mirror of
https://github.com/badlogic/pi-mono.git
synced 2026-11-05 23:37:25 +00:00
072e413bf3
chord/next/app: startApp and startWorker with the fixed app layout, worker kinds, AppInfo and WorkerInfo; sessions (hashed tokens, rolling cookies, bearer tokens), the one-time owner link, the owner token file, device pairing; Files per host with ordered chunked uploads; export and import per address; plugin roots, installs and applyChanges; optional users, invite and ephemeral login facets. HTTP: deny by default (public routes and sockets), remoteAddress, readSignedCookie. Examples 53-55.
308 lines
14 KiB
TypeScript
308 lines
14 KiB
TypeScript
// Tests of `startApp` (slice 13 §1, §4, §5): the layout and the start-data object, start and close, a server without
|
|
// workers, two worker kinds, `applyChanges`, a required root failing, and export and import per address (documents,
|
|
// tables and files round-trip; an existing address refused).
|
|
|
|
import { chmod, mkdir, readdir, stat, symlink, writeFile } from "node:fs/promises";
|
|
import { homedir } from "node:os";
|
|
import { join } from "node:path";
|
|
import { describe, expect, it } from "vitest";
|
|
import { BACKGROUND_CONTEXT as context } from "../../../src/context/index.ts";
|
|
import { hostKind, local, remote, str, unknown } from "../../../src/next/contracts/index.ts";
|
|
import { AppInfo } from "../../../src/next-node/app/index.ts";
|
|
import { rejection } from "../../next/support.ts";
|
|
import { send } from "../http/support.ts";
|
|
import { gitRepository, writePlugin } from "../plugins/support.ts";
|
|
import { ECHO_SERVER, NOTES_PLUGIN, Notes, Project, tempDir, testApp, WORKER_ENTRY } from "./support.ts";
|
|
|
|
const Echo = local("test.echo", { version: 1, params: {}, members: { text: str() } });
|
|
|
|
describe("starting and closing", () => {
|
|
it("lays out the data directory, serves AppInfo and the server's plugins, and closes everything", async () => {
|
|
const { app, dataDir, port } = await testApp({ plugins: { echo: { "server.ts": ECHO_SERVER } } });
|
|
expect((await readdir(dataDir)).sort()).toEqual(["logs", "owner-token", "plugins", "server", "workers"]);
|
|
expect((await readdir(join(dataDir, "server"))).filter((name) => !name.startsWith("."))).toEqual(
|
|
expect.arrayContaining(["cookie-secret", "store.sqlite"]),
|
|
);
|
|
const info = await app.host.get(AppInfo, {}, context);
|
|
expect([info.dataDir.value, info.name.value, info.version.value]).toEqual([dataDir, "chord-test", "v1"]);
|
|
expect((await app.host.get(Echo, {}, context)).text.value).toBe("echo");
|
|
expect(app.ownerLink()).toMatch(new RegExp(`^http://127\\.0\\.0\\.1:${port}/_chord/owner#[A-Za-z0-9_-]{43}$`));
|
|
expect(app.workers.size).toBe(0);
|
|
await app.close(context);
|
|
// HTTP closed first: the port answers nothing any more; a second close is the same close.
|
|
await expect(send(port, "GET", "/")).rejects.toThrow();
|
|
await app.close(context);
|
|
});
|
|
|
|
it("refuses a second server on the same data directory while the first runs", async () => {
|
|
const first = await testApp();
|
|
const second = await rejection(testApp({ dataDir: first.dataDir, root: first.root }));
|
|
expect(String(second)).toContain(`another server runs on ${first.dataDir}`);
|
|
await first.app.close(context);
|
|
const third = await testApp({ dataDir: first.dataDir, root: first.root });
|
|
await third.app.close(context);
|
|
});
|
|
|
|
it("refuses a second server on the same data directory through a symbolic link (review L3)", async () => {
|
|
const first = await testApp();
|
|
const link = join(await tempDir(), "link");
|
|
await symlink(first.dataDir, link);
|
|
expect(String(await rejection(testApp({ dataDir: link, root: first.root })))).toContain("another server runs on");
|
|
await first.app.close(context);
|
|
});
|
|
|
|
it("makes the data directory private at every start, also when it existed looser (review M3)", async () => {
|
|
const dataDir = join(await tempDir(), "data");
|
|
await mkdir(join(dataDir, "server"), { recursive: true, mode: 0o775 });
|
|
await chmod(dataDir, 0o755);
|
|
await chmod(join(dataDir, "server"), 0o775);
|
|
const { app } = await testApp({ dataDir });
|
|
const mode = async (path: string) => (await stat(join(dataDir, path))).mode & 0o777;
|
|
const paths = [
|
|
".",
|
|
"server",
|
|
"workers",
|
|
"plugins",
|
|
"logs",
|
|
"server/store.sqlite",
|
|
"server/cookie-secret",
|
|
"owner-token",
|
|
];
|
|
expect(await Promise.all(paths.map(mode))).toEqual([0o700, 0o700, 0o700, 0o700, 0o700, 0o600, 0o600, 0o600]);
|
|
await app.close(context);
|
|
await chmod(join(dataDir, "server", "store.sqlite"), 0o644);
|
|
await chmod(join(dataDir, "owner-token"), 0o644);
|
|
const again = await testApp({ dataDir });
|
|
expect([await mode("server/store.sqlite"), await mode("owner-token")]).toEqual([0o600, 0o600]);
|
|
await again.app.close(context);
|
|
});
|
|
|
|
it("refuses a data directory the kit must not tighten: home, root, another user's, also through a link (recheck N4)", async () => {
|
|
const homeMode = (await stat(homedir())).mode & 0o777;
|
|
expect(String(await rejection(testApp({ dataDir: homedir() })))).toContain("is the home directory");
|
|
expect(String(await rejection(testApp({ dataDir: "/" })))).toContain("is a file system's root");
|
|
const link = join(await tempDir(), "home-link");
|
|
await symlink(homedir(), link);
|
|
expect(String(await rejection(testApp({ dataDir: link })))).toContain("is the home directory");
|
|
expect((await stat(homedir())).mode & 0o777).toBe(homeMode);
|
|
if (process.getuid?.() !== 0) {
|
|
// `/tmp`'s owner is root.
|
|
expect(String(await rejection(testApp({ dataDir: "/tmp" })))).toContain("belongs to another user");
|
|
}
|
|
});
|
|
|
|
it("names the address listened on in the owner link (review L4)", async () => {
|
|
const { app } = await testApp({ listen: { host: "::1", port: 0 } });
|
|
expect(app.ownerLink()).toMatch(/^http:\/\/\[::1\]:\d+\/_chord\/owner#/);
|
|
await app.close(context);
|
|
});
|
|
|
|
it("rejects when a plugin of the app's root fails, with everything closed", async () => {
|
|
const base = await tempDir();
|
|
const root = join(base, "plugins");
|
|
await writePlugin(root, "broken", "@test/broken", { "server.ts": "export default {" });
|
|
const dataDir = join(base, "data");
|
|
const error = await rejection(testApp({ root, dataDir }));
|
|
expect(error).toMatchObject({ name: "PluginError" });
|
|
expect(String(error)).toContain('"@test/broken"');
|
|
// Closed: the data directory's lock is free again (a second start fails only on the same plugin).
|
|
expect(await rejection(testApp({ root, dataDir }))).toMatchObject({ name: "PluginError" });
|
|
});
|
|
});
|
|
|
|
describe("workers", () => {
|
|
it("starts a worker per address with the kit's start data and its own directory; two kinds side by side", async () => {
|
|
const Team = hostKind("team", { id: str() });
|
|
const Members = remote("test.members", {
|
|
version: 1,
|
|
params: { id: str() },
|
|
hostAddress: ({ id }) => Team({ id }),
|
|
variants: { main: { state: { start: unknown() } } },
|
|
});
|
|
const team = [
|
|
'import { defineFacet, hostKind, remote, str, unknown, WorkerInfo } from "@test/app/v1";',
|
|
'const Team = hostKind("team", { id: str() });',
|
|
'const Members = remote("test.members", { version: 1, params: { id: str() }, hostAddress: ({ id }) => Team({ id }), variants: { main: { state: { start: unknown() } } } });',
|
|
"export default defineFacet((host) => host.serve(Members, (_params, _principal, self) => {",
|
|
"\tconst info = self.get(WorkerInfo, {});",
|
|
'\treturn { variant: "main", members: { start: self.derive([info.start], ([value]) => value) } };',
|
|
"}));",
|
|
].join("\n");
|
|
const base = await tempDir();
|
|
const root = join(base, "plugins");
|
|
await writePlugin(root, "notes", "@test/notes", NOTES_PLUGIN);
|
|
await writePlugin(root, "team", "@test/team", { "teamworker.ts": team });
|
|
const { app, dataDir } = await testApp({
|
|
root,
|
|
withWorkers: true,
|
|
kinds: { server: { platform: "node" }, worker: { platform: "node" }, teamworker: { platform: "node" } },
|
|
workers: [
|
|
{
|
|
kind: Project,
|
|
entry: WORKER_ENTRY,
|
|
execArgv: ["--conditions=source", "--experimental-strip-types", "--no-warnings"],
|
|
start: (address) => ({ project: address.key }),
|
|
authorize: () => true,
|
|
},
|
|
{
|
|
kind: Team,
|
|
entry: WORKER_ENTRY,
|
|
facet: "teamworker",
|
|
execArgv: ["--conditions=source", "--experimental-strip-types", "--no-warnings"],
|
|
start: (address) => ({ team: address.key }),
|
|
authorize: () => true,
|
|
},
|
|
],
|
|
});
|
|
const notes = await app.host.get(Notes, { id: "p1" }, context);
|
|
const members = await app.host.get(Members, { id: "t1" }, context);
|
|
expect([notes.start.value, members.start.value]).toEqual([{ project: "project|p1" }, { team: "team|t1" }]);
|
|
expect(await readdir(join(dataDir, "workers"))).toEqual(["project", "team"]);
|
|
expect(await readdir(join(dataDir, "workers", "project"))).toEqual(["project%7Cp1"]);
|
|
notes.release();
|
|
members.release();
|
|
await app.close(context);
|
|
}, 60_000);
|
|
|
|
it("applies changes: builds the dirty plugins and rolls them out to the server, then the workers", async () => {
|
|
const { app, root } = await testApp({ plugins: { echo: { "server.ts": ECHO_SERVER } } });
|
|
const echo = await app.host.get(Echo, {}, context);
|
|
await writeFile(join(root, "echo", "server.ts"), ECHO_SERVER.replace('"echo"', '"changed"'));
|
|
while (!app.plugins.state.value.dirty.includes("@test/echo"))
|
|
await new Promise((resolve) => setTimeout(resolve, 10));
|
|
const result = await app.applyChanges(context);
|
|
expect(result.stopped).toBeUndefined();
|
|
expect(result.steps.map(({ name }) => name)).toEqual(["server"]);
|
|
expect(echo.text.value).toBe("changed");
|
|
expect(app.plugins.state.value.dirty).toEqual([]);
|
|
await app.close(context);
|
|
});
|
|
});
|
|
|
|
describe("installs", () => {
|
|
it("installs a plugin from git into the user's root; applying changes loads it", async () => {
|
|
const tools = await tempDir();
|
|
await writeFile(join(tools, "npm.mjs"), "process.exit(0);");
|
|
const repository = await gitRepository(
|
|
"echo",
|
|
{ "package.json": JSON.stringify({ name: "@bob/echo" }), "server.ts": ECHO_SERVER },
|
|
"v1",
|
|
);
|
|
const { app, dataDir } = await testApp({ install: { npmCommand: [process.execPath, join(tools, "npm.mjs")] } });
|
|
expect(await app.plugins.install({ git: repository.url, ref: "v1" }, context)).toEqual(["@bob/echo"]);
|
|
expect(await readdir(join(dataDir, "plugins"))).toEqual(["echo"]);
|
|
expect(app.plugins.state.value.set).toBe(true);
|
|
await app.applyChanges(context);
|
|
expect((await app.host.get(Echo, {}, context)).text.value).toBe("echo");
|
|
await app.close(context);
|
|
});
|
|
});
|
|
|
|
describe("export and import per address", () => {
|
|
it("holds the worker's lock while exporting: a hold arriving meanwhile starts the worker after it (review M1)", async () => {
|
|
const base = await tempDir();
|
|
const root = join(base, "plugins");
|
|
await writePlugin(root, "notes", "@test/notes", NOTES_PLUGIN);
|
|
const { app, dataDir } = await testApp({ root, withWorkers: true });
|
|
const notes = await app.host.get(Notes, { id: "p1" }, context);
|
|
await notes.write("one", context);
|
|
notes.release();
|
|
// A large file makes the pack take a while.
|
|
const files = join(dataDir, "workers", "project", "project%7Cp1", "files");
|
|
await mkdir(files, { recursive: true });
|
|
await writeFile(join(files, "big.bin"), new Uint8Array(200 * 1024 * 1024));
|
|
const workers = app.workers.get("project")!;
|
|
const status = () =>
|
|
(workers.state.value as Record<string, { status: string } | undefined>)["project|p1"]?.status;
|
|
let done = false;
|
|
const exporting = app.exportAddress(Project({ id: "p1" }), join(base, "p1.tar"), context).then(() => {
|
|
done = true;
|
|
});
|
|
while (status() !== undefined) await new Promise((resolve) => setTimeout(resolve, 5));
|
|
const holder = app.host.get(Notes, { id: "p1" }, context);
|
|
let heldWhileExporting = false;
|
|
let ranWhileExporting = false;
|
|
while (!done) {
|
|
heldWhileExporting ||= status() === "starting";
|
|
ranWhileExporting ||= status() === "running";
|
|
await new Promise((resolve) => setTimeout(resolve, 5));
|
|
}
|
|
await exporting;
|
|
const ref = await holder;
|
|
expect([heldWhileExporting, ranWhileExporting]).toEqual([true, false]);
|
|
expect(ref.text.value).toBe("one");
|
|
ref.release();
|
|
await app.close(context);
|
|
}, 60_000);
|
|
|
|
it("leaves a failed address failed after an export (recheck N5)", async () => {
|
|
const base = await tempDir();
|
|
const root = join(base, "plugins");
|
|
await writePlugin(root, "notes", "@test/notes", NOTES_PLUGIN);
|
|
let failing = false;
|
|
const { app } = await testApp({
|
|
root,
|
|
workers: [
|
|
{
|
|
kind: Project,
|
|
entry: WORKER_ENTRY,
|
|
execArgv: ["--conditions=source", "--experimental-strip-types", "--no-warnings"],
|
|
start: () => {
|
|
if (failing) throw new Error("no start today");
|
|
return {};
|
|
},
|
|
authorize: () => true,
|
|
},
|
|
],
|
|
});
|
|
const notes = await app.host.get(Notes, { id: "p1" }, context);
|
|
await notes.write("kept", context);
|
|
notes.release();
|
|
const workers = app.workers.get("project")!;
|
|
await workers.stop(Project({ id: "p1" }), context);
|
|
await workers.retry(Project({ id: "p1" }), context);
|
|
failing = true;
|
|
const status = () =>
|
|
(workers.state.value as Record<string, { status: string } | undefined>)["project|p1"]?.status;
|
|
const hold = app.host.hold(Notes, { id: "p1" }, context);
|
|
while (status() !== "failed") await new Promise((resolve) => setTimeout(resolve, 5));
|
|
await app.exportAddress(Project({ id: "p1" }), join(base, "p1.tar"), context);
|
|
expect(status()).toBe("failed");
|
|
hold.release();
|
|
await app.close(context);
|
|
}, 60_000);
|
|
|
|
it("round-trips a worker's documents, tables and files; refuses an existing address", async () => {
|
|
const base = await tempDir();
|
|
const root = join(base, "plugins");
|
|
await writePlugin(root, "notes", "@test/notes", NOTES_PLUGIN);
|
|
const { app, dataDir } = await testApp({ root, withWorkers: true });
|
|
const notes = await app.host.get(Notes, { id: "p1" }, context);
|
|
await notes.write("buy milk", context);
|
|
expect(await notes.visit("/", context)).toBe(1);
|
|
const file = await notes.attach("a file of p1", context);
|
|
notes.release();
|
|
const archive = join(base, "p1.tar");
|
|
await app.exportAddress(Project({ id: "p1" }), archive, context);
|
|
expect((await stat(archive)).mode & 0o777).toBe(0o600);
|
|
await expect(app.importAddress(archive, Project({ id: "p1" }), context)).rejects.toThrow("exists already");
|
|
await app.importAddress(archive, Project({ id: "p2" }), context);
|
|
const copy = await app.host.get(Notes, { id: "p2" }, context);
|
|
expect(copy.text.value).toBe("buy milk");
|
|
expect(await copy.visit("/", context)).toBe(2);
|
|
expect(await copy.file(file, context)).toBe("a file of p1");
|
|
expect(await readdir(join(dataDir, "workers", "project"))).toEqual(["project%7Cp1", "project%7Cp2"]);
|
|
copy.release();
|
|
// The exported address goes on: its next hold starts its worker again.
|
|
const again = await app.host.get(Notes, { id: "p1" }, context);
|
|
expect(again.text.value).toBe("buy milk");
|
|
again.release();
|
|
await app.close(context);
|
|
// Another app refuses the archive.
|
|
const other = await testApp({ name: "other-app", withWorkers: true });
|
|
await expect(other.app.importAddress(archive, Project({ id: "p1" }), context)).rejects.toThrow(
|
|
'an archive of "chord-test", not "other-app"',
|
|
);
|
|
await other.app.close(context);
|
|
}, 60_000);
|
|
});
|