Function store_wasm_binary

nodedb/src/control/planner/wasm/store.rs:15–51

Store a WASM binary in the system catalog, returning its content hash. Content-addressed: if the same binary is uploaded twice, it's stored once. The hash is used as the key for deduplication and cache lookup.

(
    catalog: &crate::control::security::catalog::types::SystemCatalog,
    wasm_bytes: &[u8],
    max_size: usize,
)

/// Content-addressed: if the same binary is uploaded twice, it's stored once.
/// The hash is used as the key for deduplication and cache lookup.
pub fn store_wasm_binary(
    catalog: &crate::control::security::catalog::types::SystemCatalog,
    wasm_bytes: &[u8],
    max_size: usize,
) -> crate::Result<String> {
    if wasm_bytes.is_empty() {
        return Err(crate::Error::BadRequest {
            detail: "WASM binary is empty".into(),
        });
    }
    if wasm_bytes.len() > max_size {
        return Err(crate::Error::BadRequest {
            detail: format!(
                "WASM binary exceeds maximum size ({} bytes > {max_size} bytes)",
                wasm_bytes.len()
            ),
        });
    }

    // Validate WASM magic number: \0asm
    if wasm_bytes.len() < 4 || &wasm_bytes[..4] != b"\0asm" {
        return Err(crate::Error::BadRequest {
            detail: "invalid WASM binary: missing \\0asm magic header".into(),
        });
    }

    let hash = sha256_hex(wasm_bytes);
    let key = format!("wasm_module:{hash}");

    catalog
        .put_raw(key.as_bytes(), wasm_bytes)
        .map_err(|e| crate::Error::Internal {
            detail: format!("failed to store WASM binary: {e}"),
        })?;

    Ok(hash)
}

/// Load a WASM binary from the system catalog by its content hash.
pub fn load_wasm_binary(