Struct PluginSourceConfig 

pub struct PluginSourceConfig {
    pub url: String,
    pub digest: String,
    pub signature: Option<String>,
    pub public_key: Option<String>,
    pub cache_path: Option<String>,
}

SCALE-12 (#192)/DW-165: remote/signed plugin source configuration. The gateway resolves the .wasm artifact at every publish: cache lookup first, then a download from url on a miss, then SHA-256 digest verification (mandatory) and Ed25519 signature verification (when configured) — only then is the artifact loaded. Resolution failures are fail-closed per plugin (Crashed at publish, its routes answer 500), never a partial load.

Fields

url: String

The registry URL to fetch the .wasm artifact from. Must be https://; fetched with one HTTP/1.1 GET (redirects are not followed — configure the artifact’s final URL). oci:// references are not supported in this version: publish the artifact over https or pre-fetch it with dwara-cli plugin install and reference the local file with wasm.

digest: String

Expected SHA-256 digest of the artifact, hex-encoded (64 chars, case-insensitive). Verified against the cached AND the downloaded bytes before loading; a mismatch fails the plugin (never a partial load). Required — there are no unsigned remote artifacts (digest-pinning is the floor; signatures are the ceiling).

signature: Option<String>

Optional Ed25519 signature over the artifact bytes, hex-encoded (64 bytes / 128 chars). When set, it must verify against public_key and, when plugin_registry.public_keys pins keys, against a pinned key too. Absent means digest-only verification — rejected when the registry pins public keys.

public_key: Option<String>

Ed25519 public key (32 bytes, hex-encoded) for signature verification. Required when signature is set unless plugin_registry.public_keys pins keys. A public_key set WITHOUT a signature is rejected (a key that verifies nothing is a config mistake — sign the artifact or remove the key).

cache_path: Option<String>

Local cache path for the resolved artifact. When absent, the artifact is cached content-addressed as <cache_dir>/<digest>.wasm (plugin_registry.cache_dir, default ./plugin-cache). When set, the path must be a RELATIVE path under the cache dir with no .. parent segments (containment: the resolver creates directories and writes artifact bytes at this path, so it must not be able to point outside the cache). The cached file is re-verified (digest and signature) on every publish; a cached file that does not match the pinned digest fails closed instead of being silently re-fetched.

Implementations

impl PluginSourceConfig

pub fn cache_path_violation(cache_path: &str) -> Option<&'static str>

Why a cache_path value violates cache containment, or None when it is acceptable. The rule is deliberately simple: a non-empty RELATIVE path with no .. parent segments — the resolver creates directories and writes artifact bytes at this path, so it must stay inside plugin_registry.cache_dir. Shared by snapshot validation (the operator-facing, earliest rejection) and the resolver (defense in depth); lives here because both may import config and nothing below it.

Trait Implementations

impl Clone for PluginSourceConfig

fn clone(&self) -> PluginSourceConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PluginSourceConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PluginSourceConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for PluginSourceConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for PluginSourceConfig

fn eq(&self, other: &PluginSourceConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PluginSourceConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PluginSourceConfig