AirLibrary/

Library.rs

#![cfg_attr(not(debug_assertions), windows_subsystem = "windows")]
#![allow(non_snake_case, non_camel_case_types, non_upper_case_globals)]

//! # Air: Background Daemon for Code Editor Land
//!
//! Air runs silently in the background so Land is always up to date and ready
//! to go. It handles updates, downloads, crypto signing, and file indexing
//! without blocking the editor.
//!
//! ## Architecture & Connections
//!
//! Air is the hub that connects various components in the Land ecosystem:
//!
//! - **Wind** (Effect-TS): Functional programming patterns for state management
//!   Air integrates with Wind's effect system for predictable state transitions
//!   and error handling patterns
//!
//! - **Cocoon** (NodeJS host): The Node.js runtime for web components Air
//!   communicates with Cocoon through the Vine protocol to deliver web assets
//!   and perform frontend build operations. Port: 50052
//!
//! - **Mountain** (Tauri bundler): Main desktop application Mountain receives
//!   work from Air through Vine (gRPC) and performs the main application logic.
//!   Mountain's Tauri framework handles the native integration
//!
//! - **Vine** (gRPC protocol): Communication layer connecting all components
//!   Air hosts the Vine gRPC server on port 50053, receiving work requests from
//!   Mountain
//!
//! ## VSCode Architecture References
//!
//! ### Update Service
//!
//! Reference: `Dependency/Microsoft/Dependency/Editor/src/vs/platform/update/`
//!
//! Air's UpdateManager is inspired by VSCode's update architecture:
//!
//! - **AbstractUpdateService** (`common/update.ts`): Base service defining
//!   update interfaces
//! - Platform-specific implementations:
//!   - `updateService.darwin.ts` - macOS update handling
//!   - `updateService.linux.ts` - Linux update handling
//!   - `updateService.snap.ts` - Snap package updates
//!   - `updateService.win32.ts` - Windows update handling
//!
//! Air's UpdateManager abstracts platform differences and provides:
//! - Update checking with version comparison
//! - Package download with resumable support
//! - Checksum verification for integrity
//! - Signature validation for security
//! - Staged updates for rollback capability
//!
//! ### Lifecycle Management
//!
//! Reference:
//! `Dependency/Microsoft/Dependency/Editor/src/vs/base/common/lifecycle.ts`
//!
//! VSCode's lifecycle patterns inform Air's daemon management:
//!
//! - **Disposable pattern**: Resources implement cleanup methods
//! - **EventEmitter**: Async event handling for state changes
//! - **DisposableStore**: Aggregate resource cleanup
//!
//! Air adapts these patterns with:
//! - `ApplicationState`: Central state management with cleanup
//! - `DaemonManager`: Single-instance lock management
//! - Graceful shutdown with resource release
//!
//! ## Module Organization
//!
//! The Air library is organized into functional modules:
//!
//! ### Core Infrastructure
//! - `ApplicationState`: Central state manager for the daemon
//! - `Configuration`: Configuration loading and validation
//! - `Daemon`: Daemon lifecycle and lock management
//! - `Logging`: Structured logging with filtering
//! - `Metrics`: Prometheus-style metrics collection
//! - `Tracing`: Distributed tracing support
//!
//! ### Services
//! - `Authentication`: Token management and cryptographic operations
//! - `Updates`: Update checking, downloading, and installation
//! - `Downloader`: Background downloads with retry logic
//! - `Indexing`: File system indexing for code navigation
//!
//! ### Communication
//! - `Vine`: gRPC server and client implementation
//!   - Generated protobuf code in `Vine/Generated/`
//!   - Server implementation in `Vine/Server/`
//!   - Client utilities in `Vine/Client/`
//!
//! ### Reliability
//! - `Resilience`: Retry policies, circuit breakers, timeouts
//!   - `RetryPolicy`: Configurable retry strategies
//!   - `CircuitBreaker`: Fail-fast for external dependencies
//!   - `BulkheadExecutor`: Concurrency limiting
//!   - `TimeoutManager`: Operation timeout management
//! - `Security`: Rate limiting, checksums, secure storage
//! - `HealthCheck`: Service health monitoring
//!
//! ### Extensibility
//! - `Plugins`: Hot-reloadable plugin system
//! - `CLI`: Command-line interface for daemon control
//!
//! ## Protocol Details
//!
//! **Vine Protocol (gRPC)**
//! - **Version**: 1 (Air::ProtocolVersion)
//! - **Transport**: HTTP/2
//! - **Serialization**: Protocol Buffers
//! - **Ports**:
//!   - 50053: Air (background services) - DefaultBindAddress
//!   - 50052: Cocoon (NodeJS/web services)
//!
//! TLS/mTLS support for production security is now available via the `mtls`
//! feature. See the Mountain module for client TLS configuration.
//! ## FUTURE Enhancements
//!
//! ### High Priority
//! - [ ] Implement metrics HTTP endpoint (/metrics)
//! - [ ] Add Prometheus metric export with labels
//! - [ ] Implement TLS/mTLS for gRPC connections
//! - [ ] Add connection authentication/authorization
//! - [ ] Implement configuration hot-reload (SIGHUP)
//! - [ ] Add comprehensive integration tests
//! - [ ] Implement graceful shutdown with operation completion
//!
//! ### Medium Priority
//! - [ ] Implement plugin hot-reload
//! - [ ] Add structured logging with correlation IDs
//! - [ ] Implement distributed tracing (OpenTelemetry)
//! - [ ] Add health check HTTP endpoint for load balancers
//! - [ ] Implement connection pooling optimizations
//! - [ ] Add metrics export to external systems
//! - [ ] Implement telemetry/observability export
//!
//! ### Low Priority
//! - [ ] Add A/B testing framework for features
//! - [ ] Implement query optimizer for file index
//! - [ ] Add caching layer for frequently accessed data
//! - [ ] Implement adaptive timeout based on load
//! - [ ] Add predictive scaling based on metrics
//! - [ ] Implement chaos testing/metrics
//! ## Error Handling Strategy
//!
//! All modules use defensive coding practices:
//!
//! 1. **Input Validation**: All public functions validate inputs with
//!    descriptive errors
//! 2. **Timeout Handling**: Default timeouts with configuration overrides
//! 3. **Resource Cleanup**: Drop trait + explicit cleanup methods
//! 4. **Circuit Breaker**: Fail-fast for external dependencies
//! 5. **Retry Logic**: Exponential backoff for transient failures
//! 6. **Metrics Recording**: All operations record success/failure metrics
//! 7. **Panic Recovery**: Catch panics in critical async tasks
//!
//! ## Constants
//!
//! - **VERSION**: Air daemon version from Cargo.toml
//! - **DefaultConfigFile**: Default config filename (Air.toml)
//! - **DefaultBindAddress**: gRPC bind address (`[::1]`:50053)
//! - **ProtocolVersion**: Vine protocol version (1)

pub mod ApplicationState;
pub mod Authentication;
pub mod CLI;
pub mod Configuration;
pub mod Daemon;
pub mod DevLog;
pub mod Downloader;
pub mod HealthCheck;
pub mod HTTP;
pub mod Indexing;
pub mod Logging;
pub mod Metrics;
pub mod Mountain;
pub mod Plugins;
pub mod Resilience;
pub mod Security;
pub mod Tracing;
pub mod Updates;
pub mod Vine;

/// Air Daemon version information
///
/// This is automatically populated from Cargo.toml at build time
pub const VERSION:&str = env!("CARGO_PKG_VERSION");

/// Default configuration file name
///
/// The daemon searches for this configuration file in:
/// 1. The path specified via --config flag
/// 2. ~/.config/Air/Air.toml
/// 3. /etc/Air/Air.toml
/// 4. Working directory (Air.toml)
pub const DefaultConfigFile:&str = "Air.toml";

/// Default gRPC bind address for the Vine server
///
/// Note: Port 50053 is used for Air to avoid conflict with Cocoon (port 50052)
///
/// Addresses in order of preference:
/// - `--bind` flag value (if provided)
/// - DefaultBindAddress constant: `[::1]`:50053
///
/// FUTURE: Add support for:
/// - IPv4-only binding (0.0.0.0:50053)
/// - IPv6-only binding (`[::]`:50053)
/// - Wildcard binding for all interfaces
pub const DefaultBindAddress:&str = "[::1]:50053";

/// Protocol version for Mountain-Air communication
///
/// This version is sent in all gRPC messages and checked by clients
/// to ensure compatibility. Increment this value when breaking
/// protocol changes are made.
///
/// Version history:
/// - 1: Initial Vine protocol
pub const ProtocolVersion:u32 = 1;

/// Error type for Air operations
///
/// Comprehensive error types for all Air operations with descriptive messages.
/// All error variants include context to help with debugging and error
/// recovery.
// Error handling using thiserror for automatic derive
#[derive(Debug, thiserror::Error, Clone)]
pub enum AirError {
	#[error("Configuration error: {0}")]
	Configuration(String),

	#[error("Authentication error: {0}")]
	Authentication(String),

	#[error("Network error: {0}")]
	Network(String),

	#[error("File system error: {0}")]
	FileSystem(String),

	#[error("gRPC error: {0}")]
	gRPC(String),

	#[error("Serialization error: {0}")]
	Serialization(String),

	#[error("Internal error: {0}")]
	Internal(String),

	#[error("Resource limit exceeded: {0}")]
	ResourceLimit(String),

	#[error("Service unavailable: {0}")]
	ServiceUnavailable(String),

	#[error("Validation error: {0}")]
	Validation(String),

	#[error("Timeout error: {0}")]
	Timeout(String),

	#[error("Plugin error: {0}")]
	Plugin(String),

	#[error("Hot-reload error: {0}")]
	HotReload(String),

	#[error("Connection error: {0}")]
	Connection(String),

	#[error("Rate limit exceeded: {0}")]
	RateLimit(String),

	#[error("Circuit breaker open: {0}")]
	CircuitBreaker(String),
}

impl From<config::ConfigError> for AirError {
	fn from(err:config::ConfigError) -> Self { AirError::Configuration(err.to_string()) }
}

impl From<reqwest::Error> for AirError {
	fn from(err:reqwest::Error) -> Self { AirError::Network(err.to_string()) }
}

impl From<std::io::Error> for AirError {
	fn from(err:std::io::Error) -> Self { AirError::FileSystem(err.to_string()) }
}

impl From<tonic::transport::Error> for AirError {
	fn from(err:tonic::transport::Error) -> Self { AirError::gRPC(err.to_string()) }
}

impl From<serde_json::Error> for AirError {
	fn from(err:serde_json::Error) -> Self { AirError::Serialization(err.to_string()) }
}

impl From<toml::de::Error> for AirError {
	fn from(err:toml::de::Error) -> Self { AirError::Serialization(err.to_string()) }
}

impl From<uuid::Error> for AirError {
	fn from(err:uuid::Error) -> Self { AirError::Internal(format!("UUID error: {}", err)) }
}

impl From<tokio::task::JoinError> for AirError {
	fn from(err:tokio::task::JoinError) -> Self { AirError::Internal(format!("Task join error: {}", err)) }
}

impl From<&str> for AirError {
	fn from(err:&str) -> Self { AirError::Internal(err.to_string()) }
}

impl From<String> for AirError {
	fn from(err:String) -> Self { AirError::Internal(err) }
}

impl From<(crate::HealthCheck::HealthStatus, Option<String>)> for AirError {
	fn from((status, message):(crate::HealthCheck::HealthStatus, Option<String>)) -> Self {
		let msg = message.unwrap_or_else(|| format!("Health check failed: {:?}", status));
		AirError::ServiceUnavailable(msg)
	}
}

/// Result type for Air operations
///
/// Convenience type alias for Result<T, AirError>
pub type Result<T> = std::result::Result<T, AirError>;

/// Common utility functions
///
/// These utilities provide defensive helper functions used throughout
/// the Air library for validation, ID generation, timestamp handling,
/// and common operations with proper error handling.
pub mod Utility {
	use super::*;

	/// Generate a unique request ID
	///
	/// Creates a UUID v4 for tracing and correlation of requests.
	/// The ID is guaranteed to be unique (with extremely high probability).
	// Using UUID v4 for request ID generation (can be replaced with ULID if
	// sortable IDs needed)
	pub fn GenerateRequestId() -> String { uuid::Uuid::new_v4().to_string() }

	/// Generate a unique request ID with a prefix
	///
	/// Format: `{prefix}-{uuid}`
	///
	/// # Arguments
	///
	/// * `prefix` - Prefix to add before the UUID (e.g., "auth", "download")
	///
	/// # Example
	///
	/// ```
	/// let id = GenerateRequestIdWithPrefix("auth");
	/// // Returns: "auth-550e8400-e29b-41d4-a716-446655440000"
	/// ```
	pub fn GenerateRequestIdWithPrefix(Prefix:&str) -> String { format!("{}-{}", Prefix, uuid::Uuid::new_v4()) }

	/// Get current timestamp in milliseconds since UNIX epoch
	///
	/// Returns the number of milliseconds since January 1, 1970 00:00:00 UTC.
	/// Returns 0 if the system time is not available or is before the epoch.
	pub fn CurrentTimestamp() -> u64 {
		std::time::SystemTime::now()
			.duration_since(std::time::UNIX_EPOCH)
			.unwrap_or_default()
			.as_millis() as u64
	}

	/// Get current timestamp in seconds since UNIX epoch
	pub fn CurrentTimestampSeconds() -> u64 {
		std::time::SystemTime::now()
			.duration_since(std::time::UNIX_EPOCH)
			.unwrap_or_default()
			.as_secs()
	}

	/// Convert timestamp millis to ISO 8601 string
	///
	/// # Arguments
	///
	/// * `millis` - Timestamp in milliseconds since UNIX epoch
	///
	/// # Returns
	///
	/// ISO 8601 formatted string or "Invalid timestamp" on error
	pub fn TimestampToISO8601(Millis:u64) -> String {
		match std::time::UNIX_EPOCH.checked_add(std::time::Duration::from_millis(Millis)) {
			Some(Time) => {
				use std::time::SystemTime;
				match SystemTime::try_from(Time) {
					Ok(SystemTime) => {
						let DateTime:chrono::DateTime<chrono::Utc> = SystemTime.into();
						DateTime.to_rfc3339()
					},
					Err(_) => "Invalid timestamp".to_string(),
				}
			},
			None => "Invalid timestamp".to_string(),
		}
	}

	/// Validate file path security
	///
	/// Checks for path traversal attempts and invalid characters.
	/// This is a security measure to prevent directory traversal attacks.
	///
	/// # Arguments
	///
	/// * `path` - The file path to validate
	///
	/// # Errors
	///
	/// Returns an error if the path contains suspicious patterns.
	// Basic path validation - platform-specific validation can be added as needed
	pub fn ValidateFilePath(Path:&str) -> Result<()> {
		// Null check
		if Path.is_empty() {
			return Err(AirError::Validation("Path is empty".to_string()));
		}

		// Length check
		if Path.len() > 4096 {
			return Err(AirError::Validation("Path too long (max: 4096 characters)".to_string()));
		}

		// Path traversal check
		if Path.contains("..") {
			return Err(AirError::Validation(
				"Path contains '..' (potential path traversal)".to_string(),
			));
		}

		// Platform-specific checks
		if cfg!(windows) {
			// Additional Windows-specific checks could be added here
		} else if Path.contains('\\') {
			// On Unix, backslashes are unusual
			return Err(AirError::Validation("Path contains backslash on Unix".to_string()));
		}

		// Null character check
		if Path.contains('\0') {
			return Err(AirError::Validation("Path contains null character".to_string()));
		}

		Ok(())
	}

	/// Validate URL format
	///
	/// Performs basic URL validation to prevent malformed URLs from
	/// causing issues with network operations.
	///
	/// # Arguments
	///
	/// * `url` - The URL to validate
	///
	/// # Errors
	///
	/// Returns an error if the URL is invalid.
	// Basic URL validation using std::uri::Uri for RFC 3986 compliance
	pub fn ValidateUrl(URL:&str) -> Result<()> {
		// Null check
		if URL.is_empty() {
			return Err(AirError::Validation("URL is empty".to_string()));
		}

		// Length check
		if URL.len() > 2048 {
			return Err(AirError::Validation("URL too long (max: 2048 characters)".to_string()));
		}

		// Basic scheme check
		if !URL.starts_with("http://") && !URL.starts_with("https://") {
			return Err(AirError::Validation("URL must start with http:// or https://".to_string()));
		}

		// Null character check
		if URL.contains('\0') {
			return Err(AirError::Validation("URL contains null character".to_string()));
		}

		// FUTURE: More comprehensive validation using url crate for full RFC 3986
		// compliance
		Ok(())
	}

	/// Validate string length
	///
	/// Defensive utility to validate string length bounds.
	///
	/// # Arguments
	///
	/// * `value` - The string to validate
	/// * `min_len` - Minimum allowed length (inclusive)
	/// * `MaxLength` - Maximum allowed length (inclusive)
	pub fn ValidateStringLength(Value:&str, MinLen:usize, MaxLen:usize) -> Result<()> {
		if Value.len() < MinLen {
			return Err(AirError::Validation(format!(
				"String too short (min: {}, got: {})",
				MinLen,
				Value.len()
			)));
		}

		if Value.len() > MaxLen {
			return Err(AirError::Validation(format!(
				"String too long (max: {}, got: {})",
				MaxLen,
				Value.len()
			)));
		}

		Ok(())
	}

	/// Validate port number
	///
	/// Ensures a port number is within the valid range.
	///
	/// # Arguments
	///
	/// * `port` - The port number to validate
	///
	/// # Errors
	///
	/// Returns an error if the port is not in the valid range (1-65535).
	pub fn ValidatePort(Port:u16) -> Result<()> {
		if Port == 0 {
			return Err(AirError::Validation("Port cannot be 0".to_string()));
		}

		// Port 0 is valid for binding (ephemeral), but not for configuration
		// Port 1024 and below require root/admin privileges
		// We allow any port 1-65535 for flexibility
		Ok(())
	}

	/// Sanitize a string for logging
	///
	/// Removes or escapes potentially sensitive information from strings
	/// before logging to prevent information leakage in logs.
	///
	/// # Arguments
	///
	/// * `Value` - The string to sanitize
	/// * `MaxLength` - Maximum length before truncation
	///
	/// # Returns
	///
	/// Sanitized string safe for logging.
	pub fn SanitizeForLogging(Value:&str, MaxLength:usize) -> String {
		// Truncate if too long
		let Truncated = if Value.len() > MaxLength { &Value[..MaxLength] } else { Value };

		// Remove or escape sensitive patterns
		let Sanitized = Truncated.replace('\n', " ").replace('\r', " ").replace('\t', " ");

		// If we truncated, add indicator
		if Value.len() > MaxLength {
			format!("{}[...]", Sanitized)
		} else {
			Sanitized.to_string()
		}
	}

	/// Calculate exponential backoff delay
	///
	/// Implements exponential backoff with jitter for retry operations.
	///
	/// # Arguments
	///
	/// * `Attempt` - Current attempt number (0-indexed)
	/// * `BaseDelayMs` - Base delay in milliseconds
	/// * `MaxDelayMs` - Maximum delay in milliseconds
	///
	/// # Returns
	///
	/// Calculated delay in milliseconds with jitter applied.
	pub fn CalculateBackoffDelay(Attempt:u32, BaseDelayMs:u64, MaxDelayMs:u64) -> u64 {
		// Calculate exponential delay: base * 2^attempt
		let ExponentialDelay = BaseDelayMs * 2u64.pow(Attempt);

		// Cap at max delay
		let CappedDelay = ExponentialDelay.min(MaxDelayMs);

		// Add jitter (±25%)
		use std::time::SystemTime;
		let Seed = SystemTime::now()
			.duration_since(SystemTime::UNIX_EPOCH)
			.unwrap_or_default()
			.subsec_nanos() as u64;

		let JitterRange = (CappedDelay / 4).max(1); // 25% of delay, at least 1ms
		let Jitter = (Seed % (2 * JitterRange)) as i64 - JitterRange as i64;

		// Apply jitter (ensure non-negative)
		((CappedDelay as i64) + Jitter).max(0) as u64
	}

	/// Format bytes as human-readable size
	///
	/// Converts a byte count to a human-readable format with appropriate units.
	///
	/// # Arguments
	///
	/// * `Bytes` - Number of bytes
	///
	/// # Returns
	///
	/// Formatted string (e.g., "1.5 MB", "256 B")
	pub fn FormatBytes(Bytes:u64) -> String {
		const KB:u64 = 1024;
		const MB:u64 = KB * 1024;
		const GB:u64 = MB * 1024;
		const TB:u64 = GB * 1024;

		if Bytes >= TB {
			format!("{:.2} TB", Bytes as f64 / TB as f64)
		} else if Bytes >= GB {
			format!("{:.2} GB", Bytes as f64 / GB as f64)
		} else if Bytes >= MB {
			format!("{:.2} MB", Bytes as f64 / MB as f64)
		} else if Bytes >= KB {
			format!("{:.2} KB", Bytes as f64 / KB as f64)
		} else {
			format!("{} B", Bytes)
		}
	}

	/// Parse duration string to milliseconds
	///
	/// Parses duration strings like "100ms", "1s", "1m", "1h" to milliseconds.
	///
	/// # Arguments
	///
	/// * `DurationStr` - Duration string (e.g., "1s", "500ms", "1m30s")
	///
	/// # Errors
	///
	/// Returns an error if the duration string is invalid.
	///
	/// # Support
	///
	/// Supports:
	/// - ms, s, m, h suffixes
	/// - Combined durations like "1h30m" or "1m30s"
	/// - Decimal values like "1.5s"
	pub fn ParseDurationToMillis(DurationStr:&str) -> Result<u64> {
		let input = DurationStr.trim().to_lowercase();
		let mut total_millis:u64 = 0;
		let mut pos = 0;

		while pos < input.len() {
			// Extract the numeric part
			let start = pos;
			while pos < input.len()
				&& (input.chars().nth(pos).unwrap().is_ascii_digit() || input.chars().nth(pos).unwrap() == '.')
			{
				pos += 1;
			}

			if start == pos {
				return Err(AirError::Internal(format!(
					"Invalid duration format: expected number at position {} in '{}'",
					pos, DurationStr
				)));
			}

			let num_str = &input[start..pos];
			let num_value:f64 = num_str.parse().map_err(|_| {
				AirError::Internal(format!("Invalid number '{}' in duration '{}'", num_str, DurationStr))
			})?;

			// Extract the unit part
			let unit_start = pos;
			while pos < input.len()
				&& (match input.chars().nth(pos) {
					Some(c) => c.is_ascii_alphabetic(),
					None => false,
				}) {
				pos += 1;
			}

			if unit_start == pos || unit_start >= input.len() {
				return Err(AirError::Internal(format!(
					"Invalid duration format: missing unit in '{}'",
					DurationStr
				)));
			}

			let unit = &input[unit_start..pos];
			let multiplier = match unit {
				"ms" => 1.0,
				"s" => 1000.0,
				"m" => 60_000.0,
				"h" => 3_600_000.0,
				_ => {
					return Err(AirError::Internal(format!(
						"Invalid duration unit '{}', expected one of: ms, s, m, h",
						unit
					)));
				},
			};

			let component_millis = (num_value * multiplier) as u64;
			total_millis = total_millis.saturating_add(component_millis);
		}

		Ok(total_millis)
	}
}