@amalgm/shell 0.1.164-main.38989777736 → 0.1.164-main.39005514559

package/examinations/runtime-upgrade.native-test.mjs

@@ -10,6 +10,7 @@ import { pipeline } from 'node:stream/promises';
 import { Readable } from 'node:stream';
 import { DatabaseSync } from 'node:sqlite';
 import { Metadata, MetadataKind } from '@tufjs/models';
+import { LAYOUT_VERSION } from '@amalgm/core/identity';
 import { admitManagedRuntimeRelease } from '@amalgm/core/supervision';
 import { runtimeRoot } from '../dist/updates/trust.js';
 import { examineArchive, hashFile, runIsolated } from '../dist/updates/artifacts.js';
@@ -43,6 +44,36 @@ function journal(identity) {
   } finally { db.close(); }
 }
 
+/** Unpack one exact public archive into `directory/package` and install its production dependencies. */
+async function installArchive(artifact, directory, examination) {
+  await fs.mkdir(directory, { recursive: true });
+  const archive = path.join(directory, 'archive.tgz');
+  const response = await fetch(`https://registry.npmjs.org/amalgm/-/amalgm-${artifact.version}.tgz`, { redirect: 'error', signal: AbortSignal.timeout(180_000) });
+  assert.equal(response.status, 200, `The exact public package ${artifact.version} must be available`);
+  await pipeline(Readable.fromWeb(response.body), createWriteStream(archive, { flags: 'wx' }));
+  assert.equal(await hashFile(archive), artifact.sha512);
+  await examineArchive(archive, directory);
+  const packageRoot = path.join(directory, 'package');
+  const manifest = await readJson(path.join(packageRoot, 'package.json'));
+  assert.equal(manifest.name, 'amalgm'); assert.equal(manifest.version, artifact.version);
+  for (const name of ['repository', 'branch', 'commit']) assert.equal(manifest.amalgmSource[name], artifact.source[name]);
+  assert.equal(await hashFile(path.join(packageRoot, 'npm-shrinkwrap.json')), artifact.lockSha512);
+  const shippedRoot = await readJson(path.join(packageRoot, 'config/releases/trust/runtime', `${examination.lane}.root.json`));
+  assert.deepEqual(shippedRoot, examination.roots[shippedRoot.signed.version - 1], 'The package must carry the actual reviewed trust root');
+  const npm = path.join(path.dirname(createRequire(import.meta.url).resolve('npm/package.json')), 'bin/npm-cli.js');
+  await runIsolated(process.execPath, [npm, 'ci', '--omit=dev', '--strict-allow-scripts', '--no-audit', '--no-fund'], packageRoot, new AbortController().signal);
+  return packageRoot;
+}
+
+/** The on-disk layout version of the Core an installed package carries. */
+async function packageLayout(packageRoot) {
+  const core = path.join(packageRoot, 'node_modules', '@amalgm', 'core');
+  const entry = (await readJson(path.join(core, 'package.json'))).exports['./identity'].default;
+  const { LAYOUT_VERSION: version } = await import(pathToFileURL(path.join(core, entry)).href);
+  assert.ok(Number.isSafeInteger(version) && version > 0, 'An installed package must declare its layout version');
+  return version;
+}
+
 /** Failure evidence observes existing owners without copying credentials or
  * creating another update decision. Each input and output has a byte bound. */
 export async function runtimeFailureEvidence(packageRoot, identity) {
@@ -186,12 +217,12 @@ test('the real native Shell service replaces its authorized package and survives
     bootstrapProof: examination.previous === null, legacyAdoptionCertified: false, passed: false,
     previousArtifact: artifact, candidateArtifact: nextArtifact, checkpoints: [] };
   const temporary = path.resolve(workerTemporary);
-  let network; let service; let initializingFixtures = false;
+  let network; let service; let serviceRoot; let initializingFixtures = false;
   t.after(async () => {
     const errors = [];
     if (!proof.passed) {
       try {
-        const evidence = await runtimeFailureEvidence(service ? packageRoot : null, service?.identity);
+        const evidence = await runtimeFailureEvidence(service ? serviceRoot : null, service?.identity);
         await fs.writeFile(path.join(directory, `runtime-update-${process.platform}.diagnostics.json`),
           JSON.stringify({ schema: 1, platform: process.platform, lane: examination.lane,
             lastCheckpoint: proof.checkpoints.at(-1)?.phase ?? null, ...evidence }, null, 2) + '\n', { mode: 0o600 });
@@ -205,48 +236,49 @@ test('the real native Shell service replaces its authorized package and survives
     await fs.writeFile(path.join(temporary, 'proof.json'), JSON.stringify(proof, null, 2) + '\n');
     if (errors.length) throw new AggregateError(errors, 'Native runtime examination cleanup failed');
   });
-  const archive = path.join(temporary, 'baseline.tgz');
-  const response = await fetch(`https://registry.npmjs.org/amalgm/-/amalgm-${artifact.version}.tgz`, { redirect: 'error', signal: AbortSignal.timeout(180_000) });
-  assert.equal(response.status, 200, 'The exact baseline public package must be available');
-  await pipeline(Readable.fromWeb(response.body), createWriteStream(archive, { flags: 'wx' }));
-  assert.equal(await hashFile(archive), artifact.sha512);
-  await examineArchive(archive, temporary);
-  const packageRoot = path.join(temporary, 'package');
-  const manifest = await readJson(path.join(packageRoot, 'package.json'));
-  assert.equal(manifest.name, 'amalgm'); assert.equal(manifest.version, artifact.version);
-  for (const name of ['repository', 'branch', 'commit']) assert.equal(manifest.amalgmSource[name], artifact.source[name]);
-  assert.equal(await hashFile(path.join(packageRoot, 'npm-shrinkwrap.json')), artifact.lockSha512);
-  const shippedRoot = await readJson(path.join(packageRoot, 'config/releases/trust/runtime', `${examination.lane}.root.json`));
-  assert.deepEqual(shippedRoot, examination.roots[shippedRoot.signed.version - 1], 'The package must carry the actual reviewed trust root');
-  const npm = path.join(path.dirname(createRequire(import.meta.url).resolve('npm/package.json')), 'bin/npm-cli.js');
-  await runIsolated(process.execPath, [npm, 'ci', '--omit=dev', '--strict-allow-scripts', '--no-audit', '--no-fund'], packageRoot, new AbortController().signal);
+  const packageRoot = await installArchive(artifact, temporary, examination);
+  // A new on-disk layout has no migration: a computer on the old layout starts
+  // again from a fresh install, so the baseline cannot adopt the candidate.
+  // Certify that fresh install of the exact candidate instead.
+  const layout = { from: await packageLayout(packageRoot), to: LAYOUT_VERSION };
+  const reset = layout.from !== layout.to;
+  serviceRoot = reset ? await installArchive(nextArtifact, path.join(temporary, 'candidate'), examination) : packageRoot;
+  if (reset) {
+    assert.equal(await packageLayout(serviceRoot), LAYOUT_VERSION, 'The candidate archive must carry the examined layout');
+    proof.layoutReset = layout;
+  }
+  const installed = reset ? { release: view.candidate, artifact: nextArtifact } : { release: view.baseline, artifact };
   initializingFixtures = true;
-  network = await startNetworkView({ temporary, immutable: view.immutable, previous: view.previous, candidate: view.candidateView,
-    events: view.events, hint: { id: examination.id, sequence: examination.candidate.target.sequence }, serviceEnvironment: true });
-  service = await nativeInstalledService({ packageRoot, label: examination.lane });
+  network = await startNetworkView({ temporary, immutable: view.immutable, previous: reset ? view.candidateView : view.previous,
+    candidate: view.candidateView, events: view.events, hint: { id: examination.id, sequence: examination.candidate.target.sequence },
+    serviceEnvironment: true });
+  service = await nativeInstalledService({ packageRoot: serviceRoot, label: examination.lane });
   initializingFixtures = false;
-  const baseline = await until('Verified installed baseline and native service health', async () => {
+  const baseline = await until(`Verified installed ${reset ? 'candidate' : 'baseline'} and native service health`, async () => {
     const state = journal(service.identity); const status = await service.status();
-    return state.policy?.active?.digest === view.baseline.digest && state.policy.activeHealthy
-      && !state.policy.transaction && status.version === artifact.version ? status : null;
+    return state.policy?.active?.digest === installed.release.digest && state.policy.activeHealthy
+      && !state.policy.transaction && status.version === installed.artifact.version ? status : null;
   });
   assert.ok(baseline.bootstrapPid && baseline.bootstrapPid !== baseline.controllerPid, 'The OS must own the stable launcher independently of the controller package');
   const marker = crypto.randomUUID();
   const workspace = service.paths.workspaces; await fs.mkdir(workspace, { recursive: true });
   const markerFile = path.join(workspace, 'native-runtime-upgrade-marker.txt'); await fs.writeFile(markerFile, marker);
-  await until('Runtime promotion event subscription', async () => (await network.command({ operation: 'status' })).subscribers > 0);
-  proof.checkpoints.push({ phase: 'baseline', bootstrapPid: baseline.bootstrapPid, controllerPid: baseline.controllerPid, childPid: baseline.childPid });
-  await network.command({ operation: 'publish' });
-  const current = await until('Event-driven staging, controller replacement, and native runtime healthy commit', async () => {
-    const state = journal(service.identity); const status = await service.status();
-    return state.policy?.active?.digest === view.candidate.digest && state.policy.activeHealthy
-      && !state.policy.transaction && state.launch.pending === null && status.version === nextArtifact.version ? status : null;
-  });
-  assert.equal(current.bootstrapPid, baseline.bootstrapPid, 'A package handover must preserve the stable OS-owned launcher');
-  assert.notEqual(current.controllerPid, baseline.controllerPid); assert.notEqual(current.childPid, baseline.childPid);
-  assert.deepEqual(current.binding, baseline.binding);
-  assert.deepEqual(current.durable, baseline.durable, 'Native replacement must preserve registration and credentials byte for byte');
-  assert.equal(await fs.readFile(markerFile, 'utf8'), marker);
+  proof.checkpoints.push({ phase: reset ? 'fresh-candidate' : 'baseline', bootstrapPid: baseline.bootstrapPid, controllerPid: baseline.controllerPid, childPid: baseline.childPid });
+  let current = baseline;
+  if (!reset) {
+    await until('Runtime promotion event subscription', async () => (await network.command({ operation: 'status' })).subscribers > 0);
+    await network.command({ operation: 'publish' });
+    current = await until('Event-driven staging, controller replacement, and native runtime healthy commit', async () => {
+      const state = journal(service.identity); const status = await service.status();
+      return state.policy?.active?.digest === view.candidate.digest && state.policy.activeHealthy
+        && !state.policy.transaction && state.launch.pending === null && status.version === nextArtifact.version ? status : null;
+    });
+    assert.equal(current.bootstrapPid, baseline.bootstrapPid, 'A package handover must preserve the stable OS-owned launcher');
+    assert.notEqual(current.controllerPid, baseline.controllerPid); assert.notEqual(current.childPid, baseline.childPid);
+    assert.deepEqual(current.binding, baseline.binding);
+    assert.deepEqual(current.durable, baseline.durable, 'Native replacement must preserve registration and credentials byte for byte');
+    assert.equal(await fs.readFile(markerFile, 'utf8'), marker);
+  }
   for (const name of ['repository', 'branch', 'commit']) assert.equal(current.source[name], nextArtifact.source[name]);
   const selected = journal(service.identity).launch.current;
   const actual = await readJson(path.resolve(selected.bin, '../../package.json'));

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@amalgm/shell",
-  "version": "0.1.164-main.38989777736",
+  "version": "0.1.164-main.39005514559",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@amalgm/shell",
-      "version": "0.1.164-main.38989777736",
+      "version": "0.1.164-main.39005514559",
       "license": "UNLICENSED",
       "dependencies": {
         "@amalgm/agents": "0.2.3-main.38983836120",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amalgm/shell",
-  "version": "0.1.164-main.38989777736",
+  "version": "0.1.164-main.39005514559",
   "description": "The Amalgm runtime host assembled from the published @amalgm SDK capabilities.",
   "type": "module",
   "private": false,
@@ -174,11 +174,11 @@
       }
     ]
   },
-  "gitHead": "9ac0966f78e99d4d4ab86f58bf8e90f07d8672c0",
+  "gitHead": "907e591762a12660913b3de1ae7ed21830ccdc26",
   "amalgmSource": {
     "repository": "amalgm-inc/amalgm-shell",
     "branch": "main",
-    "commit": "9ac0966f78e99d4d4ab86f58bf8e90f07d8672c0",
-    "occurrence": "38989777736"
+    "commit": "907e591762a12660913b3de1ae7ed21830ccdc26",
+    "occurrence": "39005514559"
   }
 }