iota_types/iota_system_state/

mod.rs

// Copyright (c) Mysten Labs, Inc.
// Modifications Copyright (c) 2024 IOTA Stiftung
// SPDX-License-Identifier: Apache-2.0

use std::fmt;

use anyhow::Result;
use enum_dispatch::enum_dispatch;
use iota_protocol_config::{ProtocolConfig, ProtocolVersion};
use iota_sdk_move_types::{
    iota_framework::dynamic_field::Field,
    iota_system::{
        iota_system::IotaSystemState as IotaSystemStateWrapper, validator_wrapper::Validator,
    },
};
use iota_sdk_types::{Identifier, MoveStruct, ObjectId};
use serde::{Deserialize, Serialize, de::DeserializeOwned};

use self::{
    iota_system_state_inner_v1::{IotaSystemStateV1, ValidatorV1},
    iota_system_state_inner_v2::IotaSystemStateV2,
    iota_system_state_summary::{IotaSystemStateSummary, IotaValidatorSummary},
};
#[cfg(not(target_arch = "wasm32"))]
use crate::iota_system_state::epoch_start_iota_system_state::EpochStartSystemState;
use crate::{
    MoveTypeTagTrait,
    committee::CommitteeWithNetworkMetadata,
    dynamic_field::{get_dynamic_field_from_store, get_dynamic_field_object_from_store},
    error::IotaError,
    object::{MoveStructExt, Object},
    storage::ObjectStore,
};

// `EpochStartSystemState` pulls in anemo / starfish-config (consensus + p2p),
// which don't compile to wasm32. It's only consumed by the node, so the whole
// module and the `into_epoch_start_state` accessor are gated out of wasm.
#[cfg(not(target_arch = "wasm32"))]
pub mod epoch_start_iota_system_state;
pub mod iota_system_state_inner_v1;
pub mod iota_system_state_inner_v2;
pub mod iota_system_state_summary;

#[cfg(msim)]
mod simtest_iota_system_state_inner;
#[cfg(msim)]
use self::simtest_iota_system_state_inner::{
    SimTestIotaSystemStateDeepV1, SimTestIotaSystemStateShallowV1, SimTestIotaSystemStateV1,
    SimTestValidatorDeepV1, SimTestValidatorV1,
};

pub const ADVANCE_EPOCH_FUNCTION_NAME: Identifier = Identifier::from_static("advance_epoch");
pub const ADVANCE_EPOCH_SAFE_MODE_FUNCTION_NAME: Identifier =
    Identifier::from_static("advance_epoch_safe_mode");

#[cfg(msim)]
pub const IOTA_SYSTEM_STATE_SIM_TEST_V1: u64 = 18446744073709551605; // u64::MAX - 10
#[cfg(msim)]
pub const IOTA_SYSTEM_STATE_SIM_TEST_SHALLOW_V1: u64 = 18446744073709551606; // u64::MAX - 9
#[cfg(msim)]
pub const IOTA_SYSTEM_STATE_SIM_TEST_DEEP_V1: u64 = 18446744073709551607; // u64::MAX - 8

mod iota_system_state_wrapper_ext {
    pub trait Sealed {}
    impl Sealed for super::IotaSystemStateWrapper {}
}

pub trait IotaSystemStateWrapperExt: Sized + iota_system_state_wrapper_ext::Sealed {
    /// Advances epoch in safe mode natively in Rust, without involking Move.
    /// This ensures that there cannot be any failure from Move and is
    /// guaranteed to succeed. Returns the old and new inner system state
    /// object.
    fn advance_epoch_safe_mode(
        &self,
        params: &AdvanceEpochParams,
        object_store: &dyn ObjectStore,
        protocol_config: &ProtocolConfig,
    ) -> (Object, Object);
}

impl IotaSystemStateWrapperExt for IotaSystemStateWrapper {
    fn advance_epoch_safe_mode(
        &self,
        params: &AdvanceEpochParams,
        object_store: &dyn ObjectStore,
        protocol_config: &ProtocolConfig,
    ) -> (Object, Object) {
        let id = self.id.id.bytes;
        let old_field_object = get_dynamic_field_object_from_store(object_store, id, &self.version)
            .expect("Dynamic field object of wrapper should always be present in the object store");
        let mut new_field_object = old_field_object.clone();
        let move_struct = new_field_object
            .data
            .as_opt_mut_struct()
            .expect("Dynamic field object must be a Move object");
        match self.version {
            1 => {
                advance_epoch_safe_mode_impl::<IotaSystemStateV1>(
                    move_struct,
                    params,
                    protocol_config,
                );
            }
            2 => {
                advance_epoch_safe_mode_impl::<IotaSystemStateV2>(
                    move_struct,
                    params,
                    protocol_config,
                );
            }
            #[cfg(msim)]
            IOTA_SYSTEM_STATE_SIM_TEST_V1 => {
                advance_epoch_safe_mode_impl::<SimTestIotaSystemStateV1>(
                    move_struct,
                    params,
                    protocol_config,
                );
            }
            #[cfg(msim)]
            IOTA_SYSTEM_STATE_SIM_TEST_SHALLOW_V1 => {
                advance_epoch_safe_mode_impl::<SimTestIotaSystemStateShallowV1>(
                    move_struct,
                    params,
                    protocol_config,
                );
            }
            #[cfg(msim)]
            IOTA_SYSTEM_STATE_SIM_TEST_DEEP_V1 => {
                advance_epoch_safe_mode_impl::<SimTestIotaSystemStateDeepV1>(
                    move_struct,
                    params,
                    protocol_config,
                );
            }
            _ => unreachable!(),
        }
        (old_field_object, new_field_object)
    }
}

fn advance_epoch_safe_mode_impl<T>(
    move_struct: &mut MoveStruct,
    params: &AdvanceEpochParams,
    protocol_config: &ProtocolConfig,
) where
    T: Serialize + DeserializeOwned + IotaSystemStateTrait,
{
    let mut field: Field<u64, T> =
        bcs::from_bytes(move_struct.contents()).expect("bcs deserialization should never fail");
    tracing::info!(
        "Advance epoch safe mode: current epoch: {}, protocol_version: {}, system_state_version: {}",
        field.value.epoch(),
        field.value.protocol_version(),
        field.value.system_state_version()
    );
    field.value.advance_epoch_safe_mode(params);
    tracing::info!(
        "Safe mode activated. New epoch: {}, protocol_version: {}, system_state_version: {}",
        field.value.epoch(),
        field.value.protocol_version(),
        field.value.system_state_version()
    );
    let new_contents = bcs::to_bytes(&field).expect("bcs serialization should never fail");
    move_struct
        .update_contents_advance_epoch_safe_mode(new_contents, protocol_config)
        .expect(
            "Update iota system object content cannot fail since it should be small or unbounded",
        );
}

/// This is the standard API that all inner system state object type should
/// implement.
#[enum_dispatch]
pub trait IotaSystemStateTrait {
    fn epoch(&self) -> u64;
    fn reference_gas_price(&self) -> u64;
    fn protocol_version(&self) -> u64;
    fn system_state_version(&self) -> u64;
    fn epoch_start_timestamp_ms(&self) -> u64;
    fn epoch_duration_ms(&self) -> u64;
    fn safe_mode(&self) -> bool;
    fn advance_epoch_safe_mode(&mut self, params: &AdvanceEpochParams);
    fn get_current_epoch_committee(&self) -> CommitteeWithNetworkMetadata;
    fn get_pending_active_validators<S: ObjectStore + ?Sized>(
        &self,
        object_store: &S,
    ) -> Result<Vec<IotaValidatorSummary>, IotaError>;
    #[cfg(not(target_arch = "wasm32"))]
    fn into_epoch_start_state(self) -> EpochStartSystemState;
    fn into_iota_system_state_summary(self) -> IotaSystemStateSummary;
}

/// IotaSystemState provides an abstraction over multiple versions of the inner
/// IotaSystemStateInner object. This should be the primary interface to the
/// system state object in Rust. We use enum dispatch to dispatch all methods
/// defined in IotaSystemStateTrait to the actual implementation in the inner
/// types.
#[derive(Debug, Serialize, Deserialize, Clone, Eq, PartialEq)]
#[enum_dispatch(IotaSystemStateTrait)]
pub enum IotaSystemState {
    V1(IotaSystemStateV1),
    V2(IotaSystemStateV2),
    #[cfg(msim)]
    SimTestV1(SimTestIotaSystemStateV1),
    #[cfg(msim)]
    SimTestShallowV1(SimTestIotaSystemStateShallowV1),
    #[cfg(msim)]
    SimTestDeepV1(SimTestIotaSystemStateDeepV1),
}

/// This is the fixed type used by genesis.
pub type IotaSystemStateInnerGenesis = IotaSystemStateV1;
pub type IotaValidatorGenesis = ValidatorV1;

impl IotaSystemState {
    /// Always return the version that we will be using for genesis.
    /// Genesis always uses this version regardless of the current version.
    /// Note that since it's possible for the actual genesis of the network to
    /// diverge from the genesis of the latest Rust code, it's important
    /// that we only use this for tooling purposes.
    pub fn into_genesis_version_for_tooling(self) -> IotaSystemStateInnerGenesis {
        match self {
            IotaSystemState::V1(inner) => inner,
            // Types other than V1 should be unreachable
            _ => unreachable!(),
        }
    }

    pub fn version(&self) -> u64 {
        self.system_state_version()
    }

    /// Build a minimal `IotaSystemState::V1` whose only meaningful fields are
    /// `epoch` and `protocol_version`. Everything else is zeroed/defaulted.
    /// Intended for test fixtures that need a structurally valid system
    /// state to exercise BCS round-trip paths.
    pub fn for_testing(epoch: u64, protocol_version: u64) -> Self {
        use iota_sdk_move_types::{
            iota_framework::{
                bag::Bag, object::UID, system_admin_cap::IotaSystemAdminCap, table::Table,
                table_vec::TableVec, vec_map::VecMap,
            },
            iota_system::iota_system_state_inner::SystemParametersV1,
        };
        use iota_sdk_types::ObjectId;

        use crate::{
            balance::{Balance, Supply},
            coin::TreasuryCap,
            gas_coin::IotaTreasuryCap,
            iota_system_state::iota_system_state_inner_v1::{
                IotaSystemStateV1, StorageFundV1, ValidatorSetV1,
            },
        };
        IotaSystemState::V1(IotaSystemStateV1 {
            epoch,
            protocol_version,
            system_state_version: 1,
            iota_treasury_cap: IotaTreasuryCap {
                inner: TreasuryCap {
                    id: UID::new(ObjectId::ZERO),
                    total_supply: Supply { value: 0 },
                },
            },
            validators: ValidatorSetV1 {
                total_stake: 0,
                active_validators: Vec::new(),
                pending_active_validators: TableVec::new(Table::new(ObjectId::ZERO.into(), 0)),
                pending_removals: Vec::new(),
                staking_pool_mappings: Table::new(ObjectId::ZERO.into(), 0),
                inactive_validators: Table::new(ObjectId::ZERO.into(), 0),
                validator_candidates: Table::new(ObjectId::ZERO.into(), 0),
                at_risk_validators: VecMap {
                    contents: Vec::new(),
                },
                extra_fields: Bag::new(ObjectId::ZERO.into(), 0),
            },
            storage_fund: StorageFundV1 {
                total_object_storage_rebates: Balance::new(0),
                non_refundable_balance: Balance::new(0),
            },
            parameters: SystemParametersV1 {
                epoch_duration_ms: 0,
                min_validator_count: 0,
                max_validator_count: 0,
                min_validator_joining_stake: 0,
                validator_low_stake_threshold: 0,
                validator_very_low_stake_threshold: 0,
                validator_low_stake_grace_period: 0,
                extra_fields: Bag::new(ObjectId::ZERO.into(), 0),
            },
            iota_system_admin_cap: IotaSystemAdminCap::default(),
            reference_gas_price: 0,
            validator_report_records: VecMap {
                contents: Vec::new(),
            },
            safe_mode: false,
            safe_mode_storage_charges: Balance::new(0),
            safe_mode_computation_rewards: Balance::new(0),
            safe_mode_storage_rebates: 0,
            safe_mode_non_refundable_storage_fee: 0,
            epoch_start_timestamp_ms: 0,
            extra_fields: Bag::new(ObjectId::ZERO.into(), 0),
        })
    }
}

/// The raw system state wrapper object together with the
/// `IotaSystemStateWrapper` decoded from its contents.
fn get_iota_system_state_wrapper_with_object(
    object_store: &dyn ObjectStore,
) -> Result<(Object, IotaSystemStateWrapper), IotaError> {
    let wrapper_object = object_store
        .try_get_object(&ObjectId::SYSTEM_STATE)?
        // Don't panic here on None because object_store is a generic store.
        .ok_or_else(|| {
            IotaError::IotaSystemStateRead("IotaSystemStateWrapper object not found".to_owned())
        })?;
    let move_object = wrapper_object.data.as_opt_struct().ok_or_else(|| {
        IotaError::IotaSystemStateRead(
            "IotaSystemStateWrapper object must be a Move object".to_owned(),
        )
    })?;
    let wrapper = bcs::from_bytes::<IotaSystemStateWrapper>(move_object.contents())
        .map_err(|err| IotaError::IotaSystemStateRead(err.to_string()))?;
    Ok((wrapper_object, wrapper))
}

pub fn get_iota_system_state_wrapper(
    object_store: &dyn ObjectStore,
) -> Result<IotaSystemStateWrapper, IotaError> {
    Ok(get_iota_system_state_wrapper_with_object(object_store)?.1)
}

pub fn get_iota_system_state(object_store: &dyn ObjectStore) -> Result<IotaSystemState, IotaError> {
    let wrapper = get_iota_system_state_wrapper(object_store)?;
    let id = wrapper.id.id.bytes;
    match wrapper.version {
        1 => {
            let result: IotaSystemStateV1 =
                get_dynamic_field_from_store(object_store, id, &wrapper.version).map_err(
                    |err| {
                        IotaError::DynamicFieldRead(format!(
                            "Failed to load iota system state inner object with ID {:?} and version {:?}: {:?}",
                            id, wrapper.version, err
                        ))
                    },
                )?;
            Ok(IotaSystemState::V1(result))
        }
        2 => {
            let result: IotaSystemStateV2 =
                get_dynamic_field_from_store(object_store, id, &wrapper.version).map_err(
                    |err| {
                        IotaError::DynamicFieldRead(format!(
                            "Failed to load iota system state inner object with ID {:?} and version {:?}: {:?}",
                            id, wrapper.version, err
                        ))
                    },
                )?;
            Ok(IotaSystemState::V2(result))
        }
        #[cfg(msim)]
        IOTA_SYSTEM_STATE_SIM_TEST_V1 => {
            let result: SimTestIotaSystemStateV1 =
                get_dynamic_field_from_store(object_store, id, &wrapper.version).map_err(
                    |err| {
                        IotaError::DynamicFieldRead(format!(
                            "Failed to load iota system state inner object with ID {:?} and version {:?}: {:?}",
                            id, wrapper.version, err
                        ))
                    },
                )?;
            Ok(IotaSystemState::SimTestV1(result))
        }
        #[cfg(msim)]
        IOTA_SYSTEM_STATE_SIM_TEST_SHALLOW_V1 => {
            let result: SimTestIotaSystemStateShallowV1 =
                get_dynamic_field_from_store(object_store, id, &wrapper.version).map_err(
                    |err| {
                        IotaError::DynamicFieldRead(format!(
                            "Failed to load iota system state inner object with ID {:?} and version {:?}: {:?}",
                            id, wrapper.version, err
                        ))
                    },
                )?;
            Ok(IotaSystemState::SimTestShallowV1(result))
        }
        #[cfg(msim)]
        IOTA_SYSTEM_STATE_SIM_TEST_DEEP_V1 => {
            let result: SimTestIotaSystemStateDeepV1 =
                get_dynamic_field_from_store(object_store, id, &wrapper.version).map_err(
                    |err| {
                        IotaError::DynamicFieldRead(format!(
                            "Failed to load iota system state inner object with ID {:?} and version {:?}: {:?}",
                            id, wrapper.version, err
                        ))
                    },
                )?;
            Ok(IotaSystemState::SimTestDeepV1(result))
        }
        _ => Err(IotaError::IotaSystemStateRead(format!(
            "Unsupported IotaSystemState version: {}",
            wrapper.version
        ))),
    }
}

/// The two objects `get_iota_system_state` reads to decode the system state:
/// the raw system state wrapper object and its inner system-state object. These
/// two fully determine the state, so none of the per-validator objects the
/// epoch-change tx also writes are needed. Returned as raw `Object`s so a
/// caller can persist the exact bytes their `ObjectDigest`s commit to.
pub fn get_iota_system_state_objects(
    object_store: &dyn ObjectStore,
) -> Result<[Object; 2], IotaError> {
    let (wrapper_object, wrapper) = get_iota_system_state_wrapper_with_object(object_store)?;
    // Same derivation as `get_iota_system_state`, so this can never select a
    // different inner object than the one that decodes the state.
    let inner_object =
        get_dynamic_field_object_from_store(object_store, wrapper.id.id.bytes, &wrapper.version)?;
    Ok([wrapper_object, inner_object])
}

/// Given a system state type version, and the ID of the table, along with a
/// key, retrieve the dynamic field as a Validator type. We need the version to
/// determine which inner type to use for the Validator type. This is assuming
/// that the validator is stored in the table as Validator type.
pub fn get_validator_from_table<K>(
    object_store: &dyn ObjectStore,
    table_id: ObjectId,
    key: &K,
    protocol_version: Option<u64>,
) -> Result<IotaValidatorSummary, IotaError>
where
    K: MoveTypeTagTrait + Serialize + DeserializeOwned + fmt::Debug,
{
    let wrapper: Validator =
        get_dynamic_field_from_store(object_store, table_id, key).map_err(|err| {
            IotaError::IotaSystemStateRead(format!(
                "Failed to load validator wrapper from table: {err:?}"
            ))
        })?;
    validator_summary_from_wrapper(object_store, wrapper, protocol_version)
}

/// The summary of the validator a table's `Validator` wrapper holds, for a
/// caller that has already read the wrapper; as [`get_validator_from_table`]
/// otherwise.
pub fn validator_summary_from_wrapper(
    object_store: &dyn ObjectStore,
    wrapper: Validator,
    protocol_version: Option<u64>,
) -> Result<IotaValidatorSummary, IotaError> {
    let versioned = wrapper.inner;
    let version = versioned.version;
    match version {
        1 => {
            let validator: ValidatorV1 =
                get_dynamic_field_from_store(object_store, versioned.id.id.bytes, &version)
                    .map_err(|err| {
                        IotaError::IotaSystemStateRead(format!(
                            "Failed to load inner validator from the wrapper: {err:?}"
                        ))
                    })?;
            Ok(validator.into_iota_validator_summary(protocol_version))
        }
        #[cfg(msim)]
        IOTA_SYSTEM_STATE_SIM_TEST_V1 => {
            let validator: SimTestValidatorV1 =
                get_dynamic_field_from_store(object_store, versioned.id.id.bytes, &version)
                    .map_err(|err| {
                        IotaError::IotaSystemStateRead(format!(
                            "Failed to load inner validator from the wrapper: {err:?}"
                        ))
                    })?;
            Ok(validator.into_iota_validator_summary())
        }
        #[cfg(msim)]
        IOTA_SYSTEM_STATE_SIM_TEST_DEEP_V1 => {
            let validator: SimTestValidatorDeepV1 =
                get_dynamic_field_from_store(object_store, versioned.id.id.bytes, &version)
                    .map_err(|err| {
                        IotaError::IotaSystemStateRead(format!(
                            "Failed to load inner validator from the wrapper: {err:?}"
                        ))
                    })?;
            Ok(validator.into_iota_validator_summary())
        }
        _ => Err(IotaError::IotaSystemStateRead(format!(
            "Unsupported Validator version: {version}"
        ))),
    }
}

pub fn get_validators_from_table_vec<S, ValidatorType>(
    object_store: &S,
    table_id: ObjectId,
    table_size: u64,
) -> Result<Vec<ValidatorType>, IotaError>
where
    S: ObjectStore + ?Sized,
    ValidatorType: Serialize + DeserializeOwned,
{
    let mut validators = vec![];
    for i in 0..table_size {
        let validator: ValidatorType = get_dynamic_field_from_store(&object_store, table_id, &i)
            .map_err(|err| {
                IotaError::IotaSystemStateRead(format!(
                    "Failed to load validator from table: {err:?}"
                ))
            })?;
        validators.push(validator);
    }
    Ok(validators)
}

#[derive(Debug, Serialize, Deserialize, Clone, Eq, PartialEq, Default)]
pub struct PoolTokenExchangeRate {
    iota_amount: u64,
    pool_token_amount: u64,
}

impl PoolTokenExchangeRate {
    /// Rate of the staking pool, pool token amount : IOTA amount
    pub fn rate(&self) -> f64 {
        if self.iota_amount == 0 {
            1_f64
        } else {
            self.pool_token_amount as f64 / self.iota_amount as f64
        }
    }

    pub fn new_for_testing(iota_amount: u64, pool_token_amount: u64) -> Self {
        Self {
            iota_amount,
            pool_token_amount,
        }
    }
}

#[derive(Debug)]
pub struct AdvanceEpochParams {
    pub epoch: u64,
    pub next_protocol_version: ProtocolVersion,
    pub validator_subsidy: u64,
    pub storage_charge: u64,
    pub computation_charge: u64,
    pub computation_charge_burned: u64,
    pub storage_rebate: u64,
    pub non_refundable_storage_fee: u64,
    pub reward_slashing_rate: u64,
    pub epoch_start_timestamp_ms: u64,
    pub max_committee_members_count: u64,
    pub eligible_active_validators: Vec<u64>,
    pub scores: Vec<u64>,
    pub adjust_rewards_by_score: bool,
}

#[cfg(msim)]
pub mod advance_epoch_result_injection {
    use std::cell::RefCell;

    use crate::{
        committee::EpochId,
        error::{ExecutionError, ExecutionErrorKind},
        execution::ResultWithTimings,
    };

    thread_local! {
        /// Override the result of advance_epoch in the range [start, end).
        static OVERRIDE: RefCell<Option<(EpochId, EpochId)>>  = const { RefCell::new(None) };
    }

    /// Override the result of advance_epoch transaction if new epoch is in the
    /// provided range [start, end).
    pub fn set_override(value: Option<(EpochId, EpochId)>) {
        OVERRIDE.with(|o| *o.borrow_mut() = value);
    }

    /// This function is used to modify the result of advance_epoch transaction
    /// for testing. If the override is set, the result will be an execution
    /// error, otherwise the original result will be returned.
    pub fn maybe_modify_result(
        result: ResultWithTimings<(), ExecutionError>,
        current_epoch: EpochId,
    ) -> ResultWithTimings<(), ExecutionError> {
        if let Some((start, end)) = OVERRIDE.with(|o| *o.borrow()) {
            if current_epoch >= start && current_epoch < end {
                return Err((
                    ExecutionError::new(ExecutionErrorKind::FunctionNotFound, None),
                    vec![],
                ));
            }
        }
        result
    }
}