hotshot_task_impls/quorum_vote/

handlers.rs

// Copyright (c) 2021-2024 Espresso Systems (espressosys.com)
// This file is part of the HotShot repository.

// You should have received a copy of the MIT License
// along with the HotShot repository. If not, see <https://mit-license.org/>.

use std::{sync::Arc, time::Instant};

use async_broadcast::{InactiveReceiver, Sender};
use chrono::Utc;
use committable::Committable;
use hotshot_contract_adapter::light_client::derive_signed_state_digest;
use hotshot_types::{
    consensus::OuterConsensus,
    data::{EpochNumber, Leaf2, QuorumProposalWrapper, VidDisperseShare, ViewNumber},
    drb::INITIAL_DRB_RESULT,
    epoch_membership::{EpochMembership, EpochMembershipCoordinator},
    event::{Event, EventType},
    message::{Proposal, UpgradeLock},
    simple_vote::{EpochRootQuorumVote2, LightClientStateUpdateVote2, QuorumData2, QuorumVote2},
    stake_table::HSStakeTable,
    storage_metrics::StorageMetricsValue,
    traits::{
        ValidatedState,
        block_contents::BlockHeader,
        election::Membership,
        node_implementation::{NodeImplementation, NodeType},
        signature_key::{
            LCV2StateSignatureKey, LCV3StateSignatureKey, SignatureKey, StateSignatureKey,
        },
        storage::Storage,
    },
    utils::{epoch_from_block_number, is_epoch_transition, is_last_block, is_transition_block},
    vote::HasViewNumber,
};
use hotshot_utils::anytrace::*;
use tracing::instrument;
use versions::EPOCH_VERSION;

use super::QuorumVoteTaskState;
use crate::{
    events::HotShotEvent,
    helpers::{
        LeafChainTraversalOutcome, broadcast_event, decide_from_proposal, decide_from_proposal_2,
        fetch_proposal, handle_drb_result,
    },
};

/// Store the DRB result for the next epoch if we received it in a decided leaf.
async fn store_drb_result<TYPES: NodeType, I: NodeImplementation<TYPES>>(
    task_state: &mut QuorumVoteTaskState<TYPES, I>,
    decided_leaf: &Leaf2<TYPES>,
) -> Result<()> {
    if task_state.epoch_height == 0 {
        tracing::info!("Epoch height is 0, skipping DRB storage.");
        return Ok(());
    }

    let decided_block_number = decided_leaf.block_header().block_number();
    let current_epoch_number = EpochNumber::new(epoch_from_block_number(
        decided_block_number,
        task_state.epoch_height,
    ));
    // Skip storing the received result if this is not the transition block.
    if is_transition_block(decided_block_number, task_state.epoch_height) {
        if let Some(result) = decided_leaf.next_drb_result {
            // We don't need to check value existence and consistency because it should be
            // impossible to decide on a block with different DRB results.
            handle_drb_result::<TYPES, I>(
                task_state.membership.membership(),
                current_epoch_number + 1,
                &task_state.storage,
                result,
            )
            .await;
        } else {
            bail!("The last block of the epoch is decided but doesn't contain a DRB result.");
        }
    }
    Ok(())
}

/// Handles the `QuorumProposalValidated` event.
#[instrument(skip_all, fields(id = task_state.id, view = *proposal.view_number()))]
pub(crate) async fn handle_quorum_proposal_validated<
    TYPES: NodeType,
    I: NodeImplementation<TYPES>,
>(
    proposal: &QuorumProposalWrapper<TYPES>,
    task_state: &mut QuorumVoteTaskState<TYPES, I>,
    event_sender: &Sender<Arc<HotShotEvent<TYPES>>>,
) -> Result<()> {
    let version = task_state.upgrade_lock.version(proposal.view_number())?;

    let LeafChainTraversalOutcome {
        new_locked_view_number,
        new_decided_view_number,
        committing_qc,
        deciding_qc,
        leaf_views,
        included_txns,
        decided_upgrade_cert,
    } = if version >= EPOCH_VERSION {
        // Skip the decide rule for the last block of the epoch.  This is so
        // that we do not decide the block with epoch_height -2 before we enter the new epoch
        if !is_last_block(
            proposal.block_header().block_number(),
            task_state.epoch_height,
        ) {
            decide_from_proposal_2::<TYPES, I>(
                proposal,
                OuterConsensus::new(Arc::clone(&task_state.consensus.inner_consensus)),
                &task_state.upgrade_lock,
                &task_state.public_key,
                version >= EPOCH_VERSION,
                &task_state.membership,
                &task_state.storage,
            )
            .await
        } else {
            LeafChainTraversalOutcome::default()
        }
    } else {
        decide_from_proposal::<TYPES, I>(
            proposal,
            OuterConsensus::new(Arc::clone(&task_state.consensus.inner_consensus)),
            &task_state.upgrade_lock,
            &task_state.public_key,
            version >= EPOCH_VERSION,
            &task_state.membership,
            &task_state.storage,
            task_state.epoch_height,
        )
        .await
    };

    if let (Some(cert), Some(_)) = (decided_upgrade_cert.clone(), new_decided_view_number) {
        task_state
            .upgrade_lock
            .set_decided_upgrade_cert(cert.clone());
        if cert.data.new_version >= EPOCH_VERSION
            && task_state.upgrade_lock.upgrade().base < EPOCH_VERSION
        {
            let epoch_height = task_state.consensus.read().await.epoch_height;
            let first_epoch_number = EpochNumber::new(epoch_from_block_number(
                proposal.block_header().block_number(),
                epoch_height,
            ));

            tracing::debug!("Calling set_first_epoch for epoch {first_epoch_number:?}");
            task_state
                .membership
                .membership()
                .set_first_epoch(first_epoch_number, INITIAL_DRB_RESULT);

            broadcast_event(
                Arc::new(HotShotEvent::SetFirstEpoch(
                    cert.data.new_version_first_view,
                    first_epoch_number,
                )),
                event_sender,
            )
            .await;
        }

        for da_committee in &task_state.da_committees {
            if cert.data.new_version >= da_committee.start_version {
                task_state.membership.membership().add_da_committee(
                    da_committee.start_epoch.into(),
                    da_committee.committee.clone(),
                );
            }
        }

        let _ = task_state
            .storage
            .update_decided_upgrade_certificate(Some(cert.clone()))
            .await;
    }

    let mut consensus_writer = task_state.consensus.write().await;
    if let Some(locked_view_number) = new_locked_view_number {
        let _ = consensus_writer.update_locked_view(locked_view_number);
    }

    #[allow(clippy::cast_precision_loss)]
    if let Some(decided_view_number) = new_decided_view_number {
        // Bring in the cleanup crew. When a new decide is indeed valid, we need to clear out old memory.

        let old_decided_view = consensus_writer.last_decided_view();
        consensus_writer.collect_garbage(old_decided_view, decided_view_number);

        // Set the new decided view.
        consensus_writer
            .update_last_decided_view(decided_view_number)
            .context(|e| {
                warn!("`update_last_decided_view` failed; this should never happen. Error: {e}")
            })?;

        consensus_writer
            .metrics
            .last_decided_time
            .set(Utc::now().timestamp().try_into().unwrap());
        consensus_writer.metrics.invalid_qc.set(0);
        consensus_writer
            .metrics
            .last_decided_view
            .set(usize::try_from(consensus_writer.last_decided_view().u64()).unwrap());
        let cur_number_of_views_per_decide_event =
            *proposal.view_number() - consensus_writer.last_decided_view().u64();
        consensus_writer
            .metrics
            .number_of_views_per_decide_event
            .add_point(cur_number_of_views_per_decide_event as f64);
        for leaf in leaf_views.iter().rev() {
            consensus_writer
                .update_participation_from_qc(&leaf.leaf.justify_qc(), &task_state.membership)?;
        }

        // We don't need to hold this while we broadcast
        drop(consensus_writer);

        for leaf_info in &leaf_views {
            tracing::info!(
                "Sending decide for view {:?} at height {:?}",
                leaf_info.leaf.view_number(),
                leaf_info.leaf.block_header().block_number(),
            );
        }

        broadcast_event(
            Arc::new(HotShotEvent::LeavesDecided(
                leaf_views
                    .iter()
                    .map(|leaf_info| leaf_info.leaf.clone())
                    .collect(),
            )),
            event_sender,
        )
        .await;

        // Send an update to everyone saying that we've reached a decide. The committing QC is never
        // none if we've reached a new decide, so this is safe to unwrap.
        let committing_qc = Arc::new(committing_qc.unwrap());
        broadcast_event(
            Event {
                view_number: decided_view_number,
                event: EventType::Decide {
                    leaf_chain: Arc::new(leaf_views.clone()),
                    committing_qc: committing_qc.clone(),
                    deciding_qc: deciding_qc.map(Arc::new),
                    block_size: included_txns.map(|txns| txns.len().try_into().unwrap()),
                },
            },
            &task_state.output_event_stream,
        )
        .await;

        tracing::debug!(
            "Successfully sent decide event, leaf views: {:?}, leaf views len: {:?}, qc view: {:?}",
            decided_view_number,
            leaf_views.len(),
            committing_qc.view_number()
        );

        if version >= EPOCH_VERSION {
            for leaf_view in leaf_views {
                store_drb_result(task_state, &leaf_view.leaf).await?;
            }
        }
    }

    Ok(())
}

/// Updates the shared consensus state with the new voting data.
#[instrument(skip_all, target = "VoteDependencyHandle", fields(view = *view_number))]
#[allow(clippy::too_many_arguments)]
pub(crate) async fn update_shared_state<TYPES: NodeType>(
    consensus: OuterConsensus<TYPES>,
    sender: Sender<Arc<HotShotEvent<TYPES>>>,
    receiver: InactiveReceiver<Arc<HotShotEvent<TYPES>>>,
    membership: EpochMembershipCoordinator<TYPES>,
    public_key: TYPES::SignatureKey,
    private_key: <TYPES::SignatureKey as SignatureKey>::PrivateKey,
    upgrade_lock: UpgradeLock<TYPES>,
    view_number: ViewNumber,
    instance_state: Arc<TYPES::InstanceState>,
    proposed_leaf: &Leaf2<TYPES>,
    vid_share: &Proposal<TYPES, VidDisperseShare<TYPES>>,
    parent_view_number: Option<ViewNumber>,
    epoch_height: u64,
) -> Result<()> {
    let justify_qc = &proposed_leaf.justify_qc();

    let consensus_reader = consensus.read().await;
    // Try to find the validated view within the validated state map. This will be present
    // if we have the saved leaf, but if not we'll get it when we fetch_proposal.
    let mut maybe_validated_view = parent_view_number.and_then(|view_number| {
        consensus_reader
            .validated_state_map()
            .get(&view_number)
            .cloned()
    });

    // Justify qc's leaf commitment should be the same as the parent's leaf commitment.
    let mut maybe_parent = consensus_reader
        .saved_leaves()
        .get(&justify_qc.data.leaf_commit)
        .cloned();

    drop(consensus_reader);

    maybe_parent = match maybe_parent {
        Some(p) => Some(p),
        None => {
            match fetch_proposal(
                justify_qc,
                sender.clone(),
                receiver.activate_cloned(),
                membership.clone(),
                OuterConsensus::new(Arc::clone(&consensus.inner_consensus)),
                public_key.clone(),
                private_key.clone(),
                &upgrade_lock,
                epoch_height,
            )
            .await
            .ok()
            {
                Some((leaf, view)) => {
                    maybe_validated_view = Some(view);
                    Some(leaf)
                },
                None => None,
            }
        },
    };

    let parent = maybe_parent.context(info!(
        "Proposal's parent missing from storage with commitment: {:?}, proposal view {}",
        justify_qc.data.leaf_commit,
        proposed_leaf.view_number(),
    ))?;

    let Some(validated_view) = maybe_validated_view else {
        bail!("Failed to fetch view for parent, parent view {parent_view_number:?}");
    };

    let (Some(parent_state), _) = validated_view.state_and_delta() else {
        bail!("Parent state not found! Consensus internally inconsistent");
    };

    let version = upgrade_lock.version(view_number)?;

    let now = Instant::now();
    let (validated_state, state_delta) = parent_state
        .validate_and_apply_header(
            &instance_state,
            &parent,
            &proposed_leaf.block_header().clone(),
            vid_share.data.payload_byte_len(),
            version,
            *view_number,
        )
        .await
        .wrap()
        .context(warn!("Block header doesn't extend the proposal!"))?;
    let validation_duration = now.elapsed();
    tracing::debug!("Validation time: {validation_duration:?}");

    let now = Instant::now();
    // Now that we've rounded everyone up, we need to update the shared state
    let mut consensus_writer = consensus.write().await;

    if let Err(e) = consensus_writer.update_leaf(
        proposed_leaf.clone(),
        Arc::new(validated_state),
        Some(Arc::new(state_delta)),
    ) {
        tracing::trace!("{e:?}");
    }
    let update_leaf_duration = now.elapsed();

    consensus_writer
        .metrics
        .validate_and_apply_header_duration
        .add_point(validation_duration.as_secs_f64());
    consensus_writer
        .metrics
        .update_leaf_duration
        .add_point(update_leaf_duration.as_secs_f64());
    drop(consensus_writer);
    tracing::debug!("update_leaf time: {update_leaf_duration:?}");

    Ok(())
}

/// Submits the `QuorumVoteSend` event if all the dependencies are met.
#[instrument(skip_all, fields(name = "Submit quorum vote", level = "error"))]
#[allow(clippy::too_many_arguments)]
pub(crate) async fn submit_vote<TYPES: NodeType, I: NodeImplementation<TYPES>>(
    sender: Sender<Arc<HotShotEvent<TYPES>>>,
    membership: EpochMembership<TYPES>,
    public_key: TYPES::SignatureKey,
    private_key: <TYPES::SignatureKey as SignatureKey>::PrivateKey,
    upgrade_lock: UpgradeLock<TYPES>,
    view_number: ViewNumber,
    storage: I::Storage,
    storage_metrics: Arc<StorageMetricsValue>,
    leaf: Leaf2<TYPES>,
    vid_share: Proposal<TYPES, VidDisperseShare<TYPES>>,
    extended_vote: bool,
    epoch_root_vote: bool,
    epoch_height: u64,
    state_private_key: &<TYPES::StateSignatureKey as StateSignatureKey>::StatePrivateKey,
    stake_table_capacity: usize,
) -> Result<()> {
    let committee_member_in_current_epoch = membership.has_stake(&public_key);
    // If the proposed leaf is for the last block in the epoch and the node is part of the quorum committee
    // in the next epoch, the node should vote to achieve the double quorum.
    let committee_member_in_next_epoch = leaf.with_epoch
        && is_epoch_transition(leaf.height(), epoch_height)
        && membership.next_epoch_stake_table()?.has_stake(&public_key);

    ensure!(
        committee_member_in_current_epoch || committee_member_in_next_epoch,
        info!("We were not chosen for quorum committee on {view_number}")
    );

    let height = if membership.epoch().is_some() {
        Some(leaf.height())
    } else {
        None
    };

    // Create and send the vote.
    let vote = QuorumVote2::<TYPES>::create_signed_vote(
        QuorumData2 {
            leaf_commit: leaf.commit(),
            epoch: membership.epoch(),
            block_number: height,
        },
        view_number,
        &public_key,
        &private_key,
        &upgrade_lock,
    )
    .wrap()
    .context(error!("Failed to sign vote. This should never happen."))?;
    let now = Instant::now();
    // Add to the storage.
    storage
        .append_vid(&vid_share)
        .await
        .wrap()
        .context(error!("Failed to store VID share"))?;
    let append_vid_duration = now.elapsed();
    storage_metrics
        .append_vid_duration
        .add_point(append_vid_duration.as_secs_f64());
    tracing::debug!("append_vid_general time: {append_vid_duration:?}");

    // Make epoch root vote

    let epoch_enabled = upgrade_lock.epochs_enabled(view_number);
    if extended_vote && epoch_enabled {
        tracing::debug!("sending extended vote to everybody",);
        broadcast_event(
            Arc::new(HotShotEvent::ExtendedQuorumVoteSend(vote)),
            &sender,
        )
        .await;
    } else if epoch_root_vote && epoch_enabled {
        tracing::debug!(
            "sending epoch root vote to next quorum leader {:?}",
            vote.view_number() + 1
        );
        let light_client_state = leaf
            .block_header()
            .get_light_client_state(view_number)
            .wrap()
            .context(error!("Failed to generate light client state"))?;
        let next_stake_table =
            HSStakeTable::from_iter(membership.next_epoch_stake_table()?.stake_table());
        let next_stake_table_state = next_stake_table
            .commitment(stake_table_capacity)
            .wrap()
            .context(error!("Failed to compute stake table commitment"))?;
        // We are still providing LCV2 state signatures for backward compatibility
        let v2_signature = <TYPES::StateSignatureKey as LCV2StateSignatureKey>::sign_state(
            state_private_key,
            &light_client_state,
            &next_stake_table_state,
        )
        .wrap()
        .context(error!("Failed to sign the light client state"))?;
        let auth_root = leaf
            .block_header()
            .auth_root()
            .wrap()
            .context(error!(format!(
                "Failed to get auth root for light client state certificate. view={view_number}"
            )))?;
        let signed_state_digest =
            derive_signed_state_digest(&light_client_state, &next_stake_table_state, &auth_root);
        let signature = <TYPES::StateSignatureKey as LCV3StateSignatureKey>::sign_state(
            state_private_key,
            signed_state_digest,
        )
        .wrap()
        .context(error!("Failed to sign the light client state"))?;
        let state_vote = LightClientStateUpdateVote2 {
            epoch: EpochNumber::new(epoch_from_block_number(leaf.height(), epoch_height)),
            light_client_state,
            next_stake_table_state,
            signature,
            v2_signature,
            auth_root,
            signed_state_digest,
        };
        broadcast_event(
            Arc::new(HotShotEvent::EpochRootQuorumVoteSend(
                EpochRootQuorumVote2 { vote, state_vote },
            )),
            &sender,
        )
        .await;
    } else {
        tracing::debug!(
            "sending vote to next quorum leader {:?}",
            vote.view_number() + 1
        );
        broadcast_event(Arc::new(HotShotEvent::QuorumVoteSend(vote)), &sender).await;
    }

    Ok(())
}