Anatomy of a Cosmos SDK Application
This document describes the core parts of a Cosmos SDK application, represented throughout the document as a placeholder application named
The Daemon, or Full-Node Client, is the core process of a Cosmos SDK-based blockchain. Participants in the network run this process to initialize their state-machine, connect with other full-nodes, and update their state-machine as new blocks come in.
^ +-------------------------------+ ^
| | | |
| | State-machine = Application | |
| | | | Built with Cosmos SDK
| | ^ + | |
| +----------- | ABCI | ----------+ v
| | + v | ^
| | | |
Blockchain Node | | Consensus | |
| | | |
| +-------------------------------+ | Tendermint Core
| | | |
| | Networking | |
| | | |
v +-------------------------------+ v
The blockchain full-node presents itself as a binary, generally suffixed by
-d for "daemon" (e.g.
gaia). This binary is built by running a simple
main.go function placed in
./cmd/appd/. This operation usually happens through the Makefile.
Once the main binary is built, the node can be started by running the
start command. This command function primarily does three things:
- Create an instance of the state-machine defined in
- Initialize the state-machine with the latest known state, extracted from the
dbstored in the
~/.app/datafolder. At this point, the state-machine is at height
- Create and start a new Tendermint instance. Among other things, the node performs a handshake with its peers. It gets the latest
blockHeightfrom them and replays blocks to sync to this height if it is greater than the local
appBlockHeight. The node starts from genesis and Tendermint sends an
InitChainmessage via the ABCI to the
app, which triggers the
When starting an tendermint instance, the genesis file is the
0 height and the state within the genesis file is committed at block height
1. When querying the state of the node, querying block height 0 will return an error.
Core Application File
In general, the core of the state-machine is defined in a file called
app.go. This file mainly contains the type definition of the application and functions to create and initialize it.
Type Definition of the Application
The first thing defined in
app.go is the
type of the application. It is generally comprised of the following parts:
- A reference to
baseapp. The custom application defined in
app.gois an extension of
baseapp. When a transaction is relayed by Tendermint to the application,
baseapp's methods to route them to the appropriate module.
baseappimplements most of the core logic for the application, including all the ABCI methods and the routing logic.
- A list of store keys. The store, which contains the entire state, is implemented as a
multistore(i.e. a store of stores) in the Cosmos SDK. Each module uses one or multiple stores in the multistore to persist their part of the state. These stores can be accessed with specific keys that are declared in the
apptype. These keys, along with the
keepers, are at the heart of the object-capabilities model of the Cosmos SDK.
- A list of module's
keepers. Each module defines an abstraction called
keeper, which handles reads and writes for this module's store(s). The
keeper's methods of one module can be called from other modules (if authorized), which is why they are declared in the application's type and exported as interfaces to other modules so that the latter can only access the authorized functions.
- A reference to an
appCodec. The application's
appCodecis used to serialize and deserialize data structures in order to store them, as stores can only persist
bytes. The default codec is Protocol Buffers.
- A reference to a
legacyAminocodec. Some parts of the Cosmos SDK have not been migrated to use the
appCodecabove, and are still hardcoded to use Amino. Other parts explicitly use Amino for backwards compatibility. For these reasons, the application still holds a reference to the legacy Amino codec. Please note that the Amino codec will be removed from the SDK in the upcoming releases.
- A reference to a module manager and a basic module manager. The module manager is an object that contains a list of the application's modules. It facilitates operations related to these modules, like registering their
Msgservice and gRPC
Queryservice, or setting the order of execution between modules for various functions like
See an example of application type definition from
simapp, the Cosmos SDK's own app used for demo and testing purposes:
Also defined in
app.go is the constructor function, which constructs a new application of the type defined in the preceding section. The function must fulfill the
AppCreator signature in order to be used in the
start command of the application's daemon command.
Here are the main actions performed by this function:
- Instantiate a new
codecand initialize the
codecof each of the application's modules using the basic manager.
- Instantiate a new application with a reference to a
baseappinstance, a codec, and all the appropriate store keys.
- Instantiate all the
keeperobjects defined in the application's
NewKeeperfunction of each of the application's modules. Note that keepers must be instantiated in the correct order, as the
NewKeeperof one module might require a reference to another module's
- Instantiate the application's module manager with the
AppModuleobject of each of the application's modules.
- With the module manager, initialize the application's
Msgroutes, and legacy query routes. When a transaction is relayed to the application by Tendermint via the ABCI, it is routed to the appropriate module's
Msgservice using the routes defined here. Likewise, when a gRPC query request is received by the application, it is routed to the appropriate module's
gRPC query serviceusing the gRPC routes defined here. The Cosmos SDK still supports legacy
Msgs and legacy Tendermint queries, which are routed using the legacy
Msgroutes and the legacy query routes, respectively.
- With the module manager, register the application's modules' invariants. Invariants are variables (e.g. total supply of a token) that are evaluated at the end of each block. The process of checking invariants is done via a special module called the
InvariantsRegistry. The value of the invariant should be equal to a predicted value defined in the module. Should the value be different than the predicted one, special logic defined in the invariant registry is triggered (usually the chain is halted). This is useful to make sure that no critical bug goes unnoticed, producing long-lasting effects that are hard to fix.
- With the module manager, set the order of execution between the
EndBlockerfunctions of each of the application's modules. Note that not all modules implement these functions.
- Set the remaining application parameters:
- Mount the stores.
- Return the application.
Note that the constructor function only creates an instance of the app, while the actual state is either carried over from the
~/.app/data folder if the node is restarted, or generated from the genesis file if the node is started for the first time.
See an example of application constructor from
InitChainer is a function that initializes the state of the application from a genesis file (i.e. token balances of genesis accounts). It is called when the application receives the
InitChain message from the Tendermint engine, which happens when the node is started at
appBlockHeight == 0 (i.e. on genesis). The application must set the
InitChainer in its constructor via the
In general, the
InitChainer is mostly composed of the
InitGenesis function of each of the application's modules. This is done by calling the
InitGenesis function of the module manager, which in turn calls the
InitGenesis function of each of the modules it contains. Note that the order in which the modules'
InitGenesis functions must be called has to be set in the module manager using the module manager's
SetOrderInitGenesis method. This is done in the application's constructor, and the
SetOrderInitGenesis has to be called before the
See an example of an
BeginBlocker and EndBlocker
The Cosmos SDK offers developers the possibility to implement automatic execution of code as part of their application. This is implemented through two functions called
EndBlocker. They are called when the application receives the
EndBlock messages from the Tendermint engine, which happens respectively at the beginning and at the end of each block. The application must set the
EndBlocker in its constructor via the
In general, the
EndBlocker functions are mostly composed of the
EndBlock functions of each of the application's modules. This is done by calling the
EndBlock functions of the module manager, which in turn calls the
EndBlock functions of each of the modules it contains. Note that the order in which the modules'
EndBlock functions must be called has to be set in the module manager using the
SetOrderEndBlockers methods, respectively. This is done via the module manager in the application's constructor, and the
SetOrderEndBlockers methods have to be called before the
As a sidenote, it is important to remember that application-specific blockchains are deterministic. Developers must be careful not to introduce non-determinism in
EndBlocker, and must also be careful not to make them too computationally expensive, as gas does not constrain the cost of
See an example of
EndBlocker functions from
EncodingConfig structure is the last important part of the
app.go file. The goal of this structure is to define the codecs that will be used throughout the app.
Here are descriptions of what each of the four fields means:
InterfaceRegistryis used by the Protobuf codec to handle interfaces that are encoded and decoded (we also say "unpacked") using
Anycould be thought as a struct that contains a
type_url(name of a concrete type implementing the interface) and a
value(its encoded bytes).
InterfaceRegistryprovides a mechanism for registering interfaces and implementations that can be safely unpacked from
Any. Each application module implements the
RegisterInterfacesmethod that can be used to register the module's own interfaces and implementations.
- You can read more about
- To go more into details, the Cosmos SDK uses an implementation of the Protobuf specification called
gogoprotobuf. By default, the gogo protobuf implementation of
Anyuses global type registration to decode values packed in
Anyinto concrete Go types. This introduces a vulnerability where any malicious module in the dependency tree could register a type with the global protobuf registry and cause it to be loaded and unmarshaled by a transaction that referenced it in the
type_urlfield. For more information, please refer to ADR-019.
- You can read more about
Codec: The default codec used throughout the Cosmos SDK. It is composed of a
BinaryCodecused to encode and decode state, and a
JSONCodecused to output data to the users (for example, in the CLI). By default, the SDK uses Protobuf as
TxConfigdefines an interface a client can utilize to generate an application-defined concrete transaction type. Currently, the SDK handles two transaction types:
SIGN_MODE_DIRECT(which uses Protobuf binary as over-the-wire encoding) and
SIGN_MODE_LEGACY_AMINO_JSON(which depends on Amino). Read more about transactions here.
Amino: Some legacy parts of the Cosmos SDK still use Amino for backwards-compatibility. Each module exposes a
RegisterLegacyAminomethod to register the module's specific types within Amino. This
Aminocodec should not be used by app developers anymore, and will be removed in future releases.
An application should create its own encoding config.
See an example of a
Modules are the heart and soul of Cosmos SDK applications. They can be considered as state-machines nested within the state-machine. When a transaction is relayed from the underlying Tendermint engine via the ABCI to the application, it is routed by
baseapp to the appropriate module in order to be processed. This paradigm enables developers to easily build complex state-machines, as most of the modules they need often already exist. For developers, most of the work involved in building a Cosmos SDK application revolves around building custom modules required by their application that do not exist yet, and integrating them with modules that do already exist into one coherent application. In the application directory, the standard practice is to store modules in the
x/ folder (not to be confused with the Cosmos SDK's
x/ folder, which contains already-built modules).
Application Module Interface
Modules must implement interfaces defined in the Cosmos SDK,
AppModule. The former implements basic non-dependent elements of the module, such as the
codec, while the latter handles the bulk of the module methods (including methods that require references to other modules'
keepers). Both the
AppModuleBasic types are, by convention, defined in a file called
AppModule exposes a collection of useful methods on the module that facilitates the composition of modules into a coherent application. These methods are called from the
module manager, which manages the application's collection of modules.
Each application module defines two Protobuf services: one
Msg service to handle messages, and one gRPC
Query service to handle queries. If we consider the module as a state-machine, then a
Msg service is a set of state transition RPC methods.
Msg service method is 1:1 related to a Protobuf request type, which must implement
sdk.Msgs are bundled in transactions, and each transaction contains one or multiple messages.
When a valid block of transactions is received by the full-node, Tendermint relays each one to the application via
DeliverTx. Then, the application handles the transaction:
- Upon receiving the transaction, the application first unmarshalls it from
- Then, it verifies a few things about the transaction like fee payment and signatures before extracting the
Msg(s) contained in the transaction.
sdk.Msgs are encoded using Protobuf
Anys. By analyzing each
sdk.Msgto the corresponding module's
- If the message is successfully processed, the state is updated.
For more details, see transaction lifecycle.
Module developers create custom
Msg services when they build their own module. The general practice is to define the
Msg Protobuf service in a
tx.proto file. For example, the
x/bank module defines a service with two methods to transfer tokens:
Service methods use
keeper in order to update the module state.
Each module should also implement the
RegisterServices method as part of the
AppModule interface. This method should call the
RegisterMsgServer function provided by the generated Protobuf code.
Query services are defined in the module's Protobuf definition files, specifically inside
query.proto definition file exposes a single
Query Protobuf service. Each gRPC query endpoint corresponds to a service method, starting with the
rpc keyword, inside the
Protobuf generates a
QueryServer interface for each module, containing all the service methods. A module's
keeper then needs to implement this
QueryServer interface, by providing the concrete implementation of each service method. This concrete implementation is the handler of the corresponding gRPC query endpoint.
Finally, each module should also implement the
RegisterServices method as part of the
AppModule interface. This method should call the
RegisterQueryServer function provided by the generated Protobuf code.
Keepers are the gatekeepers of their module's store(s). To read or write in a module's store, it is mandatory to go through one of its
keeper's methods. This is ensured by the object-capabilities model of the Cosmos SDK. Only objects that hold the key to a store can access it, and only the module's
keeper should hold the key(s) to the module's store(s).
Keepers are generally defined in a file called
keeper.go. It contains the
keeper's type definition and methods.
keeper type definition generally consists of the following:
- Key(s) to the module's store(s) in the multistore.
- Reference to other module's
keepers. Only needed if the
keeperneeds to access other module's store(s) (either to read or write from them).
- A reference to the application's codec. The
keeperneeds it to marshal structs before storing them, or to unmarshal them when it retrieves them, because stores only accept
Along with the type definition, the next important component of the
keeper.go file is the
keeper's constructor function,
NewKeeper. This function instantiates a new
keeper of the type defined above with a
keys and potentially references other modules'
keepers as parameters. The
NewKeeper function is called from the application's constructor. The rest of the file defines the
keeper's methods, which are primarily getters and setters.
Command-Line, gRPC Services and REST Interfaces
Each module defines command-line commands, gRPC services, and REST routes to be exposed to the end-user via the application's interfaces. This enables end-users to create messages of the types defined in the module, or to query the subset of the state managed by the module.
Generally, the commands related to a module are defined in a folder called
client/cli in the module's folder. The CLI divides commands into two categories, transactions and queries, defined in
client/cli/query.go, respectively. Both commands are built on top of the Cobra Library:
- Transactions commands let users generate new transactions so that they can be included in a block and eventually update the state. One command should be created for each message type defined in the module. The command calls the constructor of the message with the parameters provided by the end-user, and wraps it into a transaction. The Cosmos SDK handles signing and the addition of other transaction metadata.
- Queries let users query the subset of the state defined by the module. Query commands forward queries to the application's query router, which routes them to the appropriate querier the
gRPC is a modern open-source high performance RPC framework that has support in multiple languages. It is the recommended way for external clients (such as wallets, browsers and other backend services) to interact with a node.
Each module can expose gRPC endpoints called service methods, which are defined in the module's Protobuf
query.proto file. A service method is defined by its name, input arguments, and output response. The module then needs to perform the following actions:
- Define a
AppModuleBasicto wire the client gRPC requests to the correct handler inside the module.
- For each service method, define a corresponding handler. The handler implements the core logic necessary to serve the gRPC request, and is located in the
gRPC-gateway REST Endpoints
Some external clients may not wish to use gRPC. In this case, the Cosmos SDK provides a gRPC gateway service, which exposes each gRPC service as a corresponding REST endpoint. Please refer to the grpc-gateway documentation to learn more.
The REST endpoints are defined in the Protobuf files, along with the gRPC services, using Protobuf annotations. Modules that want to expose REST queries should add
google.api.http annotations to their
rpc methods. By default, all REST endpoints defined in the SDK have a URL starting with the
The Cosmos SDK also provides a development endpoint to generate Swagger definition files for these REST endpoints. This endpoint can be enabled inside the
app.toml config file, under the
Interfaces let end-users interact with full-node clients. This means querying data from the full-node or creating and sending new transactions to be relayed by the full-node and eventually included in a block.
The main interface is the Command-Line Interface. The CLI of a Cosmos SDK application is built by aggregating CLI commands defined in each of the modules used by the application. The CLI of an application is the same as the daemon (e.g.
appd), and is defined in a file called
appd/main.go. The file contains the following:
main()function, which is executed to build the
appdinterface client. This function prepares each command and adds them to the
rootCmdbefore building them. At the root of
appd, the function adds generic commands like
config, query commands, tx commands, and
- Query commands, which are added by calling the
queryCmdfunction. This function returns a Cobra command that contains the query commands defined in each of the application's modules (passed as an array of
main()function), as well as some other lower level query commands such as block or validator queries. Query command are called by using the command
appd query [query]of the CLI.
- Transaction commands, which are added by calling the
txCmdfunction. Similar to
queryCmd, the function returns a Cobra command that contains the tx commands defined in each of the application's modules, as well as lower level tx commands like transaction signing or broadcasting. Tx commands are called by using the command
appd tx [tx]of the CLI.
See an example of an application's main command-line file from the Cosmos Hub.
Dependencies and Makefile
This section is optional, as developers are free to choose their dependency manager and project building method. That said, the current most used framework for versioning control is
go.mod. It ensures each of the libraries used throughout the application are imported with the correct version.
The following is the
go.mod of the Cosmos Hub, provided as an example.
Here is an example of the Cosmos Hub Makefile.