Files

567 lines
25 KiB
TypeScript

import { randomUUID } from 'node:crypto';
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
import { newFixture, type Fixture } from '../helpers/fixture.js';
vi.mock('../../src/lib/server/integrations/rcon.js', () => ({
rconStatusResult: vi.fn(async () => ({
ok: true,
endpoint: { host: 'agent', port: 28960 },
status: { players: 0, map: 'zombie_theater', gametype: 'zom', roster: [] }
})),
rconGetPlayerCount: vi.fn(async () => 0),
rconPlutoniumVersion: vi.fn(async () => ({ revision: 5354, error: null }))
}));
vi.mock('../../src/lib/server/pipeline/worker.js', () => ({
kick: vi.fn(async () => {}),
kickProvisioning: vi.fn(async () => {})
}));
let fixture: Fixture;
let hostId: string;
let instanceId: string;
const server = 't5_zombie_theater_1';
const healthy = { exists: true, healthy: true, state: 'running' };
beforeEach(async () => {
vi.resetModules();
vi.clearAllMocks();
fixture = await newFixture([]);
const { createHost, createEnrollment, enrollHost } =
await import('../../src/lib/server/hosts/index.js');
hostId = createHost({ name: 'Safety test host' }).id;
enrollHost(createEnrollment(hostId).token, {
protocolVersion: 1,
dockerRunning: true,
directoriesWritable: true,
storageAvailable: 100_000_000_000,
preparedRuntimeImages: ['plutainer:test'],
libraries: [{ id: 'published-game-version', state: 'ready' }],
capabilities: ['instance.safety-override', 'instance.rebuild-files']
});
const { db } = await import('../../src/lib/server/db/index.js');
instanceId = randomUUID();
db()
.prepare(
"INSERT INTO servers(name,game,map,game_mode,map_slug,game_port,container_state) VALUES(?,'t5','zombie_theater','zombie','theater',28960,'running')"
)
.run(server);
db()
.prepare(
`INSERT INTO native_instances(id,server,host_id,library_id,image,port,created_at) VALUES(?,?,?,'published-game-version','plutainer:test',28960,?)`
)
.run(instanceId, server, hostId, new Date().toISOString());
const backend = await import('../../src/lib/server/backends/native.js');
vi.spyOn(backend, 'nativeRequest').mockImplementation(async (_instance, kind) => {
if (kind !== 'instance.inspect') throw new Error(`Unexpected remote mutation: ${kind}`);
return healthy as never;
});
});
afterEach(async () => {
await fixture.cleanup();
vi.unstubAllEnvs();
vi.restoreAllMocks();
});
async function advance() {
const { processProvisioning } = await import('../../src/lib/server/provisioning/worker.js');
await processProvisioning();
}
async function operationId(id: string) {
const { db } = await import('../../src/lib/server/db/index.js');
return (
db()
.prepare('SELECT operation_id FROM native_provisioning WHERE deployment_id=?')
.get(id) as { operation_id: string | null }
).operation_id;
}
async function waitingRestart() {
const { requestLifecycle } = await import('../../src/lib/server/provisioning/requests.js');
const result = requestLifecycle(server, 'restart');
if (!result.ok) throw new Error(result.error);
return result.deploymentId;
}
async function suspendInspection() {
const { nativeRequest } = await import('../../src/lib/server/backends/native.js');
let release!: () => void;
vi.mocked(nativeRequest).mockImplementationOnce(async () => {
await new Promise<void>((resolve) => {
release = resolve;
});
return healthy as never;
});
const running = advance();
await vi.waitFor(() => expect(release).toBeTypeOf('function'));
return { running, release };
}
async function stageCampaign() {
const { db } = await import('../../src/lib/server/db/index.js');
db()
.prepare(
"INSERT INTO deployments(id,action,started_at) VALUES('campaign-race','promote',?)"
)
.run(new Date().toISOString());
db()
.prepare(
"INSERT INTO deployment_servers(deployment_id,server,files_changed,restart_state) VALUES('campaign-race',?,1,'pending')"
)
.run(server);
const { createLibraryImport, updateHostLibraryCaches } =
await import('../../src/lib/server/game-files/index.js');
const library = createLibraryImport({ hostId, game: 't5' });
db()
.prepare(
"UPDATE game_file_versions SET state='ready',manifest='[]',manifest_sha256=?,size_bytes=1,published_at=? WHERE id=?"
)
.run('a'.repeat(64), new Date().toISOString(), library.id);
updateHostLibraryCaches(hostId, [
{ libraryVersionId: library.id, status: 'ready', manifestSha256: 'a'.repeat(64) }
]);
db().prepare('UPDATE native_instances SET library_id=? WHERE server=?').run(library.id, server);
const { reserveServerKey } = await import('../../src/lib/server/fleet/server-keys.js');
reserveServerKey(server, 't5', 'saved-key');
const backend = await import('../../src/lib/server/backends/native.js');
vi.spyOn(backend, 'runtimePasswordForServer').mockReturnValue('saved-password');
const { queueFileChange } = await import('../../src/lib/server/fleet/staged-files.js');
queueFileChange({
sourceKind: 'campaign',
sourceId: 'campaign-race',
server,
kind: 'script',
relPath: 'hud.gsc',
content: Buffer.from('reviewed campaign bytes'),
inventorySource: 'campaign:test'
});
const { requestRestart } = await import('../../src/lib/server/provisioning/requests.js');
const restart = requestRestart(server, { kind: 'campaign', id: 'campaign-race' });
await advance();
const staged = db()
.prepare('SELECT stage_operation_id FROM native_provisioning WHERE deployment_id=?')
.get(restart.id) as { stage_operation_id: string };
expect(staged.stage_operation_id).toBeTruthy();
const { reportHostOperation } = await import('../../src/lib/server/hosts/index.js');
reportHostOperation(hostId, staged.stage_operation_id, {
state: 'completed',
result: { state: 'staged' }
});
return restart.id;
}
describe('native disruption safety at dispatch', () => {
it('lets fresh occupied telemetry veto an empty RCON result and resumes after that evidence expires', async () => {
const id = await waitingRestart();
const { saveTelemetry } = await import('../../src/lib/server/fleet/telemetry.js');
saveTelemetry({
event: 'game_start',
server,
map: 'zombie_theater',
players: [{ name: 'Still playing', guid: 'player-1' }],
receivedAt: new Date().toISOString()
});
await advance();
expect(await operationId(id)).toBeNull();
const { db } = await import('../../src/lib/server/db/index.js');
expect(
db()
.prepare(
"SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.restart'"
)
.get()
).toEqual({ count: 0 });
db()
.prepare('UPDATE server_telemetry SET received_at=? WHERE server=?')
.run('2000-01-01T00:00:00Z', server);
await advance();
expect(await operationId(id)).toBeTypeOf('string');
});
it('holds destruction if a beta becomes active while remote inspection is pending', async () => {
const { destroyServer } = await import('../../src/lib/server/provisioning/instances.js');
const removal = destroyServer(server);
if (!removal.ok || !removal.deploymentId) throw new Error('Removal was not queued.');
const pending = await suspendInspection();
const { createScript } = await import('../../src/lib/server/fleet/scripts.js');
const { script, version } = createScript({
releaseVersion: '1.0.0',
name: 'Race beta',
kind: 'script',
targetRelPath: 'beta.gsc',
content: Buffer.from('main() {}'),
scopeType: 'game',
scopeValue: 't5'
});
const { db } = await import('../../src/lib/server/db/index.js');
const betaId = db()
.prepare(
"INSERT INTO betas(script_id,script_version_id,trigger_kind,state) VALUES(?,?,'manual','running')"
)
.run(script.id, version.id).lastInsertRowid;
db()
.prepare(
"INSERT INTO beta_servers(beta_id,server,had_original,stage) VALUES(?,?,0,'awaiting-empty')"
)
.run(betaId, server);
pending.release();
await pending.running;
expect(await operationId(removal.deploymentId)).toBeNull();
expect(db().prepare('SELECT name FROM servers WHERE name=?').get(server)).toEqual({
name: server
});
expect(
db()
.prepare(
"SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.remove'"
)
.get()
).toEqual({ count: 0 });
});
it.each(['cancel', 'change bytes'] as const)(
'does not activate staged files after a %s during remote inspection',
async (change) => {
const id = await stageCampaign();
const pending = await suspendInspection();
const { cancelStagedFiles, queueFileChange, stagedFileChanges } =
await import('../../src/lib/server/fleet/staged-files.js');
if (change === 'cancel') cancelStagedFiles('campaign', 'campaign-race', server);
else
queueFileChange({
sourceKind: 'campaign',
sourceId: 'campaign-race',
server,
kind: 'script',
relPath: 'hud.gsc',
content: Buffer.from('different unreviewed bytes'),
inventorySource: 'campaign:test'
});
pending.release();
await pending.running;
expect(await operationId(id)).toBeNull();
expect(stagedFileChanges('campaign', 'campaign-race')[0].state).toBe(
change === 'cancel' ? 'cancelled' : 'pending'
);
const { db } = await import('../../src/lib/server/db/index.js');
expect(
db()
.prepare(
"SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.restart'"
)
.get()
).toEqual({ count: 0 });
}
);
it('does not dispatch an old generation if the instance changes during inspection', async () => {
const id = await waitingRestart();
const pending = await suspendInspection();
const { db } = await import('../../src/lib/server/db/index.js');
db().prepare('UPDATE native_instances SET generation=2 WHERE id=?').run(instanceId);
pending.release();
await pending.running;
expect(await operationId(id)).toBeNull();
expect(
db()
.prepare(
"SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.restart'"
)
.get()
).toEqual({ count: 0 });
});
});
describe('provisioning admin override', () => {
const actor = { id: 'admin-id', username: 'recovery-admin' };
async function confirm(id: string) {
const { enableSafetyOverride } =
await import('../../src/lib/server/provisioning/safety-override.js');
expect(enableSafetyOverride(id, actor)).toEqual({ ok: true });
}
it.each(['restart', 'stop', 'destroy'] as const)(
'dispatches %s with unavailable player evidence only after confirmation',
async (action) => {
const { requestLifecycle } =
await import('../../src/lib/server/provisioning/requests.js');
const { destroyServer } =
await import('../../src/lib/server/provisioning/instances.js');
const result =
action === 'destroy' ? destroyServer(server) : requestLifecycle(server, action);
if (!result.ok || !result.deploymentId) throw new Error('Request failed');
const id = result.deploymentId;
const status = await import('../../src/lib/server/fleet/status-evidence.js');
vi.spyOn(status, 'probePlayerEvidence').mockResolvedValue({
players: null,
source: null,
observedAt: new Date().toISOString()
});
await advance();
expect(await operationId(id)).toBeNull();
const { getDeployment } = await import('../../src/lib/server/provisioning/history.js');
expect(getDeployment(id)).toMatchObject({
canOverrideSafety: true,
safetyOverride: null
});
await confirm(id);
await confirm(id);
const { db, closeDb } = await import('../../src/lib/server/db/index.js');
closeDb(); // Approval and attribution survive controller restart.
await advance();
const { getHostOperation } = await import('../../src/lib/server/hosts/index.js');
const commandId = (await operationId(id))!;
expect(getHostOperation(commandId)).toMatchObject({
kind: `instance.${action === 'destroy' ? 'remove' : action}`,
payload: { safetyOverride: true }
});
expect(getDeployment(id)).toMatchObject({
canOverrideSafety: false,
safetyOverride: { actorId: actor.id, actorName: actor.username }
});
expect(
db()
.prepare(
"SELECT COUNT(*) n FROM server_deployment_events WHERE deployment_id=? AND kind='safety-override'"
)
.get(id)
).toEqual({ n: 1 });
await advance();
expect(await operationId(id)).toBe(commandId);
}
);
it('bypasses occupied telemetry while retaining health verification after the restart', async () => {
const id = await waitingRestart();
const { saveTelemetry } = await import('../../src/lib/server/fleet/telemetry.js');
saveTelemetry({
event: 'game_start',
server,
map: 'zombie_theater',
players: [{ name: 'Playing', guid: '1' }],
receivedAt: new Date().toISOString()
});
await advance();
expect(await operationId(id)).toBeNull();
await confirm(id);
await advance();
const { reportHostOperation } = await import('../../src/lib/server/hosts/index.js');
reportHostOperation(hostId, (await operationId(id))!, { state: 'completed', result: {} });
const { nativeRequest } = await import('../../src/lib/server/backends/native.js');
vi.mocked(nativeRequest).mockResolvedValue({ state: 'running', healthy: false } as never);
await advance();
const { getDeployment } = await import('../../src/lib/server/provisioning/history.js');
expect(getDeployment(id)?.deployment.state).toBe('awaiting-health');
expect(getDeployment(id)?.progress?.checks).toContainEqual(
expect.objectContaining({ key: 'container', result: 'waiting' })
);
});
it('retains recovery capacity limits and cancellation after approval', async () => {
const id = await waitingRestart();
await confirm(id);
const { db } = await import('../../src/lib/server/db/index.js');
const { fleetSettings, saveFleetSettings } =
await import('../../src/lib/server/settings.js');
saveFleetSettings({ ...fleetSettings(), restartConcurrency: 1 });
db().prepare("INSERT INTO servers(name) VALUES('other')").run();
db()
.prepare("INSERT INTO restart_rollout(server,requested_at) VALUES('other',?)")
.run(new Date().toISOString());
await advance();
expect(await operationId(id)).toBeNull();
const { cancelProvisioningJob } =
await import('../../src/lib/server/provisioning/cancellation.js');
expect(cancelProvisioningJob(id)).toBe(true);
db().prepare("DELETE FROM restart_rollout WHERE server='other'").run();
await advance();
expect(await operationId(id)).toBeNull();
});
it('rejects old agents, stale instances, unsupported actions and submitted or terminal operations', async () => {
const id = await waitingRestart();
const { db } = await import('../../src/lib/server/db/index.js');
const { enableSafetyOverride, safetyOverrideAvailability } =
await import('../../src/lib/server/provisioning/safety-override.js');
db()
.prepare(
"UPDATE ec_hosts SET inventory=json_set(inventory,'$.capabilities',json('[]')) WHERE id=?"
)
.run(hostId);
expect(enableSafetyOverride(id, actor)).toMatchObject({
ok: false,
error: expect.stringContaining('Update')
});
for (const state of [
'running',
'awaiting-health',
'failed',
'interrupted',
'cancelled',
'done'
]) {
db().prepare('UPDATE server_deployments SET state=? WHERE id=?').run(state, id);
expect(safetyOverrideAvailability(id).applicable).toBe(false);
}
db()
.prepare("UPDATE server_deployments SET state='waiting',action='start' WHERE id=?")
.run(id);
expect(safetyOverrideAvailability(id).applicable).toBe(false);
db()
.prepare(
"UPDATE server_deployments SET action='restart',submitted_at='2026-10-05' WHERE id=?"
)
.run(id);
expect(safetyOverrideAvailability(id).applicable).toBe(false);
db().prepare('UPDATE server_deployments SET submitted_at=NULL WHERE id=?').run(id);
db().prepare('UPDATE native_instances SET generation=2 WHERE id=?').run(instanceId);
expect(safetyOverrideAvailability(id).applicable).toBe(false);
expect(enableSafetyOverride('missing', actor).ok).toBe(false);
});
it('rechecks approval after an in-flight inspection before dispatch', async () => {
const id = await waitingRestart();
const pending = await suspendInspection();
await confirm(id);
pending.release();
await pending.running;
expect(await operationId(id)).toBeNull();
await advance();
const { getHostOperation } = await import('../../src/lib/server/hosts/index.js');
expect(getHostOperation((await operationId(id))!)?.payload).toMatchObject({
safetyOverride: true
});
});
it('overrides a waiting campaign rebuild while keeping its staged changes attached', async () => {
const id = await stageCampaign();
const status = await import('../../src/lib/server/fleet/status-evidence.js');
vi.spyOn(status, 'probePlayerEvidence').mockResolvedValue({
players: null,
source: null,
observedAt: new Date().toISOString()
});
await advance();
expect(await operationId(id)).toBeNull();
await confirm(id);
await advance();
const { getHostOperation } = await import('../../src/lib/server/hosts/index.js');
const { getDeployment } = await import('../../src/lib/server/provisioning/history.js');
expect(getDeployment(id)?.deployment).toMatchObject({ state: 'running', error: null });
expect(getHostOperation((await operationId(id))!)).toMatchObject({
kind: 'instance.rebuild',
payload: { stageId: id, safetyOverride: true }
});
const { db } = await import('../../src/lib/server/db/index.js');
expect(
db()
.prepare("SELECT state FROM staged_file_changes WHERE source_id='campaign-race'")
.get()
).toEqual({ state: 'applying' });
});
it('requires an administrator and explicit confirmation at the API boundary', async () => {
const id = await waitingRestart();
const { POST } = await import('../../src/routes/api/provisioning/[id]/override/+server.js');
const request = (role: string | null, confirmed: unknown) =>
POST({
params: { id },
locals: { user: role ? { ...actor, role } : null },
request: new Request(`http://localhost/api/provisioning/${id}/override`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ confirmed })
})
} as Parameters<typeof POST>[0]);
for (const role of [null, 'viewer', 'operator'])
expect((await request(role, true)).status).toBe(403);
for (const value of [undefined, false, 'true', 1])
expect((await request('admin', value)).status).toBe(400);
expect((await request('admin', true)).status).toBe(202);
const { safetyOverride } =
await import('../../src/lib/server/provisioning/safety-override.js');
expect(safetyOverride(id)?.actorId).toBe(actor.id);
});
});
describe('native scheduler ownership', () => {
it('rejects lifecycle commands for a registry row without a host instance', async () => {
const { db } = await import('../../src/lib/server/db/index.js');
const { requestLifecycle } = await import('../../src/lib/server/provisioning/requests.js');
const { destroyServer } = await import('../../src/lib/server/provisioning/instances.js');
db().prepare("INSERT INTO servers(name) VALUES('unplaced-registry')").run();
expect(requestLifecycle('unplaced-registry', 'restart')).toMatchObject({
ok: false,
status: 503
});
expect(destroyServer('unplaced-registry')).toMatchObject({ ok: false, kind: 'conflict' });
expect(
db().prepare("SELECT id FROM server_deployments WHERE server='unplaced-registry'").all()
).toEqual([]);
});
it('shares restart capacity until an agent receipt and fresh health release the first slot', async () => {
const { db } = await import('../../src/lib/server/db/index.js');
const { fleetSettings, saveFleetSettings } =
await import('../../src/lib/server/settings.js');
const { requestLifecycle } = await import('../../src/lib/server/provisioning/requests.js');
const { reportHostOperation } = await import('../../src/lib/server/hosts/index.js');
saveFleetSettings({ ...fleetSettings(), restartConcurrency: 1 });
db()
.prepare(
"INSERT INTO servers(name,game,map,game_port) VALUES('second','t5','zombie_theater',28961)"
)
.run();
db()
.prepare(
`INSERT INTO native_instances(id,server,host_id,library_id,image,port,created_at)
SELECT 'second-instance','second',host_id,library_id,image,28961,created_at FROM native_instances WHERE id=?`
)
.run(instanceId);
const first = await waitingRestart();
const second = requestLifecycle('second', 'restart');
if (!second.ok) throw new Error(second.error);
await advance();
const command = await operationId(first);
expect(command).toEqual(expect.any(String));
expect(await operationId(second.deploymentId)).toBeNull();
await advance();
expect(await operationId(first)).toBe(command);
expect(await operationId(second.deploymentId)).toBeNull();
reportHostOperation(hostId, command!, { state: 'completed', result: healthy });
await advance();
await advance();
expect(db().prepare('SELECT state FROM server_deployments WHERE id=?').get(first)).toEqual({
state: 'done'
});
expect(await operationId(second.deploymentId)).toEqual(expect.any(String));
expect(
db().prepare("SELECT id FROM ec_host_operations WHERE kind='instance.restart'").all()
).toHaveLength(2);
});
it('holds a paused campaign and cancels withdrawn work before delivering a rebuild', async () => {
const id = await stageCampaign();
const { db } = await import('../../src/lib/server/db/index.js');
db()
.prepare(
"UPDATE deployment_servers SET restart_state='held' WHERE deployment_id='campaign-race'"
)
.run();
await advance();
expect(await operationId(id)).toBeNull();
expect(db().prepare('SELECT state FROM server_deployments WHERE id=?').get(id)).toEqual({
state: 'waiting'
});
db()
.prepare(
"UPDATE deployment_servers SET restart_state='done' WHERE deployment_id='campaign-race'"
)
.run();
await advance();
expect(await operationId(id)).toBeNull();
expect(db().prepare('SELECT state FROM server_deployments WHERE id=?').get(id)).toEqual({
state: 'cancelled'
});
expect(
db().prepare("SELECT id FROM ec_host_operations WHERE kind='instance.restart'").all()
).toEqual([]);
});
});