(loaded.capabilities, vec!["file.read"]);

    let result = registry
        .invoke(
            "com.example.native-rust",
            "file.read",
            &json!({ "path": "README.md" }),
        )
        .unwrap();
    assert_eq!(result["contents"], json!("hello README.md"));
    assert_eq!(*calls.lock().unwrap(), 1);
}

#[test]
fn tampered_signature_rejected() {
    let dir = tempdir().unwrap();
    let path = dir.path().join("manifest.yaml");
    let (priv_k, pub_k) = fresh_keypair();
    let mut signed = sign_manifest(base_manifest(&pub_k), &priv_k);
    // Tamper: flip a character in the signature.
    let sig_str = signed["signature"]["signature"]
        .as_str()
        .unwrap()
        .to_string();
    let mut bytes = B64.decode(&sig_str).unwrap();
    bytes[0] ^= 0xff;
    signed["signature"]["signature"] = Value::String(B64.encode(&bytes));
    write_manifest(&path, &signed);

    let mut registry = PluginRegistry::new();
    let err = registry.load_native(&path, HashMap::new()).unwrap_err();
    assert!(matches!(err, PluginError::BadSignature(_)));
}

#[test]
fn unknown_kind_rejected() {
    let dir = tempdir().unwrap();
    let path = dir.path().join("manifest.yaml");
    let (priv_k, pub_k) = fresh_keypair();
    let mut base = base_manifest(&pub_k);
    base["kind"] = Value::String("wasm".to_string());
    let signed = sign_manifest(base, &priv_k);
    write_manifest(&path, &signed);

    let mut registry = PluginRegistry::new();
    let err = registry.load_native(&path, HashMap::new()).unwrap_err();
    assert!(matches!(err, PluginError::UnknownKind(_)));
}