blind-peer 0.0.3 → 2.7.4

package/index.js

@@ -1,137 +1,475 @@
-const AutobaseLightWriter = require('autobase-light-writer')
-const HyperDB = require('hyperdb')
 const Corestore = require('corestore')
-const definition = require('./spec/hyperdb')
-const schema = require('./spec/hyperschema')
-const path = require('path')
+const Hypercore = require('hypercore')
+const RocksDB = require('rocksdb-native')
+const ReadyResource = require('ready-resource')
 const Hyperswarm = require('hyperswarm')
 const ProtomuxRPC = require('protomux-rpc')
 const c = require('compact-encoding')
+const b4a = require('b4a')
+const crypto = require('hypercore-crypto')
+const safetyCatch = require('safety-catch')
+const Wakeup = require('protomux-wakeup')
+const ScopeLock = require('scope-lock')
+const IdEnc = require('hypercore-id-encoding')
 
-module.exports = class BlindPeer {
-  constructor (storage) {
-    this.db = HyperDB.rocks(path.join(storage, 'hyperdb'), definition)
-    this.store = new Corestore(path.join(storage, 'corestore'))
-    this.store.on('core-open', this._oncoreopen.bind(this))
-    this.swarm = null
+const BlindPeerDB = require('./lib/db.js')
+
+const { AddCoreEncoding } = require('blind-peer-encodings')
+
+class CoreTracker {
+  constructor (blindPeer, core) {
+    this.blindPeer = blindPeer
+    this.core = core
+    this.destroyed = false
+    this.record = null
+    this.activated = false
+    this.updated = false
+    this.id = null
+    this.referrerDiscoveryKey = null
+    this.channel = null
+    this.downloadRange = null
+    this.announceToReferrerBound = this.announceToReferrer.bind(this)
+
+    const onupdate = this._onupdate.bind(this)
+    const onactive = this._onactive.bind(this)
+
+    this.core.on('upload', onactive)
+    this.core.on('download', onactive)
+    this.core.on('truncate', onupdate)
+    this.core.on('append', onupdate)
   }
 
-  _onconnection (connection) {
-    this.store.replicate(connection)
+  _onupdate () {
+    this.updated = true
+    if (!this.record) return
 
-    const rpc = new ProtomuxRPC(connection, {
-      id: this.swarm.keyPair.publicKey,
-      valueEncoding: c.none
-    })
+    this.record.length = this.core.length
+    this.record.bytesAllocated = this.core.byteLength - this.record.bytesCleared
+    this.blindPeer.db.updateCore(this.record, this.id)
+    this.blindPeer.flush().then(this.announceToReferrerBound, safetyCatch)
+  }
+
+  _onactive () {
+    this.activated = true
+
+    if (this.record) {
+      this.blindPeer.db.updateCore(this.record, this.id)
+    }
+
+    this.blindPeer.emit('core-activity', this.core, this.record)
+  }
+
+  gc () { // TODO: support gc-ing till less than last block (required hypercore to support getting byteLength at arbitrary versions)
+    const bytesCleared = this.core.byteLength
+    const blocksCleared = this.core.length
+    this.record.bytesAllocated = this.core.byteLength - bytesCleared
+    this.record.blocksCleared = blocksCleared
+    this.record.bytesCleared = bytesCleared
+
+    if (this.downloadRange) this.downloadRange.destroy()
+    this.downloadRange = this.core.download({ start: this.record.blocksCleared, end: -1 })
+
+    this.core.clear(0, blocksCleared).catch(safetyCatch)
+    this.blindPeer.db.updateCore(this.record, this.id)
 
-    rpc.respond('add-mailbox', {
-      requestEncoding: schema.resolveStruct('@blind-peer/request-mailbox'),
-      responseEncoding: schema.resolveStruct('@blind-peer/response-mailbox')
-    }, this._onrpcadd.bind(this))
+    return bytesCleared
+  }
+
+  async refresh () {
+    await this.core.ready()
+    if (this.destroyed) return
+
+    this.id = this.core.id
+    this.channel = 'hypercore/alpha##' + b4a.toString(this.core.discoveryKey, 'hex')
+
+    const record = await this.blindPeer.db.get('@blind-peer/cores', { key: this.core.key })
+    if (this.destroyed || this.record || !record) return
 
-    rpc.respond('post', {
-      requestEncoding: schema.resolveStruct('@blind-peer/request-post'),
-      responseEncoding: schema.resolveStruct('@blind-peer/response-post')
-    }, this._onrpcpost.bind(this))
+    this.record = record
+    this.core.download({ start: this.record.blocksCleared, end: -1 })
+
+    if (this.updated) this._onupdate()
+    if (this.activated) this._onactive()
   }
 
-  async _onrpcadd (req) {
-    const res = await this.add(req)
+  announceToReferrer () {
+    if (!this.record || !this.record.referrer) return
+    if (!this.referrerDiscoveryKey) this.referrerDiscoveryKey = crypto.discoveryKey(this.record.referrer)
+
+    const sessions = this.blindPeer.wakeup.getSessions(null, { discoveryKey: this.referrerDiscoveryKey })
+    if (sessions.length === 0) return
+
+    const wakeup = [{ key: this.core.key, length: this.core.length }]
+
+    for (const s of sessions) {
+      for (const peer of s.peers) {
+        const mux = peer.stream.userData
 
-    return {
-      autobase: res.autobase,
-      writer: res.writer,
-      open: !!res.blockEncryptionKey // TODO: get rid of the encryption for these guys with a manifest upgrade, then no attacks cause self-described
+        // already replicating with that peer
+        if (mux._infos.get(this.channel)) {
+          continue
+        }
+
+        s.announceByStream(peer.stream, wakeup)
+      }
     }
   }
 
-  async _onrpcpost (req) {
-    return await this.post(req)
+  destroy () {
+    if (this.destroyed) return
+    this.destroyed = true
+  }
+}
+
+class WakeupHandler {
+  constructor (db, key, discoveryKey) {
+    this.db = db
+    this.key = key
+    this.discoveryKey = discoveryKey
+    this.active = false
   }
 
-  async _oncoreopen (core) {
+  async onpeeractive (peer, session) {
+    const referrer = this.key
+    const query = {
+      gte: { referrer },
+      lte: { referrer },
+      reverse: true,
+      limit: 32
+    }
+
     try {
-      const entry = await this.db.get('@blind-peer/mailbox', { autobase: core.key })
-      if (!entry || !entry.blockEncryptionKey) return
+      const latest = await this.db.find('@blind-peer/cores-by-referrer', query).toArray()
+      if (peer.removed) return
+      session.announce(peer, latest)
+    } catch {
+      // do nothing
+    }
+  }
+}
 
-      const w = new AutobaseLightWriter(this.store.namespace(entry.autobase), entry.autobase, {
-        active: false,
-        blockEncryptionKey: entry.blockEncryptionKey
-      })
+class BlindPeer extends ReadyResource {
+  constructor (rocks, { swarm, store, wakeup, maxBytes = 100_000_000_000, enableGc = true, trustedPubKeys, port } = {}) {
+    super()
 
-      for (const peer of core.peers) {
-        w.local.replicate(peer.stream)
-      }
+    this.rocks = typeof rocks === 'string' ? new RocksDB(rocks) : rocks
+    this.store = store || new Corestore(this.rocks, { active: false })
+    this.swarm = swarm || null
+    this._port = port || null
+    this.trustedPubKeys = new Set()
+    for (const k of trustedPubKeys || []) this.addTrustedPubKey(k)
 
-      core.on('peer-add', (peer) => {
-        w.local.replicate(peer.stream)
-      })
+    this.wakeup = wakeup || new Wakeup(this._onwakeup.bind(this))
+    this.ownsWakeup = !wakeup
+    this.ownsSwarm = !swarm
+    this.ownsStore = !store
+    this.db = null
+    this.activeReplication = new Map()
+    this.activeWakeup = new Map()
+    this.flushInterval = null
+    this.maxBytes = maxBytes
+    this.enableGc = enableGc
+    this.lock = new ScopeLock({ debounce: true })
+    this.announcedCores = new Map()
 
-      core.on('close', () => {
-        w.close().catch(noop)
-      })
-    } catch (err) {
-      console.log(err)
+    this.stats = {
+      bytesGcd: 0,
+      coresAdded: 0
     }
   }
 
+  get encryptionPublicKey () {
+    return this.db.encryptionKeyPair.publicKey
+  }
+
   get publicKey () {
-    return this.swarm.server.publicKey
+    return this.swarm.keyPair.publicKey
   }
 
-  async listen ({ bootstrap } = {}) {
-    this.swarm = new Hyperswarm({
-      keyPair: await this.store.createKeyPair('blind-mailbox'),
-      bootstrap
-    })
+  get digest () {
+    return this.db.digest
+  }
+
+  addTrustedPubKey (key) {
+    this.trustedPubKeys.add(IdEnc.normalize(key))
+  }
+
+  _isTrustedPeer (key) {
+    return this.trustedPubKeys.has(IdEnc.normalize(key))
+  }
+
+  async _open () {
+    await this.store.ready()
+    // legacy, we can remove once current ones are upgraded
+    const { secretKey } = await this.store.createKeyPair('blind-mirror-swarm')
+    this.db = new BlindPeerDB(this.rocks.session(), { swarming: secretKey.subarray(0, 32), encryption: null })
+    await this.db.ready()
+
+    if (this.swarm === null) {
+      const swarmOpts = { keyPair: this.db.swarmingKeyPair }
+      if (this._port) swarmOpts.port = this._port
+      this.swarm = new Hyperswarm(swarmOpts)
+    }
     this.swarm.on('connection', this._onconnection.bind(this))
+
+    const announceProms = []
+    for await (const record of this.db.createAnnouncingCoresStream()) {
+      announceProms.push(this._announceCore(record.key))
+    }
+    await Promise.all(announceProms)
+
+    this.store.watch(this._oncoreopen.bind(this))
+
+    this.flushInterval = setInterval(this.flush.bind(this), 10_000)
+  }
+
+  async _onwakeup (discoveryKey, muxer) {
+    const auth = await this.store.storage.getAuth(discoveryKey)
+    if (!auth) return
+
+    const stream = muxer.stream
+    const handler = new WakeupHandler(this.db, auth.key, discoveryKey)
+    const w = this.wakeup.session(auth.key, handler)
+
+    if (w.getPeer(stream)) {
+      w.destroy()
+      return
+    }
+
+    w.addStream(stream)
+
+    for (const peer of w.peers) {
+      if (peer.active) handler.onpeeractive(peer, w)
+    }
+
+    stream.setMaxListeners(0)
+    stream.once('close', () => w.destroy())
+  }
+
+  async listen () {
+    if (!this.opened) await this.ready()
     return this.swarm.listen()
   }
 
-  async get ({ autobase }) {
-    return await this.db.get('@blind-peer/mailbox', { autobase })
+  needsGc () {
+    return this.digest.bytesAllocated >= this.maxBytes
   }
 
-  async add ({ autobase, blockEncryptionKey = null }) {
-    const prev = await this.db.get('@blind-peer/mailbox', { autobase })
+  async _gc () { // Do not call directly (assumes lock)
+    if (!this.needsGc()) return
+
+    const bytesToClear = this.digest.bytesAllocated - this.maxBytes
+    let bytesCleared = 0
+    this.emit('gc-start', { bytesToClear })
+
+    for await (const record of this.db.createGcCandidateReadStream()) {
+      if (this.closing) return
+      if (bytesCleared >= bytesToClear) break
+      if (record.bytesAllocated === 0) continue
+      if (record.announce) continue // We never clear these ATM, since we do no book keeping on the cleared length of announced  cores
 
-    if (prev) {
-      if (prev.blockEncryptionKey) return prev
-      prev.blockEncryptionKey = blockEncryptionKey
-      await this.db.insert('@blind-peer/mailbox', prev)
-      await this.db.flush()
-      return prev
+      const { key } = record
+
+      // Explicitly opening the core ensures an active replication
+      // session exists
+      const core = this.store.get({ key })
+      await core.ready()
+      if (this.closing) return
+      const id = b4a.toString(core.discoveryKey, 'hex')
+
+      try {
+        const tracker = this.activeReplication.get(id)
+        const coreBytesCleared = tracker.gc()
+        bytesCleared += coreBytesCleared
+      } finally {
+        await core.close().catch(safetyCatch)
+      }
     }
 
-    const w = new AutobaseLightWriter(this.store.namespace(autobase), autobase, { active: false })
-    await w.ready()
-    const entry = { autobase, writer: w.local.key, blockEncryptionKey }
-    await this.db.insert('@blind-peer/mailbox', entry)
     await this.db.flush()
-    await w.close()
+    if (this.closing) return
+    this.stats.bytesGcd += bytesCleared
+    this.emit('gc-done', { bytesCleared })
+  }
+
+  _onreferrerupdates (updates) {
+    const pending = new Set()
+
+    for (const u of updates) {
+      const id = b4a.toString(u.referrer, 'hex')
+      const w = this.activeWakeup.get(id)
+      if (!w) continue
+
+      w.queued.push(u)
+      pending.add(w)
+    }
+
+    for (const w of pending) {
+      w.flush()
+    }
+  }
+
+  _oncoreopen (core) {
+    const session = new Hypercore({ core, weak: true })
+    const id = b4a.toString(core.discoveryKey, 'hex')
+    const tracker = new CoreTracker(this, session)
+
+    this.activeReplication.set(id, tracker)
+    tracker.refresh().catch(safetyCatch)
+
+    session.on('close', () => {
+      tracker.destroy()
+      if (this.activeReplication.get(id) === tracker) {
+        this.activeReplication.delete(id)
+      }
+    })
+  }
+
+  async flush () { // not allowed to throw
+    if (!(await this.lock.lock())) return
+    try {
+      if (this.enableGc && this.needsGc()) await this._gc()
+      if (this.db.updated()) await this.db.flush()
+    } catch (e) {
+      safetyCatch(e)
+    } finally {
+      this.lock.unlock()
+    }
+  }
+
+  _onconnection (conn) {
+    if (this.closing) {
+      conn.destroy()
+      return
+    }
+
+    if (this.ownsStore) this.store.replicate(conn)
+    if (this.ownsWakeup) this.wakeup.addStream(conn)
+
+    const rpc = new ProtomuxRPC(conn, {
+      id: this.swarm.keyPair.publicKey,
+      valueEncoding: c.none
+    })
+
+    rpc.respond('add-core', AddCoreEncoding, this._onaddcore.bind(this, conn))
+  }
+
+  async _activateCore (stream, record) {
+    const core = this.store.get({ key: record.key })
+    await core.ready()
 
-    return entry
+    const tracker = this.activeReplication.get(b4a.toString(core.discoveryKey, 'hex'))
+    if (tracker && !tracker.record) await tracker.refresh()
+
+    if (record.announce) {
+      await this._announceCore(core.key)
+    }
+
+    if (stream.destroying) {
+      await core.close()
+      return
+    }
+
+    core.replicate(stream)
+    stream.on('close', () => core.close().catch(safetyCatch))
   }
 
-  async post ({ autobase, message }) {
-    const entry = await this.db.get('@blind-peer/mailbox', { autobase })
-    if (!entry || !entry.blockEncryptionKey) return false
+  async _announceCore (key) {
+    const coreId = IdEnc.normalize(key)
+    if (this.announcedCores.has(coreId)) return
+
+    const core = this.store.get({ key })
+    this.announcedCores.set(coreId, core)
 
-    const w = new AutobaseLightWriter(this.store.namespace(autobase), autobase, {
-      active: false,
-      blockEncryptionKey: entry.blockEncryptionKey
+    core.on('append', () => {
+      this.emit('core-append', core)
+    })
+    core.on('download', () => {
+      if (core.length === core.contiguousLength) {
+        this.emit('core-downloaded', core)
+      }
     })
-    await w.append(message)
-    const length = w.local.length
-    await w.close()
 
-    return { length }
+    await core.ready()
+    this.swarm.join(core.discoveryKey, { server: true, client: false })
+
+    // WARNING: we do not yet handle the case where
+    // data of an announced core is cleared
+    core.download({ start: 0, end: -1 })
+
+    this.emit('announce-core', core)
   }
 
-  async close () {
-    if (this.swarm !== null) await this.swarm.destroy()
-    await this.store.close()
+  async _onaddcore (stream, record) {
+    if (!this.opened) await this.ready()
+
+    record.priority = Math.min(record.priority, 1) // 2 is reserved for trusted peers
+    if (record.announce !== false && !this._isTrustedPeer(stream.remotePublicKey)) {
+      this.emit('downgrade-announce', { record, remotePublicKey: stream.remotePublicKey })
+      record.announce = false
+    }
+
+    this.db.addCore(record)
+    await this.flush() // flush now as important data
+
+    if (record.referrer) {
+      // ensure referrer is allocated...
+      // TODO: move to a dedicated wakeup collection, insted of using a core since we moved away from that
+      // still works atm, cause dkey
+      const muxer = stream.userData
+      const core = this.store.get({ key: record.referrer })
+      await core.ready()
+      const discoveryKey = core.discoveryKey
+      await core.close()
+
+      await this._onwakeup(discoveryKey, muxer)
+    }
+
+    this.stats.coresAdded++
+    this.emit('add-core', record, true)
+
+    await this._activateCore(stream, record)
+
+    const coreRecord = await this.db.getCoreRecord(record.key)
+    return coreRecord
+  }
+
+  async _close () {
+    clearInterval(this.flushInterval)
+    if (this.ownsWakeup) this.wakeup.destroy()
+    if (this.ownsSwarm) await this.swarm.destroy()
+    await this.flush()
+    await this.db.close()
+    if (this.ownsStore) await this.store.close()
+    await this.rocks.close()
+  }
+
+  registerMetrics (promClient) {
+    const self = this
+    new promClient.Gauge({ // eslint-disable-line no-new
+      name: 'blind_peer_bytes_allocated',
+      help: 'The amount of bytes allocated by the hyperdb (as reported in its digest)',
+      collect () {
+        this.set(self.digest.bytesAllocated)
+      }
+    })
+
+    new promClient.Gauge({ // eslint-disable-line no-new
+      name: 'blind_peer_cores_added',
+      help: 'The total amount of add-core RPC requests that have been processed',
+      collect () {
+        this.set(self.stats.coresAdded)
+      }
+    })
+
+    new promClient.Gauge({ // eslint-disable-line no-new
+      name: 'blind_peer_bytes_gcd',
+      help: 'The total amount of bytes garbage collected since the process started',
+      collect () {
+        this.set(self.stats.bytesGcd)
+      }
+    })
   }
 }
 
-function noop () {}
+module.exports = BlindPeer