feat(storage): implement MDBX storage backend

.github/workflows/ci.yml

@@ -88,31 +88,47 @@ jobs:
   coverage:
     name: Code Coverage
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
+        with:
+          components: llvm-tools-preview
 
       - name: Cache dependencies
         uses: Swatinem/rust-cache@v2
 
-      - name: Install cargo-tarpaulin
+      - name: Install cargo-llvm-cov
         uses: taiki-e/install-action@v2
         with:
-          tool: cargo-tarpaulin
+          tool: cargo-llvm-cov
 
       - name: Generate coverage
-        run: cargo tarpaulin --verbose --all-features --workspace --timeout 120 --out xml
+        run: cargo llvm-cov --all-features --workspace --lcov --output-path lcov.info
 
       - name: Upload coverage to Codecov
         uses: codecov/codecov-action@v4
         with:
-          files: ./cobertura.xml
+          files: ./lcov.info
           fail_ci_if_error: false
           verbose: true
 
+  deny:
+    name: Cargo Deny
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run cargo deny
+        uses: EmbarkStudios/cargo-deny-action@v2
+        with:
+          command: check
+          arguments: --all-features
+
   build:
     name: Build Release
     runs-on: ubuntu-latest

.gitignore

@@ -38,3 +38,6 @@ criterion/
 
 # Testnet data
 testnet/
+
+.serena
+.claude

Cargo.toml

@@ -5,6 +5,7 @@ members = [
     "crates/data-chain",
     "crates/storage",
     "crates/node",
+    "crates/execution",
 ]
 resolver = "2"
 
@@ -44,6 +45,10 @@ bitvec = "1.0"
 
 # Storage
 rocksdb = { version = "0.21", default-features = false, features = ["lz4"] }
+reth-db = { git = "https://github.com/paradigmxyz/reth", tag = "v1.9.3", default-features = false, features = ["mdbx"] }
+reth-db-api = { git = "https://github.com/paradigmxyz/reth", tag = "v1.9.3" }
+reth-codecs = { git = "https://github.com/paradigmxyz/reth", tag = "v1.9.3" }
+reth-libmdbx = { git = "https://github.com/paradigmxyz/reth", tag = "v1.9.3", features = ["return-borrowed"] }
 
 # Networking
 futures = "0.3"

crates/data-chain/src/worker/core.rs

@@ -66,6 +66,21 @@ pub trait WorkerNetwork: Send + Sync {
     async fn request_batches(&self, peer: ValidatorId, digests: Vec<Hash>);
 }
 
+/// Transaction validator for mempool CheckTx
+#[async_trait::async_trait]
+pub trait TransactionValidator: Send + Sync {
+    /// Validate a transaction before accepting it into the mempool
+    ///
+    /// # Arguments
+    ///
+    /// * `tx` - Transaction bytes to validate
+    ///
+    /// # Returns
+    ///
+    /// Returns `Ok(())` if valid, or an error if validation fails.
+    async fn validate_transaction(&self, tx: &[u8]) -> Result<(), String>;
+}
+
 /// Handle for a spawned Worker task
 pub struct WorkerHandle {
     /// Join handle for the worker task
@@ -159,6 +174,8 @@ pub struct Worker {
     network: Box<dyn WorkerNetwork>,
     /// Optional persistent storage for batches
     storage: Option<Arc<dyn BatchStore>>,
+    /// Optional transaction validator for CheckTx
+    validator: Option<Arc<dyn TransactionValidator>>,
     /// Shutdown flag
     shutdown: bool,
 }
@@ -168,7 +185,7 @@ impl Worker {
     ///
     /// Returns a handle that can be used to interact with the worker
     pub fn spawn(config: WorkerConfig, network: Box<dyn WorkerNetwork>) -> WorkerHandle {
-        Self::spawn_with_storage(config, network, None)
+        Self::spawn_with_all(config, network, None, None)
     }
 
     /// Spawn a new Worker task with optional persistent storage
@@ -181,6 +198,22 @@ impl Worker {
         config: WorkerConfig,
         network: Box<dyn WorkerNetwork>,
         storage: Option<Arc<dyn BatchStore>>,
+    ) -> WorkerHandle {
+        Self::spawn_with_all(config, network, storage, None)
+    }
+
+    /// Spawn a new Worker task with all optional features
+    ///
+    /// # Arguments
+    /// * `config` - Worker configuration
+    /// * `network` - Network interface for peer communication
+    /// * `storage` - Optional persistent batch storage
+    /// * `validator` - Optional transaction validator for CheckTx
+    pub fn spawn_with_all(
+        config: WorkerConfig,
+        network: Box<dyn WorkerNetwork>,
+        storage: Option<Arc<dyn BatchStore>>,
+        validator: Option<Arc<dyn TransactionValidator>>,
     ) -> WorkerHandle {
         let (to_primary_tx, to_primary_rx) = mpsc::channel(1024);
         let (from_primary_tx, from_primary_rx) = mpsc::channel(256);
@@ -198,6 +231,7 @@ impl Worker {
                 Some(peer_receiver),
                 network,
                 storage,
+                validator,
             );
             worker.run().await;
         });
@@ -228,6 +262,7 @@ impl Worker {
             None,
             network,
             None,
+            None,
         )
     }
 
@@ -248,10 +283,12 @@ impl Worker {
             None,
             network,
             storage,
+            None,
         )
     }
 
     /// Internal constructor with all options
+    #[allow(clippy::too_many_arguments)]
     fn new_internal(
         config: WorkerConfig,
         to_primary: mpsc::Sender<WorkerToPrimary>,
@@ -260,6 +297,7 @@ impl Worker {
         peer_receiver: Option<mpsc::Receiver<(ValidatorId, WorkerMessage)>>,
         network: Box<dyn WorkerNetwork>,
         storage: Option<Arc<dyn BatchStore>>,
+        validator: Option<Arc<dyn TransactionValidator>>,
     ) -> Self {
         let state = WorkerState::new(config.validator_id, config.worker_id);
         let batch_maker = BatchMaker::new(
@@ -283,6 +321,7 @@ impl Worker {
             peer_receiver,
             network,
             storage,
+            validator,
             shutdown: false,
         }
     }
@@ -364,6 +403,26 @@ impl Worker {
             "Received transaction"
         );
 
+        // Validate transaction if validator is available (CheckTx)
+        if let Some(ref validator) = self.validator {
+            match validator.validate_transaction(&tx).await {
+                Ok(()) => {
+                    trace!(
+                        worker_id = self.config.worker_id,
+                        "Transaction validation passed"
+                    );
+                }
+                Err(e) => {
+                    debug!(
+                        worker_id = self.config.worker_id,
+                        error = %e,
+                        "Transaction validation failed, rejecting"
+                    );
+                    return; // Reject invalid transaction
+                }
+            }
+        }
+
         // Add to batch maker
         if let Some(batch) = self.batch_maker.add_transaction(tx) {
             self.process_batch(batch).await;

crates/data-chain/src/worker/mod.rs

@@ -15,5 +15,7 @@ pub mod state;
 pub mod synchronizer;
 
 pub use config::WorkerConfig;
-pub use core::{Worker, WorkerCommand, WorkerEvent, WorkerHandle, WorkerNetwork};
+pub use core::{
+    TransactionValidator, Worker, WorkerCommand, WorkerEvent, WorkerHandle, WorkerNetwork,
+};
 pub use state::WorkerState;

crates/execution/Cargo.toml

@@ -0,0 +1,80 @@
+[package]
+name = "cipherbft-execution"
+version = "0.1.0"
+edition = "2021"
+rust-version = "1.75"
+license.workspace = true
+
+[dependencies]
+# Internal dependencies
+cipherbft-types = { path = "../types" }
+cipherbft-crypto = { path = "../crypto" }
+cipherbft-storage = { path = "../storage", optional = true }
+
+# EVM execution (revm 33.x uses modular crates)
+revm = { version = "33.1.0", default-features = false, features = ["std", "secp256k1"] }
+revm-primitives = "21"
+revm-state = "8"
+
+# Merkle trie for root computation (compatible with alloy 1.x)
+alloy-trie = "0.9"
+
+# Ethereum types (using Alloy v1.x for c-kzg 2.x compatibility with revm 33)
+# Note: revm 33 uses c-kzg 2.x, requires alloy 1.x series
+alloy-primitives = "1"
+alloy-consensus = { version = "1", features = ["serde"] }
+alloy-eips = "1"
+alloy-rlp = "0.3"
+alloy-sol-types = "1"
+
+# Error handling
+thiserror = "2"
+
+# Derive macros (required by alloy dependencies)
+derive_more = { version = "1.0", features = ["display", "from"] }
+
+# Async runtime
+tokio = { version = "1", features = ["full"] }
+async-trait = "0.1"
+
+# Concurrency
+parking_lot = "0.12"
+
+# Logging
+tracing = "0.1"
+
+# Serialization
+serde = { version = "1", features = ["derive"] }
+bincode = "1.3"
+
+# Collections
+lru = "0.12"
+dashmap = "6"
+
+# Encoding
+hex = "0.4"
+
+# c-kzg compatibility (force version 2.x for revm 33)
+c-kzg = "2.0"
+
+[dev-dependencies]
+# Property-based testing
+proptest = "1"
+
+# Benchmarking
+criterion = { version = "0.5", features = ["html_reports"] }
+
+# Test utilities
+tempfile = "3"
+
+# Transaction signing for tests
+alloy-signer = "1"
+alloy-signer-local = "1"
+
+
+[features]
+default = []
+mdbx = ["cipherbft-storage/mdbx", "cipherbft-storage"]
+
+[lints.rust]
+unsafe_code = "deny"