Skip to main content

Cubes and code

Concept

Overview

One of the most important principles to keep in mind is that the BigFile is a blockchain that allows running software in a distributed, replicated way.

When you write source code for a dapp that runs on the BigFile, you compile the source code into a WebAssembly module. When you deploy the WebAssembly module that contains your program on the BigFile blockchain, the program is executed inside a conceptual computational unit called a cube. Cubes can be developed in various programming languages. Besides Motoko, a programming language purposefully designed for the BigFile, you can also use existing programming languages like C, Rust, JavaScript/TypeScript, AssemblyScript, and Python.

Once deployed, end-users can interact with the cube by accessing the entry point functions you have defined for that cube through a frontend client such as a browser.

Architecture

Cubes include both program and state

A cube is similar to a container in that both are deployed as a software unit that contains compiled code and dependencies for an application or service.

Containerization allows for applications to be decoupled from the environment, allowing for easy and reliable deployment. The cube differs from a container, however, in that it also stores information about the current software state.

While a containerized application might include information about the state of the environment in which the application runs, a cube is able to persist a record of state changes that resulted from its functions being called.

Query and update methods

This concept of a cube consisting of both program and state is an important one. In particular, it relates to the behavior one should expect when calling an end-point of the ccube. There are only two types of calls:

  • Non-committing query calls (any state change is discarded).
  • Committing update calls (state changes are persisted).
Query callsUpdate calls
Allow the user to query the current state of a cube or call a function that operates on the cube’s state without changing it.Allow the user to change the state of the cube and have changes persisted.
Are synchronous and answered immediately.Are answered asynchronously.
Can be made to any node that holds the cube; the result does not go through consensus. That is, there is an inherent tradeoff between security and performance: the reply from a single node is fast, but might be untrustworthy or inaccurate.Must pass through consensus to return the result. Because consensus is required, changing the state of a cube, and returning the result can take time. There is an inherent tradeoff between security and performance: the result is trustworthy because two-thirds of the replicas in a subnet must agree on the result, but the call is slow.
Do not allow changes to the state of the cube to be persisted, so essentially query calls are read-only operations.The called cube can invoke functions exposed by other cubes
Do not allow the called cube to invoke functions exposed by other cubes as inter-cube calls. (Note that this restriction is temporary and that cubes will be able to invoke functions exposed by other cubes when processing query calls in the future.)

As a developer, it is important to recognize this relationship between the calls that query the cube and the calls that change the cube state. In particular, you should keep in mind the inherent tradeoff between security and performance.

Certified data

Since query calls do not go through consensus, certified responses should be used wherever possible when data only needs to be read, not updated.

Certification happens on the cube level, i.e. is done by a subnet. Any certified response has to be pre-certified during an update call, so that the certificate can simply be fetched in a query call at a later point in time.

How to develop dapps for the BigFile

For programmers and software developers, the BigFile blockchain provides unique capabilities and opportunities within a framework that simplifies how you can design, build, and deploy dapps. A key part of this framework is a new, general purpose programming language, Motoko. Motoko is a programming language that has been specifically designed to take full advantage of the unique features that the BigFile blockchain provides, including:

  • The ability to define programs directly using actor objects and classes.

  • The use of async and await syntax to enable programming asynchronous messaging as if it was synchronous processing.

  • Automatic support for message serialization and deserialization.

  • The ability to leverage orthogonal persistence using data structures without external databases or storage volumes.

As a modern, high-level programming language, Motoko provides some key features of its own, including:

  • Support for big integer operations and overflow protection.

  • A sound type system that statically checks each program to ensure it can execute without type errors on all possible inputs.

  • Support for function abstractions, user-defined type definitions, and user-defined actors.

For more detailed information about the Motoko programming language itself, including syntactical conventions and supported features, see the Motoko programming language guide.

For information about Cube Development Kits (CDKs) supporting other programming languages, see this overview.

The following diagram provides a simplified drill-down view of the development environment as part of the BigFile ecosystem.

Your development environment as part of the BigFile ecosystem

Cubes, actors, and the code you produce

One of the most important principles to keep in mind when preparing to write programs using the Motoko programming language is that Motoko uses an actor-based programming model.

An actor is a special kind of object that processes messages in an isolated state, enabling messages to be handled remotely and asynchronously.

In general, each cube includes the compiled code for one actor object. Each cube may also include some additional information such as interface descriptions or frontend assets. You can create projects that include multiple cubes, but each cube can only include one actor.

Why your code is compiled into WebAssembly

When you compile Motoko code, the result is a WebAssembly module. WebAssembly is a low-level computer instruction format that is portable and abstracts program execution cleanly over most modern computer hardware. It is broadly supported for programs that run on the internet and a natural fit for deploying dapps that are intended to run on the BigFile.

With Motoko, developers can compile to portable WebAssembly while still delivering secure dapps using a simple and high-level language.

The Motoko language offers many of the features that are common to other higher-level modern languages—like type safety and pattern-matching. In addition, Motoko provides built-in support for defining messaging services using actors in a way that is especially well-suited to the BigFile and is easy to learn whether you are a new or experienced programmer.

This guide provides an introduction to the basic features of the Motoko programming language in the context of writing programs using the SDK. For more detailed information about the Motoko programming language itself, see the Motoko programming language guide.

Identities and authentication

One of the main differences between a user-initiated cube operation and a cube-to-cube operation is that cubes have an explicitly registered identity on the BigFile.

There is no central registry for user principals, but users may choose to identify themselves using one (or more) digital signing keys. The user’s private key is used to sign messages, which are sent along with their public key to the BigFile. The BigFile authenticates the user and passes the principal to the cube — the cube may choose to implement whatever authorization policies it wants based on principals.

At a high level, first-time users generate an unsigned key pair and derive their principal identifier from the public key during their first interaction with the BigFile. Returning users are authenticated using the private key (or keys) that have been stored securely by the user agent. Users with access to multiple cubes can manage the keys and devices used for authentication associated with each cube.

A single user can have multiple public-private key pairs for accessing cubes from different devices—such as browsers running on different computers, mobile phones, or tablets—but these derived keys all map to a primary identifier.

Resource consumption and cycles

All cubes consume resources, CPU cycles for execution, bandwidth for routing messages, and storage for persisted data. These resources are paid for using a unit of cost called cycles. Cycles can be obtained by converting BIG tokens and are stored by each cube in a local balance.

  • Cubes must be able to pay for complete execution (all or nothing), but the cost associated with a unit of cycles will make efficient programs cost-effective.

  • By setting limits on how many cycles a cube can consume, the platform can prevent malicious code from completely taking over resources.

  • Cycles are intended to reflect the real cost of operations in a stable or deflationary way so that the cost of program execution remains the same or decreases with operational efficiency. As such, the conversion rate of BIG to cycles is adjusted accordingly, based on the current BIG market value. The relative stability of operational costs makes it easier to predict the cycles required to process, for example, a million messages.