icydb-core 0.264.8

//! Module: db::codec::reader
//! Responsibility: checked primitive reads from borrowed binary payloads.
//! Does not own: format tags, envelope limits, or domain error classification.
//! Boundary: format decoders -> bounded big-endian byte extraction.

/// A truncated, oversized, malformed, or incompletely consumed primitive payload.
#[derive(Clone, Copy, Debug, Eq, PartialEq)]
pub(in crate::db) struct ByteDecodeError;

/// Borrowed reader shared by format decoders, which retain their own byte ceilings
/// and map primitive failures to their domain errors.
pub(in crate::db) struct ByteReader<'a> {
    bytes: &'a [u8],
    offset: usize,
}

impl<'a> ByteReader<'a> {
    pub(in crate::db) const fn new(bytes: &'a [u8]) -> Self {
        Self { bytes, offset: 0 }
    }

    pub(in crate::db) const fn remaining(&self) -> usize {
        self.bytes.len().saturating_sub(self.offset)
    }

    // Advance only after both offset arithmetic and the byte span have checked.
    pub(in crate::db) fn read_exact(&mut self, len: usize) -> Result<&'a [u8], ByteDecodeError> {
        let end = self.offset.checked_add(len).ok_or(ByteDecodeError)?;
        let value = self.bytes.get(self.offset..end).ok_or(ByteDecodeError)?;
        self.offset = end;
        Ok(value)
    }

    pub(in crate::db) fn read_array<const N: usize>(&mut self) -> Result<[u8; N], ByteDecodeError> {
        self.read_exact(N)?.try_into().map_err(|_| ByteDecodeError)
    }

    pub(in crate::db) fn read_u8(&mut self) -> Result<u8, ByteDecodeError> {
        Ok(self.read_array::<1>()?[0])
    }

    pub(in crate::db) fn read_u16(&mut self) -> Result<u16, ByteDecodeError> {
        Ok(u16::from_be_bytes(self.read_array()?))
    }

    pub(in crate::db) fn read_u32(&mut self) -> Result<u32, ByteDecodeError> {
        Ok(u32::from_be_bytes(self.read_array()?))
    }

    pub(in crate::db) fn read_u64(&mut self) -> Result<u64, ByteDecodeError> {
        Ok(u64::from_be_bytes(self.read_array()?))
    }

    pub(in crate::db) fn read_i64(&mut self) -> Result<i64, ByteDecodeError> {
        Ok(i64::from_be_bytes(self.read_array()?))
    }

    pub(in crate::db) fn read_i128(&mut self) -> Result<i128, ByteDecodeError> {
        Ok(i128::from_be_bytes(self.read_array()?))
    }

    pub(in crate::db) fn read_u128(&mut self) -> Result<u128, ByteDecodeError> {
        Ok(u128::from_be_bytes(self.read_array()?))
    }

    pub(in crate::db) fn read_len_prefixed_bytes(&mut self) -> Result<&'a [u8], ByteDecodeError> {
        self.read_bounded_len_prefixed_bytes(usize::MAX)
    }

    pub(in crate::db) fn read_bounded_len_prefixed_bytes(
        &mut self,
        max: usize,
    ) -> Result<&'a [u8], ByteDecodeError> {
        let len = usize::try_from(self.read_u32()?).map_err(|_| ByteDecodeError)?;
        if len > max {
            return Err(ByteDecodeError);
        }
        self.read_exact(len)
    }

    pub(in crate::db) fn read_string(&mut self) -> Result<String, ByteDecodeError> {
        self.read_bounded_string(usize::MAX)
    }

    pub(in crate::db) fn read_bounded_string(
        &mut self,
        max: usize,
    ) -> Result<String, ByteDecodeError> {
        let bytes = self.read_bounded_len_prefixed_bytes(max)?;
        std::str::from_utf8(bytes)
            .map(str::to_string)
            .map_err(|_| ByteDecodeError)
    }

    pub(in crate::db) const fn finish(self) -> Result<(), ByteDecodeError> {
        if self.remaining() == 0 {
            Ok(())
        } else {
            Err(ByteDecodeError)
        }
    }
}

///
/// TESTS
///

#[cfg(test)]
mod tests {
    use super::{ByteDecodeError, ByteReader};

    #[test]
    fn failed_byte_reads_preserve_the_unread_payload() {
        let mut reader = ByteReader::new(&[1, 2, 3]);
        assert_eq!(reader.read_u8(), Ok(1));
        assert_eq!(reader.read_exact(usize::MAX), Err(ByteDecodeError));
        assert_eq!(reader.read_array::<3>(), Err(ByteDecodeError));
        assert_eq!(reader.read_exact(2), Ok([2, 3].as_slice()));
        assert_eq!(reader.finish(), Ok(()));
    }

    #[test]
    fn length_and_text_boundaries_reject_malformed_payloads() {
        let bytes = [0, 0, 0, 2, b'a', b'b'];
        assert_eq!(
            ByteReader::new(&bytes).read_bounded_string(2),
            Ok("ab".into())
        );
        assert_eq!(
            ByteReader::new(&bytes).read_bounded_string(1),
            Err(ByteDecodeError)
        );
        for end in 0..bytes.len() {
            assert_eq!(
                ByteReader::new(&bytes[..end]).read_string(),
                Err(ByteDecodeError)
            );
        }
        assert_eq!(
            ByteReader::new(&[0, 0, 0, 1, 0xff]).read_string(),
            Err(ByteDecodeError)
        );
        assert_eq!(ByteReader::new(&bytes).finish(), Err(ByteDecodeError));
    }
}