feat: integrate DPKI (#236)

* Optional agent key for app installation

* make compatibile with signal changes and pubkey as optional

* update hc v; start dpki addition

* add no-dpki flag

* make compatibile with signal changes and pubkey as optional

* fix types and tests

* assert type check

* lint

* lint

* fix lints

* update holonix

* build: fix js client dependency

* style: fix ts type

* Update Holochain version and fix some tests

* fix(local): no-dpki option

* feat(local): dpki network seed option

* feat(local): set shared dpki settings in scenario

* temporarily add nix flake to test

* fix: make dpki and dpki-network-seed mutually exclusive

* build(nix): update flake & add system configuration pkg for macos

* build: update JS client

* test: fix signal types

* test(trycp): fix no_dpki option

* ci: add trycp to test workflow

* build: update hdk & hdi in workspace

* ci: run trycp intergration test in release mode

* tests: fix clone cell management

* ci: fix trycp cache

* refactor(trycp_server): run lair in-process

* build(trycp_server): always build in release mode

* remove lair stderr from logs

* fix: bring back shared range of admin ports

* fix(trycp): multi server test

* refactor(trycp): log error when removing player dir

* fix(trycp): handle startup errors

* test: refactor integration

* refactor default config

* fix reset error type

* feat(trycp: add call to revoke agent call

* test(local): add revoke agent key test

* docs: update changelog

* test: fix multi server scenario

* write errors to stdout

* address comments from review

* Apply suggestions from code review

Co-authored-by: David Braden <[email protected]>

---------

Co-authored-by: Michael Dougherty <[email protected]>
Co-authored-by: Jost Schulte <[email protected]>
Co-authored-by: ThetaSinner <[email protected]>
Co-authored-by: David Braden <[email protected]>

.github/workflows/test.yml

@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install nix
-        uses: cachix/install-nix-action@v27
+        uses: cachix/install-nix-action@v29
 
       - name: Set up cachix
         uses: cachix/cachix-action@v15
@@ -36,16 +36,19 @@ jobs:
         uses: actions/cache/restore@v4
         with:
           path: crates/trycp_server/target
-          key: ${{ runner.os }}-build-trycp-${{ hashFiles('crates/trycp_server/Cargo.lock') }}
+          key: ${{ runner.os }}-build-trycp-${{ hashFiles('Cargo.lock') }}
 
       - name: Build TryCP server
         run: nix develop -c $SHELL -c "./build-trycp.sh"
 
+      - name: Run TryCP integration tests
+        run: nix develop -c $SHELL -c "cargo test -p trycp_server --release --target-dir crates/trycp_server/target"
+
       - name: Save TryCP build to cache
         uses: actions/cache/save@v4
         with:
           path: crates/trycp_server/target
-          key: ${{ runner.os }}-build-trycp-${{ hashFiles('crates/trycp_server/Cargo.lock') }}
+          key: ${{ runner.os }}-build-trycp-${{ hashFiles('Cargo.lock') }}
 
       - name: Restore test zome build
         uses: actions/cache/restore@v4

CHANGELOG.md

@@ -5,6 +5,8 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 ## \[Unreleased\]
 
 ### Added
+- Support for DPKI in Holochain. DPKI is a Holochain conductor service to manage agent keys. Within a scenario there are two new member properties `noDpki` and `dpkiNetworkSeed`. Set `noDpki` to `true` to disable DPKI for the scenario. If DPKI is enabled, a network seed for the DPKI service can be set with `dpkiNetworkSeed`.
+- Admin API call `RevokeAgentKey` to revoke an agent key. Once revoked, all cells of the app are read-only and the agent can no longer write to it.
 ### Removed
 ### Changed
 ### Fixed