fix(athena): libc header not found when build wasm-wasip2 for module that use catlib rbac-registration (ARM architect)

hermes/Earthfile

@@ -1,6 +1,6 @@
 VERSION 0.8
 
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:v3.5.14 AS rust-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:v3.5.17 AS rust-ci
 #IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:feat/disallow-debug-format AS rust-ci
 
 # Use when debugging cat-ci locally.

hermes/apps/athena/modules/Earthfile

@@ -7,8 +7,7 @@ VERSION 0.8
 
 # Catalyst CI Rust Environment - provides pre-configured Rust toolchain with WASM support
 # This includes: rustc, cargo, wasm32-wasip2 target, optimization tools, and build utilities
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:v3.5.14 AS rust-ci
-
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:v3.5.17 AS rust-ci
 
 # Alternative for local catalyst-ci debugging (uncomment when needed):
 # IMPORT ../../../catalyst-ci/earthly/rust AS rust-ci
@@ -138,4 +137,15 @@ save-local-hermes:
 
     # Save the binary to local filesystem for development use
     # This makes it available at ./hermes in the calling directory
-    SAVE ARTIFACT hermes AS LOCAL ./hermes
+    SAVE ARTIFACT hermes AS LOCAL ./hermes
+
+# Build wasm32-wasip2 for each modules
+modules-build-wasm32-wasip2:
+    BUILD ./rbac-registration+build-rbac-registration
+    BUILD ./rbac-registration-indexer+build-rbac-registration-indexer
+    BUILD ./http-proxy+build-http-proxy
+
+# Run build modules wasm32-wasip2 for the specify architect
+# Comment this out if it take long time for CI to build.
+build-all-host-modules-build-wasm32-wasip2:
+    BUILD --platform=linux/amd64 --platform=linux/arm64 +modules-build-wasm32-wasip2

hermes/apps/athena/modules/rbac-registration-indexer/Cargo.toml

@@ -14,5 +14,5 @@ strum = "0.27.2"
 strum_macros = "0.27.2"
 
 cardano-blockchain-types = { version = "0.0.6", git = "https://github.com/input-output-hk/catalyst-libs", tag = "cardano-blockchain-types/v0.0.6" }
-rbac-registration = { version = "0.0.9", git = "https://github.com/input-output-hk/catalyst-libs", tag = "rbac-registration/v0.0.9" }
-catalyst-types = { version = "0.0.6",  git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "catalyst-types/v0.0.6" }
+rbac-registration = { version = "0.0.10", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "rbac-registration/v0.0.10" }
+catalyst-types = { version = "0.0.7", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "catalyst-types/v0.0.7" }

hermes/apps/athena/modules/rbac-registration-indexer/src/lib.rs

@@ -133,7 +133,7 @@ impl exports::hermes::cardano::event_on_block::Guest for RbacRegistrationCompone
             let problem_report: Option<String> = reg
                 .report()
                 .is_problematic()
-                .then(|| serde_json::to_string(&reg.report()).ok())
+                .then(|| Some(format!("{:?}", reg.report())))
                 .flatten();
             // Can contain multiple stake addresses
             let stake_addresses = reg

hermes/apps/athena/modules/rbac-registration/Cargo.toml

@@ -14,5 +14,5 @@ strum = "0.27.2"
 strum_macros = "0.27.2"
 
 cardano-blockchain-types = { version = "0.0.6", git = "https://github.com/input-output-hk/catalyst-libs", tag = "cardano-blockchain-types/v0.0.6" }
-rbac-registration = { version = "0.0.9", git = "https://github.com/input-output-hk/catalyst-libs", tag = "rbac-registration/v0.0.9" }
-catalyst-types = { version = "0.0.6",  git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "catalyst-types/v0.0.6" }
+rbac-registration = { version = "0.0.10", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "rbac-registration/v0.0.10" }
+catalyst-types = { version = "0.0.7", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "catalyst-types/v0.0.7" }

hermes/bin/Cargo.toml

@@ -32,9 +32,9 @@ path = "tests/integration/tests/mod.rs"
 [dependencies]
 # Catalyst Internal Crates
 hermes-ipfs = { version = "0.0.5", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "hermes-ipfs/v0.0.5" }
-cardano-blockchain-types = { version = "0.0.5", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "cardano-blockchain-types-v0.0.5" }
-cardano-chain-follower = { version = "0.0.11", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "cardano-chain-follower-v0.0.11" }
-catalyst-types = { version = "0.0.6", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "catalyst-types-v0.0.6" }
+cardano-blockchain-types = { version = "0.0.6", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "cardano-blockchain-types/v0.0.6" }
+cardano-chain-follower = { version = "0.0.14", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "cardano-chain-follower/v0.0.14" }
+catalyst-types = { version = "0.0.7", git = "https://github.com/input-output-hk/catalyst-libs.git", tag = "catalyst-types/v0.0.7" }
 
 # HDF5 is consumed using a git tag, because the latest release is very old, but the code is much more advanced.
 hdf5 = { package = "hdf5-metno", version = "0.10.1", features = [ "static", "blosc", "blosc-zstd" ] }

hermes/bin/src/logger.rs

@@ -42,7 +42,7 @@ impl FromStr for LogLevel {
             "info" => Ok(LogLevel::Info),
             "debug" => Ok(LogLevel::Debug),
             "trace" => Ok(LogLevel::Trace),
-            _ => Err(anyhow::anyhow!("Invalid log level string: {}", s)),
+            _ => Err(anyhow::anyhow!("Invalid log level string: {s}")),
         }
     }
 }

hermes/bin/src/packaging/app/mod.rs

@@ -148,8 +148,8 @@ impl ApplicationPackage {
             anyhow::ensure!(
                 &expected_payload == signature_payload,
                 "Application package signature payload mismatch.\nExpected: {}\nGot: {}",
-                expected_payload.to_json().to_string(),
-                signature_payload.to_json().to_string()
+                expected_payload.to_json(),
+                signature_payload.to_json()
             );
             signature.verify()?;
             Ok(())

hermes/bin/src/packaging/module/mod.rs

@@ -145,8 +145,8 @@ impl ModulePackage {
             anyhow::ensure!(
                 &expected_payload == signature_payload,
                 "Module package signature payload mismatch.\nExpected: {}\nGot: {}",
-                expected_payload.to_json().to_string(),
-                signature_payload.to_json().to_string()
+                expected_payload.to_json(),
+                signature_payload.to_json()
             );
             signature.verify()?;
             Ok(())

hermes/bin/src/runtime_extensions/hermes/cardano/host.rs

@@ -458,7 +458,7 @@ impl HostSubscriptionId for HermesRuntimeContext {
     ) -> wasmtime::Result<CardanoNetwork> {
         let mut app_state = STATE.subscription_id.get_app_state(self.app_name())?;
         let network = app_state.get_object(&self_)?;
-        Ok((*network).into())
+        Ok((*network).try_into()?)
     }
 
     /// Unsubscribing block event of this `subscription-id` instance.

hermes/bin/src/runtime_extensions/hermes/cardano/mod.rs

@@ -78,7 +78,10 @@ pub(crate) fn new_context(ctx: &crate::runtime_context::HermesRuntimeContext) {
 pub enum CardanoError {
     /// Network not supported.
     #[error("Network {0} is not supported")]
-    NetworkNotSupported(u32),
+    NetworkNotSupported(u64),
+    /// Unknown network.
+    #[error("Unknown network")]
+    UnknownNetwork,
 }
 
 #[cfg(not(debug_assertions))]

hermes/bin/src/runtime_extensions/hermes/cardano/network.rs

@@ -201,12 +201,18 @@ pub(crate) fn sync_slot_to_point(
     }
 }
 
-impl From<cardano_blockchain_types::Network> for CardanoNetwork {
-    fn from(network: cardano_blockchain_types::Network) -> Self {
-        match network {
+impl TryFrom<cardano_blockchain_types::Network> for CardanoNetwork {
+    type Error = CardanoError;
+
+    fn try_from(network: cardano_blockchain_types::Network) -> Result<Self, Self::Error> {
+        Ok(match network {
             cardano_blockchain_types::Network::Mainnet => CardanoNetwork::Mainnet,
             cardano_blockchain_types::Network::Preprod => CardanoNetwork::Preprod,
             cardano_blockchain_types::Network::Preview => CardanoNetwork::Preview,
-        }
+            cardano_blockchain_types::Network::Devnet { magic, .. } => {
+                CardanoNetwork::TestnetMagic(magic)
+            },
+            _ => return Err(CardanoError::UnknownNetwork),
+        })
     }
 }

hermes/bin/src/runtime_extensions/hermes/http_gateway/event.rs

@@ -138,7 +138,7 @@ fn validate_redirect_location(
     config: &RedirectConfig,
 ) -> anyhow::Result<()> {
     let url =
-        Url::parse(location).map_err(|_| anyhow::anyhow!("Invalid redirect URL: {}", location))?;
+        Url::parse(location).map_err(|_| anyhow::anyhow!("Invalid redirect URL: {location}"))?;
 
     validate_scheme(&url, config)?;
     validate_host(&url, config)?;

hermes/bin/src/runtime_extensions/hermes/http_gateway/routing.rs

@@ -474,13 +474,13 @@ where B: Body {
         "Cross-Origin-Opener-Policy",
         "same-origin"
             .parse()
-            .map_err(|e| anyhow!("Invalid COOP header value: {}", e))?,
+            .map_err(|e| anyhow!("Invalid COOP header value: {e}"))?,
     );
     headers.insert(
         "Cross-Origin-Embedder-Policy",
         "require-corp"
             .parse()
-            .map_err(|e| anyhow!("Invalid COEP header value: {}", e))?,
+            .map_err(|e| anyhow!("Invalid COEP header value: {e}"))?,
     );
 
     Ok(response)

hermes/bin/src/wasm/engine.rs

@@ -34,12 +34,8 @@ impl Engine {
         config.wasm_component_model(true);
         config.consume_fuel(false);
 
-        let engine = WasmEngine::new(&config).map_err(|e| {
-            anyhow!(
-                "Incorrect `wasmtime::Engine` configuration: {}",
-                e.to_string()
-            )
-        })?;
+        let engine = WasmEngine::new(&config)
+            .map_err(|e| anyhow!("Incorrect `wasmtime::Engine` configuration: {e}",))?;
 
         Ok(Self(engine))
     }

hermes/bin/src/wasm/module.rs

@@ -107,7 +107,7 @@ impl Module {
     ) -> anyhow::Result<Self> {
         let engine = Engine::new()?;
         let wasm_module = WasmModule::new(&engine, module_bytes)
-            .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {}", e.to_string()))?;
+            .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {e}"))?;
 
         let mut linker = WasmLinker::new(&engine);
         linker
@@ -118,10 +118,10 @@ impl Module {
             &LinkOptions::default(),
             |state: &mut HermesRuntimeContext| state,
         )
-        .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {}", e.to_string()))?;
+        .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {e}"))?;
         let pre_instance = linker
             .instantiate_pre(&wasm_module)
-            .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {}", e.to_string()))?;
+            .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {e}"))?;
 
         let id = ModuleId(Ulid::generate());
 
@@ -231,7 +231,7 @@ impl Module {
             .pre_instance
             .clone()
             .instantiate(&mut store)
-            .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {}", e.to_string()))?;
+            .map_err(|e| anyhow::anyhow!("Bad WASM module:\n {e}"))?;
 
         event.execute(&mut ModuleInstance { store, instance })?;
 

hermes/bin/tests/integration/tests/utils/hermes.rs

@@ -47,7 +47,7 @@ pub fn run_app(
     let output = child.wait_with_output()?;
     if !output.status.success() {
         let stderr = String::from_utf8_lossy(&output.stderr);
-        return Err(anyhow::anyhow!("App failed with error: {}", stderr));
+        return Err(anyhow::anyhow!("App failed with error: {stderr}"));
     }
 
     Ok(String::from_utf8_lossy(&output.stdout).to_string())

hermes/deny.toml

@@ -16,7 +16,10 @@ targets = [
 
 [advisories]
 version = 2
-ignore = []
+ignore = [
+    "RUSTSEC-2025-0067",
+    "RUSTSEC-2025-0068",
+]
 
 [bans]
 multiple-versions = "warn"

wasm/wasi/Earthfile

@@ -1,13 +1,13 @@
 VERSION 0.8
 
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:v3.5.14 AS rust-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:v3.5.17 AS rust-ci
 IMPORT github.com/input-output-hk/catalyst-ci/earthly/go:v3.5.14 AS go-ci
 IMPORT github.com/input-output-hk/catalyst-ci/earthly/wasm/c:v3.5.14 AS wasm-c-ci
 
 # Use when debugging cat-ci locally.
 # IMPORT ../../catalyst-ci/earthly/rust AS rust-ci
 
-#cspell: words rustfmt wasi autodrop teavm
+#cspell: words rustfmt wasi autodrop teavm CFLAGS sysroot
 
 # Make am Artifact which consists of the WIT SRC.
 builder:
@@ -94,6 +94,9 @@ BUILD_RUST_COMPONENT:
     COPY --keep-ts --dir src .
     COPY Cargo.toml .
 
+    # Fix missing header error when compiling zstd while building rbac-registration
+    ENV CFLAGS_wasm32_wasip2="--sysroot=/usr/aarch64-linux-gnu"
+
     DO rust-ci+CARGO \
         --args "build --target wasm32-wasip2 --release" \
         --output="wasm32-wasip2/release/$out"

wasm/wasi/wit/deps/hermes-cardano/api.wit

@@ -26,8 +26,8 @@ interface api {
         preprod,
         /// Cardano Preview Network :- "NetworkId": 0, "NetworkMagic": 2
         preview,
-        /// Custom Test Network :- "NetworkId": 0,  "NetworkMagic": u32
-        testnet-magic(u32),
+        /// Custom Test Network :- "NetworkId": 0,  "NetworkMagic": u64
+        testnet-magic(u64),
     }
 
     /// A sync slot variation.
@@ -53,6 +53,8 @@ interface api {
     enum create-network-error {
         /// Network not supported.
         network-not-supported,
+        /// Unknown network.
+        unknown-network
     }
 
     /// Errors that can happen for block.