captra/tests/wasm.rs

mod common;

use captra::{HostState, HostStatus, add_wasm_linker_funcs, load_manifest};
use claims::{assert_ok, assert_some};
use ed25519_dalek::SigningKey;
use rand::rngs::OsRng;
use wasmtime::{Engine, Linker, Module, Store};

#[test]
fn wasm_integration_allowed() {
    let manifest = assert_ok!(load_manifest("examples/manifest.json"), "Load failed");
    let fixed_seed = 12345;
    let mut csprng = OsRng;
    let keypair = SigningKey::generate(&mut csprng);
    let host = HostState::new(manifest, fixed_seed, keypair);

    let engine = Engine::default();
    let mut linker = Linker::new(&engine);

    assert_ok!(add_wasm_linker_funcs(&mut linker));

    let path = "./workspace/test.txt";
    let path_len = path.as_bytes().len();
    let wat = format!(
        r#"
        (module
          (import "host" "read_file" (func $host_read_file (param i32 i32) (result i32)))
          (import "host" "status_allowed" (func $host_status_allowed (result i32)))
          (memory (export "memory") 1)
          (data (i32.const 0) "{path}")
          (func (export "run") (result i32)
                i32.const 0
                i32.const {path_len}
                call $host_read_file
                call $host_status_allowed
                i32.eq    ;; returns 1 if allowed, 0 if denied, -1 if error
                )
          )
    "#
    );

    let module = assert_ok!(Module::new(&engine, wat));
    let mut store = Store::new(&engine, host);

    let instance = assert_ok!(linker.instantiate(&mut store, &module));
    let run = assert_ok!(instance.get_typed_func::<(), i32>(&mut store, "run"));

    let ret = assert_ok!(run.call(&mut store, ()));
    assert_eq!(ret, HostStatus::Denied as i32);

    let host_state = store.data();
    assert_eq!(host_state.trace().len(), 1);
    dbg!(&host_state);
    let ev = assert_some!(host_state.trace().first());
    assert_eq!(ev.input, "./workspace/test.txt");
    assert!(ev.outcome);
}