iota_replay/

replay.rs

// Copyright (c) Mysten Labs, Inc.
// Modifications Copyright (c) 2024 IOTA Stiftung
// SPDX-License-Identifier: Apache-2.0

use std::{
    collections::{BTreeMap, HashSet},
    path::PathBuf,
    sync::{Arc, Mutex},
};

use futures::executor::block_on;
use iota_config::node::ExpensiveSafetyCheckConfig;
use iota_core::authority::NodeStateDump;
use iota_execution::Executor;
use iota_framework::BuiltInFramework;
use iota_json_rpc_types::{
    IotaExecutionStatus, IotaTransactionBlockEffects, IotaTransactionBlockEffectsAPI,
};
use iota_protocol_config::{Chain, ProtocolConfig};
use iota_sdk::{IotaClient, IotaClientBuilder};
use iota_sdk_types::{
    GasPayment, MoveAuthenticator, ObjectDigest, ObjectId, ObjectReference, Owner,
    SenderSignedTransaction, TransactionDigest, TransactionKind, Version,
};
use iota_types::{
    IOTA_DENY_LIST_OBJECT_ID,
    account_abstraction::authenticator_function::{
        AuthenticatorFunctionRefForExecution,
        authenticator_function_ref_v1_from_dynamic_field_object,
        derive_authenticator_function_ref_v1_dynamic_field_id, extract_auth_fun_refs,
    },
    auth_context::AuthContextData,
    base_types::VersionNumber,
    committee::EpochId,
    error::{ExecutionError, IotaError, IotaResult},
    executable_transaction::VerifiedExecutableTransaction,
    execution::SharedInput,
    gas::IotaGasStatus,
    in_memory_storage::InMemoryStorage,
    inner_temporary_store::InnerTemporaryStore,
    message_envelope::Message,
    metrics::LimitsMetrics,
    move_authenticator::MoveAuthenticatorExt,
    object::Object,
    storage::{
        BackingPackageStore, ChildObjectResolver, ObjectStore, PackageObject, get_module,
        get_module_by_id,
    },
    transaction::{
        CheckedInputObjects, InputObjectKind, InputObjects, ObjectReadResult, ObjectReadResultKind,
        SenderSignedTransactionAPI, TransactionAPI, TransactionEnvelope, VerifiedTransaction,
    },
};
use move_binary_format::CompiledModule;
use move_bytecode_utils::module_cache::GetModule;
use move_core_types::{language_storage::ModuleId, resolver::ModuleResolver};
use prometheus_filtered::Registry;
use serde::{Deserialize, Serialize};
use similar::{ChangeTag, TextDiff};
use tracing::{error, info, trace, warn};

use crate::{
    chain_from_chain_id,
    data_fetcher::{
        DataFetcher, Fetchers, NodeStateDumpFetcher, RemoteFetcher, extract_epoch_and_version,
    },
    displays::{
        Pretty,
        transaction_displays::{FullPTB, transform_command_results_to_annotated},
    },
    types::*,
};

// TODO: add persistent cache. But perf is good enough already.

#[derive(Debug, Serialize, Deserialize)]
pub struct ExecutionSandboxState {
    /// Information describing the transaction
    pub transaction_info: OnChainTransactionInfo,
    /// All the objects that are required for the execution of the transaction
    pub required_objects: Vec<Object>,
    /// Temporary store from executing this locally in
    /// `execute_transaction_to_effects`
    #[serde(skip)]
    pub local_exec_temporary_store: Option<InnerTemporaryStore>,
    /// Effects from executing this locally in `execute_transaction_to_effects`
    pub local_exec_effects: IotaTransactionBlockEffects,
    /// Status from executing this locally in `execute_transaction_to_effects`
    #[serde(skip)]
    pub local_exec_status: Option<Result<(), ExecutionError>>,
}

impl ExecutionSandboxState {
    pub fn check_effects(&self) -> Result<(), ReplayEngineError> {
        if self.transaction_info.effects != self.local_exec_effects {
            error!("Replay tool forked {}", self.transaction_info.tx_digest);
            let diff = self.diff_effects();
            println!("{diff}");
            return Err(ReplayEngineError::EffectsForked {
                digest: self.transaction_info.tx_digest,
                diff: format!("\n{diff}"),
                on_chain: Box::new(self.transaction_info.effects.clone()),
                local: Box::new(self.local_exec_effects.clone()),
            });
        }
        Ok(())
    }

    /// Utility to diff effects in a human readable format
    pub fn diff_effects(&self) -> String {
        let eff1 = &self.transaction_info.effects;
        let eff2 = &self.local_exec_effects;
        let on_chain_str = format!("{eff1:#?}");
        let local_chain_str = format!("{eff2:#?}");
        let mut res = vec![];

        let diff = TextDiff::from_lines(&on_chain_str, &local_chain_str);
        for change in diff.iter_all_changes() {
            let sign = match change.tag() {
                ChangeTag::Delete => "---",
                ChangeTag::Insert => "+++",
                ChangeTag::Equal => "   ",
            };
            res.push(format!("{sign}{change}"));
        }

        res.join("")
    }
}

#[derive(Debug, Clone, PartialEq, Eq)]
pub struct ProtocolVersionSummary {
    /// Protocol version at this point
    pub protocol_version: u64,
    /// The first epoch that uses this protocol version
    pub epoch_start: u64,
    /// The last epoch that uses this protocol version
    pub epoch_end: u64,
    /// The first checkpoint in this protocol v ersion
    pub checkpoint_start: Option<u64>,
    /// The last checkpoint in this protocol version
    pub checkpoint_end: Option<u64>,
    /// The transaction which triggered this epoch change
    pub epoch_change_tx: TransactionDigest,
}

#[derive(Clone)]
pub struct Storage {
    /// These are objects at the frontier of the execution's view
    /// They might not be the latest object currently but they are the latest
    /// objects for the TX at the time it was run
    /// This store cannot be shared between runners
    pub live_objects_store: Arc<Mutex<BTreeMap<ObjectId, Object>>>,

    /// Package cache and object version cache can be shared between runners
    /// Non system packages are immutable so we can cache these
    pub package_cache: Arc<Mutex<BTreeMap<ObjectId, Object>>>,
    /// Object contents are frozen at their versions so we can cache these
    /// We must place system packages here as well
    pub object_version_cache: Arc<Mutex<BTreeMap<(ObjectId, Version), Object>>>,
}

impl std::fmt::Display for Storage {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        writeln!(f, "Live object store")?;
        for (id, obj) in self
            .live_objects_store
            .lock()
            .expect("Unable to lock")
            .iter()
        {
            writeln!(f, "{}: {:?}", id, obj.object_ref())?;
        }
        writeln!(f, "Package cache")?;
        for (id, obj) in self.package_cache.lock().expect("Unable to lock").iter() {
            writeln!(f, "{}: {:?}", id, obj.object_ref())?;
        }
        writeln!(f, "Object version cache")?;
        for id in self
            .object_version_cache
            .lock()
            .expect("Unable to lock")
            .keys()
        {
            writeln!(f, "{}: {}", id.0, id.1)?;
        }

        write!(f, "")
    }
}

impl Storage {
    pub fn default() -> Self {
        Self {
            live_objects_store: Arc::new(Mutex::new(BTreeMap::new())),
            package_cache: Arc::new(Mutex::new(BTreeMap::new())),
            object_version_cache: Arc::new(Mutex::new(BTreeMap::new())),
        }
    }

    pub fn all_objects(&self) -> Vec<Object> {
        self.live_objects_store
            .lock()
            .expect("Unable to lock")
            .values()
            .cloned()
            .chain(
                self.package_cache
                    .lock()
                    .expect("Unable to lock")
                    .values()
                    .cloned(),
            )
            .chain(
                self.object_version_cache
                    .lock()
                    .expect("Unable to lock")
                    .values()
                    .cloned(),
            )
            .collect::<Vec<_>>()
    }
}

#[derive(Clone)]
pub struct LocalExec {
    pub client: Option<IotaClient>,
    // For a given protocol version, what TX created it, and what is the valid range of epochs
    // at this protocol version.
    pub protocol_version_epoch_table: BTreeMap<u64, ProtocolVersionSummary>,
    // For a given protocol version, the mapping valid sequence numbers for each framework package
    pub protocol_version_system_package_table: BTreeMap<u64, BTreeMap<ObjectId, Version>>,
    // The current protocol version for this execution
    pub current_protocol_version: u64,
    // All state is contained here
    pub storage: Storage,
    // Debug events
    pub exec_store_events: Arc<Mutex<Vec<ExecutionStoreEvent>>>,
    // Debug events
    pub metrics: Arc<LimitsMetrics>,
    // Used for fetching data from the network or remote store
    pub fetcher: Fetchers,

    // One can optionally override the executor version
    // -1 implies use latest version
    pub executor_version: Option<i64>,
    // One can optionally override the protocol version
    // -1 implies use latest version
    // None implies use the protocol version at the time of execution
    pub protocol_version: Option<i64>,
    // Whether or not to enable the gas profiler, the PathBuf contains either a user specified
    // filepath or the default current directory and name format for the profile output
    pub enable_profiler: Option<PathBuf>,
    pub config_and_versions: Option<Vec<(ObjectId, Version)>>,
    // Retry policies due to RPC errors
    pub num_retries_for_timeout: u32,
    pub sleep_period_for_timeout: std::time::Duration,
}

impl LocalExec {
    /// Wrapper around fetcher in case we want to add more functionality
    /// Such as fetching from local DB from snapshot
    pub async fn multi_download(
        &self,
        objs: &[(ObjectId, Version)],
    ) -> Result<Vec<Object>, ReplayEngineError> {
        let mut num_retries_for_timeout = self.num_retries_for_timeout as i64;
        while num_retries_for_timeout >= 0 {
            match self.fetcher.multi_get_versioned(objs).await {
                Ok(objs) => return Ok(objs),
                Err(ReplayEngineError::IotaRpcRequestTimeout) => {
                    warn!(
                        "RPC request timed out. Retries left {}. Sleeping for {}s",
                        num_retries_for_timeout,
                        self.sleep_period_for_timeout.as_secs()
                    );
                    num_retries_for_timeout -= 1;
                    tokio::time::sleep(self.sleep_period_for_timeout).await;
                }
                Err(e) => return Err(e),
            }
        }
        Err(ReplayEngineError::IotaRpcRequestTimeout)
    }
    /// Wrapper around fetcher in case we want to add more functionality
    /// Such as fetching from local DB from snapshot
    pub async fn multi_download_latest(
        &self,
        objs: &[ObjectId],
    ) -> Result<Vec<Object>, ReplayEngineError> {
        let mut num_retries_for_timeout = self.num_retries_for_timeout as i64;
        while num_retries_for_timeout >= 0 {
            match self.fetcher.multi_get_latest(objs).await {
                Ok(objs) => return Ok(objs),
                Err(ReplayEngineError::IotaRpcRequestTimeout) => {
                    warn!(
                        "RPC request timed out. Retries left {}. Sleeping for {}s",
                        num_retries_for_timeout,
                        self.sleep_period_for_timeout.as_secs()
                    );
                    num_retries_for_timeout -= 1;
                    tokio::time::sleep(self.sleep_period_for_timeout).await;
                }
                Err(e) => return Err(e),
            }
        }
        Err(ReplayEngineError::IotaRpcRequestTimeout)
    }

    pub async fn fetch_loaded_child_refs(
        &self,
        tx_digest: &TransactionDigest,
    ) -> Result<Vec<(ObjectId, Version)>, ReplayEngineError> {
        // Get the child objects loaded
        self.fetcher.get_loaded_child_objects(tx_digest).await
    }

    pub async fn new_from_fn_url(http_url: &str) -> Result<Self, ReplayEngineError> {
        Self::new_for_remote(
            IotaClientBuilder::default()
                .request_timeout(RPC_TIMEOUT_ERR_SLEEP_RETRY_PERIOD)
                .max_concurrent_requests(MAX_CONCURRENT_REQUESTS)
                .build(http_url)
                .await?,
            None,
        )
        .await
    }

    pub async fn replay_with_network_config(
        rpc_url: String,
        tx_digest: TransactionDigest,
        expensive_safety_check_config: ExpensiveSafetyCheckConfig,
        use_authority: bool,
        executor_version: Option<i64>,
        protocol_version: Option<i64>,
        enable_profiler: Option<PathBuf>,
        config_and_versions: Option<Vec<(ObjectId, Version)>>,
    ) -> Result<ExecutionSandboxState, ReplayEngineError> {
        info!("Using RPC URL: {}", rpc_url);
        LocalExec::new_from_fn_url(&rpc_url)
            .await?
            .init_for_execution()
            .await?
            .execute_transaction(
                &tx_digest,
                expensive_safety_check_config,
                use_authority,
                executor_version,
                protocol_version,
                enable_profiler,
                config_and_versions,
            )
            .await
    }

    /// This captures the state of the network at a given point in time and
    /// populates prptocol version tables including which system packages to
    /// fetch If this function is called across epoch boundaries, the info
    /// might be stale. But it should only be called once per epoch.
    pub async fn init_for_execution(mut self) -> Result<Self, ReplayEngineError> {
        self.populate_protocol_version_tables().await?;
        tokio::task::yield_now().await;
        Ok(self)
    }

    pub async fn reset_for_new_execution_with_client(self) -> Result<Self, ReplayEngineError> {
        Self::new_for_remote(
            self.client.expect("Remote client not initialized"),
            Some(self.fetcher.into_remote()),
        )
        .await?
        .init_for_execution()
        .await
    }

    pub async fn new_for_remote(
        client: IotaClient,
        remote_fetcher: Option<RemoteFetcher>,
    ) -> Result<Self, ReplayEngineError> {
        // Use a throwaway metrics registry for local execution.
        let registry = prometheus_filtered::Registry::new();
        let metrics = Arc::new(LimitsMetrics::new(&registry));

        let fetcher = remote_fetcher.unwrap_or(RemoteFetcher::new(client.clone()));

        Ok(Self {
            client: Some(client),
            protocol_version_epoch_table: BTreeMap::new(),
            protocol_version_system_package_table: BTreeMap::new(),
            current_protocol_version: 0,
            exec_store_events: Arc::new(Mutex::new(Vec::new())),
            metrics,
            storage: Storage::default(),
            fetcher: Fetchers::Remote(fetcher),
            // TODO: make these configurable
            num_retries_for_timeout: RPC_TIMEOUT_ERR_NUM_RETRIES,
            sleep_period_for_timeout: RPC_TIMEOUT_ERR_SLEEP_RETRY_PERIOD,
            executor_version: None,
            protocol_version: None,
            enable_profiler: None,
            config_and_versions: None,
        })
    }

    pub async fn new_for_state_dump(
        path: &str,
        backup_rpc_url: Option<String>,
    ) -> Result<Self, ReplayEngineError> {
        // Use a throwaway metrics registry for local execution.
        let registry = prometheus_filtered::Registry::new();
        let metrics = Arc::new(LimitsMetrics::new(&registry));

        let state = NodeStateDump::read_from_file(&PathBuf::from(path))?;
        let current_protocol_version = state.protocol_version;
        let fetcher = match backup_rpc_url {
            Some(url) => NodeStateDumpFetcher::new(
                state,
                Some(RemoteFetcher::new(
                    IotaClientBuilder::default()
                        .request_timeout(RPC_TIMEOUT_ERR_SLEEP_RETRY_PERIOD)
                        .max_concurrent_requests(MAX_CONCURRENT_REQUESTS)
                        .build(url)
                        .await?,
                )),
            ),
            None => NodeStateDumpFetcher::new(state, None),
        };

        Ok(Self {
            client: None,
            protocol_version_epoch_table: BTreeMap::new(),
            protocol_version_system_package_table: BTreeMap::new(),
            current_protocol_version,
            exec_store_events: Arc::new(Mutex::new(Vec::new())),
            metrics,
            storage: Storage::default(),
            fetcher: Fetchers::NodeStateDump(fetcher),
            // TODO: make these configurable
            num_retries_for_timeout: RPC_TIMEOUT_ERR_NUM_RETRIES,
            sleep_period_for_timeout: RPC_TIMEOUT_ERR_SLEEP_RETRY_PERIOD,
            executor_version: None,
            protocol_version: None,
            enable_profiler: None,
            config_and_versions: None,
        })
    }

    pub async fn multi_download_and_store(
        &mut self,
        objs: &[(ObjectId, Version)],
    ) -> Result<Vec<Object>, ReplayEngineError> {
        let objs = self.multi_download(objs).await?;

        // Backfill the store
        for obj in objs.iter() {
            let o_ref = obj.object_ref();
            self.storage
                .live_objects_store
                .lock()
                .expect("Can't lock")
                .insert(o_ref.object_id, obj.clone());
            self.storage
                .object_version_cache
                .lock()
                .expect("Cannot lock")
                .insert((o_ref.object_id, o_ref.version), obj.clone());
            if obj.is_package() {
                self.storage
                    .package_cache
                    .lock()
                    .expect("Cannot lock")
                    .insert(o_ref.object_id, obj.clone());
            }
        }
        tokio::task::yield_now().await;
        Ok(objs)
    }

    pub async fn multi_download_relevant_packages_and_store(
        &mut self,
        objs: Vec<ObjectId>,
        protocol_version: u64,
    ) -> Result<Vec<Object>, ReplayEngineError> {
        let syst_packages_objs = if self.protocol_version.is_some_and(|i| i < 0) {
            BuiltInFramework::genesis_objects().collect()
        } else {
            let syst_packages =
                self.system_package_versions_for_protocol_version(protocol_version)?;
            self.multi_download(&syst_packages).await?
        };

        // Download latest version of all packages that are not system packages
        // This is okay since the versions can never change
        let non_system_package_objs: Vec<_> = objs
            .into_iter()
            .filter(|o| !Self::system_package_ids(self.current_protocol_version).contains(o))
            .collect();
        let objs = self
            .multi_download_latest(&non_system_package_objs)
            .await?
            .into_iter()
            .chain(syst_packages_objs);

        for obj in objs.clone() {
            let o_ref = obj.object_ref();
            // We dont always want the latest in store
            // self.storage.store.insert(o_ref.object_id, obj.clone());
            self.storage
                .object_version_cache
                .lock()
                .expect("Cannot lock")
                .insert((o_ref.object_id, o_ref.version), obj.clone());
            if obj.is_package() {
                self.storage
                    .package_cache
                    .lock()
                    .expect("Cannot lock")
                    .insert(o_ref.object_id, obj.clone());
            }
        }
        Ok(objs.collect())
    }

    // TODO: remove this after `futures::executor::block_on` is removed.
    #[expect(clippy::disallowed_methods)]
    pub fn download_object(
        &self,
        object_id: &ObjectId,
        version: Version,
    ) -> Result<Object, ReplayEngineError> {
        if self
            .storage
            .object_version_cache
            .lock()
            .expect("Cannot lock")
            .contains_key(&(*object_id, version))
        {
            return Ok(self
                .storage
                .object_version_cache
                .lock()
                .expect("Cannot lock")
                .get(&(*object_id, version))
                .ok_or(ReplayEngineError::InternalCacheInvariantViolation {
                    id: *object_id,
                    version: Some(version),
                })?
                .clone());
        }

        let o = block_on(self.multi_download(&[(*object_id, version)])).map(|mut q| {
            q.pop().unwrap_or_else(|| {
                panic!(
                    "Downloaded obj response cannot be empty {:?}",
                    (*object_id, version)
                )
            })
        })?;

        let o_ref = o.object_ref();
        self.storage
            .object_version_cache
            .lock()
            .expect("Cannot lock")
            .insert((o_ref.object_id, o_ref.version), o.clone());
        Ok(o)
    }

    // TODO: remove this after `futures::executor::block_on` is removed.
    #[expect(clippy::disallowed_methods)]
    pub fn download_latest_object(
        &self,
        object_id: &ObjectId,
    ) -> Result<Option<Object>, ReplayEngineError> {
        let resp = block_on({
            // info!("Downloading latest object {object_id}");
            self.multi_download_latest(&[*object_id])
        })
        .map(|mut q| {
            q.pop()
                .unwrap_or_else(|| panic!("Downloaded obj response cannot be empty {}", *object_id))
        });

        match resp {
            Ok(v) => Ok(Some(v)),
            Err(ReplayEngineError::ObjectNotExist { id }) => {
                error!(
                    "Could not find object {id} on RPC server. It might have been pruned, deleted, or never existed."
                );
                Ok(None)
            }
            Err(ReplayEngineError::ObjectDeleted {
                id,
                version,
                digest,
            }) => {
                error!("Object {id} {version} {digest} was deleted on RPC server.");
                Ok(None)
            }
            Err(err) => Err(ReplayEngineError::IotaRpcError {
                err: err.to_string(),
            }),
        }
    }

    #[expect(clippy::disallowed_methods)]
    pub fn download_object_by_upper_bound(
        &self,
        object_id: &ObjectId,
        version_upper_bound: VersionNumber,
    ) -> Result<Option<Object>, ReplayEngineError> {
        let local_object = self
            .storage
            .live_objects_store
            .lock()
            .expect("Can't lock")
            .get(object_id)
            .cloned();
        if local_object.is_some() {
            return Ok(local_object);
        }
        let response = block_on({
            self.fetcher
                .get_child_object(object_id, version_upper_bound)
        });
        match response {
            Ok(object) => {
                let obj_ref = object.object_ref();
                self.storage
                    .live_objects_store
                    .lock()
                    .expect("Can't lock")
                    .insert(*object_id, object.clone());
                self.storage
                    .object_version_cache
                    .lock()
                    .expect("Can't lock")
                    .insert((obj_ref.object_id, obj_ref.version), object.clone());
                Ok(Some(object))
            }
            Err(ReplayEngineError::ObjectNotExist { id }) => {
                error!(
                    "Could not find child object {id} on RPC server. It might have been pruned, deleted, or never existed."
                );
                Ok(None)
            }
            Err(ReplayEngineError::ObjectDeleted {
                id,
                version,
                digest,
            }) => {
                error!("Object {id} {version} {digest} was deleted on RPC server.");
                Ok(None)
            }
            // This is a child object which was not found in the store (e.g., due to exists
            // check before creating the dynamic field).
            Err(ReplayEngineError::ObjectVersionNotFound { id, version }) => {
                info!(
                    "Object {id} {version} not found on RPC server -- this may have been pruned or never existed."
                );
                Ok(None)
            }
            Err(err) => Err(ReplayEngineError::IotaRpcError {
                err: err.to_string(),
            }),
        }
    }

    pub async fn get_checkpoint_txs(
        &self,
        checkpoint_id: u64,
    ) -> Result<Vec<TransactionDigest>, ReplayEngineError> {
        self.fetcher
            .get_checkpoint_txs(checkpoint_id)
            .await
            .map_err(|e| ReplayEngineError::IotaRpcError { err: e.to_string() })
    }

    pub async fn execute_all_in_checkpoints(
        &mut self,
        checkpoint_ids: &[u64],
        expensive_safety_check_config: &ExpensiveSafetyCheckConfig,
        terminate_early: bool,
        use_authority: bool,
    ) -> Result<(u64, u64), ReplayEngineError> {
        // Get all the TXs at this checkpoint
        let mut txs = Vec::new();
        for checkpoint_id in checkpoint_ids {
            txs.extend(self.get_checkpoint_txs(*checkpoint_id).await?);
        }
        let num = txs.len();
        let mut succeeded = 0;
        for tx in txs {
            match self
                .execute_transaction(
                    &tx,
                    expensive_safety_check_config.clone(),
                    use_authority,
                    None,
                    None,
                    None,
                    None,
                )
                .await
                .map(|q| q.check_effects())
            {
                Err(e) | Ok(Err(e)) => {
                    if terminate_early {
                        return Err(e);
                    }
                    error!("Error executing tx: {},  {:#?}", tx, e);
                    continue;
                }
                _ => (),
            }

            succeeded += 1;
        }
        Ok((succeeded, num as u64))
    }

    pub async fn execution_engine_execute_with_tx_info_impl(
        &mut self,
        tx_info: &OnChainTransactionInfo,
        override_transaction_kind: Option<TransactionKind>,
        expensive_safety_check_config: ExpensiveSafetyCheckConfig,
    ) -> Result<ExecutionSandboxState, ReplayEngineError> {
        let tx_digest = &tx_info.tx_digest;

        // Initialize the state necessary for execution
        // Get the input objects
        let input_objects = self.initialize_execution_env_state(tx_info).await?;
        let unique_shared_object_ids: HashSet<_> = input_objects
            .filter_shared_objects()
            .iter()
            .map(|s| match s {
                SharedInput::Existing(obj_ref) => obj_ref.object_id,
                SharedInput::Deleted((id, _, _, _)) => *id,
                SharedInput::Cancelled((id, _)) => *id,
            })
            .collect();
        assert_eq!(
            unique_shared_object_ids.len(),
            tx_info.shared_object_refs.len()
        );
        // At this point we have all the objects needed for replay

        // This assumes we already initialized the protocol version table
        // `protocol_version_epoch_table`
        let protocol_config =
            &ProtocolConfig::get_for_version(tx_info.protocol_version, tx_info.chain);

        let metrics = self.metrics.clone();

        let ov = self.executor_version;

        // We could probably cache the executor per protocol config
        let executor = get_executor(
            ov,
            protocol_config,
            expensive_safety_check_config,
            self.enable_profiler.clone(),
        );

        // All prep done
        let expensive_checks = true;
        let transaction_kind = override_transaction_kind.unwrap_or(tx_info.kind.clone());
        let certificate_deny_set = HashSet::new();
        let gas_status = if tx_info.kind.is_system() {
            IotaGasStatus::new_unmetered()
        } else {
            IotaGasStatus::new(
                tx_info.gas_budget,
                tx_info.gas_price,
                tx_info.reference_gas_price,
                protocol_config,
            )
            .expect("Failed to create gas status")
        };
        let gas_data = GasPayment {
            objects: tx_info.gas.clone(),
            owner: tx_info.gas_owner.unwrap_or(tx_info.sender),
            price: tx_info.gas_price,
            budget: tx_info.gas_budget,
        };

        let move_authenticators = tx_info.sender_signed_data.move_authenticators();

        let (inner_store, gas_status, effects, _timings, result) = if move_authenticators.is_empty()
        {
            // Standard path: no MoveAuthenticator
            executor.execute_transaction_to_effects(
                &self,
                protocol_config,
                metrics.clone(),
                expensive_checks,
                &certificate_deny_set,
                &tx_info.executed_epoch,
                tx_info.epoch_start_timestamp,
                CheckedInputObjects::new_for_replay(input_objects.clone()),
                gas_data,
                gas_status,
                transaction_kind.clone(),
                tx_info.sender,
                *tx_digest,
                &mut None,
            )
        } else {
            // MoveAuthenticator path: split input objects and run authentication
            // before PTB execution, matching the production flow.
            let (_, per_authenticator_inputs) = tx_info
                .sender_signed_data
                .split_input_objects_into_groups_for_reading(input_objects.clone())
                .map_err(|e| ReplayEngineError::GeneralError { err: e.to_string() })?;

            debug_assert_eq!(
                move_authenticators.len(),
                per_authenticator_inputs.len(),
                "Move authenticators amount must match the number of authenticator inputs"
            );

            let move_authenticators = move_authenticators
                .into_iter()
                .zip(per_authenticator_inputs)
                .map(
                    |(move_authenticator, (authenticator_inputs, account_object))| {
                        let account_version = match &account_object.object {
                            ObjectReadResultKind::Object(obj) => obj.version(),
                            _ => {
                                return Err(ReplayEngineError::GeneralError {
                                    err: format!(
                                        "Account object {} is not available",
                                        account_object.id()
                                    ),
                                });
                            }
                        };

                        let authenticator_function_ref = load_authenticator_function_ref(
                            move_authenticator,
                            account_version,
                            |id| {
                                self.storage
                                    .live_objects_store
                                    .lock()
                                    .expect("Can't lock")
                                    .get(id)
                                    .cloned()
                            },
                        )?;

                        Ok((
                            move_authenticator.to_owned(),
                            authenticator_function_ref,
                            CheckedInputObjects::new_for_replay(authenticator_inputs),
                        ))
                    },
                )
                .collect::<Result<Vec<_>, ReplayEngineError>>()?;

            let (sender_auth_digest, sponsor_auth_digest) = tx_info
                .sender_signed_data
                .compute_auth_digests()
                .map_err(IotaError::from)?;

            let (sender_authenticator_function_ref, sponsor_authenticator_function_ref) =
                extract_auth_fun_refs(tx_info.sender, gas_data.owner, |address| {
                    move_authenticators
                        .iter()
                        .find(|t| t.0.address() == address)
                        .map(|t| t.1.authenticator_function_ref.clone())
                });

            let auth_context_data = AuthContextData {
                transaction_data_bytes: bcs::to_bytes(tx_info.sender_signed_data.transaction())
                    .expect("Transaction serialization cannot fail"),
                sender_auth_digest,
                sponsor_auth_digest,
                sender_authenticator_function_ref,
                sponsor_authenticator_function_ref,
            };

            executor.authenticate_then_execute_transaction_to_effects(
                &self,
                protocol_config,
                metrics.clone(),
                expensive_checks,
                &certificate_deny_set,
                &tx_info.executed_epoch,
                tx_info.epoch_start_timestamp,
                gas_data,
                gas_status,
                move_authenticators,
                CheckedInputObjects::new_for_replay(input_objects.clone()),
                transaction_kind.clone(),
                tx_info.sender,
                *tx_digest,
                auth_context_data,
                &mut None,
            )
        };

        if let Err(err) = self.pretty_print_for_tracing(
            &gas_status,
            &executor,
            tx_info,
            &transaction_kind,
            protocol_config,
            metrics,
            expensive_checks,
            input_objects,
        ) {
            error!("Failed to pretty print for tracing: {:?}", err);
        }

        let all_required_objects = self.storage.all_objects();

        let effects =
            IotaTransactionBlockEffects::try_from(effects).map_err(ReplayEngineError::from)?;

        Ok(ExecutionSandboxState {
            transaction_info: tx_info.clone(),
            required_objects: all_required_objects,
            local_exec_temporary_store: Some(inner_store),
            local_exec_effects: effects,
            local_exec_status: Some(result),
        })
    }

    fn pretty_print_for_tracing(
        &self,
        gas_status: &IotaGasStatus,
        executor: &Arc<dyn Executor + Send + Sync>,
        tx_info: &OnChainTransactionInfo,
        transaction_kind: &TransactionKind,
        protocol_config: &ProtocolConfig,
        metrics: Arc<LimitsMetrics>,
        expensive_checks: bool,
        input_objects: InputObjects,
    ) -> anyhow::Result<()> {
        trace!(target: "replay_gas_info", "{}", Pretty(gas_status));

        let skip_checks = true;
        let gas_data = GasPayment {
            objects: tx_info.gas.clone(),
            owner: tx_info.gas_owner.unwrap_or(tx_info.sender),
            price: tx_info.gas_price,
            budget: tx_info.gas_budget,
        };
        if let TransactionKind::Programmable(pt) = transaction_kind {
            trace!(
                target: "replay_ptb_info",
                "{}",
                Pretty(&FullPTB {
                    ptb: pt.clone(),
                    results: transform_command_results_to_annotated(
                        executor,
                        &self.clone(),
                        executor.dev_inspect_transaction(
                            &self,
                            protocol_config,
                            metrics,
                            expensive_checks,
                            &HashSet::new(),
                            &tx_info.executed_epoch,
                            tx_info.epoch_start_timestamp,
                            CheckedInputObjects::new_for_replay(input_objects),
                            gas_data,
                            IotaGasStatus::new(
                                tx_info.gas_budget,
                                tx_info.gas_price,
                                tx_info.reference_gas_price,
                                protocol_config,
                            )?,
                            transaction_kind.clone(),
                            tx_info.sender,
                            tx_info.sender_signed_data.digest(),
                            skip_checks,
                        )
                        .3
                        .unwrap_or_default(),
                    )?,
            }));
        }
        Ok(())
    }

    /// Must be called after `init_for_execution`
    pub async fn execution_engine_execute_impl(
        &mut self,
        tx_digest: &TransactionDigest,
        expensive_safety_check_config: ExpensiveSafetyCheckConfig,
    ) -> Result<ExecutionSandboxState, ReplayEngineError> {
        if self.is_remote_replay() {
            assert!(
                !self.protocol_version_system_package_table.is_empty()
                    || !self.protocol_version_epoch_table.is_empty(),
                "Required tables not populated. Must call `init_for_execution` before executing transactions"
            );
        }

        let tx_info = if self.is_remote_replay() {
            self.resolve_tx_components(tx_digest).await?
        } else {
            self.resolve_tx_components_from_dump(tx_digest).await?
        };
        self.execution_engine_execute_with_tx_info_impl(
            &tx_info,
            None,
            expensive_safety_check_config,
        )
        .await
    }

    /// Executes a transaction with the state specified in `pre_run_sandbox`
    /// This is useful for executing a transaction with a specific state
    /// However if the state in invalid, the behavior is undefined.
    pub async fn certificate_execute_with_sandbox_state(
        pre_run_sandbox: &ExecutionSandboxState,
    ) -> Result<ExecutionSandboxState, ReplayEngineError> {
        // These cannot be changed and are inherited from the sandbox state
        let executed_epoch = pre_run_sandbox.transaction_info.executed_epoch;
        let reference_gas_price = pre_run_sandbox.transaction_info.reference_gas_price;
        let epoch_start_timestamp = pre_run_sandbox.transaction_info.epoch_start_timestamp;
        let protocol_config = ProtocolConfig::get_for_version(
            pre_run_sandbox.transaction_info.protocol_version,
            pre_run_sandbox.transaction_info.chain,
        );
        let required_objects = pre_run_sandbox.required_objects.clone();
        let store = InMemoryStorage::new(required_objects.clone());

        let transaction =
            TransactionEnvelope::new(pre_run_sandbox.transaction_info.sender_signed_data.clone());

        // TODO: This will not work for deleted shared objects. We need to persist that
        // information in the sandbox. TODO: A lot of the following code is
        // replicated in several places. We should introduce a few traits and
        // make them shared so that we don't have to fix one by one when we have major
        // execution layer changes.
        let executable = VerifiedExecutableTransaction::new_from_quorum_execution(
            VerifiedTransaction::new_unchecked(transaction),
            executed_epoch,
        );
        let sender_signed_data = &pre_run_sandbox.transaction_info.sender_signed_data;
        let executor = iota_execution::executor(&protocol_config, true, None).unwrap();

        let move_authenticators = sender_signed_data.move_authenticators();

        let (_, _, effects, _timings, exec_res) = if move_authenticators.is_empty() {
            // Standard path: no MoveAuthenticator
            let input_objects = store.read_input_objects_for_transaction(
                &TransactionEnvelope::new(sender_signed_data.clone()),
            );
            let (gas_status, input_objects) = iota_transaction_checks::check_certificate_input(
                &executable,
                input_objects,
                &protocol_config,
                reference_gas_price,
            )
            .unwrap();
            let (kind, signer, gas_data) = executable.transaction().execution_parts();
            executor.execute_transaction_to_effects(
                &store,
                &protocol_config,
                Arc::new(LimitsMetrics::new(&Registry::new())),
                true,
                &HashSet::new(),
                &executed_epoch,
                epoch_start_timestamp,
                input_objects,
                gas_data,
                gas_status,
                kind,
                signer,
                *executable.digest(),
                &mut None,
            )
        } else {
            // MoveAuthenticator path: read all objects (tx + auth), split, and
            // run authentication before PTB execution.
            let all_input_object_kinds = sender_signed_data
                .collect_all_input_object_kind_for_reading()
                .unwrap();
            let all_input_objects: InputObjects = all_input_object_kinds
                .into_iter()
                .map(|kind| {
                    let id = kind.object_id();
                    let obj = store
                        .get_object(&id)
                        .expect("Object must be in store")
                        .clone();
                    ObjectReadResult::new(kind, obj.into())
                })
                .collect::<Vec<_>>()
                .into();

            let (tx_input_objects, per_authenticator_inputs) = sender_signed_data
                .split_input_objects_into_groups_for_reading(all_input_objects)
                .unwrap();

            debug_assert_eq!(
                move_authenticators.len(),
                per_authenticator_inputs.len(),
                "Move authenticators amount must match the number of authenticator inputs"
            );

            let per_authenticator_inputs = move_authenticators
                .iter()
                .zip(per_authenticator_inputs)
                .map(
                    |(move_authenticator, (authenticator_inputs, account_object))| {
                        let account_version = match &account_object.object {
                            ObjectReadResultKind::Object(obj) => obj.version(),
                            _ => {
                                return Err(ReplayEngineError::GeneralError {
                                    err: format!(
                                        "Account object {} is not available",
                                        account_object.id()
                                    ),
                                });
                            }
                        };

                        let authenticator_function_ref = load_authenticator_function_ref(
                            move_authenticator,
                            account_version,
                            |id| store.get_object(id).cloned(),
                        )
                        .unwrap();

                        Ok((authenticator_inputs, authenticator_function_ref))
                    },
                )
                .collect::<Result<Vec<_>, ReplayEngineError>>()?;

            let per_authenticator_input_objects = per_authenticator_inputs
                .iter()
                .map(|(authenticator_input_objects, _)| authenticator_input_objects.clone())
                .collect::<Vec<_>>();

            let authenticator_gas_budget = protocol_config.max_auth_gas();
            let (gas_status, per_authenticator_checked_input_objects, union_checked_input_objects) =
                iota_transaction_checks::check_certificate_and_move_authenticator_input(
                    &executable,
                    tx_input_objects,
                    per_authenticator_input_objects,
                    authenticator_gas_budget,
                    &protocol_config,
                    reference_gas_price,
                )
                .unwrap();

            debug_assert_eq!(
                move_authenticators.len(),
                per_authenticator_checked_input_objects.len(),
                "Move authenticators amount must match the number of checked authenticator inputs"
            );

            let move_authenticators = move_authenticators
                .into_iter()
                .zip(per_authenticator_inputs)
                .zip(per_authenticator_checked_input_objects)
                .map(
                    |(
                        (move_authenticator, (_, authenticator_function_ref_for_execution)),
                        authenticator_checked_input_objects,
                    )| {
                        (
                            move_authenticator.to_owned(),
                            authenticator_function_ref_for_execution,
                            authenticator_checked_input_objects,
                        )
                    },
                )
                .collect::<Vec<_>>();

            let (kind, signer, gas_data) = executable.transaction().execution_parts();
            let (sender_auth_digest, sponsor_auth_digest) = sender_signed_data
                .compute_auth_digests()
                .map_err(IotaError::from)?;

            let (sender_authenticator_function_ref, sponsor_authenticator_function_ref) =
                extract_auth_fun_refs(signer, gas_data.owner, |address| {
                    move_authenticators
                        .iter()
                        .find(|t| t.0.address() == address)
                        .map(|t| t.1.authenticator_function_ref.clone())
                });

            let auth_context_data = AuthContextData {
                transaction_data_bytes: bcs::to_bytes(sender_signed_data.transaction())
                    .expect("Transaction serialization cannot fail"),
                sender_auth_digest,
                sponsor_auth_digest,
                sender_authenticator_function_ref,
                sponsor_authenticator_function_ref,
            };

            executor.authenticate_then_execute_transaction_to_effects(
                &store,
                &protocol_config,
                Arc::new(LimitsMetrics::new(&Registry::new())),
                true,
                &HashSet::new(),
                &executed_epoch,
                epoch_start_timestamp,
                gas_data,
                gas_status,
                move_authenticators,
                union_checked_input_objects,
                kind,
                signer,
                *executable.digest(),
                auth_context_data,
                &mut None,
            )
        };

        let effects =
            IotaTransactionBlockEffects::try_from(effects).map_err(ReplayEngineError::from)?;

        Ok(ExecutionSandboxState {
            transaction_info: pre_run_sandbox.transaction_info.clone(),
            required_objects,
            local_exec_temporary_store: None, // We dont capture it for cert exec run
            local_exec_effects: effects,
            local_exec_status: Some(exec_res),
        })
    }

    /// Must be called after `init_for_execution`
    /// This executes from
    /// `iota_core::authority::AuthorityState::try_execute_immediately`
    pub async fn certificate_execute(
        &mut self,
        tx_digest: &TransactionDigest,
        expensive_safety_check_config: ExpensiveSafetyCheckConfig,
    ) -> Result<ExecutionSandboxState, ReplayEngineError> {
        // Use the lighterweight execution engine to get the pre-run state
        let pre_run_sandbox = self
            .execution_engine_execute_impl(tx_digest, expensive_safety_check_config)
            .await?;
        Self::certificate_execute_with_sandbox_state(&pre_run_sandbox).await
    }

    /// Must be called after `init_for_execution`
    /// This executes from
    /// `iota_adapter::execution_engine::execute_transaction_to_effects`
    pub async fn execution_engine_execute(
        &mut self,
        tx_digest: &TransactionDigest,
        expensive_safety_check_config: ExpensiveSafetyCheckConfig,
    ) -> Result<ExecutionSandboxState, ReplayEngineError> {
        let sandbox_state = self
            .execution_engine_execute_impl(tx_digest, expensive_safety_check_config)
            .await?;

        Ok(sandbox_state)
    }

    pub async fn execute_state_dump(
        &mut self,
        expensive_safety_check_config: ExpensiveSafetyCheckConfig,
    ) -> Result<(ExecutionSandboxState, NodeStateDump), ReplayEngineError> {
        assert!(!self.is_remote_replay());

        let d = match self.fetcher.clone() {
            Fetchers::NodeStateDump(d) => d,
            _ => panic!("Invalid fetcher for state dump"),
        };
        let tx_digest = d.node_state_dump.clone().tx_digest;
        let sandbox_state = self
            .execution_engine_execute_impl(&tx_digest, expensive_safety_check_config)
            .await?;

        Ok((sandbox_state, d.node_state_dump))
    }

    pub async fn execute_transaction(
        &mut self,
        tx_digest: &TransactionDigest,
        expensive_safety_check_config: ExpensiveSafetyCheckConfig,
        use_authority: bool,
        executor_version: Option<i64>,
        protocol_version: Option<i64>,
        enable_profiler: Option<PathBuf>,
        config_and_versions: Option<Vec<(ObjectId, Version)>>,
    ) -> Result<ExecutionSandboxState, ReplayEngineError> {
        self.executor_version = executor_version;
        self.protocol_version = protocol_version;
        self.enable_profiler = enable_profiler;
        self.config_and_versions = config_and_versions;
        if use_authority {
            self.certificate_execute(tx_digest, expensive_safety_check_config.clone())
                .await
        } else {
            self.execution_engine_execute(tx_digest, expensive_safety_check_config)
                .await
        }
    }
    fn system_package_ids(_protocol_version: u64) -> Vec<ObjectId> {
        BuiltInFramework::all_package_ids()
    }

    /// This is the only function which accesses the network during execution
    pub fn get_or_download_object(
        &self,
        obj_id: &ObjectId,
        package_expected: bool,
    ) -> Result<Option<Object>, ReplayEngineError> {
        if package_expected {
            if let Some(obj) = self
                .storage
                .package_cache
                .lock()
                .expect("Cannot lock")
                .get(obj_id)
            {
                return Ok(Some(obj.clone()));
            };
            // Check if its a system package because we must've downloaded all
            // TODO: Will return this check once we can download completely for
            // other networks assert!(
            //     !self.system_package_ids().contains(obj_id),
            //     "All system packages should be downloaded already"
            // );
        } else if let Some(obj) = self
            .storage
            .live_objects_store
            .lock()
            .expect("Can't lock")
            .get(obj_id)
        {
            return Ok(Some(obj.clone()));
        }

        let Some(o) = self.download_latest_object(obj_id)? else {
            return Ok(None);
        };

        if o.is_package() {
            assert!(
                package_expected,
                "Did not expect package but downloaded object is a package: {obj_id}"
            );

            self.storage
                .package_cache
                .lock()
                .expect("Cannot lock")
                .insert(*obj_id, o.clone());
        }
        let o_ref = o.object_ref();
        self.storage
            .object_version_cache
            .lock()
            .expect("Cannot lock")
            .insert((o_ref.object_id, o_ref.version), o.clone());
        Ok(Some(o))
    }

    pub fn is_remote_replay(&self) -> bool {
        matches!(self.fetcher, Fetchers::Remote(_))
    }

    /// Must be called after `populate_protocol_version_tables`
    pub fn system_package_versions_for_protocol_version(
        &self,
        protocol_version: u64,
    ) -> Result<Vec<(ObjectId, Version)>, ReplayEngineError> {
        match &self.fetcher {
            Fetchers::Remote(_) => Ok(self
                .protocol_version_system_package_table
                .get(&protocol_version)
                .ok_or(ReplayEngineError::FrameworkObjectVersionTableNotPopulated {
                    protocol_version,
                })?
                .clone()
                .into_iter()
                .collect()),

            Fetchers::NodeStateDump(d) => Ok(d
                .node_state_dump
                .relevant_system_packages
                .iter()
                .map(|w| (w.id, w.version, w.digest))
                .map(|q| (q.0, q.1))
                .collect()),
        }
    }

    pub async fn protocol_ver_to_epoch_map(
        &self,
    ) -> Result<BTreeMap<u64, ProtocolVersionSummary>, ReplayEngineError> {
        let mut range_map = BTreeMap::new();
        let epoch_change_events = self.fetcher.get_epoch_change_events(false).await?;

        // Exception for Genesis: Protocol version 1 at epoch 0
        let mut tx_digest = *self
            .fetcher
            .get_checkpoint_txs(0)
            .await?
            .first()
            .expect("Genesis TX must be in first checkpoint");
        // Somehow the genesis TX did not emit any event, but we know it was the start
        // of version 1 So we need to manually add this range
        let (mut start_epoch, mut start_protocol_version, mut start_checkpoint) =
            (0, 1, Some(0u64));

        let (mut curr_epoch, mut curr_protocol_version, mut curr_checkpoint) =
            (start_epoch, start_protocol_version, start_checkpoint);

        (start_epoch, start_protocol_version, start_checkpoint) =
            (curr_epoch, curr_protocol_version, curr_checkpoint);

        // This is the final tx digest for the epoch change. We need this to track the
        // final checkpoint
        let mut end_epoch_tx_digest = tx_digest;

        for event in epoch_change_events {
            (curr_epoch, curr_protocol_version) = extract_epoch_and_version(event.clone())?;
            end_epoch_tx_digest = event.id.tx_digest;

            if start_protocol_version == curr_protocol_version {
                // Same range
                continue;
            }

            // Change in prot version
            // Find the last checkpoint
            curr_checkpoint = self
                .fetcher
                .get_transaction(&event.id.tx_digest)
                .await?
                .checkpoint;
            // Insert the last range
            range_map.insert(
                start_protocol_version,
                ProtocolVersionSummary {
                    protocol_version: start_protocol_version,
                    epoch_start: start_epoch,
                    epoch_end: curr_epoch - 1,
                    checkpoint_start: start_checkpoint,
                    checkpoint_end: curr_checkpoint.map(|x| x - 1),
                    epoch_change_tx: tx_digest,
                },
            );

            start_epoch = curr_epoch;
            start_protocol_version = curr_protocol_version;
            tx_digest = event.id.tx_digest;
            start_checkpoint = curr_checkpoint;
        }

        // Insert the last range
        range_map.insert(
            curr_protocol_version,
            ProtocolVersionSummary {
                protocol_version: curr_protocol_version,
                epoch_start: start_epoch,
                epoch_end: curr_epoch,
                checkpoint_start: curr_checkpoint,
                checkpoint_end: self
                    .fetcher
                    .get_transaction(&end_epoch_tx_digest)
                    .await?
                    .checkpoint,
                epoch_change_tx: tx_digest,
            },
        );

        Ok(range_map)
    }

    pub fn protocol_version_for_epoch(
        epoch: u64,
        mp: &BTreeMap<u64, (TransactionDigest, u64, u64)>,
    ) -> u64 {
        // Naive impl but works for now
        // Can improve with range algos & data structures
        let mut version = 1;
        for (k, v) in mp.iter().rev() {
            if v.1 <= epoch {
                version = *k;
                break;
            }
        }
        version
    }

    pub async fn populate_protocol_version_tables(&mut self) -> Result<(), ReplayEngineError> {
        self.protocol_version_epoch_table = self.protocol_ver_to_epoch_map().await?;

        let system_package_revisions = self.system_package_versions().await?;

        // This can be more efficient but small footprint so okay for now
        // Table is sorted from earliest to latest
        for (
            prot_ver,
            ProtocolVersionSummary {
                epoch_change_tx: tx_digest,
                ..
            },
        ) in self.protocol_version_epoch_table.clone()
        {
            // Use the previous versions protocol version table
            let mut working = if prot_ver <= 1 {
                BTreeMap::new()
            } else {
                self.protocol_version_system_package_table
                    .iter()
                    .rev()
                    .find(|(ver, _)| **ver <= prot_ver)
                    .expect("Prev entry must exist")
                    .1
                    .clone()
            };

            for (id, versions) in system_package_revisions.iter() {
                // Oldest appears first in list, so reverse
                for ver in versions.iter().rev() {
                    if ver.1 == tx_digest {
                        // Found the version for this protocol version
                        working.insert(*id, ver.0);
                        break;
                    }
                }
            }
            self.protocol_version_system_package_table
                .insert(prot_ver, working);
        }
        Ok(())
    }

    pub async fn system_package_versions(
        &self,
    ) -> Result<BTreeMap<ObjectId, Vec<(Version, TransactionDigest)>>, ReplayEngineError> {
        let system_package_ids = Self::system_package_ids(
            *self
                .protocol_version_epoch_table
                .keys()
                .peekable()
                .last()
                .expect("Protocol version epoch table not populated"),
        );
        let mut system_package_objs = self.multi_download_latest(&system_package_ids).await?;

        let mut mapping = BTreeMap::new();

        // Extract all the transactions which created or mutated this object
        while !system_package_objs.is_empty() {
            // For the given object and its version, record the transaction which upgraded
            // or created it
            let previous_txs: Vec<_> = system_package_objs
                .iter()
                .map(|o| (o.object_ref(), o.previous_transaction))
                .collect();

            previous_txs.iter().for_each(|(object_ref, tx)| {
                mapping
                    .entry(object_ref.object_id)
                    .or_insert(vec![])
                    .push((object_ref.version, *tx));
            });

            // Next round
            // Get the previous version of each object if exists
            let previous_ver_refs: Vec<_> = previous_txs
                .iter()
                .filter_map(|(q, _)| {
                    let prev_ver = q.version - 1;
                    if prev_ver == 0 {
                        None
                    } else {
                        Some((q.object_id, prev_ver))
                    }
                })
                .collect();
            system_package_objs = match self.multi_download(&previous_ver_refs).await {
                Ok(packages) => packages,
                Err(ReplayEngineError::ObjectNotExist { id }) => {
                    // This happens when the RPC server prunes older object
                    // Replays in the current protocol version will work but old ones might not
                    // as we cannot fetch the package
                    warn!(
                        "Object {} does not exist on RPC server. This might be due to pruning. Historical replays might not work",
                        id
                    );
                    break;
                }
                Err(ReplayEngineError::ObjectVersionNotFound { id, version }) => {
                    // This happens when the RPC server prunes older object
                    // Replays in the current protocol version will work but old ones might not
                    // as we cannot fetch the package
                    warn!(
                        "Object {} at version {} does not exist on RPC server. This might be due to pruning. Historical replays might not work",
                        id, version
                    );
                    break;
                }
                Err(ReplayEngineError::ObjectVersionTooHigh {
                    id,
                    asked_version,
                    latest_version,
                }) => {
                    warn!(
                        "Object {} at version {} does not exist on RPC server. Latest version is {}. This might be due to pruning. Historical replays might not work",
                        id, asked_version, latest_version
                    );
                    break;
                }
                Err(ReplayEngineError::ObjectDeleted {
                    id,
                    version,
                    digest,
                }) => {
                    // This happens when the RPC server prunes older object
                    // Replays in the current protocol version will work but old ones might not
                    // as we cannot fetch the package
                    warn!(
                        "Object {} at version {} digest {} deleted from RPC server. This might be due to pruning. Historical replays might not work",
                        id, version, digest
                    );
                    break;
                }
                Err(e) => return Err(e),
            };
        }
        Ok(mapping)
    }

    pub async fn get_protocol_config(
        &self,
        epoch_id: EpochId,
        chain: Chain,
    ) -> Result<ProtocolConfig, ReplayEngineError> {
        match self.protocol_version {
            Some(x) if x < 0 => Ok(ProtocolConfig::get_for_max_version_UNSAFE()),
            Some(v) => Ok(ProtocolConfig::get_for_version((v as u64).into(), chain)),
            None => self
                .protocol_version_epoch_table
                .iter()
                .rev()
                .find(|(_, rg)| epoch_id >= rg.epoch_start)
                .map(|(p, _rg)| Ok(ProtocolConfig::get_for_version((*p).into(), chain)))
                .unwrap_or_else(|| {
                    Err(ReplayEngineError::ProtocolVersionNotFound { epoch: epoch_id })
                }),
        }
    }

    pub async fn checkpoints_for_epoch(
        &self,
        epoch_id: u64,
    ) -> Result<(u64, u64), ReplayEngineError> {
        let epoch_change_events = self
            .fetcher
            .get_epoch_change_events(true)
            .await?
            .into_iter()
            .collect::<Vec<_>>();
        let (start_checkpoint, start_epoch_idx) = if epoch_id == 0 {
            (0, 1)
        } else {
            let idx = epoch_change_events
                .iter()
                .position(|ev| match extract_epoch_and_version(ev.clone()) {
                    Ok((epoch, _)) => epoch == epoch_id,
                    Err(_) => false,
                })
                .ok_or(ReplayEngineError::EventNotFound { epoch: epoch_id })?;
            let epoch_change_tx = epoch_change_events[idx].id.tx_digest;
            (
                self.fetcher
                    .get_transaction(&epoch_change_tx)
                    .await?
                    .checkpoint
                    .unwrap_or_else(|| {
                        panic!(
                            "Checkpoint for transaction {epoch_change_tx} not present. Could be due to pruning"
                        )
                    }),
                idx,
            )
        };

        let next_epoch_change_tx = epoch_change_events
            .get(start_epoch_idx + 1)
            .map(|v| v.id.tx_digest)
            .ok_or(ReplayEngineError::UnableToDetermineCheckpoint { epoch: epoch_id })?;

        let next_epoch_checkpoint = self
            .fetcher
            .get_transaction(&next_epoch_change_tx)
            .await?
            .checkpoint
            .unwrap_or_else(|| {
                panic!(
                    "Checkpoint for transaction {next_epoch_change_tx} not present. Could be due to pruning"
                )
            });

        Ok((start_checkpoint, next_epoch_checkpoint - 1))
    }

    pub async fn get_epoch_start_timestamp_and_rgp(
        &self,
        epoch_id: u64,
        tx_digest: &TransactionDigest,
    ) -> Result<(u64, u64), ReplayEngineError> {
        if epoch_id == 0 {
            return Err(ReplayEngineError::TransactionNotSupported {
                digest: *tx_digest,
                reason: "Transactions from epoch 0 not supported".to_string(),
            });
        }
        self.fetcher
            .get_epoch_start_timestamp_and_rgp(epoch_id)
            .await
    }

    fn add_config_objects_if_needed(
        &self,
        status: &IotaExecutionStatus,
    ) -> Vec<(ObjectId, Version)> {
        match parse_effect_error_for_denied_coins(status) {
            Some(coin_type) => {
                let Some(mut config_id_and_version) = self.config_and_versions.clone() else {
                    panic!(
                        "Need to specify the config object ID and version for '{coin_type}' in order to replay this transaction"
                    );
                };
                // NB: the version of the deny list object doesn't matter
                if !config_id_and_version
                    .iter()
                    .any(|(id, _)| id == &IOTA_DENY_LIST_OBJECT_ID)
                {
                    let deny_list_oid_version = self.download_latest_object(&IOTA_DENY_LIST_OBJECT_ID)
                        .ok()
                        .flatten()
                        .expect("Unable to download the deny list object for a transaction that requires it")
                        .version();
                    config_id_and_version.push((IOTA_DENY_LIST_OBJECT_ID, deny_list_oid_version));
                }
                config_id_and_version
            }
            None => vec![],
        }
    }

    async fn resolve_tx_components(
        &self,
        tx_digest: &TransactionDigest,
    ) -> Result<OnChainTransactionInfo, ReplayEngineError> {
        assert!(self.is_remote_replay());
        // Fetch full transaction content
        let tx_info = self.fetcher.get_transaction(tx_digest).await?;
        let sender = match tx_info.clone().transaction.unwrap().data {
            iota_json_rpc_types::IotaTransactionBlockData::V1(tx) => tx.sender,
        };
        let IotaTransactionBlockEffects::V1(effects) = tx_info.clone().effects.unwrap();

        let config_objects = self.add_config_objects_if_needed(effects.status());

        let raw_tx_bytes = tx_info.clone().raw_transaction;
        let orig_tx: SenderSignedTransaction = bcs::from_bytes(&raw_tx_bytes).unwrap();
        let input_objs = orig_tx
            .collect_all_input_object_kind_for_reading()
            .map_err(|e| match e {
                IotaError::UserInput { error } => ReplayEngineError::UserInputError { err: error },
                other => ReplayEngineError::GeneralError {
                    err: other.to_string(),
                },
            })?;
        let tx_kind_orig = orig_tx.transaction().kind();

        // Download the objects at the version right before the execution of this TX
        let modified_at_versions: Vec<(ObjectId, Version)> = effects.modified_at_versions();

        let shared_object_refs: Vec<ObjectReference> = effects
            .shared_objects()
            .iter()
            .map(|so_ref| {
                if so_ref.digest == ObjectDigest::OBJECT_DELETED {
                    unimplemented!(
                        "Replay of deleted shared object transactions is not supported yet"
                    );
                } else {
                    *so_ref
                }
            })
            .collect();
        let gas_data = match tx_info.clone().transaction.unwrap().data {
            iota_json_rpc_types::IotaTransactionBlockData::V1(tx) => tx.gas_data,
        };
        let gas_object_refs = gas_data.payment;
        let receiving_objs = orig_tx
            .transaction()
            .receiving_objects()
            .into_iter()
            .map(|obj_ref| (obj_ref.object_id, obj_ref.version))
            .collect();

        let epoch_id = effects.executed_epoch;
        let chain = chain_from_chain_id(self.fetcher.get_chain_id().await?.as_str());

        // Extract the epoch start timestamp
        let (epoch_start_timestamp, reference_gas_price) = self
            .get_epoch_start_timestamp_and_rgp(epoch_id, tx_digest)
            .await?;

        Ok(OnChainTransactionInfo {
            kind: tx_kind_orig.clone(),
            sender,
            modified_at_versions,
            input_objects: input_objs,
            shared_object_refs,
            gas: gas_object_refs,
            gas_owner: (gas_data.owner != sender).then_some(gas_data.owner),
            gas_budget: gas_data.budget,
            gas_price: gas_data.price,
            executed_epoch: epoch_id,
            dependencies: effects.dependencies().to_vec(),
            effects: IotaTransactionBlockEffects::V1(effects),
            receiving_objs,
            config_objects,
            // Find the protocol version for this epoch
            // This assumes we already initialized the protocol version table
            // `protocol_version_epoch_table`
            protocol_version: self.get_protocol_config(epoch_id, chain).await?.version,
            tx_digest: *tx_digest,
            epoch_start_timestamp,
            sender_signed_data: orig_tx.clone(),
            reference_gas_price,
            chain,
        })
    }

    async fn resolve_tx_components_from_dump(
        &self,
        tx_digest: &TransactionDigest,
    ) -> Result<OnChainTransactionInfo, ReplayEngineError> {
        assert!(!self.is_remote_replay());

        let dp = self.fetcher.as_node_state_dump();

        let sender = dp.node_state_dump.sender_signed_data.transaction().sender();
        let orig_tx = dp.node_state_dump.sender_signed_data.clone();
        let effects = dp.node_state_dump.computed_effects.clone();
        let effects = IotaTransactionBlockEffects::try_from(effects).unwrap();
        // Config objects don't show up in the node state dump so they need to be
        // provided.
        let config_objects = self.add_config_objects_if_needed(effects.status());

        // Fetch full transaction content
        // let tx_info = self.fetcher.get_transaction(tx_digest).await?;

        let input_objs = orig_tx
            .collect_all_input_object_kind_for_reading()
            .map_err(|e| match e {
                IotaError::UserInput { error } => ReplayEngineError::UserInputError { err: error },
                other => ReplayEngineError::GeneralError {
                    err: other.to_string(),
                },
            })?;
        let tx_kind_orig = orig_tx.transaction().kind();

        // Download the objects at the version right before the execution of this TX
        let modified_at_versions: Vec<(ObjectId, Version)> = effects.modified_at_versions();

        let shared_object_refs: Vec<ObjectReference> = effects
            .shared_objects()
            .iter()
            .map(|so_ref| {
                if so_ref.digest == ObjectDigest::OBJECT_DELETED {
                    unimplemented!(
                        "Replay of deleted shared object transactions is not supported yet"
                    );
                } else {
                    *so_ref
                }
            })
            .collect();
        let receiving_objs = orig_tx
            .transaction()
            .receiving_objects()
            .into_iter()
            .map(|obj_ref| (obj_ref.object_id, obj_ref.version))
            .collect();

        let epoch_id = dp.node_state_dump.executed_epoch;

        let chain = chain_from_chain_id(self.fetcher.get_chain_id().await?.as_str());

        let protocol_config =
            ProtocolConfig::get_for_version(dp.node_state_dump.protocol_version.into(), chain);
        // Extract the epoch start timestamp
        let (epoch_start_timestamp, reference_gas_price) = self
            .get_epoch_start_timestamp_and_rgp(epoch_id, tx_digest)
            .await?;
        let gas_data = orig_tx.transaction().gas_data();
        let gas_object_refs: Vec<_> = gas_data.clone().objects;

        Ok(OnChainTransactionInfo {
            kind: tx_kind_orig.clone(),
            sender,
            modified_at_versions,
            input_objects: input_objs,
            shared_object_refs,
            gas: gas_object_refs,
            gas_owner: (gas_data.owner != sender).then_some(gas_data.owner),
            gas_budget: gas_data.budget,
            gas_price: gas_data.price,
            executed_epoch: epoch_id,
            dependencies: effects.dependencies().to_vec(),
            effects,
            receiving_objs,
            config_objects,
            protocol_version: protocol_config.version,
            tx_digest: *tx_digest,
            epoch_start_timestamp,
            sender_signed_data: orig_tx.clone(),
            reference_gas_price,
            chain,
        })
    }

    async fn resolve_download_input_objects(
        &mut self,
        tx_info: &OnChainTransactionInfo,
        deleted_shared_objects: Vec<ObjectReference>,
    ) -> Result<InputObjects, ReplayEngineError> {
        // Download the input objects
        let mut package_inputs = vec![];
        let mut imm_owned_inputs = vec![];
        let mut shared_inputs = vec![];
        let mut deleted_shared_info_map = BTreeMap::new();

        // for deleted shared objects, we need to look at the transaction dependencies
        // to find the correct transaction dependency for a deleted shared
        // object.
        if !deleted_shared_objects.is_empty() {
            for tx_digest in tx_info.dependencies.iter() {
                let tx_info = self.resolve_tx_components(tx_digest).await?;
                for obj_ref in tx_info.shared_object_refs.iter() {
                    deleted_shared_info_map
                        .insert(obj_ref.object_id, (tx_info.tx_digest, obj_ref.version));
                }
            }
        }

        tx_info
            .input_objects
            .iter()
            .map(|kind| match kind {
                InputObjectKind::MovePackage(i) => {
                    package_inputs.push(*i);
                    Ok(())
                }
                InputObjectKind::ImmOrOwnedMoveObject(o_ref) => {
                    imm_owned_inputs.push((o_ref.object_id, o_ref.version));
                    Ok(())
                }
                InputObjectKind::SharedMoveObject {
                    id,
                    initial_shared_version: _,
                    mutable: _,
                } if !deleted_shared_info_map.contains_key(id) => {
                    // We already downloaded
                    if let Some(o) = self
                        .storage
                        .live_objects_store
                        .lock()
                        .expect("Can't lock")
                        .get(id)
                    {
                        shared_inputs.push(o.clone());
                        Ok(())
                    } else {
                        Err(ReplayEngineError::InternalCacheInvariantViolation {
                            id: *id,
                            version: None,
                        })
                    }
                }
                _ => Ok(()),
            })
            .collect::<Result<Vec<_>, _>>()?;

        // Download the imm and owned objects
        let mut in_objs = self.multi_download_and_store(&imm_owned_inputs).await?;

        // For packages, download latest if non framework
        // If framework, download relevant for the current protocol version
        in_objs.extend(
            self.multi_download_relevant_packages_and_store(
                package_inputs,
                tx_info.protocol_version.as_u64(),
            )
            .await?,
        );
        // Add shared objects
        in_objs.extend(shared_inputs);

        // TODO(Zhe): Account for cancelled transaction assigned version here, and
        // tests.
        let resolved_input_objs = tx_info
            .input_objects
            .iter()
            .flat_map(|kind| match kind {
                InputObjectKind::MovePackage(i) => {
                    // Okay to unwrap since we downloaded it
                    Some(ObjectReadResult::new(
                        *kind,
                        self.storage
                            .package_cache
                            .lock()
                            .expect("Cannot lock")
                            .get(i)
                            .unwrap_or(
                                &self
                                    .download_latest_object(i)
                                    .expect("Object download failed")
                                    .expect("Object not found on chain"),
                            )
                            .clone()
                            .into(),
                    ))
                }
                InputObjectKind::ImmOrOwnedMoveObject(o_ref) => Some(ObjectReadResult::new(
                    *kind,
                    self.storage
                        .object_version_cache
                        .lock()
                        .expect("Cannot lock")
                        .get(&(o_ref.object_id, o_ref.version))
                        .unwrap()
                        .clone()
                        .into(),
                )),
                InputObjectKind::SharedMoveObject { id, .. }
                    if !deleted_shared_info_map.contains_key(id) =>
                {
                    // we already downloaded
                    Some(ObjectReadResult::new(
                        *kind,
                        self.storage
                            .live_objects_store
                            .lock()
                            .expect("Can't lock")
                            .get(id)
                            .unwrap()
                            .clone()
                            .into(),
                    ))
                }
                InputObjectKind::SharedMoveObject { id, .. } => {
                    let (digest, version) = deleted_shared_info_map.get(id).unwrap();
                    Some(ObjectReadResult::new(
                        *kind,
                        ObjectReadResultKind::DeletedSharedObject(*version, *digest),
                    ))
                }
            })
            .collect();

        Ok(InputObjects::new(resolved_input_objs))
    }

    /// Given the OnChainTransactionInfo, download and store the input objects,
    /// and other info necessary for execution
    async fn initialize_execution_env_state(
        &mut self,
        tx_info: &OnChainTransactionInfo,
    ) -> Result<InputObjects, ReplayEngineError> {
        // We need this for other activities in this session
        self.current_protocol_version = tx_info.protocol_version.as_u64();

        // Download the objects at the version right before the execution of this TX
        self.multi_download_and_store(&tx_info.modified_at_versions)
            .await?;

        let (shared_refs, deleted_shared_refs): (Vec<ObjectReference>, Vec<ObjectReference>) =
            tx_info
                .shared_object_refs
                .iter()
                .partition(|r| r.digest != ObjectDigest::OBJECT_DELETED);

        // Download shared objects at the version right before the execution of this TX
        let shared_refs: Vec<_> = shared_refs
            .iter()
            .map(|r| (r.object_id, r.version))
            .collect();
        self.multi_download_and_store(&shared_refs).await?;

        // Download gas (although this should already be in cache from modified at
        // versions?)
        let gas_refs: Vec<_> = tx_info
            .gas
            .iter()
            .filter_map(|w| (w.object_id != ObjectId::ZERO).then_some((w.object_id, w.version)))
            .collect();
        self.multi_download_and_store(&gas_refs).await?;

        // Fetch the input objects we know from the raw transaction
        let input_objs = self
            .resolve_download_input_objects(tx_info, deleted_shared_refs)
            .await?;

        // Fetch the receiving objects
        self.multi_download_and_store(&tx_info.receiving_objs)
            .await?;

        // Fetch specified config objects if any
        self.multi_download_and_store(&tx_info.config_objects)
            .await?;

        // Prep the object runtime for dynamic fields
        // Download the child objects accessed at the version right before the execution
        // of this TX
        let loaded_child_refs = self.fetch_loaded_child_refs(&tx_info.tx_digest).await?;
        self.multi_download_and_store(&loaded_child_refs).await?;
        tokio::task::yield_now().await;

        // If the transaction uses MoveAuthenticators, download the authenticator
        // function ref dynamic field objects so they are available during execution.
        for move_authenticator in tx_info.sender_signed_data.move_authenticators() {
            let (account_object_id, _, _) = move_authenticator
                .object_to_authenticate_components()
                .map_err(|e| ReplayEngineError::GeneralError { err: e.to_string() })?;

            let authenticator_function_ref_field_id =
                derive_authenticator_function_ref_v1_dynamic_field_id(account_object_id)
                    .map_err(|e| ReplayEngineError::GeneralError { err: e.to_string() })?;

            // Get account object version from the already-downloaded objects
            let account_object_version = self
                .storage
                .live_objects_store
                .lock()
                .expect("Can't lock")
                .get(&account_object_id)
                .map(|obj| obj.version())
                .expect("Account object should have been downloaded as part of input objects");

            self.download_object_by_upper_bound(
                &authenticator_function_ref_field_id,
                account_object_version,
            )?;
        }

        Ok(input_objs)
    }
}

/// Loads the `AuthenticatorFunctionRefForExecution` from a dynamic field on the
/// account object. This is a simplified version of `check_move_account()` in
/// `authority.rs` — we skip validation since we trust on-chain state.
fn load_authenticator_function_ref(
    move_authenticator: &MoveAuthenticator,
    account_object_version: Version,
    get_object: impl Fn(&ObjectId) -> Option<Object>,
) -> Result<AuthenticatorFunctionRefForExecution, ReplayEngineError> {
    let (account_object_id, _, _) = move_authenticator
        .object_to_authenticate_components()
        .map_err(|e| ReplayEngineError::GeneralError { err: e.to_string() })?;

    let field_id = derive_authenticator_function_ref_v1_dynamic_field_id(account_object_id)
        .map_err(|e| ReplayEngineError::GeneralError { err: e.to_string() })?;

    let field_obj = get_object(&field_id).ok_or_else(|| ReplayEngineError::GeneralError {
        err: format!(
            "Authenticator function ref dynamic field {field_id} not found in storage \
             for account object {account_object_id} at version {account_object_version}"
        ),
    })?;

    authenticator_function_ref_v1_from_dynamic_field_object(account_object_id, &field_obj)
        .map_err(|e| ReplayEngineError::GeneralError { err: e.to_string() })
}

// <---------------------  Implement necessary traits for LocalExec to work with
// exec engine ----------------------->

impl BackingPackageStore for LocalExec {
    /// In this case we might need to download a dependency package which was
    /// not present in the modified at versions list because packages are
    /// immutable
    fn get_package_object(&self, package_id: &ObjectId) -> IotaResult<Option<PackageObject>> {
        fn inner(self_: &LocalExec, package_id: &ObjectId) -> IotaResult<Option<Object>> {
            // If package not present fetch it from the network
            self_
                .get_or_download_object(package_id, true /* we expect a Move package */)
                .map_err(|e| IotaError::Storage(e.to_string()))
        }

        let res = inner(self, package_id);
        self.exec_store_events
            .lock()
            .expect("Unable to lock events list")
            .push(ExecutionStoreEvent::BackingPackageGetPackageObject {
                package_id: *package_id,
                result: res.clone(),
            });
        res.map(|o| o.map(PackageObject::new))
    }
}

impl ChildObjectResolver for LocalExec {
    /// This uses `get_object`, which does not download from the network
    /// Hence all objects must be in store already
    fn read_child_object(
        &self,
        parent: &ObjectId,
        child: &ObjectId,
        child_version_upper_bound: Version,
    ) -> IotaResult<Option<Object>> {
        fn inner(
            self_: &LocalExec,
            parent: &ObjectId,
            child: &ObjectId,
            child_version_upper_bound: Version,
        ) -> IotaResult<Option<Object>> {
            let child_object =
                match self_.download_object_by_upper_bound(child, child_version_upper_bound)? {
                    None => return Ok(None),
                    Some(o) => o,
                };
            let child_version = child_object.version();
            if child_object.version() > child_version_upper_bound {
                return Err(IotaError::Unknown(format!(
                    "Invariant Violation. Replay loaded child_object {child} at version \
                    {child_version} but expected the version to be <= {child_version_upper_bound}"
                )));
            }
            let parent = *parent;
            if child_object.owner != Owner::Object(parent) {
                return Err(IotaError::InvalidChildObjectAccess {
                    object: *child,
                    given_parent: parent,
                    actual_owner: child_object.owner,
                });
            }
            Ok(Some(child_object))
        }

        let res = inner(self, parent, child, child_version_upper_bound);
        self.exec_store_events
            .lock()
            .expect("Unable to lock events list")
            .push(
                ExecutionStoreEvent::ChildObjectResolverStoreReadChildObject {
                    parent: *parent,
                    child: *child,
                    result: res.clone(),
                },
            );
        res
    }

    fn get_object_received_at_version(
        &self,
        owner: &ObjectId,
        receiving_object_id: &ObjectId,
        receive_object_at_version: Version,
        _epoch_id: EpochId,
    ) -> IotaResult<Option<Object>> {
        fn inner(
            self_: &LocalExec,
            owner: &ObjectId,
            receiving_object_id: &ObjectId,
            receive_object_at_version: Version,
        ) -> IotaResult<Option<Object>> {
            let recv_object = match self_.try_get_object(receiving_object_id)? {
                None => return Ok(None),
                Some(o) => o,
            };
            if recv_object.version() != receive_object_at_version {
                return Err(IotaError::Unknown(format!(
                    "Invariant Violation. Replay loaded child_object {receiving_object_id} at version \
                    {receive_object_at_version} but expected the version to be == {receive_object_at_version}"
                )));
            }
            if recv_object.owner != Owner::Address((*owner).into()) {
                return Ok(None);
            }
            Ok(Some(recv_object))
        }

        let res = inner(self, owner, receiving_object_id, receive_object_at_version);
        self.exec_store_events
            .lock()
            .expect("Unable to lock events list")
            .push(ExecutionStoreEvent::ReceiveObject {
                owner: *owner,
                receive: *receiving_object_id,
                receive_at_version: receive_object_at_version,
                result: res.clone(),
            });
        res
    }
}

impl ModuleResolver for LocalExec {
    type Error = IotaError;

    /// This fetches a module which must already be present in the store
    /// We do not download
    fn get_module(&self, module_id: &ModuleId) -> IotaResult<Option<Vec<u8>>> {
        fn inner(self_: &LocalExec, module_id: &ModuleId) -> IotaResult<Option<Vec<u8>>> {
            get_module(self_, module_id)
        }

        let res = inner(self, module_id);
        self.exec_store_events
            .lock()
            .expect("Unable to lock events list")
            .push(ExecutionStoreEvent::ModuleResolverGetModule {
                module_id: module_id.clone(),
                result: res.clone(),
            });
        res
    }
}

impl ModuleResolver for &mut LocalExec {
    type Error = IotaError;

    fn get_module(&self, module_id: &ModuleId) -> IotaResult<Option<Vec<u8>>> {
        // Recording event here will be double-counting since its already recorded in
        // the get_module fn
        (**self).get_module(module_id)
    }
}

impl ObjectStore for LocalExec {
    /// The object must be present in store by normal process we used to
    /// backfill store in init We dont download if not present
    fn try_get_object(
        &self,
        object_id: &ObjectId,
    ) -> iota_types::storage::error::Result<Option<Object>> {
        let res = self
            .storage
            .live_objects_store
            .lock()
            .expect("Can't lock")
            .get(object_id)
            .cloned();
        self.exec_store_events
            .lock()
            .expect("Unable to lock events list")
            .push(ExecutionStoreEvent::ObjectStoreGetObject {
                object_id: *object_id,
                result: Ok(res.clone()),
            });
        Ok(res)
    }

    /// The object must be present in store by normal process we used to
    /// backfill store in init We dont download if not present
    fn try_get_object_by_key(
        &self,
        object_id: &ObjectId,
        version: VersionNumber,
    ) -> iota_types::storage::error::Result<Option<Object>> {
        let res = self
            .storage
            .live_objects_store
            .lock()
            .expect("Can't lock")
            .get(object_id)
            .and_then(|obj| {
                if obj.version() == version {
                    Some(obj.clone())
                } else {
                    None
                }
            });

        self.exec_store_events
            .lock()
            .expect("Unable to lock events list")
            .push(ExecutionStoreEvent::ObjectStoreGetObjectByKey {
                object_id: *object_id,
                version,
                result: Ok(res.clone()),
            });

        Ok(res)
    }
}

impl ObjectStore for &mut LocalExec {
    fn try_get_object(
        &self,
        object_id: &ObjectId,
    ) -> iota_types::storage::error::Result<Option<Object>> {
        // Recording event here will be double-counting since its already recorded in
        // the get_module fn
        (**self).try_get_object(object_id)
    }

    fn try_get_object_by_key(
        &self,
        object_id: &ObjectId,
        version: VersionNumber,
    ) -> iota_types::storage::error::Result<Option<Object>> {
        // Recording event here will be double-counting since its already recorded in
        // the get_module fn
        (**self).try_get_object_by_key(object_id, version)
    }
}

impl GetModule for LocalExec {
    type Error = IotaError;
    type Item = CompiledModule;

    fn get_module_by_id(&self, id: &ModuleId) -> IotaResult<Option<Self::Item>> {
        let res = get_module_by_id(self, id);

        self.exec_store_events
            .lock()
            .expect("Unable to lock events list")
            .push(ExecutionStoreEvent::GetModuleGetModuleByModuleId {
                id: id.clone(),
                result: res.clone(),
            });
        res
    }
}

// <--------------------- Util functions ----------------------->

pub fn get_executor(
    executor_version_override: Option<i64>,
    protocol_config: &ProtocolConfig,
    _expensive_safety_check_config: ExpensiveSafetyCheckConfig,
    enable_profiler: Option<PathBuf>,
) -> Arc<dyn Executor + Send + Sync> {
    let protocol_config = executor_version_override
        .map(|q| {
            let ver = if q < 0 {
                ProtocolConfig::get_for_max_version_UNSAFE().execution_version()
            } else {
                q as u64
            };

            let mut c = protocol_config.clone();
            c.set_execution_version_for_testing(ver);
            c
        })
        .unwrap_or(protocol_config.clone());

    let silent = true;
    iota_execution::executor(&protocol_config, silent, enable_profiler)
        .expect("Creating an executor should not fail here")
}

fn parse_effect_error_for_denied_coins(status: &IotaExecutionStatus) -> Option<String> {
    let IotaExecutionStatus::Failure { error } = status else {
        return None;
    };
    parse_denied_error_string(error)
}

fn parse_denied_error_string(error: &str) -> Option<String> {
    let regulated_regex = regex::Regex::new(
        r#"CoinTypeGlobalPause.*?"(.*?)"|AddressDeniedForCoin.*coin_type:.*?"(.*?)""#,
    )
    .unwrap();

    let caps = regulated_regex.captures(error)?;
    Some(caps.get(1).or(caps.get(2))?.as_str().to_string())
}

#[cfg(test)]
mod tests {
    use super::parse_denied_error_string;
    #[test]
    fn test_regex_regulated_coin_errors() {
        let test_bank = vec![
            "CoinTypeGlobalPause { coin_type: \"39a572c071784c280ee8ee8c683477e059d1381abc4366f9a58ffac3f350a254::rcoin::RCOIN\" }",
            "AddressDeniedForCoin { address: B, coin_type: \"39a572c071784c280ee8ee8c683477e059d1381abc4366f9a58ffac3f350a254::rcoin::RCOIN\" }",
        ];
        let expected_string =
            "39a572c071784c280ee8ee8c683477e059d1381abc4366f9a58ffac3f350a254::rcoin::RCOIN";

        for test in &test_bank {
            assert!(parse_denied_error_string(test).unwrap() == expected_string);
        }
    }
}