ant-core 0.10.0

//! In-memory data operations using self-encryption.
//!
//! Upload and download raw byte data. Content is encrypted via
//! convergent encryption and stored as content-addressed chunks.
//! Use this when you already have data in memory (e.g., `Bytes`).
//! For file-based streaming uploads that avoid loading the entire
//! file into memory, see the `file` module.

#[cfg(feature = "native")]
use crate::data::client::adaptive::observe_op;
#[cfg(feature = "native")]
use crate::data::client::batch::{PaymentIntent, PreparedChunk};
#[cfg(feature = "native")]
use crate::data::client::classify_error;
#[cfg(feature = "native")]
use crate::data::client::file::{ExternalPaymentInfo, PreparedUpload, Visibility};
use crate::data::client::merkle::PaymentMode;
use crate::data::client::Client;
use crate::data::error::{Error, Result};
use ant_protocol::compute_address;
use bytes::Bytes;
#[cfg(feature = "native")]
use futures::stream::StreamExt;
use self_encryption::{encrypt, DataMap};
use std::num::NonZeroUsize;
use tracing::{debug, info};

/// Result of an in-memory data upload: the `DataMap` needed to retrieve the data.
#[derive(Debug, Clone)]
pub struct DataUploadResult {
    /// The data map containing chunk metadata for reconstruction.
    pub data_map: DataMap,
    /// Number of chunks stored on the network.
    pub chunks_stored: usize,
    /// Which payment mode was actually used (not just requested).
    pub payment_mode_used: PaymentMode,
}

impl Client {
    /// Upload in-memory data to the network using self-encryption.
    ///
    /// The content is encrypted and split into chunks, each stored
    /// as a content-addressed chunk on the network. Returns a `DataMap`
    /// that can be used to retrieve and decrypt the data.
    ///
    /// # Errors
    ///
    /// Returns an error if encryption fails or any chunk cannot be stored.
    pub async fn data_upload(&self, content: Bytes) -> Result<DataUploadResult> {
        let content_len = content.len();
        debug!("Encrypting data ({content_len} bytes)");

        let (data_map, encrypted_chunks) = encrypt(content)
            .map_err(|e| Error::Encryption(format!("Failed to encrypt data: {e}")))?;

        info!("Data encrypted into {} chunks", encrypted_chunks.len());

        let chunk_contents: Vec<Bytes> = encrypted_chunks
            .into_iter()
            .map(|chunk| chunk.content)
            .collect();

        let (addresses, _storage_cost, _gas_cost) =
            self.batch_upload_chunks(chunk_contents).await?;
        let chunks_stored = addresses.len();

        info!("Data uploaded: {chunks_stored} chunks stored ({content_len} bytes original)");

        Ok(DataUploadResult {
            data_map,
            chunks_stored,
            payment_mode_used: PaymentMode::Single,
        })
    }

    /// Upload in-memory data with a specific payment mode.
    ///
    /// When `mode` is `Auto` and the chunk count >= threshold, or when `mode`
    /// is `Merkle`, this buffers all chunks and pays via a single merkle
    /// batch transaction. Otherwise falls back to per-chunk payment.
    ///
    /// # Errors
    ///
    /// Returns an error if encryption fails or any chunk cannot be stored.
    pub async fn data_upload_with_mode(
        &self,
        content: Bytes,
        mode: PaymentMode,
    ) -> Result<DataUploadResult> {
        let (data_map, encrypted) =
            encrypt(content).map_err(|e| Error::Encryption(e.to_string()))?;
        let chunks = encrypted
            .into_iter()
            .map(|chunk| chunk.content)
            .collect::<Vec<_>>();
        let records = chunks
            .iter()
            .enumerate()
            .map(|(index, bytes)| super::upload::UploadRecord {
                address: compute_address(bytes),
                size: bytes.len() as u64,
                index,
            })
            .collect();
        let adapter = super::upload::MemoryUploadAdapter {
            client: self,
            chunks: &chunks,
            progress: None,
            stored_offset: 0,
            file_total: chunks.len(),
            resume_key: None,
        };
        let outcome = self
            .upload_records(records, &mut Default::default(), &adapter, mode)
            .await?;
        Ok(DataUploadResult {
            data_map,
            chunks_stored: outcome.addresses.len(),
            payment_mode_used: outcome.mode,
        })
    }

    /// Phase 1 of external-signer data upload: encrypt and collect quotes.
    ///
    /// Equivalent to [`Client::data_prepare_upload_with_visibility`] with
    /// [`Visibility::Private`] — see that method for details.
    #[cfg(feature = "native")]
    pub async fn data_prepare_upload(&self, content: Bytes) -> Result<PreparedUpload> {
        self.data_prepare_upload_with_visibility(content, Visibility::Private)
            .await
    }

    /// Phase 1 of external-signer data upload with explicit [`Visibility`] control.
    ///
    /// Encrypts in-memory data via self-encryption, then collects storage
    /// quotes for each chunk without making any on-chain payment. Returns
    /// a [`PreparedUpload`] containing the data map and a [`PaymentIntent`]
    /// with the payment details for external signing.
    ///
    /// When `visibility` is [`Visibility::Public`], the serialized `DataMap`
    /// is bundled into the payment batch as an additional chunk and its
    /// address is recorded on the returned [`PreparedUpload`]. After
    /// [`Client::finalize_upload`] succeeds, that address is surfaced via
    /// [`crate::data::client::file::FileUploadResult::data_map_address`] so
    /// the uploader can share a single address from which anyone can retrieve
    /// the data.
    ///
    /// Wave-batch payment only — the in-memory data path does not currently
    /// support merkle batching. Use [`Client::file_prepare_upload_with_visibility`]
    /// for merkle-eligible public uploads.
    ///
    /// After the caller signs and submits the payment transaction, call
    /// [`Client::finalize_upload`] with the tx hashes to complete storage.
    ///
    /// # Errors
    ///
    /// Returns an error if encryption fails, DataMap serialization fails
    /// (public only), or quote collection fails.
    #[cfg(feature = "native")]
    pub async fn data_prepare_upload_with_visibility(
        &self,
        content: Bytes,
        visibility: Visibility,
    ) -> Result<PreparedUpload> {
        let content_len = content.len();
        debug!("Preparing data upload for external signing (visibility={visibility:?}, {content_len} bytes)");

        let (data_map, encrypted_chunks) = encrypt(content)
            .map_err(|e| Error::Encryption(format!("Failed to encrypt data: {e}")))?;

        let mut chunk_contents: Vec<Bytes> = encrypted_chunks
            .into_iter()
            .map(|chunk| chunk.content)
            .collect();

        info!("Data encrypted into {} chunks", chunk_contents.len());

        // For public uploads, bundle the serialized DataMap as an extra chunk
        // in the same payment batch. This lets the external signer pay for
        // the data chunks and the DataMap chunk in one flow, and lets the
        // finalize step return the DataMap's chunk address as the shareable
        // retrieval address.
        let data_map_address = match visibility {
            Visibility::Private => None,
            Visibility::Public => {
                let (address, bytes) = crate::client_engine::files::public_map_record(&data_map)
                    .map_err(Error::Serialization)?;
                info!(
                    "Public upload: bundling DataMap chunk ({} bytes) at address {}",
                    bytes.len(),
                    hex::encode(address)
                );
                chunk_contents.push(bytes);
                Some(address)
            }
        };

        let chunk_count = chunk_contents.len();
        let chunks_with_addr: Vec<(Bytes, [u8; 32])> = chunk_contents
            .into_iter()
            .map(|content| {
                let address = compute_address(&content);
                (content, address)
            })
            .collect();

        let quote_limiter = self.controller().quote.clone();
        let quote_concurrency = quote_limiter.current().min(chunk_count.max(1));
        let results: Vec<([u8; 32], Result<Option<PreparedChunk>>)> =
            crate::client_engine::bounded_unordered(
                chunks_with_addr.into_iter().map(|(content, address)| {
                    let limiter = quote_limiter.clone();
                    async move {
                        let result = observe_op(
                            &limiter,
                            || async move { self.prepare_chunk_payment(content).await },
                            classify_error,
                        )
                        .await;
                        (address, result)
                    }
                }),
                quote_concurrency,
            )
            .collect()
            .await;

        let mut prepared_chunks = Vec::with_capacity(results.len());
        let mut already_stored_addresses = Vec::new();
        for (address, result) in results {
            match result? {
                Some(prepared) => prepared_chunks.push(prepared),
                None => already_stored_addresses.push(address),
            }
        }

        if let Some(addr) = data_map_address {
            if already_stored_addresses.contains(&addr) {
                info!(
                    "Public upload: DataMap chunk {} was already stored \
                     on the network — address is retrievable without a \
                     new payment",
                    hex::encode(addr)
                );
            }
        }

        let payment_intent = PaymentIntent::from_prepared_chunks(&prepared_chunks);

        info!(
            "Data prepared for external signing: {} chunks, {} already stored, total {} atto ({content_len} bytes)",
            prepared_chunks.len(),
            already_stored_addresses.len(),
            payment_intent.total_amount,
        );

        Ok(PreparedUpload {
            data_map,
            payment_info: ExternalPaymentInfo::WaveBatch {
                prepared_chunks,
                payment_intent,
            },
            data_map_address,
            already_stored_addresses,
            total_chunks: chunk_count,
        })
    }

    /// Store a `DataMap` on the network as a public chunk.
    ///
    /// The serialized `DataMap` is stored as a regular content-addressed chunk.
    /// Anyone who knows the returned address can retrieve and use the `DataMap`
    /// to download the original data.
    ///
    /// # Errors
    ///
    /// Returns an error if serialization or the chunk store fails.
    pub async fn data_map_store(&self, data_map: &DataMap) -> Result<[u8; 32]> {
        let (_, serialized) = crate::client_engine::files::public_map_record(data_map)
            .map_err(Error::Serialization)?;

        info!(
            "Storing DataMap as public chunk ({} bytes serialized)",
            serialized.len()
        );

        self.chunk_put(serialized).await
    }

    /// Fetch a `DataMap` from the network by its chunk address.
    ///
    /// Retrieves the chunk at `address` and deserializes it as a `DataMap`.
    ///
    /// # Errors
    ///
    /// Returns [`Error::NotFound`] if no chunk exists at `address`; other
    /// errors if retrieval or deserialization fails.
    pub async fn data_map_fetch(&self, address: &[u8; 32]) -> Result<DataMap> {
        let chunk = self.chunk_get(address).await?.ok_or_else(|| {
            Error::NotFound(format!(
                "DataMap chunk not found at {}",
                hex::encode(address)
            ))
        })?;

        decode_data_map_chunk(&chunk.content)
    }

    /// Fetch a `DataMap` from the network by trying the requested number
    /// of closest peers for the DataMap chunk.
    ///
    /// # Errors
    ///
    /// Returns [`Error::NotFound`] if no chunk exists at `address`; other
    /// errors if retrieval or deserialization fails.
    pub async fn data_map_fetch_from_closest_peers(
        &self,
        address: &[u8; 32],
        peer_count: NonZeroUsize,
    ) -> Result<DataMap> {
        let chunk = self
            .chunk_get_from_closest_peers(address, peer_count.get())
            .await?
            .ok_or_else(|| {
                Error::NotFound(format!(
                    "DataMap chunk not found at {}",
                    hex::encode(address)
                ))
            })?;

        decode_data_map_chunk(&chunk.content)
    }

    /// Download and decrypt data from the network using its `DataMap`.
    ///
    /// Retrieves all chunks referenced by the data map, then decrypts
    /// and reassembles the original content. Fetches chunks concurrently;
    /// the fan-out is sized by the adaptive controller's `fetch` channel
    /// and ramps up under healthy conditions.
    ///
    /// Large uploads produce a *shrunk* (child) `DataMap` whose `infos()`
    /// reference wrapper chunks rather than the root content chunks. Such a
    /// map is resolved back to its root form before download, keeping this
    /// primitive symmetric with `data_upload`.
    ///
    /// Map resolution and network fetching are fully async and also work on a
    /// current-thread runtime. The same workflow drives browser downloads.
    ///
    /// # Errors
    /// Returns the underlying fetch error, or an encryption error for invalid
    /// datamaps and content that fails verification/decryption.
    pub async fn data_download(&self, data_map: &DataMap) -> Result<Bytes> {
        self.data_download_with_concurrency(data_map, usize::MAX)
            .await
    }

    /// Download data with an upper bound on concurrent record fetches.
    pub async fn data_download_with_concurrency(
        &self,
        data_map: &DataMap,
        concurrency: usize,
    ) -> Result<Bytes> {
        self.data_download_with_progress(data_map, concurrency, &|_, _| {})
            .await
    }

    /// Internal observer for verified records; reconstruction still uses the shared engine.
    pub(crate) async fn data_download_with_progress(
        &self,
        data_map: &DataMap,
        concurrency: usize,
        progress: &impl Fn(usize, usize),
    ) -> Result<Bytes> {
        if concurrency == 0 {
            return Err(Error::Config(
                "download concurrency must be positive".into(),
            ));
        }
        let received = std::sync::Mutex::new(std::collections::HashSet::new());
        let total = data_map.infos().len();
        progress(0, total);
        crate::client_engine::files::download(
            data_map,
            &|address| {
                let received = &received;
                async move {
                    let bytes = self.fetch_data_record(address).await?;
                    let mut received = received.lock().unwrap_or_else(|error| error.into_inner());
                    if received.insert(address) {
                        let completed = data_map
                            .infos()
                            .iter()
                            .filter(|info| received.contains(&info.dst_hash.0))
                            .count();
                        drop(received);
                        progress(completed, total);
                    }
                    Ok(bytes)
                }
            },
            &|| self.controller().fetch.current().min(concurrency),
            &crate::runtime::sleep,
            retry_data_fetch,
        )
        .await
        .map_err(map_read_error)
    }

    /// Download a plaintext byte range using the shared streaming reader.
    /// Resolves child maps first and fetches only records overlapping the range.
    /// Length is clamped at EOF; a start at or beyond EOF returns empty bytes.
    ///
    /// # Errors
    /// Returns fetch, datamap validation or decryption errors.
    pub async fn data_download_range(
        &self,
        data_map: &DataMap,
        start: usize,
        length: usize,
    ) -> Result<Bytes> {
        let fetch = |address| self.fetch_data_record(address);
        let cap = || self.controller().fetch.current();
        let root = crate::client_engine::files::resolve(data_map, &fetch, &cap)
            .await
            .map_err(map_read_error)?;
        crate::client_engine::files::read_range(
            &root,
            start,
            length,
            &fetch,
            &cap,
            &crate::runtime::sleep,
            retry_data_fetch,
        )
        .await
        .map_err(map_read_error)
    }

    async fn fetch_data_record(&self, address: [u8; 32]) -> Result<Bytes> {
        self.chunk_get_observed(&address)
            .await?
            .map(|chunk| chunk.content)
            .ok_or_else(|| {
                Error::NotFound(format!(
                    "Missing chunk {} required for data reconstruction",
                    hex::encode(address)
                ))
            })
    }
}

fn retry_data_fetch(error: &Error) -> bool {
    matches!(
        error,
        Error::NotFound(_)
            | Error::Timeout(_)
            | Error::Network(_)
            | Error::Protocol(_)
            | Error::Storage(_)
            | Error::Io(_)
            | Error::InsufficientPeers(_)
    )
}

pub(super) fn map_read_error(error: crate::client_engine::files::ReadError<Error>) -> Error {
    match error {
        crate::client_engine::files::ReadError::Fetch(error) => error,
        crate::client_engine::files::ReadError::Invalid(error) => Error::Encryption(error),
    }
}

fn decode_data_map_chunk(content: &[u8]) -> Result<DataMap> {
    crate::client_engine::files::decode_map(content).map_err(Error::Serialization)
}

/// Compile-time assertions that Client method futures are Send.
///
/// These methods are called from axum handlers and tokio::spawn contexts
/// that require Send + 'static. The async closures inside stream
/// combinators must not capture references with concrete lifetimes
/// (HRTB issue). If any of these checks fail, the stream closures
/// need restructuring to use owned values instead of references.
#[cfg(test)]
mod send_assertions {
    use super::*;

    fn _assert_send<T: Send>(_: &T) {}

    #[allow(
        dead_code,
        unreachable_code,
        unused_variables,
        clippy::diverging_sub_expression
    )]
    async fn _data_download_is_send(client: &Client) {
        let dm: DataMap = todo!();
        let fut = client.data_download(&dm);
        _assert_send(&fut);
    }

    #[allow(
        dead_code,
        unreachable_code,
        unused_variables,
        clippy::diverging_sub_expression
    )]
    async fn _data_download_range_is_send(client: &Client) {
        let dm: DataMap = todo!();
        _assert_send(&client.data_download_range(&dm, 0, 1024));
    }

    #[allow(dead_code, unreachable_code, clippy::diverging_sub_expression)]
    async fn _data_upload_is_send(client: &Client) {
        let fut = client.data_upload(Bytes::new());
        _assert_send(&fut);
    }

    #[allow(dead_code, unreachable_code, clippy::diverging_sub_expression)]
    async fn _data_upload_with_mode_is_send(client: &Client) {
        let fut = client.data_upload_with_mode(Bytes::new(), PaymentMode::Auto);
        _assert_send(&fut);
    }

    #[allow(dead_code, unreachable_code, clippy::diverging_sub_expression)]
    async fn _data_prepare_upload_is_send(client: &Client) {
        let fut = client.data_prepare_upload(Bytes::new());
        _assert_send(&fut);
    }

    #[allow(dead_code, unreachable_code, clippy::diverging_sub_expression)]
    async fn _data_prepare_upload_with_visibility_is_send(client: &Client) {
        let fut = client.data_prepare_upload_with_visibility(Bytes::new(), Visibility::Public);
        _assert_send(&fut);
    }
}