aven-core 0.1.33

//! Compact framing belongs only to the batch transport; record bytes are unchanged.
use super::*;

pub mod fixed {
    use serde::{Deserializer, Serializer, de::Error};
    pub fn serialize<S: Serializer>(
        value: &[u8; 32],
        serializer: S,
    ) -> std::result::Result<S::Ok, S::Error> {
        crate::sync::base64_bytes::serialize(value, serializer)
    }
    pub fn deserialize<'de, D: Deserializer<'de>>(
        deserializer: D,
    ) -> std::result::Result<[u8; 32], D::Error> {
        crate::sync::base64_bytes::bounded::<D, 32>(deserializer)?
            .try_into()
            .map_err(|_| D::Error::custom("expected 32 bytes"))
    }
}

#[derive(Serialize, Deserialize)]
#[serde(remote = "Context", deny_unknown_fields)]
struct CompactContext {
    #[serde(with = "fixed")]
    vault: [u8; 32],
    #[serde(with = "fixed")]
    genesis: [u8; 32],
    #[serde(with = "fixed")]
    device: [u8; 32],
    #[serde(with = "fixed")]
    head: [u8; 32],
    #[serde(with = "fixed")]
    stream: [u8; 32],
    #[serde(with = "fixed")]
    descriptor: [u8; 32],
}

#[derive(Serialize, Deserialize)]
#[serde(deny_unknown_fields)]
pub struct Envelope<T> {
    #[serde(with = "CompactContext")]
    pub context: Context,
    #[serde(with = "fixed")]
    pub correlation: [u8; 32],
    pub operation: T,
}

#[derive(Clone, Serialize, Deserialize)]
#[serde(deny_unknown_fields)]
pub struct CompactMapping {
    pub operation_id: String,
    pub sequence: i64,
    #[serde(with = "fixed")]
    pub commitment: [u8; 32],
}
impl From<Mapping> for CompactMapping {
    fn from(value: Mapping) -> Self {
        Self {
            operation_id: value.operation_id,
            sequence: value.sequence,
            commitment: value.commitment,
        }
    }
}
impl From<CompactMapping> for Mapping {
    fn from(value: CompactMapping) -> Self {
        Self {
            operation_id: value.operation_id,
            sequence: value.sequence,
            commitment: value.commitment,
        }
    }
}

const _: () = assert!(BATCH_APPEND_LIMIT <= attachments::HTTP_LIMIT);

/// Bounds collection allocation even when an input contains many tiny elements.
pub fn bounded_items<'de, D, T>(deserializer: D) -> std::result::Result<Vec<T>, D::Error>
where
    D: serde::Deserializer<'de>,
    T: serde::Deserialize<'de>,
{
    struct Items<T>(std::marker::PhantomData<T>);
    impl<'de, T: serde::Deserialize<'de>> serde::de::Visitor<'de> for Items<T> {
        type Value = Vec<T>;
        fn expecting(&self, f: &mut std::fmt::Formatter) -> std::fmt::Result {
            f.write_str("at most 128 batch items")
        }
        fn visit_seq<A: serde::de::SeqAccess<'de>>(
            self,
            mut seq: A,
        ) -> std::result::Result<Self::Value, A::Error> {
            use serde::de::Error;
            let mut items = Vec::new();
            while let Some(item) = seq.next_element()? {
                if items.len() == BATCH_COUNT {
                    return Err(A::Error::custom("batch count limit"));
                }
                items.push(item);
            }
            Ok(items)
        }
    }
    deserializer.deserialize_seq(Items(std::marker::PhantomData))
}

#[cfg(test)]
mod tests {
    use super::*;
    use sqlx::{Connection, Executor};

    #[tokio::test]
    async fn migration_preserves_frozen_observed_and_blocked_ownership() {
        let mut conn = sqlx::SqliteConnection::connect("sqlite::memory:")
            .await
            .unwrap();
        conn.execute("PRAGMA foreign_keys=ON").await.unwrap();
        conn.execute("CREATE TABLE changes(change_id TEXT PRIMARY KEY,client_id TEXT,local_seq INTEGER,entity_type TEXT,entity_id TEXT,field TEXT,op_type TEXT,payload TEXT,base_version TEXT,created_at TEXT)").await.unwrap();
        conn.execute("INSERT INTO changes(change_id) VALUES ('frozen'),('accepted')")
            .await
            .unwrap();
        let schema = include_str!("../../../migrations/20260924091148_encrypted_sync.sql");
        let start = schema.find("CREATE TABLE local_e2ee_outbox (").unwrap();
        let end = schema.find("-- Local association state").unwrap();
        // Both bounds select literal schema source, never user input.
        sqlx::raw_sql(sqlx::AssertSqlSafe(&schema[start..end]))
            .execute(&mut conn)
            .await
            .unwrap();
        sqlx::query("INSERT INTO local_e2ee_outbox(singleton,operation_id,association,sync_generation,record,observed_sequence,observed_commitment,blocked) VALUES(1,'frozen','association',7,?,8,?,1)")
            .bind(vec![1u8; 100]).bind(vec![2u8; 32]).execute(&mut conn).await.unwrap();
        sqlx::query("INSERT INTO local_e2ee_accepted(operation_id,sequence,commitment,record) VALUES('accepted',9,?,?)")
            .bind(vec![3u8;32]).bind(vec![4u8;100]).execute(&mut conn).await.unwrap();
        let mut tx = conn.begin().await.unwrap();
        sqlx::raw_sql(include_str!(
            "../../../migrations/20260928163800_ordered_e2ee_outbox.sql"
        ))
        .execute(&mut *tx)
        .await
        .unwrap();
        tx.commit().await.unwrap();
        let row: (i64, String, i64, Vec<u8>, i64, Vec<u8>, bool) = sqlx::query_as("SELECT position,association,sync_generation,record,observed_sequence,observed_commitment,blocked FROM local_e2ee_outbox")
            .fetch_one(&mut conn).await.unwrap();
        assert_eq!(
            row,
            (
                1,
                "association".into(),
                7,
                vec![1; 100],
                8,
                vec![2; 32],
                true
            )
        );
        assert!(
            conn.execute("DELETE FROM changes WHERE change_id='frozen'")
                .await
                .is_err()
        );
        assert!(
            conn.execute("UPDATE changes SET payload='changed' WHERE change_id='accepted'")
                .await
                .is_err()
        );
        sqlx::query("UPDATE local_e2ee_outbox SET record=?")
            .bind(vec![1u8; RECORD_LIMIT])
            .execute(&mut conn)
            .await
            .unwrap();
        sqlx::query("UPDATE local_e2ee_accepted SET record=?")
            .bind(vec![1u8; RECORD_LIMIT])
            .execute(&mut conn)
            .await
            .unwrap();
        assert!(
            sqlx::query("UPDATE local_e2ee_outbox SET record=?")
                .bind(vec![1u8; RECORD_LIMIT + 1])
                .execute(&mut conn)
                .await
                .is_err()
        );
    }
}