lean-ctx-proxy 3.12.3

// SPDX-License-Identifier: Apache-2.0
//! Append-only delta detection and forwarded-byte replay for provider prefix
//! cache stability.
//!
//! When the proxy compresses and forwards a request, the serialised prefix
//! bytes become the provider's cache key. Re-serialising an identical `Value`
//! can produce subtly different bytes (JSON key order, float precision, Unicode
//! escaping), causing a cache miss even though the content has not changed.
//!
//! This module caches the **exact forwarded bytes** and replays them verbatim
//! on subsequent turns when the new request is an append-only extension.
//! Only the delta (new messages) is freshly serialised.
//!
//! Replay is active only in `ProxyMode::Cache`: only that mode stores the
//! forwarded bytes. Every mode records what each forwarded request carried,
//! message by message ([`SentPrefix`]), which the determinism guard checks a
//! later turn against: the provider cached what the proxy sent, not what the
//! client sent.

use std::collections::HashMap;
use std::sync::{Mutex, OnceLock};

use serde_json::Value;

const MAX_TRACKED: usize = 2048;

#[derive(Clone)]
struct ConversationPrefix {
    /// Empty outside `ProxyMode::Cache`: nothing to replay.
    forwarded_bytes: Vec<u8>,
    original_hashes: Vec<u64>,
    count: usize,
    sent: SentPrefix,
}

/// What one forwarded request carried, per cache-relevant message (`system`
/// first, then the messages), as content hashes without `cache_control`
/// markers (`determinism_guard::message_hashes`).
#[derive(Clone, Debug, Default, PartialEq, Eq)]
pub struct SentPrefix {
    /// The client's messages as they reached the proxy.
    pub client: Vec<u64>,
    /// The same messages as the proxy forwarded them.
    pub forwarded: Vec<u64>,
}

pub struct AppendDelta {
    pub prefix_bytes: Vec<u8>,
    pub delta_start: usize,
}

fn store() -> &'static Mutex<HashMap<u64, ConversationPrefix>> {
    static STORE: OnceLock<Mutex<HashMap<u64, ConversationPrefix>>> = OnceLock::new();
    STORE.get_or_init(|| Mutex::new(HashMap::new()))
}

/// Clear process-local replay state between isolated proxy lifecycles/tests.
pub fn clear() {
    if let Ok(mut guard) = store().lock() {
        guard.clear();
    }
}

fn message_hash(msg: &Value) -> u64 {
    use std::hash::{Hash, Hasher};
    let canonical = serde_json::to_string(msg).unwrap_or_default();
    let mut hasher = std::collections::hash_map::DefaultHasher::new();
    canonical.hash(&mut hasher);
    hasher.finish()
}

/// Conversation identity from system prompt + first user message.
pub fn conversation_id(system: Option<&Value>, messages: &[Value]) -> u64 {
    use std::hash::{Hash, Hasher};
    let mut hasher = std::collections::hash_map::DefaultHasher::new();
    if let Some(sys) = system {
        serde_json::to_string(sys)
            .unwrap_or_default()
            .hash(&mut hasher);
    }
    if let Some(first) = messages.first() {
        serde_json::to_string(first)
            .unwrap_or_default()
            .hash(&mut hasher);
    }
    hasher.finish()
}

/// [`conversation_id`] of a request body with a `messages` array.
pub fn request_conversation_id(request: &Value) -> Option<u64> {
    let messages = request.get("messages")?.as_array()?;
    Some(conversation_id(request.get("system"), messages))
}

/// Detect whether current messages are an append-only extension of the previous
/// turn. Returns cached prefix bytes and delta start index if so.
pub fn detect_append_only(conv_id: u64, messages: &[Value]) -> Option<AppendDelta> {
    let guard = store().lock().ok()?;
    let prev = guard.get(&conv_id)?;

    if prev.forwarded_bytes.is_empty() || messages.len() <= prev.count {
        return None;
    }

    let current_hashes: Vec<u64> = messages.iter().map(message_hash).collect();
    for (i, prev_hash) in prev.original_hashes.iter().enumerate() {
        if current_hashes.get(i) != Some(prev_hash) {
            return None;
        }
    }

    Some(AppendDelta {
        prefix_bytes: prev.forwarded_bytes.clone(),
        delta_start: prev.count,
    })
}

/// What the proxy last forwarded for the first of `conv_ids` it has seen.
///
/// The guard passes the id of the outgoing request first and the client's
/// own id second: a rewrite of `system` or the first message changes the
/// outgoing id, and the client's id still finds the earlier turn forwarded
/// with those two untouched.
pub fn sent_prefix(conv_ids: &[u64]) -> Option<SentPrefix> {
    let guard = store().lock().ok()?;
    conv_ids
        .iter()
        .find_map(|id| guard.get(id))
        .map(|prev| prev.sent.clone())
}

/// Record the forwarded prefix after a successful upstream send. `forwarded`
/// is empty when the request may not be replayed (outside `ProxyMode::Cache`).
pub fn record_forwarded(
    conv_id: u64,
    forwarded: Vec<u8>,
    originals: &[Value],
    msg_count: usize,
    sent: SentPrefix,
) {
    let hashes: Vec<u64> = originals.iter().take(msg_count).map(message_hash).collect();
    let entry = ConversationPrefix {
        forwarded_bytes: forwarded,
        original_hashes: hashes,
        count: msg_count,
        sent,
    };

    if let Ok(mut guard) = store().lock() {
        if guard.len() >= MAX_TRACKED
            && !guard.contains_key(&conv_id)
            && let Some(&oldest) = guard.keys().next()
        {
            guard.remove(&oldest);
        }
        guard.insert(conv_id, entry);
    }
}

/// Whether the previously forwarded request and the current one are the same
/// request around their messages: every top-level member other than
/// `messages` (model, limits, tools, system, …) is present in both and equal.
///
/// The conversation id only hashes the system prompt and the first message,
/// and the store is shared by every route. Replaying the forwarded bytes of a
/// request with another frame would send that request's model and parameters
/// — possibly another provider's — in place of the caller's.
pub fn same_request_frame(prefix_bytes: &[u8], current: &Value) -> bool {
    let Ok(Value::Object(previous)) = serde_json::from_slice::<Value>(prefix_bytes) else {
        return false;
    };
    let Some(current) = current.as_object() else {
        return false;
    };
    previous.len() == current.len()
        && previous
            .iter()
            .all(|(key, value)| key == "messages" || current.get(key) == Some(value))
}

/// Overlay cached prefix bytes with fresh delta bytes, producing a valid JSON
/// array where the prefix portion is byte-identical to the previous forward.
pub fn overlay_prefix(prefix_bytes: &[u8], delta_messages: &[Value]) -> Option<Vec<u8>> {
    if delta_messages.is_empty() {
        return Some(prefix_bytes.to_vec());
    }

    // Forwarded bytes are a complete provider request object, not a bare
    // messages array. Parse the object, append only the fresh delta, then
    // serialize deterministically; never splice bytes at the wrong bracket.
    let mut request: Value = serde_json::from_slice(prefix_bytes).ok()?;
    let messages = match &mut request {
        Value::Object(_) => request.get_mut("messages")?.as_array_mut()?,
        Value::Array(messages) => messages,
        _ => return None,
    };
    messages.extend(delta_messages.iter().cloned());
    serde_json::to_vec(&request).ok()
}

#[cfg(test)]
mod tests {
    use super::*;
    use serde_json::json;

    fn unique_messages(tag: &str) -> Vec<Value> {
        vec![
            json!({"role": "user", "content": format!("hello-{tag}")}),
            json!({"role": "assistant", "content": format!("hi-{tag}")}),
        ]
    }

    /// A forwarded request may only be replayed into a turn of the same
    /// request frame: another model, another route's parameters or a dropped
    /// limit must never be carried over from the stored bytes.
    #[test]
    fn replay_is_limited_to_the_same_request_frame() {
        let hello = json!({"role": "user", "content": "hello"});
        let forwarded =
            serde_json::to_vec(&json!({"model": "gpt-test", "messages": [hello]})).unwrap();
        let next = json!({"role": "user", "content": "continue"});
        assert!(same_request_frame(
            &forwarded,
            &json!({"model": "gpt-test", "messages": [hello, next]})
        ));
        for other_frame in [
            json!({"model": "claude-test", "max_tokens": 16, "messages": [hello, next]}),
            json!({"model": "gpt-test", "max_tokens": 16, "messages": [hello, next]}),
            json!({"model": "claude-test", "messages": [hello, next]}),
        ] {
            assert!(
                !same_request_frame(&forwarded, &other_frame),
                "{other_frame}"
            );
        }
    }

    #[test]
    fn append_only_detection_works() {
        let msgs = unique_messages("append");
        let conv = conversation_id(None, &msgs);
        let forwarded = serde_json::to_vec(&msgs).unwrap();

        record_forwarded(
            conv,
            forwarded.clone(),
            &msgs,
            msgs.len(),
            SentPrefix::default(),
        );

        let mut extended = msgs.clone();
        extended.push(json!({"role": "user", "content": "what's up?"}));

        let delta = detect_append_only(conv, &extended).expect("should detect append-only");
        assert_eq!(delta.delta_start, 2);
        assert_eq!(delta.prefix_bytes, forwarded);
    }

    #[test]
    fn detection_fails_on_modified_prefix() {
        let msgs = unique_messages("modified");
        let conv = conversation_id(None, &msgs);
        let forwarded = serde_json::to_vec(&msgs).unwrap();
        record_forwarded(conv, forwarded, &msgs, msgs.len(), SentPrefix::default());

        let mut modified = msgs;
        modified[0] = json!({"role": "user", "content": "different"});
        modified.push(json!({"role": "user", "content": "extra"}));
        assert!(detect_append_only(conv, &modified).is_none());
    }

    #[test]
    fn prefix_replay_is_byte_identical_across_turns() {
        let msgs = unique_messages("replay");
        let conv = conversation_id(None, &msgs);
        let forwarded = serde_json::to_vec(&msgs).unwrap();
        record_forwarded(
            conv,
            forwarded.clone(),
            &msgs,
            msgs.len(),
            SentPrefix::default(),
        );

        let mut turn2 = msgs.clone();
        turn2.push(json!({"role": "user", "content": "next"}));

        let delta = detect_append_only(conv, &turn2).unwrap();
        let result = overlay_prefix(&delta.prefix_bytes, &turn2[delta.delta_start..]).unwrap();
        let result_str = String::from_utf8(result).unwrap();
        let parsed: Vec<Value> = serde_json::from_str(&result_str).unwrap();
        assert_eq!(parsed.len(), 3);

        let prefix_portion = &result_str[..forwarded.len() - 1];
        let original_prefix = std::str::from_utf8(&forwarded[..forwarded.len() - 1]).unwrap();
        assert_eq!(
            prefix_portion, original_prefix,
            "prefix bytes must be identical"
        );
    }

    #[test]
    fn overlay_with_empty_delta_returns_prefix() {
        let msgs = unique_messages("overlay");
        let bytes = serde_json::to_vec(&msgs).unwrap();
        let result = overlay_prefix(&bytes, &[]).unwrap();
        assert_eq!(result, bytes);
    }

    #[test]
    fn overlay_preserves_complete_request_object() {
        let request = json!({"model":"m","messages":unique_messages("object")});
        let prefix = serde_json::to_vec(&request).unwrap();
        let out = overlay_prefix(&prefix, &[json!({"role":"user","content":"new"})]).unwrap();
        let decoded: Value = serde_json::from_slice(&out).unwrap();
        assert_eq!(decoded["model"], "m");
        assert_eq!(decoded["messages"].as_array().unwrap().len(), 3);
    }

    #[test]
    fn conversation_id_is_deterministic() {
        let sys = json!("You are helpful");
        let msgs = unique_messages("deterministic");
        assert_eq!(
            conversation_id(Some(&sys), &msgs),
            conversation_id(Some(&sys), &msgs)
        );
    }

    #[test]
    fn max_tracked_evicts_oldest() {
        for i in 0..MAX_TRACKED + 10 {
            let msgs = vec![json!({"role": "user", "content": format!("msg {i}")})];
            let conv = conversation_id(None, &msgs);
            record_forwarded(
                conv,
                serde_json::to_vec(&msgs).unwrap(),
                &msgs,
                1,
                SentPrefix::default(),
            );
        }
        assert!(store().lock().unwrap().len() <= MAX_TRACKED);
    }
}