c044155855
index.ts declared the presence sequence below the startup try, so the bundle's hoisted var was undefined at the first publish; decodePrivateIdentity refused the Rust owner's integer-array key fields; both descriptors were re-read every pulse and returned nothing after the first. openPresenceAuthority now reads the bundle facts and each descriptor once (whole, from offset 0, then closed), owns the one publisher sequence, and signs through them; a launch-contract fault throws before anything listens, so the process exits non-zero. decodePrivateIdentity takes the shape of its source and names the failed check, never a value. openActivationSigner and the per-pulse descriptor reads are deleted. tests/idunn-boot.test.ts boots the bundle under the Idunn launch contract and checks the signed warming frames and the fail-fast exits. The descriptor, sequence and generation tests now use the Rust-written fixtures. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
57 lines
2.1 KiB
TypeScript
57 lines
2.1 KiB
TypeScript
/**
|
|
* One Idunn generation, as a process: it runs as the uid and gid its parent
|
|
* gave it, under UMask=0007, and does what Heimdall does to a state root on a
|
|
* pulse. The parent test spawns two of these under different uids that share
|
|
* a group.
|
|
*
|
|
* argv: <role: first|next> <stateRoot> <fixtureDir>
|
|
*/
|
|
import { readFile, writeFile } from "node:fs/promises";
|
|
import path from "node:path";
|
|
|
|
import { loadConfig } from "../../src/config.js";
|
|
import { openPresenceAuthority } from "../../src/runtime-presence.js";
|
|
import { fixtureMachineId, openPresenceDescriptors } from "./presence-descriptors.js";
|
|
import { createHeimdallRuntimePulse, publishHeimdallVerseState } from "../../src/verse-state.js";
|
|
|
|
const [role, stateRoot, fixtureDir] = process.argv.slice(2) as [string, string, string];
|
|
process.umask(0o007);
|
|
|
|
const config = loadConfig({
|
|
GC_ACCESS_BASE_URL: "https://heimdall.example.test",
|
|
GC_ACCESS_DATA_ROOT: stateRoot,
|
|
});
|
|
|
|
async function publishPresence(): Promise<void> {
|
|
const descriptors = openPresenceDescriptors(fixtureDir);
|
|
try {
|
|
const authority = await openPresenceAuthority(
|
|
{
|
|
idunnRuntimeBundlePath: fixtureDir,
|
|
host: config.host,
|
|
port: config.port,
|
|
providerHealthIdentityPath: path.join(stateRoot, "provider-health-identity.cc"),
|
|
},
|
|
descriptors.env,
|
|
() => fixtureMachineId(fixtureDir),
|
|
);
|
|
authority.sign("warming", "generation probe", Date.now());
|
|
} finally {
|
|
descriptors.close();
|
|
}
|
|
}
|
|
|
|
if (role === "next") {
|
|
// Generation N+1 reads what N left before it replaces it.
|
|
const previous = await readFile(config.cultCachePath);
|
|
if (previous.length === 0) throw new Error("previous generation's snapshot is empty");
|
|
}
|
|
|
|
await publishHeimdallVerseState(config, createHeimdallRuntimePulse(config));
|
|
await publishPresence();
|
|
|
|
if (role === "first") {
|
|
// The 0600 counter the 2026-09-07 generation left behind. Nothing reads it
|
|
// now; it stays as the stale fixture the next generation must live beside.
|
|
await writeFile(path.join(stateRoot, "runtime-presence-sequence"), "41\n", { mode: 0o600 });
|
|
}
|