@ohos-ports/azle 0.33.0-beta.0

package/src/stable/build/commands/build/wasm_binary/rust/stable_canister_template/src/rquickjs_utils/mod.rs

@@ -0,0 +1,7 @@
+mod call_with_error_handling;
+mod error;
+mod with_ctx;
+
+pub use call_with_error_handling::call_with_error_handling;
+pub use error::{handle_promise_error, trap_on_last_exception};
+pub use with_ctx::with_ctx;

package/src/stable/build/commands/build/wasm_binary/rust/stable_canister_template/src/rquickjs_utils/with_ctx.rs

@@ -0,0 +1,24 @@
+use std::error::Error;
+
+use rquickjs::Ctx;
+
+use crate::CONTEXT_REF_CELL;
+
+pub fn with_ctx<F, R>(callback: F) -> Result<R, Box<dyn Error>>
+where
+    F: FnOnce(Ctx) -> Result<R, Box<dyn Error>>,
+{
+    CONTEXT_REF_CELL.with(|context_ref_cell| {
+        let context_ref = context_ref_cell.borrow();
+        let context = context_ref
+            .as_ref()
+            .ok_or("QuickJS context not initialized")?;
+
+        context.with(|ctx| {
+            let result = callback(ctx.clone())
+                .map_err(|e| format!("QuickJS callback execution failed: {e}"))?;
+
+            Ok(result)
+        })
+    })
+}

package/src/stable/build/commands/build/wasm_binary/rust/stable_canister_template/src/stable_b_tree_map.rs

@@ -0,0 +1,84 @@
+use std::{borrow::Cow, cell::RefCell, collections::BTreeMap};
+
+use ic_stable_structures::{storable::Bound, StableBTreeMap, Storable};
+use rquickjs::{Ctx, Result};
+
+use crate::{ic::throw_error, Memory};
+
+#[allow(unused)]
+pub type AzleStableBTreeMap =
+    StableBTreeMap<AzleStableBTreeMapKey, AzleStableBTreeMapValue, Memory>;
+
+thread_local! {
+    pub static STABLE_B_TREE_MAPS: RefCell<BTreeMap<u8, AzleStableBTreeMap>> = RefCell::new(BTreeMap::new());
+}
+
+#[derive(Ord, PartialOrd, Eq, PartialEq, Clone)]
+pub struct AzleStableBTreeMapKey {
+    pub bytes: Vec<u8>,
+}
+
+impl Storable for AzleStableBTreeMapKey {
+    fn to_bytes(&self) -> Cow<[u8]> {
+        Cow::Borrowed(&self.bytes)
+    }
+
+    fn from_bytes(bytes: Cow<[u8]>) -> Self {
+        AzleStableBTreeMapKey {
+            bytes: bytes.to_vec(),
+        }
+    }
+
+    const BOUND: Bound = Bound::Unbounded;
+}
+
+#[derive(Ord, PartialOrd, Eq, PartialEq, Clone)]
+pub struct AzleStableBTreeMapValue {
+    pub bytes: Vec<u8>,
+}
+
+impl Storable for AzleStableBTreeMapValue {
+    fn to_bytes(&self) -> Cow<[u8]> {
+        Cow::Borrowed(&self.bytes)
+    }
+
+    fn from_bytes(bytes: Cow<[u8]>) -> Self {
+        AzleStableBTreeMapValue {
+            bytes: bytes.to_vec(),
+        }
+    }
+
+    const BOUND: Bound = Bound::Unbounded;
+}
+
+pub fn with_stable_b_tree_map<F, R>(ctx: Ctx, memory_id: u8, f: F) -> Result<R>
+where
+    F: FnOnce(&AzleStableBTreeMap) -> R,
+{
+    STABLE_B_TREE_MAPS.with(|stable_b_tree_maps| {
+        let stable_b_tree_maps = stable_b_tree_maps.borrow();
+
+        let stable_b_tree_map = stable_b_tree_maps.get(&memory_id).ok_or(throw_error(
+            ctx,
+            &format!("Could not find StableBTreeMap with memory id {memory_id}"),
+        ))?;
+
+        Ok(f(stable_b_tree_map))
+    })
+}
+
+pub fn with_stable_b_tree_map_mut<F, R>(ctx: Ctx, memory_id: u8, f: F) -> Result<R>
+where
+    F: FnOnce(&mut AzleStableBTreeMap) -> R,
+{
+    STABLE_B_TREE_MAPS.with(|stable_b_tree_maps| {
+        let mut stable_b_tree_maps = stable_b_tree_maps.borrow_mut();
+
+        let stable_b_tree_map = stable_b_tree_maps.get_mut(&memory_id).ok_or(throw_error(
+            ctx,
+            &format!("Could not find StableBTreeMap with memory id {memory_id}"),
+        ))?;
+
+        Ok(f(stable_b_tree_map))
+    })
+}

package/src/stable/build/commands/build/wasm_binary/rust/stable_canister_template/src/state.rs

@@ -0,0 +1,55 @@
+use std::error::Error;
+
+use rquickjs::{Ctx, Object, Value};
+
+use crate::rquickjs_utils::call_with_error_handling;
+
+/// Dispatches an action to the Azle JavaScript runtime.
+///
+/// This function creates a JavaScript action object with the provided type and payload,
+/// along with location information (filepath and function name), and dispatches it to
+/// the Azle runtime by calling the global `_azleDispatch` function. Actions are used
+/// for important global state changes in Azle.
+///
+/// # Arguments
+///
+/// * `ctx` - The QuickJS context in which the action will be created and dispatched
+/// * `action_type` - The type of the action to be dispatched
+/// * `payload` - The payload of the action as a QuickJS Value
+/// * `filepath` - The filepath where the action is being dispatched from
+/// * `function_name` - The name of the function dispatching the action
+///
+/// # Returns
+///
+/// * `Ok(())` if the action was successfully dispatched
+/// * `Err` containing the error if any operation fails
+///
+/// # Errors
+///
+/// This function may return an error if:
+/// - Creating JavaScript objects fails
+/// - Setting properties on JavaScript objects fails
+/// - Calling the `_azleDispatch` function fails
+pub fn dispatch_action<'a>(
+    ctx: Ctx<'a>,
+    action_type: &str,
+    payload: Value<'a>,
+    filepath: &str,
+    function_name: &str,
+) -> Result<(), Box<dyn Error>> {
+    let action = Object::new(ctx.clone())?;
+
+    action.set("type", action_type)?;
+    action.set("payload", payload)?;
+
+    let location = Object::new(ctx.clone())?;
+
+    location.set("filepath", filepath)?;
+    location.set("functionName", function_name)?;
+
+    action.set("location", location)?;
+
+    call_with_error_handling(&ctx, &ctx.globals().get("_azleDispatch")?, (action,))?;
+
+    Ok(())
+}

package/src/stable/build/commands/build/wasm_binary/rust/stable_canister_template/src/wasm_binary_manipulation.rs

@@ -0,0 +1,296 @@
+use core::ptr::read_volatile;
+use std::{error::Error, str};
+
+use serde::{Deserialize, Serialize};
+use serde_json;
+
+#[derive(Debug, Serialize, Deserialize, Clone)]
+pub struct WasmData {
+    #[serde(rename = "envVars")]
+    pub env_vars: Vec<(String, String)>,
+    #[serde(rename = "mainJsPath")]
+    pub main_js_path: String,
+}
+
+#[inline(never)]
+#[unsafe(no_mangle)]
+extern "C" fn init_js_passive_data(js_vec_location: i32) {
+    // Without something like this to make the function bodies different,
+    // the init_js_passive_data and init_wasm_data_passive_data functions
+    // seem to be optimized into the same function in the Wasm binary
+    // This causes problems during Wasm binary manipulation
+    let _ = format!("prevent init_js_passive_data and init_wasm_data_passive_data optimization");
+
+    // This is used to prevent compiler optimizations that interfere with the Wasm binary manipulation
+    unsafe { read_volatile(&js_vec_location) };
+}
+
+// Used to provide a safe value for the read_volatile and to differentiate between the
+// js_passive_data_size and wasm_data_passive_data_size function bodies
+// Without this problems happen during Wasm binary manipulation
+static JS_PASSIVE_DATA_SIZE: usize = 0;
+
+#[inline(never)]
+#[unsafe(no_mangle)]
+extern "C" fn js_passive_data_size() -> usize {
+    // This is used to prevent compiler optimizations that interfere with the Wasm binary manipulation
+    unsafe { read_volatile(&JS_PASSIVE_DATA_SIZE) }
+}
+
+// Inspired from: https://github.com/adambratschikaye/wasm-inject-data/blob/main/src/static_wasm.rs
+// Most likely a derivative work licensed under the Apache License, Version 2.0: https://github.com/adambratschikaye/wasm-inject-data/blob/main/LICENSE
+pub fn get_js_code() -> Result<Vec<u8>, Box<dyn Error>> {
+    let size = js_passive_data_size();
+
+    let mut js_vec = vec![243; size];
+
+    // This cast to usize appears to be well defined and safe
+    let js_vec_location = js_vec.as_mut_ptr() as usize;
+
+    init_js_passive_data(i32::try_from(js_vec_location)?);
+
+    Ok(js_vec)
+}
+
+#[inline(never)]
+#[unsafe(no_mangle)]
+extern "C" fn init_wasm_data_passive_data(wasm_data_vec_location: i32) {
+    // This is used to prevent compiler optimizations that interfere with the Wasm binary manipulation
+    unsafe { read_volatile(&wasm_data_vec_location) };
+}
+
+// Used to provide a safe value for the read_volatile and to differentiate between the
+// js_passive_data_size and wasm_data_passive_data_size function bodies
+// Without this problems happen during Wasm binary manipulation
+static WASM_DATA_PASSIVE_DATA_SIZE: usize = 0;
+
+#[inline(never)]
+#[unsafe(no_mangle)]
+extern "C" fn wasm_data_passive_data_size() -> usize {
+    // This is used to prevent compiler optimizations that interfere with the Wasm binary manipulation
+    unsafe { read_volatile(&WASM_DATA_PASSIVE_DATA_SIZE) }
+}
+
+// Inspired from: https://github.com/adambratschikaye/wasm-inject-data/blob/main/src/static_wasm.rs
+// Most likely a derivative work licensed under the Apache License, Version 2.0: https://github.com/adambratschikaye/wasm-inject-data/blob/main/LICENSE
+pub fn get_wasm_data() -> Result<WasmData, Box<dyn Error>> {
+    let size = wasm_data_passive_data_size();
+
+    let mut wasm_data_vec = vec![243; size];
+
+    // This cast to usize appears to be well defined and safe
+    let wasm_data_vec_location = wasm_data_vec.as_mut_ptr() as usize;
+
+    init_wasm_data_passive_data(i32::try_from(wasm_data_vec_location)?);
+
+    let wasm_data_str = str::from_utf8(&wasm_data_vec).map_err(|e| {
+        format!(
+            "WasmData conversion failed while converting Vec<u8> to String: {}",
+            e
+        )
+    })?;
+
+    let wasm_data: WasmData = serde_json::from_str(wasm_data_str).map_err(|e| {
+        format!(
+            "WasmData conversion failed while converting String to WasmData struct: {}",
+            e
+        )
+    })?;
+
+    Ok(wasm_data)
+}
+
+// For get_js_code and get_wasm_data above:
+
+// Copyright © 2024 DFINITY Foundation
+
+// Each file in this repository is licensed under the license as
+// described in the LICENSE file in the same directory that contains the
+// file or, if that doesn't exist, the first LICENSE file in any
+// higher-level directory.
+
+// Unless stated otherwise as described above, all files in this
+// directory are licensed under the Apache License, Version 2.0 (the
+// "License"); you may not use these files except in compliance with the
+// License. You may obtain a copy of the License at
+
+//   http://www.apache.org/licenses/LICENSE-2.0
+
+// The Apache-2.0 license is also copied below:
+
+//                               Apache License
+//                         Version 2.0, January 2004
+//                      http://www.apache.org/licenses/
+
+// TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+// 1. Definitions.
+
+//    "License" shall mean the terms and conditions for use, reproduction,
+//    and distribution as defined by Sections 1 through 9 of this document.
+
+//    "Licensor" shall mean the copyright owner or entity authorized by
+//    the copyright owner that is granting the License.
+
+//    "Legal Entity" shall mean the union of the acting entity and all
+//    other entities that control, are controlled by, or are under common
+//    control with that entity. For the purposes of this definition,
+//    "control" means (i) the power, direct or indirect, to cause the
+//    direction or management of such entity, whether by contract or
+//    otherwise, or (ii) ownership of fifty percent (50%) or more of the
+//    outstanding shares, or (iii) beneficial ownership of such entity.
+
+//    "You" (or "Your") shall mean an individual or Legal Entity
+//    exercising permissions granted by this License.
+
+//    "Source" form shall mean the preferred form for making modifications,
+//    including but not limited to software source code, documentation
+//    source, and configuration files.
+
+//    "Object" form shall mean any form resulting from mechanical
+//    transformation or translation of a Source form, including but
+//    not limited to compiled object code, generated documentation,
+//    and conversions to other media types.
+
+//    "Work" shall mean the work of authorship, whether in Source or
+//    Object form, made available under the License, as indicated by a
+//    copyright notice that is included in or attached to the work
+//    (an example is provided in the Appendix below).
+
+//    "Derivative Works" shall mean any work, whether in Source or Object
+//    form, that is based on (or derived from) the Work and for which the
+//    editorial revisions, annotations, elaborations, or other modifications
+//    represent, as a whole, an original work of authorship. For the purposes
+//    of this License, Derivative Works shall not include works that remain
+//    separable from, or merely link (or bind by name) to the interfaces of,
+//    the Work and Derivative Works thereof.
+
+//    "Contribution" shall mean any work of authorship, including
+//    the original version of the Work and any modifications or additions
+//    to that Work or Derivative Works thereof, that is intentionally
+//    submitted to Licensor for inclusion in the Work by the copyright owner
+//    or by an individual or Legal Entity authorized to submit on behalf of
+//    the copyright owner. For the purposes of this definition, "submitted"
+//    means any form of electronic, verbal, or written communication sent
+//    to the Licensor or its representatives, including but not limited to
+//    communication on electronic mailing lists, source code control systems,
+//    and issue tracking systems that are managed by, or on behalf of, the
+//    Licensor for the purpose of discussing and improving the Work, but
+//    excluding communication that is conspicuously marked or otherwise
+//    designated in writing by the copyright owner as "Not a Contribution."
+
+//    "Contributor" shall mean Licensor and any individual or Legal Entity
+//    on behalf of whom a Contribution has been received by Licensor and
+//    subsequently incorporated within the Work.
+
+// 2. Grant of Copyright License. Subject to the terms and conditions of
+//    this License, each Contributor hereby grants to You a perpetual,
+//    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+//    copyright license to reproduce, prepare Derivative Works of,
+//    publicly display, publicly perform, sublicense, and distribute the
+//    Work and such Derivative Works in Source or Object form.
+
+// 3. Grant of Patent License. Subject to the terms and conditions of
+//    this License, each Contributor hereby grants to You a perpetual,
+//    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+//    (except as stated in this section) patent license to make, have made,
+//    use, offer to sell, sell, import, and otherwise transfer the Work,
+//    where such license applies only to those patent claims licensable
+//    by such Contributor that are necessarily infringed by their
+//    Contribution(s) alone or by combination of their Contribution(s)
+//    with the Work to which such Contribution(s) was submitted. If You
+//    institute patent litigation against any entity (including a
+//    cross-claim or counterclaim in a lawsuit) alleging that the Work
+//    or a Contribution incorporated within the Work constitutes direct
+//    or contributory patent infringement, then any patent licenses
+//    granted to You under this License for that Work shall terminate
+//    as of the date such litigation is filed.
+
+// 4. Redistribution. You may reproduce and distribute copies of the
+//    Work or Derivative Works thereof in any medium, with or without
+//    modifications, and in Source or Object form, provided that You
+//    meet the following conditions:
+
+//    (a) You must give any other recipients of the Work or
+//        Derivative Works a copy of this License; and
+
+//    (b) You must cause any modified files to carry prominent notices
+//        stating that You changed the files; and
+
+//    (c) You must retain, in the Source form of any Derivative Works
+//        that You distribute, all copyright, patent, trademark, and
+//        attribution notices from the Source form of the Work,
+//        excluding those notices that do not pertain to any part of
+//        the Derivative Works; and
+
+//    (d) If the Work includes a "NOTICE" text file as part of its
+//        distribution, then any Derivative Works that You distribute must
+//        include a readable copy of the attribution notices contained
+//        within such NOTICE file, excluding those notices that do not
+//        pertain to any part of the Derivative Works, in at least one
+//        of the following places: within a NOTICE text file distributed
+//        as part of the Derivative Works; within the Source form or
+//        documentation, if provided along with the Derivative Works; or,
+//        within a display generated by the Derivative Works, if and
+//        wherever such third-party notices normally appear. The contents
+//        of the NOTICE file are for informational purposes only and
+//        do not modify the License. You may add Your own attribution
+//        notices within Derivative Works that You distribute, alongside
+//        or as an addendum to the NOTICE text from the Work, provided
+//        that such additional attribution notices cannot be construed
+//        as modifying the License.
+
+//    You may add Your own copyright statement to Your modifications and
+//    may provide additional or different license terms and conditions
+//    for use, reproduction, or distribution of Your modifications, or
+//    for any such Derivative Works as a whole, provided Your use,
+//    reproduction, and distribution of the Work otherwise complies with
+//    the conditions stated in this License.
+
+// 5. Submission of Contributions. Unless You explicitly state otherwise,
+//    any Contribution intentionally submitted for inclusion in the Work
+//    by You to the Licensor shall be under the terms and conditions of
+//    this License, without any additional terms or conditions.
+//    Notwithstanding the above, nothing herein shall supersede or modify
+//    the terms of any separate license agreement you may have executed
+//    with Licensor regarding such Contributions.
+
+// 6. Trademarks. This License does not grant permission to use the trade
+//    names, trademarks, service marks, or product names of the Licensor,
+//    except as required for reasonable and customary use in describing the
+//    origin of the Work and reproducing the content of the NOTICE file.
+
+// 7. Disclaimer of Warranty. Unless required by applicable law or
+//    agreed to in writing, Licensor provides the Work (and each
+//    Contributor provides its Contributions) on an "AS IS" BASIS,
+//    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+//    implied, including, without limitation, any warranties or conditions
+//    of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+//    PARTICULAR PURPOSE. You are solely responsible for determining the
+//    appropriateness of using or redistributing the Work and assume any
+//    risks associated with Your exercise of permissions under this License.
+
+// 8. Limitation of Liability. In no event and under no legal theory,
+//    whether in tort (including negligence), contract, or otherwise,
+//    unless required by applicable law (such as deliberate and grossly
+//    negligent acts) or agreed to in writing, shall any Contributor be
+//    liable to You for damages, including any direct, indirect, special,
+//    incidental, or consequential damages of any character arising as a
+//    result of this License or out of the use or inability to use the
+//    Work (including but not limited to damages for loss of goodwill,
+//    work stoppage, computer failure or malfunction, or any and all
+//    other commercial damages or losses), even if such Contributor
+//    has been advised of the possibility of such damages.
+
+// 9. Accepting Warranty or Additional Liability. While redistributing
+//    the Work or Derivative Works thereof, You may choose to offer,
+//    and charge a fee for, acceptance of support, warranty, indemnity,
+//    or other liability obligations and/or rights consistent with this
+//    License. However, in accepting such obligations, You may act only
+//    on Your own behalf and on Your sole responsibility, not on behalf
+//    of any other Contributor, and only if You agree to indemnify,
+//    defend, and hold each Contributor harmless for any liability
+//    incurred by, or claims asserted against, such Contributor by reason
+//    of your accepting any such warranty or additional liability.
+
+// END OF TERMS AND CONDITIONS

package/src/stable/build/commands/clean.ts

@@ -0,0 +1,15 @@
+import { rm } from 'fs/promises';
+import { join } from 'path';
+
+import { getDfxRoot } from '#utils/dfx_root';
+
+export async function runCommand(): Promise<void> {
+    const dotAzlePath = join(getDfxRoot(), '.azle');
+
+    await rm(dotAzlePath, {
+        recursive: true,
+        force: true
+    });
+
+    console.info(`${dotAzlePath} directory deleted`);
+}

package/src/stable/build/commands/dev/audit.ts

@@ -0,0 +1,39 @@
+import { ExecSyncOptionsWithBufferEncoding, IOType } from 'child_process';
+
+import { execSyncPretty } from '#utils/exec_sync_pretty';
+import { AZLE_ROOT } from '#utils/global_paths';
+
+export async function runCommand(ioType: IOType = 'inherit'): Promise<void> {
+    const options = {
+        cwd: AZLE_ROOT,
+        stdio: ioType
+    };
+
+    runAuditCommand('npm audit', options);
+    runAuditCommand('npm run license-check', options);
+
+    runAuditCommand('cargo audit', options);
+    runAuditCommand('cargo audit bin ~/.cargo/bin/cargo-auditable', options);
+    runAuditCommand('cargo audit bin ~/.cargo/bin/cargo-audit', options);
+    runAuditCommand(
+        'cargo audit bin ~/.cargo/bin/cargo-bundle-licenses',
+        options
+    );
+    runAuditCommand('cargo audit bin ~/.cargo/bin/cargo-deny', options);
+    runAuditCommand('cargo audit bin ~/.cargo/bin/wasi2ic', options);
+    runAuditCommand('cargo deny check', options);
+
+    console.info('\n🎉 All security audit checks completed successfully!');
+}
+/**
+ * Runs an audit command and logs a success message
+ * @param command - The command to execute
+ * @param options - Options to pass to execSyncPretty
+ */
+function runAuditCommand(
+    command: string,
+    options?: ExecSyncOptionsWithBufferEncoding
+): void {
+    execSyncPretty(command, options);
+    console.info(`✓ ${command} completed successfully`);
+}

package/src/stable/build/commands/dev/setup/index.ts

@@ -0,0 +1,41 @@
+import { execSyncPretty } from '#utils/exec_sync_pretty';
+import { AZLE_ROOT } from '#utils/global_paths';
+
+import { azle } from '../../../../../../package.json';
+
+type DependencyName =
+    | 'dfx'
+    | 'node'
+    | 'rust'
+    | 'cargo-auditable'
+    | 'cargo-audit'
+    | 'cargo-bundle-licenses'
+    | 'cargo-deny'
+    | 'wasi2ic';
+
+type DependencyInstallInfo = {
+    [key in DependencyName]: boolean;
+};
+
+export async function runCommand(
+    dependenciesToInstall: DependencyInstallInfo
+): Promise<void> {
+    for (const key in dependenciesToInstall) {
+        const dependency = key as DependencyName;
+        if (dependenciesToInstall[dependency] === true) {
+            installDependency(dependency);
+        }
+    }
+}
+
+function installDependency(dependency: DependencyName): void {
+    console.info(`Installing ${dependency}...`);
+    const version = azle.globalDependencies[dependency];
+    const script = `install_${dependency}.sh`;
+    execSyncPretty(
+        `${AZLE_ROOT}/src/stable/build/commands/dev/setup/${script} ${version}`,
+        {
+            stdio: 'inherit'
+        }
+    );
+}

package/src/stable/build/commands/dev/setup/install_cargo-audit.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+VERSION=$1
+
+if [[ $VERSION =~ ^https?:// ]]; then
+    echo "Installing cargo-audit from repository $VERSION"
+    cargo auditable install cargo-audit --git "$VERSION"
+else
+    echo "Installing cargo-audit version $VERSION"
+    cargo auditable install cargo-audit --version "$VERSION"
+fi

package/src/stable/build/commands/dev/setup/install_cargo-auditable.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+VERSION=$1
+
+# cargo-auditable allows us to run cargo audit bin on our global cargo dependencies.
+# We first install cargo-auditable so that it can be used to install itself.
+# Without this, cargo audit bin would not be able to audit cargo-auditable itself.
+if [[ $VERSION =~ ^https?:// ]]; then
+    echo "Installing cargo-auditable from repository $VERSION"
+    cargo install cargo-auditable --git "$VERSION" --locked
+    cargo auditable install cargo-auditable --git "$VERSION" --locked --force
+else
+    echo "Installing cargo-auditable version $VERSION"
+    cargo install cargo-auditable --version "$VERSION" --locked
+    cargo auditable install cargo-auditable --version "$VERSION" --locked --force
+fi

package/src/stable/build/commands/dev/setup/install_cargo-bundle-licenses.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+VERSION=$1
+
+if [[ $VERSION =~ ^https?:// ]]; then
+    echo "Installing cargo-bundle-licenses from repository $VERSION"
+    cargo auditable install cargo-bundle-licenses --git "$VERSION" --locked
+else
+    echo "Installing cargo-bundle-licenses version $VERSION"
+    cargo auditable install cargo-bundle-licenses --version "$VERSION" --locked
+fi

package/src/stable/build/commands/dev/setup/install_cargo-deny.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+VERSION=$1
+
+if [[ $VERSION =~ ^https?:// ]]; then
+    echo "Installing cargo-deny from repository $VERSION"
+    cargo auditable install cargo-deny --git "$VERSION" --locked
+else
+    echo "Installing cargo-deny version $VERSION"
+    cargo auditable install cargo-deny --version "$VERSION" --locked
+fi

package/src/stable/build/commands/dev/setup/install_dfx.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+
+set -eou pipefail
+
+if [ -z "$1" ]; then
+    echo "Error: No DFX version specified."
+    echo "Usage: ./install_dfx.sh <DFX_VERSION>"
+    exit 1
+fi
+
+DFX_VERSION=$1
+
+# Install or update dfx using the official installation script
+echo "Installing dfx version $DFX_VERSION..."
+DFXVM_INIT_YES=true DFX_VERSION=$DFX_VERSION sh -ci "$(curl --retry 3 -fsSL https://sdk.dfinity.org/install.sh)"
+
+# Determine the correct dfx path based on the operating system
+if [[ "$OSTYPE" == "darwin"* ]]; then
+    # macOS
+    DFX_PATH="$HOME/Library/Application Support/org.dfinity.dfx/bin"
+else
+    # Linux and others
+    DFX_PATH="$HOME/.local/share/dfx/bin"
+fi
+
+# Add dfx to PATH for current session so the installation can be verified
+export PATH="$DFX_PATH:$PATH"
+
+# Verify installation
+if ! command -v dfx &> /dev/null; then
+    echo "dfx installation verification failed" >&2
+    exit 1
+fi
+
+echo "dfx $DFX_VERSION installation completed."
+exit 0