302 lines
21 KiB
TypeScript
302 lines
21 KiB
TypeScript
import { randomUUID } from 'node:crypto';
|
|
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
|
|
import { newFixture, type Fixture } from '../helpers/fixture.js';
|
|
|
|
vi.mock('../../src/lib/server/integrations/rcon.js', () => ({
|
|
rconStatusResult: vi.fn(async () => ({ ok: true, endpoint: { host: 'agent', port: 28960 }, status: { players: 0, map: 'zombie_theater', gametype: 'zom', roster: [] } })),
|
|
rconGetPlayerCount: vi.fn(async () => 0), rconPlutoniumVersion: vi.fn(async () => ({ revision: 5354, error: null }))
|
|
}));
|
|
vi.mock('../../src/lib/server/pipeline/worker.js', () => ({ kick: vi.fn(async () => {}), kickProvisioning: vi.fn(async () => {}) }));
|
|
|
|
let fixture: Fixture; let hostId: string; let instanceId: string;
|
|
const server = 't5_zombie_theater_1';
|
|
const healthy = { exists: true, healthy: true, state: 'running' };
|
|
beforeEach(async () => {
|
|
vi.resetModules(); vi.clearAllMocks(); fixture = await newFixture([]);
|
|
|
|
const { createHost, createEnrollment, enrollHost } = await import('../../src/lib/server/hosts/index.js');
|
|
hostId = createHost({ name: 'Safety test host' }).id;
|
|
enrollHost(createEnrollment(hostId).token, { protocolVersion: 1, dockerRunning: true, directoriesWritable: true,
|
|
storageAvailable: 100_000_000_000, runtimeImages: ['plutainer:test'], libraries: [{ id: 'published-game-version', state: 'ready' }], capabilities: ['instance.safety-override'] });
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
instanceId = randomUUID();
|
|
db().prepare("INSERT INTO servers(name,game,map,game_mode,map_slug,game_port,container_state) VALUES(?,'t5','zombie_theater','zombie','theater',28960,'running')").run(server);
|
|
db().prepare(`INSERT INTO native_instances(id,server,host_id,library_id,image,port,created_at) VALUES(?,?,?,'published-game-version','plutainer:test',28960,?)`).run(instanceId, server, hostId, new Date().toISOString());
|
|
const backend = await import('../../src/lib/server/backends/native.js');
|
|
vi.spyOn(backend, 'nativeRequest').mockImplementation(async (_instance, kind) => {
|
|
if (kind !== 'instance.inspect') throw new Error(`Unexpected remote mutation: ${kind}`);
|
|
return healthy as never;
|
|
});
|
|
});
|
|
afterEach(async () => { await fixture.cleanup(); vi.unstubAllEnvs(); vi.restoreAllMocks(); });
|
|
|
|
async function advance() {
|
|
const { processProvisioning } = await import('../../src/lib/server/provisioning/worker.js');
|
|
await processProvisioning();
|
|
}
|
|
async function operationId(id: string) {
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
return (db().prepare('SELECT operation_id FROM native_provisioning WHERE deployment_id=?').get(id) as { operation_id: string | null }).operation_id;
|
|
}
|
|
async function waitingRestart() {
|
|
const { requestLifecycle } = await import('../../src/lib/server/provisioning/requests.js');
|
|
const result = requestLifecycle(server, 'restart'); if (!result.ok) throw new Error(result.error);
|
|
return result.deploymentId;
|
|
}
|
|
async function suspendInspection() {
|
|
const { nativeRequest } = await import('../../src/lib/server/backends/native.js');
|
|
let release!: () => void;
|
|
vi.mocked(nativeRequest).mockImplementationOnce(async () => { await new Promise<void>(resolve => { release = resolve; }); return healthy as never; });
|
|
const running = advance();
|
|
await vi.waitFor(() => expect(release).toBeTypeOf('function'));
|
|
return { running, release };
|
|
}
|
|
async function stageCampaign() {
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
db().prepare("INSERT INTO deployments(id,action,started_at) VALUES('campaign-race','promote',?)").run(new Date().toISOString());
|
|
db().prepare("INSERT INTO deployment_servers(deployment_id,server,files_changed,restart_state) VALUES('campaign-race',?,1,'pending')").run(server);
|
|
const { queueFileChange } = await import('../../src/lib/server/fleet/staged-files.js');
|
|
queueFileChange({ sourceKind: 'campaign', sourceId: 'campaign-race', server, kind: 'script', relPath: 'hud.gsc', content: Buffer.from('reviewed campaign bytes'), inventorySource: 'campaign:test' });
|
|
const { requestRestart } = await import('../../src/lib/server/provisioning/requests.js');
|
|
const restart = requestRestart(server, { kind: 'campaign', id: 'campaign-race' });
|
|
await advance();
|
|
const staged = db().prepare('SELECT stage_operation_id FROM native_provisioning WHERE deployment_id=?').get(restart.id) as { stage_operation_id: string };
|
|
expect(staged.stage_operation_id).toBeTruthy();
|
|
const { reportHostOperation } = await import('../../src/lib/server/hosts/index.js');
|
|
reportHostOperation(hostId, staged.stage_operation_id, { state: 'completed', result: { state: 'staged' } });
|
|
return restart.id;
|
|
}
|
|
|
|
describe('native disruption safety at dispatch', () => {
|
|
it('lets fresh occupied telemetry veto an empty RCON result and resumes after that evidence expires', async () => {
|
|
const id = await waitingRestart();
|
|
const { saveTelemetry } = await import('../../src/lib/server/fleet/telemetry.js');
|
|
saveTelemetry({ event: 'game_start', server, map: 'zombie_theater', players: [{ name: 'Still playing', guid: 'player-1' }], receivedAt: new Date().toISOString() });
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
expect(db().prepare("SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.restart'").get()).toEqual({ count: 0 });
|
|
db().prepare('UPDATE server_telemetry SET received_at=? WHERE server=?').run('2000-01-01T00:00:00Z', server);
|
|
await advance();
|
|
expect(await operationId(id)).toBeTypeOf('string');
|
|
});
|
|
|
|
it('holds destruction if a beta becomes active while remote inspection is pending', async () => {
|
|
const { destroyServer } = await import('../../src/lib/server/provisioning/instances.js');
|
|
const removal = destroyServer(server); if (!removal.ok || !removal.deploymentId) throw new Error('Removal was not queued.');
|
|
const pending = await suspendInspection();
|
|
const { createScript } = await import('../../src/lib/server/fleet/scripts.js');
|
|
const { script, version } = createScript({ name: 'Race beta', kind: 'script', targetRelPath: 'beta.gsc', content: Buffer.from('main() {}'), scopeType: 'game', scopeValue: 't5' });
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
const betaId = db().prepare("INSERT INTO betas(script_id,script_version_id,trigger_kind,state) VALUES(?,?,'manual','running')").run(script.id, version.id).lastInsertRowid;
|
|
db().prepare("INSERT INTO beta_servers(beta_id,server,had_original,stage) VALUES(?,?,0,'awaiting-empty')").run(betaId, server);
|
|
pending.release(); await pending.running;
|
|
expect(await operationId(removal.deploymentId)).toBeNull();
|
|
expect(db().prepare('SELECT name FROM servers WHERE name=?').get(server)).toEqual({ name: server });
|
|
expect(db().prepare("SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.remove'").get()).toEqual({ count: 0 });
|
|
});
|
|
|
|
it.each(['cancel', 'change bytes'] as const)('does not activate staged files after a %s during remote inspection', async change => {
|
|
const id = await stageCampaign();
|
|
const pending = await suspendInspection();
|
|
const { cancelStagedFiles, queueFileChange, stagedFileChanges } = await import('../../src/lib/server/fleet/staged-files.js');
|
|
if (change === 'cancel') cancelStagedFiles('campaign', 'campaign-race', server);
|
|
else queueFileChange({ sourceKind: 'campaign', sourceId: 'campaign-race', server, kind: 'script', relPath: 'hud.gsc', content: Buffer.from('different unreviewed bytes'), inventorySource: 'campaign:test' });
|
|
pending.release(); await pending.running;
|
|
expect(await operationId(id)).toBeNull();
|
|
expect(stagedFileChanges('campaign', 'campaign-race')[0].state).toBe(change === 'cancel' ? 'cancelled' : 'pending');
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
expect(db().prepare("SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.restart'").get()).toEqual({ count: 0 });
|
|
});
|
|
|
|
it('does not dispatch an old generation if the instance changes during inspection', async () => {
|
|
const id = await waitingRestart();
|
|
const pending = await suspendInspection();
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
db().prepare('UPDATE native_instances SET generation=2 WHERE id=?').run(instanceId);
|
|
pending.release(); await pending.running;
|
|
expect(await operationId(id)).toBeNull();
|
|
expect(db().prepare("SELECT COUNT(*) AS count FROM ec_host_operations WHERE kind='instance.restart'").get()).toEqual({ count: 0 });
|
|
});
|
|
});
|
|
|
|
describe('provisioning admin override', () => {
|
|
const actor = { id: 'admin-id', username: 'recovery-admin' };
|
|
async function confirm(id: string) {
|
|
const { enableSafetyOverride } = await import('../../src/lib/server/provisioning/safety-override.js');
|
|
expect(enableSafetyOverride(id, actor)).toEqual({ ok: true });
|
|
}
|
|
|
|
it.each(['restart', 'stop', 'destroy'] as const)('dispatches %s with unavailable player evidence only after confirmation', async action => {
|
|
const { requestLifecycle } = await import('../../src/lib/server/provisioning/requests.js');
|
|
const { destroyServer } = await import('../../src/lib/server/provisioning/instances.js');
|
|
const result = action === 'destroy' ? destroyServer(server) : requestLifecycle(server, action);
|
|
if (!result.ok || !result.deploymentId) throw new Error('Request failed');
|
|
const id = result.deploymentId;
|
|
const status = await import('../../src/lib/server/fleet/status-evidence.js');
|
|
vi.spyOn(status, 'probePlayerEvidence').mockResolvedValue({ players: null, source: null, observedAt: new Date().toISOString() });
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
const { getDeployment } = await import('../../src/lib/server/provisioning/history.js');
|
|
expect(getDeployment(id)).toMatchObject({ canOverrideSafety: true, safetyOverride: null });
|
|
await confirm(id);
|
|
await confirm(id);
|
|
const { db, closeDb } = await import('../../src/lib/server/db/index.js');
|
|
closeDb(); // Approval and attribution survive controller restart.
|
|
await advance();
|
|
const { getHostOperation } = await import('../../src/lib/server/hosts/index.js');
|
|
const commandId = (await operationId(id))!;
|
|
expect(getHostOperation(commandId)).toMatchObject({ kind: `instance.${action === 'destroy' ? 'remove' : action}`, payload: { safetyOverride: true } });
|
|
expect(getDeployment(id)).toMatchObject({ canOverrideSafety: false, safetyOverride: { actorId: actor.id, actorName: actor.username } });
|
|
expect(db().prepare("SELECT COUNT(*) n FROM server_deployment_events WHERE deployment_id=? AND kind='safety-override'").get(id)).toEqual({ n: 1 });
|
|
await advance();
|
|
expect(await operationId(id)).toBe(commandId);
|
|
});
|
|
|
|
it('bypasses occupied telemetry while retaining health verification after the restart', async () => {
|
|
const id = await waitingRestart();
|
|
const { saveTelemetry } = await import('../../src/lib/server/fleet/telemetry.js');
|
|
saveTelemetry({ event: 'game_start', server, map: 'zombie_theater', players: [{ name: 'Playing', guid: '1' }], receivedAt: new Date().toISOString() });
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
await confirm(id);
|
|
await advance();
|
|
const { reportHostOperation } = await import('../../src/lib/server/hosts/index.js');
|
|
reportHostOperation(hostId, (await operationId(id))!, { state: 'completed', result: {} });
|
|
const { nativeRequest } = await import('../../src/lib/server/backends/native.js');
|
|
vi.mocked(nativeRequest).mockResolvedValue({ state: 'running', healthy: false } as never);
|
|
await advance();
|
|
const { getDeployment } = await import('../../src/lib/server/provisioning/history.js');
|
|
expect(getDeployment(id)?.deployment.state).toBe('awaiting-health');
|
|
expect(getDeployment(id)?.progress?.checks).toContainEqual(expect.objectContaining({ key: 'container', result: 'waiting' }));
|
|
});
|
|
|
|
it('retains recovery capacity limits and cancellation after approval', async () => {
|
|
const id = await waitingRestart();
|
|
await confirm(id);
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
const { fleetSettings, saveFleetSettings } = await import('../../src/lib/server/settings.js');
|
|
saveFleetSettings({ ...fleetSettings(), restartConcurrency: 1 });
|
|
db().prepare("INSERT INTO servers(name) VALUES('other')").run();
|
|
db().prepare("INSERT INTO restart_rollout(server,requested_at) VALUES('other',?)").run(new Date().toISOString());
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
const { cancelProvisioningJob } = await import('../../src/lib/server/provisioning/cancellation.js');
|
|
expect(cancelProvisioningJob(id)).toBe(true);
|
|
db().prepare("DELETE FROM restart_rollout WHERE server='other'").run();
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
});
|
|
|
|
it('rejects old agents, stale instances, unsupported actions and submitted or terminal operations', async () => {
|
|
const id = await waitingRestart();
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
const { enableSafetyOverride, safetyOverrideAvailability } = await import('../../src/lib/server/provisioning/safety-override.js');
|
|
db().prepare("UPDATE ec_hosts SET inventory=json_set(inventory,'$.capabilities',json('[]')) WHERE id=?").run(hostId);
|
|
expect(enableSafetyOverride(id, actor)).toMatchObject({ ok: false, error: expect.stringContaining('Update') });
|
|
for (const state of ['running', 'awaiting-health', 'failed', 'interrupted', 'cancelled', 'done']) {
|
|
db().prepare('UPDATE server_deployments SET state=? WHERE id=?').run(state, id);
|
|
expect(safetyOverrideAvailability(id).applicable).toBe(false);
|
|
}
|
|
db().prepare("UPDATE server_deployments SET state='waiting',action='start' WHERE id=?").run(id);
|
|
expect(safetyOverrideAvailability(id).applicable).toBe(false);
|
|
db().prepare("UPDATE server_deployments SET action='restart',submitted_at='2026-10-05' WHERE id=?").run(id);
|
|
expect(safetyOverrideAvailability(id).applicable).toBe(false);
|
|
db().prepare('UPDATE server_deployments SET submitted_at=NULL WHERE id=?').run(id);
|
|
db().prepare('UPDATE native_instances SET generation=2 WHERE id=?').run(instanceId);
|
|
expect(safetyOverrideAvailability(id).applicable).toBe(false);
|
|
expect(enableSafetyOverride('missing', actor).ok).toBe(false);
|
|
});
|
|
|
|
it('rechecks approval after an in-flight inspection before dispatch', async () => {
|
|
const id = await waitingRestart();
|
|
const pending = await suspendInspection();
|
|
await confirm(id);
|
|
pending.release(); await pending.running;
|
|
expect(await operationId(id)).toBeNull();
|
|
await advance();
|
|
const { getHostOperation } = await import('../../src/lib/server/hosts/index.js');
|
|
expect(getHostOperation((await operationId(id))!)?.payload).toMatchObject({ safetyOverride: true });
|
|
});
|
|
|
|
it('overrides a waiting campaign restart while keeping its staged changes attached', async () => {
|
|
const id = await stageCampaign();
|
|
const status = await import('../../src/lib/server/fleet/status-evidence.js');
|
|
vi.spyOn(status, 'probePlayerEvidence').mockResolvedValue({ players: null, source: null, observedAt: new Date().toISOString() });
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
await confirm(id);
|
|
await advance();
|
|
const { getHostOperation } = await import('../../src/lib/server/hosts/index.js');
|
|
expect(getHostOperation((await operationId(id))!)?.payload).toMatchObject({ stageId: id, safetyOverride: true });
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
expect(db().prepare("SELECT state FROM staged_file_changes WHERE source_id='campaign-race'").get()).toEqual({ state: 'applying' });
|
|
});
|
|
|
|
it('requires an administrator and explicit confirmation at the API boundary', async () => {
|
|
const id = await waitingRestart();
|
|
const { POST } = await import('../../src/routes/api/provisioning/[id]/override/+server.js');
|
|
const request = (role: string | null, confirmed: unknown) => POST({ params: { id }, locals: { user: role ? { ...actor, role } : null },
|
|
request: new Request(`http://localhost/api/provisioning/${id}/override`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ confirmed }) })
|
|
} as Parameters<typeof POST>[0]);
|
|
for (const role of [null, 'viewer', 'operator']) expect((await request(role, true)).status).toBe(403);
|
|
for (const value of [undefined, false, 'true', 1]) expect((await request('admin', value)).status).toBe(400);
|
|
expect((await request('admin', true)).status).toBe(202);
|
|
const { safetyOverride } = await import('../../src/lib/server/provisioning/safety-override.js');
|
|
expect(safetyOverride(id)?.actorId).toBe(actor.id);
|
|
});
|
|
});
|
|
|
|
describe('native scheduler ownership', () => {
|
|
it('rejects lifecycle commands for a registry row without a host instance', async () => {
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
const { requestLifecycle } = await import('../../src/lib/server/provisioning/requests.js');
|
|
const { destroyServer } = await import('../../src/lib/server/provisioning/instances.js');
|
|
db().prepare("INSERT INTO servers(name) VALUES('unplaced-registry')").run();
|
|
expect(requestLifecycle('unplaced-registry', 'restart')).toMatchObject({ ok: false, status: 503 });
|
|
expect(destroyServer('unplaced-registry')).toMatchObject({ ok: false, kind: 'conflict' });
|
|
expect(db().prepare("SELECT id FROM server_deployments WHERE server='unplaced-registry'").all()).toEqual([]);
|
|
});
|
|
|
|
it('shares restart capacity until an agent receipt and fresh health release the first slot', async () => {
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
const { fleetSettings, saveFleetSettings } = await import('../../src/lib/server/settings.js');
|
|
const { requestLifecycle } = await import('../../src/lib/server/provisioning/requests.js');
|
|
const { reportHostOperation } = await import('../../src/lib/server/hosts/index.js');
|
|
saveFleetSettings({ ...fleetSettings(), restartConcurrency: 1 });
|
|
db().prepare("INSERT INTO servers(name,game,map,game_port) VALUES('second','t5','zombie_theater',28961)").run();
|
|
db().prepare(`INSERT INTO native_instances(id,server,host_id,library_id,image,port,created_at)
|
|
SELECT 'second-instance','second',host_id,library_id,image,28961,created_at FROM native_instances WHERE id=?`).run(instanceId);
|
|
const first = await waitingRestart();
|
|
const second = requestLifecycle('second', 'restart');
|
|
if (!second.ok) throw new Error(second.error);
|
|
await advance();
|
|
const command = await operationId(first);
|
|
expect(command).toEqual(expect.any(String));
|
|
expect(await operationId(second.deploymentId)).toBeNull();
|
|
await advance();
|
|
expect(await operationId(first)).toBe(command);
|
|
expect(await operationId(second.deploymentId)).toBeNull();
|
|
reportHostOperation(hostId, command!, { state: 'completed', result: healthy });
|
|
await advance();
|
|
await advance();
|
|
expect(db().prepare('SELECT state FROM server_deployments WHERE id=?').get(first)).toEqual({ state: 'done' });
|
|
expect(await operationId(second.deploymentId)).toEqual(expect.any(String));
|
|
expect(db().prepare("SELECT id FROM ec_host_operations WHERE kind='instance.restart'").all()).toHaveLength(2);
|
|
});
|
|
|
|
it('holds a paused campaign and cancels withdrawn work before delivering a restart', async () => {
|
|
const id = await stageCampaign();
|
|
const { db } = await import('../../src/lib/server/db/index.js');
|
|
db().prepare("UPDATE deployment_servers SET restart_state='held' WHERE deployment_id='campaign-race'").run();
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
expect(db().prepare('SELECT state FROM server_deployments WHERE id=?').get(id)).toEqual({ state: 'waiting' });
|
|
db().prepare("UPDATE deployment_servers SET restart_state='done' WHERE deployment_id='campaign-race'").run();
|
|
await advance();
|
|
expect(await operationId(id)).toBeNull();
|
|
expect(db().prepare('SELECT state FROM server_deployments WHERE id=?').get(id)).toEqual({ state: 'cancelled' });
|
|
expect(db().prepare("SELECT id FROM ec_host_operations WHERE kind='instance.restart'").all()).toEqual([]);
|
|
});
|
|
});
|