tensogram 0.22.0

// (C) Copyright 2026- ECMWF and individual contributors.
//
// This software is licensed under the terms of the Apache Licence Version 2.0
// which can be obtained at http://www.apache.org/licenses/LICENSE-2.0.
// In applying this licence, ECMWF does not waive the privileges and immunities
// granted to it by virtue of its status as an intergovernmental organisation nor
// does it submit to any jurisdiction.

use serde::{Deserialize, Serialize};
use std::collections::BTreeMap;

use crate::dtype::Dtype;
use crate::error::Result;
use crate::error::TensogramError;

pub use tensogram_encodings::ByteOrder;

// `HashDescriptor` was the v2 per-object hash carrier.  In v3 the
// per-object hash lives in the inline hash slot of the data-object
// frame footer (see `plans/WIRE_FORMAT.md` §2.2 and §2.4), and the
// message-level aggregate frame ([`HashFrame`]) stores hex-encoded
// digest strings directly.  The struct was removed in Wave 2.2 along
// with the standalone `hash::verify_hash(data, &HashDescriptor)`
// helper — frame-level verification goes through
// [`crate::hash::hash_frame_body`] / [`crate::hash::verify_frame_hash`]
// instead.

/// On-wire descriptor for one of the three NaN / Inf companion-frame
/// masks (see `plans/WIRE_FORMAT.md` §6.5.1).
///
/// `offset` and `length` locate the mask blob inside the frame's
/// payload region; `method` names the compression scheme (`rle`,
/// `roaring`, `blosc2`, `zstd`, `lz4`, or `none`); `params` carries
/// any method-specific parameters (e.g. zstd level, blosc2 sub-codec).
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq)]
pub struct MaskDescriptor {
    /// Canonical method name — `rle` | `roaring` | `blosc2` | `zstd` |
    /// `lz4` | `none`.
    pub method: String,
    /// Byte offset of the mask blob, measured from the start of the
    /// frame's payload region (= the first byte after the 16-byte
    /// frame header).
    pub offset: u64,
    /// Byte length of the (compressed) mask blob on disk.
    pub length: u64,
    /// Method-specific parameters (e.g. `{ "level": 3 }` for zstd).
    /// Empty map is serialised as absent to match the canonical
    /// zero-cost form.
    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
    pub params: BTreeMap<String, ciborium::Value>,
}

/// Top-level `masks` sub-map for the `NTensorFrame` (wire type 9,
/// see `plans/WIRE_FORMAT.md` §6.5).
///
/// All three fields are optional — a frame can carry any subset (or
/// none, in which case the entire `masks` sub-map is absent).  Field
/// names serialise as `nan`, `inf+`, `inf-` per the canonical sort
/// order (byte-lex: `inf+` < `inf-` < `nan`).
#[derive(Debug, Clone, Default, Serialize, Deserialize, PartialEq)]
pub struct MasksMetadata {
    /// Mask recording element positions that were NaN on encode.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub nan: Option<MaskDescriptor>,
    /// Mask recording element positions that were `+Inf` on encode.
    #[serde(rename = "inf+", default, skip_serializing_if = "Option::is_none")]
    pub pos_inf: Option<MaskDescriptor>,
    /// Mask recording element positions that were `-Inf` on encode.
    #[serde(rename = "inf-", default, skip_serializing_if = "Option::is_none")]
    pub neg_inf: Option<MaskDescriptor>,
}

impl MasksMetadata {
    /// `true` when every kind is absent.  In that case the `masks`
    /// field on the descriptor should be `None` rather than
    /// `Some(empty)`, to match the canonical zero-cost form.
    pub fn is_empty(&self) -> bool {
        self.nan.is_none() && self.pos_inf.is_none() && self.neg_inf.is_none()
    }
}

/// Per-object descriptor — merges tensor metadata and encoding instructions.
///
/// Each data object frame carries one of these as its CBOR descriptor.
/// This replaces the v1 split between `ObjectDescriptor` (tensor info)
/// and `PayloadDescriptor` (encoding info).
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct DataObjectDescriptor {
    // ── Tensor metadata ──
    #[serde(rename = "type")]
    pub obj_type: String,
    pub ndim: u64,
    pub shape: Vec<u64>,
    pub strides: Vec<u64>,
    pub dtype: Dtype,

    // ── Encoding pipeline ──
    /// Wire byte order for the payload.  Optional on deserialize — a
    /// missing key defaults to [`ByteOrder::native()`], matching the
    /// behaviour of the Python binding's dict-to-descriptor path and
    /// the payload bytes a caller typically produces with
    /// native-endian conversions (`to_ne_bytes`, `std::vector<T>`, etc.).
    #[serde(default = "ByteOrder::native")]
    pub byte_order: ByteOrder,
    pub encoding: String,
    pub filter: String,
    pub compression: String,

    /// Optional NaN / Inf companion-mask metadata (`NTensorFrame`,
    /// wire type 9 — see `plans/WIRE_FORMAT.md` §6.5).  `None` means
    /// no mask sections are present, and the frame is byte-compatible
    /// with an `NTensorFrame` emitted without the `allow_nan` /
    /// `allow_inf` opt-in.
    /// Declared **before** `params` so that the flattened `params` map
    /// below does not absorb the `masks` key at deserialisation time.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub masks: Option<MasksMetadata>,

    /// Encoding/filter/compression parameters (reference_value, bits_per_value,
    /// szip_block_offsets, etc.). Stored as ciborium::Value for flexibility.
    #[serde(flatten)]
    pub params: BTreeMap<String, ciborium::Value>,
}

impl DataObjectDescriptor {
    /// Compute the total number of elements implied by `shape`, validating
    /// against u64 overflow and usize range.
    ///
    /// Returns the element count in `usize`, or an error when the product
    /// overflows `u64` or cannot fit in `usize`.
    #[inline]
    pub fn num_elements(&self) -> Result<usize> {
        let shape_product = self
            .shape
            .iter()
            .try_fold(1u64, |acc, &x| acc.checked_mul(x))
            .ok_or_else(|| TensogramError::Metadata("shape product overflow".to_string()))?;
        usize::try_from(shape_product)
            .map_err(|_| TensogramError::Metadata("element count overflows usize".to_string()))
    }
}

/// Global message metadata (carried in header/footer metadata frames).
///
/// The CBOR metadata frame is **fully free-form**.  The only named
/// top-level sections the library interprets are:
/// - `base`: per-object metadata array — one entry per data object, each
///   entry holds ALL structured metadata for that object independently.
///   The encoder auto-populates `_reserved_.tensor` (ndim/shape/strides/dtype)
///   in each entry.
/// - `_reserved_`: library internals (provenance: encoder info, time, uuid).
///   Client code can read but MUST NOT write — the encoder validates this.
/// - `_extra_`: client-writable catch-all for ad-hoc message-level annotations.
///
/// Any other top-level key supplied by the caller (including a stray
/// legacy `"version"` key) is routed into `_extra_` on decode.  The
/// wire-format version lives **only** in the preamble — see
/// [`crate::wire::WIRE_VERSION`] and [`crate::wire::Preamble`].
#[derive(Debug, Clone, Default, Serialize, Deserialize)]
pub struct GlobalMetadata {
    /// Per-object metadata array.  Each entry holds ALL structured metadata
    /// for that data object.  Entries are independent — no tracking of what
    /// is common across objects.
    ///
    /// The encoder auto-populates `_reserved_.tensor` (with ndim, shape,
    /// strides, dtype) in each entry.  Application code may pre-populate
    /// additional keys (e.g. `"mars": {…}`) before encoding; the encoder
    /// preserves them.
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub base: Vec<BTreeMap<String, ciborium::Value>>,

    /// Library internals — provenance info (encoder, time, uuid).
    /// Client code can read but MUST NOT write; the encoder overwrites this.
    #[serde(
        rename = "_reserved_",
        default,
        skip_serializing_if = "BTreeMap::is_empty"
    )]
    pub reserved: BTreeMap<String, ciborium::Value>,

    /// Client-writable catch-all for ad-hoc message-level annotations.
    #[serde(
        rename = "_extra_",
        default,
        skip_serializing_if = "BTreeMap::is_empty"
    )]
    pub extra: BTreeMap<String, ciborium::Value>,
}

/// Index frame payload — maps object ordinals to byte offsets.
///
/// v3 CBOR schema (see `plans/WIRE_FORMAT.md` §6.2):
///
/// ```cbor
/// { "offsets": [u64, ...], "lengths": [u64, ...] }
/// ```
///
/// Object count is derived from `offsets.len()`.  The previously
/// serialised `object_count` key is dropped.
#[derive(Debug, Clone, Default)]
pub struct IndexFrame {
    /// Byte offset of each data object frame from message start.
    pub offsets: Vec<u64>,
    /// Total byte length of each data object frame, excluding alignment padding.
    pub lengths: Vec<u64>,
}

/// Hash frame payload — per-object integrity hashes.
///
/// v3 CBOR schema (see `plans/WIRE_FORMAT.md` §6.3):
///
/// ```cbor
/// { "algorithm": "xxh3", "hashes": ["hex", "hex", ...] }
/// ```
///
/// The `hash_type` key was renamed to `algorithm` to signal that the
/// value names the algorithm rather than a type identifier.  Object
/// count is derived from `hashes.len()`.
#[derive(Debug, Clone)]
pub struct HashFrame {
    pub algorithm: String,
    pub hashes: Vec<String>,
}

/// A decoded object: its descriptor paired with its raw decoded payload bytes.
pub type DecodedObject = (DataObjectDescriptor, Vec<u8>);

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn masks_metadata_is_empty_detects_every_kind_absent() {
        let empty = MasksMetadata::default();
        assert!(empty.is_empty());
    }

    #[test]
    fn masks_metadata_is_empty_false_when_any_kind_present() {
        let any_mask = MaskDescriptor {
            method: "roaring".to_string(),
            offset: 0,
            length: 1,
            params: BTreeMap::new(),
        };
        let nan_only = MasksMetadata {
            nan: Some(any_mask.clone()),
            ..MasksMetadata::default()
        };
        let pos_only = MasksMetadata {
            pos_inf: Some(any_mask.clone()),
            ..MasksMetadata::default()
        };
        let neg_only = MasksMetadata {
            neg_inf: Some(any_mask),
            ..MasksMetadata::default()
        };
        assert!(!nan_only.is_empty());
        assert!(!pos_only.is_empty());
        assert!(!neg_only.is_empty());
    }

    #[test]
    fn descriptor_deserialize_defaults_byte_order_to_native() {
        let json = r#"{
            "type": "ntensor",
            "ndim": 1,
            "shape": [4],
            "strides": [1],
            "dtype": "float32",
            "encoding": "none",
            "filter": "none",
            "compression": "none"
        }"#;
        let desc: DataObjectDescriptor =
            serde_json::from_str(json).expect("deserialize should succeed without byte_order");
        assert_eq!(desc.byte_order, ByteOrder::native());
    }

    #[test]
    fn descriptor_deserialize_honours_explicit_byte_order() {
        for (literal, expected) in [("little", ByteOrder::Little), ("big", ByteOrder::Big)] {
            let json = format!(
                r#"{{
                    "type": "ntensor", "ndim": 1, "shape": [4], "strides": [1],
                    "dtype": "float32", "byte_order": "{literal}",
                    "encoding": "none", "filter": "none", "compression": "none"
                }}"#
            );
            let desc: DataObjectDescriptor =
                serde_json::from_str(&json).expect("deserialize should accept explicit byte_order");
            assert_eq!(desc.byte_order, expected);
        }
    }

    /// Build a minimal descriptor with the given shape; the other fields
    /// are irrelevant to `num_elements()` because the method only inspects
    /// `shape`.
    fn descriptor_with_shape(shape: Vec<u64>) -> DataObjectDescriptor {
        DataObjectDescriptor {
            obj_type: "ntensor".to_string(),
            ndim: shape.len() as u64,
            shape,
            strides: Vec::new(),
            dtype: Dtype::Float32,
            byte_order: ByteOrder::native(),
            encoding: "none".to_string(),
            filter: "none".to_string(),
            compression: "none".to_string(),
            masks: None,
            params: BTreeMap::new(),
        }
    }

    #[test]
    fn num_elements_empty_shape_is_one() {
        // Empty shape (scalar tensor, ndim=0) — by convention the
        // empty product is 1.
        let desc = descriptor_with_shape(vec![]);
        assert_eq!(desc.num_elements().unwrap(), 1);
    }

    #[test]
    fn num_elements_single_dim() {
        let desc = descriptor_with_shape(vec![100]);
        assert_eq!(desc.num_elements().unwrap(), 100);
    }

    #[test]
    fn num_elements_multi_dim() {
        let desc = descriptor_with_shape(vec![3, 4, 5]);
        assert_eq!(desc.num_elements().unwrap(), 60);
    }

    #[test]
    fn num_elements_zero_dim_yields_zero() {
        // A dimension of zero produces a zero-element tensor; this is
        // valid and must not error.
        let desc = descriptor_with_shape(vec![10, 0, 5]);
        assert_eq!(desc.num_elements().unwrap(), 0);
    }

    #[test]
    fn num_elements_u64_overflow_is_metadata_error() {
        // u64::MAX × 2 overflows checked_mul.
        let desc = descriptor_with_shape(vec![u64::MAX, 2]);
        let err = desc.num_elements().unwrap_err();
        match err {
            TensogramError::Metadata(msg) => {
                assert!(
                    msg.contains("shape product overflow"),
                    "unexpected message: {msg}"
                );
            }
            other => panic!("expected Metadata error, got: {other:?}"),
        }
    }

    #[cfg(target_pointer_width = "32")]
    #[test]
    fn num_elements_usize_overflow_is_metadata_error_on_32bit() {
        // On 32-bit targets, a u64 product larger than usize::MAX
        // surfaces the second error path.  On 64-bit targets the
        // shape would have to be larger than `u64::MAX` to trigger
        // this, which the previous test already covers.
        let desc = descriptor_with_shape(vec![(usize::MAX as u64) + 1]);
        let err = desc.num_elements().unwrap_err();
        match err {
            TensogramError::Metadata(msg) => {
                assert!(
                    msg.contains("element count overflows usize"),
                    "unexpected message: {msg}"
                );
            }
            other => panic!("expected Metadata error, got: {other:?}"),
        }
    }
}