release: prepare anda-cloud 0.5.0

zensh · anda-ai · zensh · commit 3a973a5c7945 · 2026-06-13T14:57:31.000+08:00
- Bump workspace and canister crates to 0.5.0
- Replace direct ciborium usage with cbor2 helpers
- Upgrade IC/auth/attestation dependencies and adapt raw_rand calls

Co-Authored-By: Anda Bot &lt;noreply@anda.bot&gt;
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -13,7 +13,7 @@ strip = true
 opt-level = 's'
 
 [workspace.package]
-version = "0.4.4"
+version = "0.5.0"
 edition = "2024"
 repository = "https://github.com/ldclabs/anda-cloud"
 keywords = ["anda", "agent", "icp", "cloud"]
@@ -23,21 +23,21 @@ license = "MIT"
 [workspace.dependencies]
 base64 = "0.22"
 candid = "0.10"
-ciborium = "0.2"
+cbor2 = "1"
 hex = "0.4"
 serde = "1"
 serde_bytes = "0.11"
 serde_json = "1.0"
 sha3 = "0.11"
-ic-cdk = "0.19"
+ic-cdk = "0.20"
 ic-cdk-timers = "1.0"
 ic-agent = "0.47"
-icrc-ledger-types = "0.1"
+icrc-ledger-types = "0.2"
 ic-http-certification = "3"
 ic-stable-structures = "0.7"
-ic_auth_types = { version = "0.8" }
-ic_auth_verifier = { version = "0.8" }
-ic_tee_nitro_attestation = { version = "0.6" }
+ic_auth_types = { version = "0.9" }
+ic_auth_verifier = { version = "0.9" }
+ic_tee_nitro_attestation = { version = "0.7" }
 num-traits = "0.2"
 lazy_static = "1.5"
 once_cell = "1.21"
diff --git a/rs/anda_cloud_cdk/Cargo.toml b/rs/anda_cloud_cdk/Cargo.toml
@@ -3,15 +3,15 @@ name = "anda_cloud_cdk"
 description = "A Canister Development Kit for the Anda Cloud"
 repository = "https://github.com/ldclabs/anda-cloud/tree/main/src/anda_cloud_cdk"
 publish = true
-version = "0.4.6"
+version = "0.5.0"
 edition.workspace = true
 keywords.workspace = true
 categories.workspace = true
 license.workspace = true
 
 [dependencies]
 candid = { workspace = true }
-ciborium = { workspace = true }
+cbor2 = { workspace = true }
 serde = { workspace = true }
 serde_json = { workspace = true }
 sha3 = { workspace = true }
diff --git a/rs/anda_cloud_cdk/src/tee.rs b/rs/anda_cloud_cdk/src/tee.rs
@@ -86,7 +86,7 @@ impl TEEInfo {
 #[cfg(test)]
 mod tests {
     use super::*;
-    use ciborium::Value;
+    use cbor2::Value;
 
     #[test]
     fn test_tee_protocol() {
diff --git a/rs/anda_discovery_service/Cargo.toml b/rs/anda_discovery_service/Cargo.toml
@@ -15,10 +15,10 @@ license.workspace = true
 crate-type = ["cdylib"]
 
 [dependencies]
-anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.4" }
+anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.5" }
 base64 = { workspace = true }
 candid = { workspace = true, features = ["value", "printer"] }
-ciborium = { workspace = true }
+cbor2 = { workspace = true }
 ic-cdk = { workspace = true }
 serde = { workspace = true }
 serde_bytes = { workspace = true }
diff --git a/rs/anda_gateway_service/Cargo.toml b/rs/anda_gateway_service/Cargo.toml
@@ -15,10 +15,10 @@ license.workspace = true
 crate-type = ["cdylib"]
 
 [dependencies]
-anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.4" }
+anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.5" }
 base64 = { workspace = true }
 candid = { workspace = true, features = ["value", "printer"] }
-ciborium = { workspace = true }
+cbor2 = { workspace = true }
 ic-cdk = { workspace = true }
 serde = { workspace = true }
 serde_bytes = { workspace = true }
diff --git a/rs/anda_payment_service/Cargo.toml b/rs/anda_payment_service/Cargo.toml
@@ -15,10 +15,10 @@ license.workspace = true
 crate-type = ["cdylib"]
 
 [dependencies]
-anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.4" }
+anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.5" }
 base64 = { workspace = true }
 candid = { workspace = true, features = ["value", "printer"] }
-ciborium = { workspace = true }
+cbor2 = { workspace = true }
 ic-cdk = { workspace = true }
 serde = { workspace = true }
 serde_bytes = { workspace = true }
diff --git a/rs/anda_registry_canister/Cargo.toml b/rs/anda_registry_canister/Cargo.toml
@@ -15,10 +15,10 @@ license.workspace = true
 crate-type = ["cdylib"]
 
 [dependencies]
-anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.4" }
+anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.5" }
 base64 = { workspace = true }
 candid = { workspace = true, features = ["value", "printer"] }
-ciborium = { workspace = true }
+cbor2 = { workspace = true }
 ic-cdk = { workspace = true }
 serde = { workspace = true }
 serde_bytes = { workspace = true }
diff --git a/rs/anda_registry_canister/src/api_http.rs b/rs/anda_registry_canister/src/api_http.rs
@@ -1,7 +1,7 @@
 use anda_cloud_cdk::{agent::ChallengeEnvelope, registry::RegistryError};
 use base64::{Engine, engine::general_purpose::STANDARD as BASE64};
 use candid::{CandidType, Principal};
-use ciborium::from_reader;
+use cbor2::from_slice;
 use ic_auth_types::cbor_into_vec;
 use ic_http_certification::{HeaderField, HttpRequest, HttpUpdateRequest};
 use serde::{Deserialize, Serialize};
@@ -236,7 +236,7 @@ fn lookup(url: Url, in_cbor: bool) -> Result<Vec<u8>, RegistryError> {
 
 async fn register(body: &[u8], in_cbor: bool) -> Result<Vec<u8>, RegistryError> {
     let envelope: ChallengeEnvelope = if in_cbor {
-        from_reader(body).map_err(|err| RegistryError::BadRequest {
+        from_slice(body).map_err(|err| RegistryError::BadRequest {
             error: format!("failed to decode AgentEnvelope from CBOR, error: {err}"),
         })?
     } else {
@@ -251,7 +251,7 @@ async fn register(body: &[u8], in_cbor: bool) -> Result<Vec<u8>, RegistryError>
 
 async fn challenge(body: &[u8], in_cbor: bool) -> Result<Vec<u8>, RegistryError> {
     let envelope: ChallengeEnvelope = if in_cbor {
-        from_reader(body).map_err(|err| RegistryError::BadRequest {
+        from_slice(body).map_err(|err| RegistryError::BadRequest {
             error: format!("failed to decode AgentEnvelope from CBOR, error: {err}"),
         })?
     } else {
diff --git a/rs/anda_registry_canister/src/lib.rs b/rs/anda_registry_canister/src/lib.rs
@@ -37,9 +37,14 @@ fn validate_principals(principals: &BTreeSet<Principal>) -> Result<(), String> {
 }
 
 async fn rand_bytes<const N: usize>() -> Result<[u8; N], String> {
-    let mut data = ic_cdk::management_canister::raw_rand()
-        .await
-        .map_err(|err| format!("{err:?}"))?;
+    let mut data: Vec<u8> = ic_cdk::call::Call::bounded_wait(
+        Principal::management_canister(),
+        "raw_rand",
+    )
+    .await
+    .map_err(|err| format!("{err:?}"))?
+    .candid()
+    .map_err(|err| format!("{err:?}"))?;
     data.truncate(N);
     data.try_into().map_err(|err| format!("{err:?}"))
 }
diff --git a/rs/anda_registry_canister/src/store.rs b/rs/anda_registry_canister/src/store.rs
@@ -4,7 +4,7 @@ use anda_cloud_cdk::{
     registry::{RegistryError, RegistryState},
 };
 use candid::{CandidType, Principal};
-use ciborium::{from_reader, into_writer};
+use cbor2::{from_slice, to_vec as cbor_to_vec};
 use ic_auth_types::ByteArrayB64;
 use ic_cdk::call::Call;
 use ic_http_certification::{
@@ -281,19 +281,15 @@ impl Storable for AgentLocal {
     const BOUND: Bound = Bound::Unbounded;
 
     fn to_bytes(&self) -> Cow<'_, [u8]> {
-        let mut buf = vec![];
-        into_writer(self, &mut buf).expect("failed to encode AgentLocal data");
-        Cow::Owned(buf)
+        Cow::Owned(cbor_to_vec(self).expect("failed to encode AgentLocal data"))
     }
 
     fn into_bytes(self) -> Vec<u8> {
-        let mut buf = vec![];
-        into_writer(&self, &mut buf).expect("failed to encode AgentLocal data");
-        buf
+        cbor_to_vec(&self).expect("failed to encode AgentLocal data")
     }
 
     fn from_bytes(bytes: Cow<'_, [u8]>) -> Self {
-        from_reader(&bytes[..]).expect("failed to decode AgentLocal data")
+        from_slice(&bytes).expect("failed to decode AgentLocal data")
     }
 }
 
@@ -407,7 +403,7 @@ pub mod state {
                 if bytes.is_empty() {
                     return;
                 }
-                let v: State = from_reader(&bytes[..]).expect("failed to decode STATE_STORE data");
+                let v: State = from_slice(&bytes).expect("failed to decode STATE_STORE data");
                 *r = v;
             });
         });
@@ -418,7 +414,7 @@ pub mod state {
                     return;
                 }
                 let v: Indexes =
-                    from_reader(&bytes[..]).expect("failed to decode INDEX_STORE data");
+                    from_slice(&bytes).expect("failed to decode INDEX_STORE data");
                 *r = v;
             });
         });
@@ -427,16 +423,12 @@ pub mod state {
     pub fn save() {
         STATE.with_borrow(|r| {
             STATE_STORE.with_borrow_mut(|rs| {
-                let mut buf = vec![];
-                into_writer(r, &mut buf).expect("failed to encode STATE data");
-                rs.set(buf);
+                rs.set(cbor_to_vec(r).expect("failed to encode STATE data"));
             });
         });
         INDEX.with_borrow(|r| {
             INDEX_STORE.with_borrow_mut(|rs| {
-                let mut buf = vec![];
-                into_writer(r, &mut buf).expect("failed to encode INDEX data");
-                rs.set(buf);
+                rs.set(cbor_to_vec(r).expect("failed to encode INDEX data"));
             });
         });
     }
diff --git a/rs/anda_registry_canister/tests/anda_registry_canister_test.rs b/rs/anda_registry_canister/tests/anda_registry_canister_test.rs
@@ -271,7 +271,7 @@ fn anda_registry_canister_should_work() {
                 .iter()
                 .any(|h| { h.0 == "content-type" && h.1 == "application/cbor" })
         );
-        let agent: Agent = ciborium::from_reader(&rt.body[..]).unwrap();
+        let agent: Agent = cbor2::from_slice(&rt.body).unwrap();
         assert_eq!(agent.info.name, "Anda 2");
         assert!(agent.health_power >= 2000);
     }
diff --git a/rs/anda_x402_canister/Cargo.toml b/rs/anda_x402_canister/Cargo.toml
@@ -15,10 +15,10 @@ license.workspace = true
 crate-type = ["cdylib"]
 
 [dependencies]
-anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.4" }
+anda_cloud_cdk = { path = "../anda_cloud_cdk", version = "0.5" }
 base64 = { workspace = true }
 candid = { workspace = true, features = ["value", "printer"] }
-ciborium = { workspace = true }
+cbor2 = { workspace = true }
 ic-cdk = { workspace = true }
 ic-cdk-timers = { workspace = true }
 serde = { workspace = true }
diff --git a/rs/anda_x402_canister/src/api_http.rs b/rs/anda_x402_canister/src/api_http.rs
@@ -1,7 +1,7 @@
 use anda_cloud_cdk::x402::{SettleResponse, VerifyResponse, X402Error, X402Request};
 use base64::{Engine, engine::general_purpose::STANDARD as BASE64};
 use candid::{CandidType, Principal};
-use ciborium::from_reader;
+use cbor2::from_slice;
 use ic_auth_types::cbor_into_vec;
 use ic_http_certification::{HeaderField, HttpRequest, HttpUpdateRequest};
 use serde::{Deserialize, Serialize};
@@ -279,7 +279,7 @@ async fn post_settle(body: &[u8], in_cbor: bool) -> Result<Vec<u8>, HttpError> {
 
 fn decode_payment(body: &[u8], in_cbor: bool) -> Result<X402Request, X402Error> {
     let req: X402Request = if in_cbor {
-        from_reader(body)
+        from_slice(body)
             .map_err(|err| X402Error::InvalidPayload(format!("failed to decode cbor: {err}")))?
     } else {
         serde_json::from_slice(body)
diff --git a/rs/anda_x402_canister/src/store.rs b/rs/anda_x402_canister/src/store.rs
@@ -1,6 +1,6 @@
 use anda_cloud_cdk::x402::*;
 use candid::{CandidType, Principal};
-use ciborium::{from_reader, into_writer};
+use cbor2::{from_slice, to_vec as cbor_to_vec};
 use ic_http_certification::{
     HttpCertification, HttpCertificationPath, HttpCertificationTree, HttpCertificationTreeEntry,
     cel::{DefaultCelBuilder, create_cel_expr},
@@ -185,39 +185,31 @@ impl Storable for PayerState {
     const BOUND: Bound = Bound::Unbounded;
 
     fn to_bytes(&self) -> Cow<'_, [u8]> {
-        let mut buf = vec![];
-        into_writer(self, &mut buf).expect("failed to encode PayerState data");
-        Cow::Owned(buf)
+        Cow::Owned(cbor_to_vec(self).expect("failed to encode PayerState data"))
     }
 
     fn into_bytes(self) -> Vec<u8> {
-        let mut buf = vec![];
-        into_writer(&self, &mut buf).expect("failed to encode PayerState data");
-        buf
+        cbor_to_vec(&self).expect("failed to encode PayerState data")
     }
 
     fn from_bytes(bytes: Cow<'_, [u8]>) -> Self {
-        from_reader(&bytes[..]).expect("failed to decode PayerState data")
+        from_slice(&bytes).expect("failed to decode PayerState data")
     }
 }
 
 impl Storable for PaymentLog {
     const BOUND: Bound = Bound::Unbounded;
 
     fn to_bytes(&self) -> Cow<'_, [u8]> {
-        let mut buf = vec![];
-        into_writer(self, &mut buf).expect("failed to encode PaymentLog data");
-        Cow::Owned(buf)
+        Cow::Owned(cbor_to_vec(self).expect("failed to encode PaymentLog data"))
     }
 
     fn into_bytes(self) -> Vec<u8> {
-        let mut buf = vec![];
-        into_writer(&self, &mut buf).expect("failed to encode PaymentLog data");
-        buf
+        cbor_to_vec(&self).expect("failed to encode PaymentLog data")
     }
 
     fn from_bytes(bytes: Cow<'_, [u8]>) -> Self {
-        from_reader(&bytes[..]).expect("failed to decode PaymentLog data")
+        from_slice(&bytes).expect("failed to decode PaymentLog data")
     }
 }
 
@@ -297,7 +289,7 @@ pub mod state {
                 if bytes.is_empty() {
                     return;
                 }
-                let v: State = from_reader(&bytes[..]).expect("failed to decode STATE_STORE data");
+                let v: State = from_slice(&bytes).expect("failed to decode STATE_STORE data");
                 *h = v;
             });
         });
@@ -306,9 +298,7 @@ pub mod state {
     pub fn save() {
         STATE.with_borrow(|h| {
             STATE_STORE.with_borrow_mut(|r| {
-                let mut buf = vec![];
-                into_writer(h, &mut buf).expect("failed to encode STATE_STORE data");
-                r.set(buf);
+                r.set(cbor_to_vec(h).expect("failed to encode STATE_STORE data"));
             });
         });
     }
