c044155855
index.ts declared the presence sequence below the startup try, so the bundle's hoisted var was undefined at the first publish; decodePrivateIdentity refused the Rust owner's integer-array key fields; both descriptors were re-read every pulse and returned nothing after the first. openPresenceAuthority now reads the bundle facts and each descriptor once (whole, from offset 0, then closed), owns the one publisher sequence, and signs through them; a launch-contract fault throws before anything listens, so the process exits non-zero. decodePrivateIdentity takes the shape of its source and names the failed check, never a value. openActivationSigner and the per-pulse descriptor reads are deleted. tests/idunn-boot.test.ts boots the bundle under the Idunn launch contract and checks the signed warming frames and the fail-fast exits. The descriptor, sequence and generation tests now use the Rust-written fixtures. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
83 lines
3.4 KiB
TypeScript
83 lines
3.4 KiB
TypeScript
import { mkdtemp, readdir, writeFile } from "node:fs/promises";
|
|
import os from "node:os";
|
|
import path from "node:path";
|
|
|
|
import { describe, expect, it } from "vitest";
|
|
|
|
import { loadConfig } from "../src/config.js";
|
|
import { PublisherSequence, openPresenceAuthority } from "../src/runtime-presence.js";
|
|
import { fixtureMachineId, openPresenceDescriptors, writePresenceFixtures } from "./fixtures/presence-descriptors.js";
|
|
|
|
describe("PublisherSequence", () => {
|
|
it("starts at the observed millis", () => {
|
|
expect(new PublisherSequence().next(1_700_000_000_000)).toBe(1_700_000_000_000);
|
|
});
|
|
|
|
it("strictly increases for equal, earlier and later observations", () => {
|
|
const sequence = new PublisherSequence();
|
|
const first = sequence.next(1_700_000_000_000);
|
|
const equal = sequence.next(1_700_000_000_000);
|
|
const earlier = sequence.next(1_699_999_990_000);
|
|
const later = sequence.next(1_700_000_050_000);
|
|
expect([first, equal, earlier, later]).toEqual([
|
|
1_700_000_000_000,
|
|
1_700_000_000_001,
|
|
1_700_000_000_002,
|
|
1_700_000_050_000,
|
|
]);
|
|
});
|
|
|
|
it("never falls below the observed millis once the clock moves ahead", () => {
|
|
const sequence = new PublisherSequence();
|
|
sequence.next(1_700_000_000_000);
|
|
sequence.next(1_700_000_000_000);
|
|
sequence.next(1_700_000_000_000);
|
|
expect(sequence.next(1_700_000_000_002)).toBe(1_700_000_000_003);
|
|
expect(sequence.next(1_700_000_000_010)).toBe(1_700_000_000_010);
|
|
});
|
|
|
|
it("refuses a value that is not a safe integer and keeps its place", () => {
|
|
const sequence = new PublisherSequence();
|
|
expect(sequence.next(10)).toBe(10);
|
|
for (const bad of [Number.NaN, Number.POSITIVE_INFINITY, 1.5, 2 ** 60]) {
|
|
expect(() => sequence.next(bad)).toThrow("observedAtUnixMillis");
|
|
}
|
|
expect(sequence.next(5)).toBe(11);
|
|
});
|
|
});
|
|
|
|
describe("the presence authority", () => {
|
|
it("opens once, touches no path under dataRoot, and signs every pulse after its descriptors are gone", async () => {
|
|
const dir = await mkdtemp(path.join(os.tmpdir(), "heimdall-nodataroot-"));
|
|
const fixtures = path.join(dir, "fixtures");
|
|
await writePresenceFixtures(fixtures);
|
|
// A regular file as dataRoot: opening anything beneath it fails with
|
|
// ENOTDIR for every uid, root included.
|
|
const dataRoot = path.join(dir, "not-a-directory");
|
|
await writeFile(dataRoot, "");
|
|
const config = loadConfig({
|
|
GC_ACCESS_BASE_URL: "https://heimdall.example.test",
|
|
GC_ACCESS_DATA_ROOT: dataRoot,
|
|
});
|
|
|
|
const descriptors = openPresenceDescriptors(fixtures);
|
|
try {
|
|
const authority = await openPresenceAuthority(
|
|
{ ...config, idunnRuntimeBundlePath: fixtures },
|
|
descriptors.env,
|
|
fixtureMachineId,
|
|
);
|
|
// The descriptors were read whole and closed: a second read would find
|
|
// nothing, so signing again proves the authority holds what it decoded.
|
|
const observedAtUnixMillis = Date.parse("2026-10-23T12:00:00.000Z");
|
|
const first = authority.sign("warming", "probe", observedAtUnixMillis);
|
|
const second = authority.sign("warming", "probe", observedAtUnixMillis);
|
|
expect(first.target).toBe("heimdall");
|
|
expect(second.target).toBe("heimdall");
|
|
expect(Buffer.from(second.payload).equals(Buffer.from(first.payload))).toBe(false);
|
|
} finally {
|
|
descriptors.close();
|
|
}
|
|
expect((await readdir(dir)).sort()).toEqual(["fixtures", "not-a-directory"]);
|
|
});
|
|
});
|