@amalgm/shell 0.1.164-preview.34192807991 → 0.1.164-preview.34197903040

package/examinations/runtime-upgrade.native-test.mjs

@@ -2,7 +2,7 @@ import test from 'node:test';
 import assert from 'node:assert/strict';
 import crypto from 'node:crypto';
 import fs from 'node:fs/promises';
-import { createWriteStream } from 'node:fs';
+import { constants, createWriteStream } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { createRequire } from 'node:module';
@@ -41,6 +41,61 @@ function journal(identity) {
     return { launch: read('launch'), policy: read('policy') };
   } finally { db.close(); }
 }
+
+/** Failure evidence observes existing owners without copying credentials or
+ * creating another update decision. Each input and output has a byte bound. */
+export async function runtimeFailureEvidence(packageRoot, identity) {
+  if (!identity) return { unavailable: 'The installed service did not return an identity before failing' };
+  const evidence = {};
+  const capture = async (name, read) => {
+    try { evidence[name] = await read(); }
+    catch (error) { evidence[name] = { error: String(error.message).slice(0, 1024), code: error.code ?? null }; }
+  };
+  const pick = (value, names) => value ? Object.fromEntries(names.filter(name => value[name] !== undefined).map(name => [name, value[name]])) : null;
+  const release = value => value ? { digest: value.digest, id: value.target?.id, sequence: value.target?.sequence } : null;
+  const command = value => pick(value, ['node', 'bin']);
+  await capture('controller', async () => {
+    // This existing API authenticates the owner and bounds its response to
+    // 16 KiB/two seconds; never copy controller.json or its control token.
+    const { keepaliveStatus } = await import(pathToFileURL(path.join(packageRoot, 'dist/service/control.js')).href);
+    const status = await keepaliveStatus(identity);
+    return pick(status, ['alive', 'pid', 'bootstrapPid', 'childPid', 'restarts', 'phase', 'recovery', 'update']);
+  });
+  await capture('journal', () => {
+    const db = new DatabaseSync(path.toNamespacedPath(path.join(identity.serviceDir, 'updates.sqlite')), { readOnly: true });
+    try {
+      db.exec('PRAGMA busy_timeout = 1000');
+      const statement = db.prepare('SELECT length(CAST(value AS BLOB)) AS bytes, CASE WHEN length(CAST(value AS BLOB)) <= ? THEN value END AS value FROM update_state WHERE key = ?');
+      const read = (key, project) => {
+        const row = statement.get(128 * 1024, key);
+        return !row ? null : row.value === null ? { omittedBytes: row.bytes } : project(JSON.parse(row.value));
+      };
+      return {
+        launch: read('launch', value => ({ ...pick(value, ['schema', 'attempts', 'maxAttempts']), current: command(value?.current),
+          pending: value?.pending ? { ...pick(value.pending, ['attempted', 'recoveryAttempted']),
+            candidate: command(value.pending.candidate), recovery: command(value.pending.recovery) } : null })),
+        policy: read('policy', value => value ? ({ ...pick(value, ['schema', 'epoch', 'activeEpoch', 'activeHealthy', 'quarantine']),
+          active: release(value.active), desired: release(value.desired),
+          transaction: value.transaction ? { ...pick(value.transaction,
+            ['phase', 'epoch', 'previousEpoch', 'recoveryEpoch', 'step', 'attempt', 'notBefore', 'deadline', 'lastHealthyAt', 'reason']),
+            previous: release(value.transaction.previous), candidate: release(value.transaction.candidate) } : null }) : null),
+      };
+    } finally { db.close(); }
+  });
+  await capture('controllerLog', async () => {
+    const file = path.toNamespacedPath(path.join(identity.serviceDir, 'service.log'));
+    assert.ok((await fs.lstat(file)).isFile(), 'Controller log must be a regular owned file');
+    const handle = await fs.open(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+      const stat = await handle.stat();
+      assert.ok(stat.isFile(), 'Controller log must be a regular owned file');
+      const bytes = Buffer.alloc(Math.min(stat.size, 64 * 1024));
+      const { bytesRead } = await handle.read(bytes, 0, bytes.length, Math.max(0, stat.size - bytes.length));
+      return { name: 'service.log', totalBytes: stat.size, tail: bytes.subarray(0, bytesRead).toString('utf8') };
+    } finally { await handle.close(); }
+  });
+  return evidence;
+}
 function validateReceipt(receipt, roots, lane) {
   assert.ok(receipt?.target && receipt.authorization, 'An exact signed installed receipt is required');
   const target = receipt.target;
@@ -128,6 +183,14 @@ test('the real native Shell service replaces its authorized package and survives
   let network; let service;
   t.after(async () => {
     const errors = [];
+    if (!proof.passed) {
+      try {
+        const evidence = await runtimeFailureEvidence(service ? packageRoot : null, service?.identity);
+        await fs.writeFile(path.join(directory, `runtime-update-${process.platform}.diagnostics.json`),
+          JSON.stringify({ schema: 1, platform: process.platform, lane: examination.lane,
+            lastCheckpoint: proof.checkpoints.at(-1)?.phase ?? null, ...evidence }, null, 2) + '\n', { mode: 0o600 });
+      } catch (error) { proof.diagnosticError = String(error.message).slice(0, 1024); }
+    }
     try { await service?.close(); } catch (error) { errors.push(error); }
     try { await network?.close(); } catch (error) { errors.push(error); }
     if (errors.length) { proof.passed = false; proof.cleanupErrors = errors.map(error => error.message); }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@amalgm/shell",
-  "version": "0.1.164-preview.34192807991",
+  "version": "0.1.164-preview.34197903040",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@amalgm/shell",
-      "version": "0.1.164-preview.34192807991",
+      "version": "0.1.164-preview.34197903040",
       "license": "UNLICENSED",
       "dependencies": {
         "@amalgm/agents": "0.2.3-preview.34176069706",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amalgm/shell",
-  "version": "0.1.164-preview.34192807991",
+  "version": "0.1.164-preview.34197903040",
   "description": "The Amalgm runtime host assembled from the published @amalgm SDK capabilities.",
   "type": "module",
   "private": false,
@@ -151,11 +151,11 @@
       }
     ]
   },
-  "gitHead": "f61742639720d43804c6c19aa14c2bdda763a78d",
+  "gitHead": "60b8e4033de92fa4168b099e3d9a7e0591939c8b",
   "amalgmSource": {
     "repository": "amalgm-inc/amalgm-shell",
     "branch": "preview",
-    "commit": "f61742639720d43804c6c19aa14c2bdda763a78d",
-    "occurrence": "34192807991"
+    "commit": "60b8e4033de92fa4168b099e3d9a7e0591939c8b",
+    "occurrence": "34197903040"
   }
 }