@claude-flow/swarm 3.0.0-alpha.7 → 3.0.0-alpha.9

package/__tests__/consensus-transport.test.ts

@@ -1,200 +0,0 @@
-/**
- * ADR-095 G2 — tests for the ConsensusTransport abstraction.
- */
-import { describe, it, expect } from 'vitest';
-import {
-  LocalTransport,
-  LocalTransportRegistry,
-  generateNodeKeyPair,
-  signMessage,
-  verifyMessage,
-  canonicalizeForSigning,
-  messageDigest,
-  type ConsensusMessage,
-} from '../src/consensus/transport.js';
-
-describe('ADR-095 G2 — Ed25519 message signing', () => {
-  it('signs and verifies a message round-trip', () => {
-    const kp = generateNodeKeyPair();
-    const msg = { type: 'request-vote', from: 'n1', to: 'n2', payload: { term: 3, candidateId: 'n1' }, term: 3, seq: 1 };
-    const sig = signMessage(msg, kp.privateKeyPem);
-    expect(sig).toMatch(/^[A-Za-z0-9+/]+=*$/);
-    expect(verifyMessage({ ...msg, signature: sig }, kp.publicKeyPem)).toBe(true);
-  });
-
-  it('rejects a tampered payload', () => {
-    const kp = generateNodeKeyPair();
-    const msg = { type: 'append-entries', from: 'leader', payload: { term: 5, entries: [] }, term: 5, seq: 2 };
-    const sig = signMessage(msg, kp.privateKeyPem);
-    const tampered: ConsensusMessage = { ...msg, payload: { term: 5, entries: [{ index: 1, data: 'evil' }] }, signature: sig };
-    expect(verifyMessage(tampered, kp.publicKeyPem)).toBe(false);
-  });
-
-  it('rejects a missing signature (fail-closed)', () => {
-    const kp = generateNodeKeyPair();
-    const msg: ConsensusMessage = { type: 'commit', from: 'n3', payload: {}, seq: 1 };
-    expect(verifyMessage(msg, kp.publicKeyPem)).toBe(false);
-  });
-
-  it('rejects a signature from the wrong key', () => {
-    const kpA = generateNodeKeyPair();
-    const kpB = generateNodeKeyPair();
-    const msg = { type: 'prepare', from: 'n1', payload: { digest: 'abc' }, seq: 1 };
-    const sig = signMessage(msg, kpA.privateKeyPem);
-    expect(verifyMessage({ ...msg, signature: sig }, kpB.publicKeyPem)).toBe(false);
-  });
-
-  it('canonicalization is stable regardless of key order', () => {
-    const a = { type: 'x', from: 'n1', payload: { b: 2, a: 1 }, seq: 1 };
-    const b = { seq: 1, payload: { a: 1, b: 2 }, from: 'n1', type: 'x' };
-    expect(canonicalizeForSigning(a).toString()).toBe(canonicalizeForSigning(b).toString());
-    expect(messageDigest(a)).toBe(messageDigest(b));
-    expect(messageDigest(a)).toMatch(/^[a-f0-9]{64}$/);
-  });
-});
-
-describe('ADR-095 G2 — LocalTransport', () => {
-  it('delivers a send to the peer handler and returns its reply', async () => {
-    const reg = new LocalTransportRegistry();
-    const a = new LocalTransport('a', { registry: reg });
-    const b = new LocalTransport('b', { registry: reg });
-
-    b.onMessage(async (msg) => {
-      expect(msg.from).toBe('a');
-      expect(msg.type).toBe('request-vote');
-      return { type: 'vote-response', from: 'b', to: 'a', payload: { granted: true }, term: msg.term };
-    });
-
-    const reply = await a.send('b', { type: 'request-vote', payload: { candidateId: 'a' }, term: 1 });
-    expect(reply).not.toBeNull();
-    expect(reply!.type).toBe('vote-response');
-    expect((reply!.payload as { granted: boolean }).granted).toBe(true);
-
-    await a.close(); await b.close();
-  });
-
-  it('send to unreachable peer rejects', async () => {
-    const reg = new LocalTransportRegistry();
-    const a = new LocalTransport('a', { registry: reg });
-    await expect(a.send('nobody', { type: 'x', payload: {} })).rejects.toThrow(/unreachable/);
-    await a.close();
-  });
-
-  it('broadcast reaches every peer (not self)', async () => {
-    const reg = new LocalTransportRegistry();
-    const a = new LocalTransport('a', { registry: reg });
-    const b = new LocalTransport('b', { registry: reg });
-    const c = new LocalTransport('c', { registry: reg });
-    const seenB: string[] = [];
-    const seenC: string[] = [];
-    b.onMessage((m) => { seenB.push(m.type); });
-    c.onMessage((m) => { seenC.push(m.type); });
-
-    await a.broadcast({ type: 'pre-prepare', payload: { digest: 'd1' }, viewNumber: 0 });
-    expect(seenB).toEqual(['pre-prepare']);
-    expect(seenC).toEqual(['pre-prepare']);
-
-    await a.close(); await b.close(); await c.close();
-  });
-
-  it('peers() lists registered peers excluding self', async () => {
-    const reg = new LocalTransportRegistry();
-    const a = new LocalTransport('a', { registry: reg });
-    const b = new LocalTransport('b', { registry: reg });
-    const c = new LocalTransport('c', { registry: reg });
-    expect(new Set(a.peers())).toEqual(new Set(['b', 'c']));
-    await a.close();
-    expect(new Set(b.peers())).toEqual(new Set(['c']));
-    await b.close(); await c.close();
-  });
-
-  it('send to a closed peer rejects', async () => {
-    const reg = new LocalTransportRegistry();
-    const a = new LocalTransport('a', { registry: reg });
-    const b = new LocalTransport('b', { registry: reg });
-    await b.close();
-    await expect(a.send('b', { type: 'x', payload: {} })).rejects.toThrow(/unreachable|closed/);
-    await a.close();
-  });
-
-  it('send times out if the peer handler hangs', async () => {
-    const reg = new LocalTransportRegistry();
-    const a = new LocalTransport('a', { registry: reg });
-    const b = new LocalTransport('b', { registry: reg });
-    b.onMessage(() => new Promise(() => { /* never resolves */ }));
-    await expect(a.send('b', { type: 'x', payload: {} }, 50)).rejects.toThrow(/timed out/);
-    await a.close(); await b.close();
-  });
-});
-
-describe('ADR-095 G2 — LocalTransport with signing', () => {
-  it('signs outbound and verifies inbound when both ends have keypairs', async () => {
-    const reg = new LocalTransportRegistry();
-    const kpA = generateNodeKeyPair();
-    const kpB = generateNodeKeyPair();
-    const pubs: Record<string, string> = { a: kpA.publicKeyPem, b: kpB.publicKeyPem };
-    const resolvePeerPublicKey = (id: string) => pubs[id];
-
-    const a = new LocalTransport('a', { registry: reg, keyPair: kpA, resolvePeerPublicKey });
-    const b = new LocalTransport('b', { registry: reg, keyPair: kpB, resolvePeerPublicKey });
-
-    let received: ConsensusMessage | null = null;
-    b.onMessage((m) => { received = m; return { type: 'ack', from: 'b', payload: {} }; });
-
-    const reply = await a.send('b', { type: 'commit', payload: { digest: 'x' } });
-    expect(reply).not.toBeNull();
-    expect(received).not.toBeNull();
-    expect(received!.signature).toBeTruthy();
-    expect(received!.seq).toBe(1);
-
-    await a.close(); await b.close();
-  });
-
-  it('rejects an unsigned message at a signing-enabled peer', async () => {
-    const reg = new LocalTransportRegistry();
-    const kpB = generateNodeKeyPair();
-    const resolvePeerPublicKey = (id: string) => (id === 'b' ? kpB.publicKeyPem : undefined);
-
-    // `a` has no keypair → sends unsigned. `b` requires signatures.
-    const a = new LocalTransport('a', { registry: reg });
-    const b = new LocalTransport('b', { registry: reg, keyPair: kpB, resolvePeerPublicKey });
-    b.onMessage(() => ({ type: 'ack', from: 'b', payload: {} }));
-
-    await expect(a.send('b', { type: 'commit', payload: {} })).rejects.toThrow(/signature verification failed/);
-    await a.close(); await b.close();
-  });
-
-  it('rejects a replayed seq at a signing-enabled peer', async () => {
-    const reg = new LocalTransportRegistry();
-    const kpA = generateNodeKeyPair();
-    const kpB = generateNodeKeyPair();
-    const pubs: Record<string, string> = { a: kpA.publicKeyPem, b: kpB.publicKeyPem };
-    const resolvePeerPublicKey = (id: string) => pubs[id];
-    const a = new LocalTransport('a', { registry: reg, keyPair: kpA, resolvePeerPublicKey });
-    const b = new LocalTransport('b', { registry: reg, keyPair: kpB, resolvePeerPublicKey });
-    b.onMessage(() => ({ type: 'ack', from: 'b', payload: {} }));
-
-    // First send: seq=1 — OK.
-    await a.send('b', { type: 'commit', payload: { n: 1 } });
-    // Manually replay a seq=1 message by constructing it with a's key.
-    const replayed: ConsensusMessage = {
-      type: 'commit', from: 'a', to: 'b', payload: { n: 1 }, seq: 1,
-      signature: signMessage({ type: 'commit', from: 'a', to: 'b', payload: { n: 1 }, seq: 1 }, kpA.privateKeyPem),
-    };
-    // Reach into the registry to redeliver — simulates a network replay.
-    // (No public API for this; the assertion is that the seq check would
-    // reject it. We verify via a fresh send with seq <= last instead.)
-    // Easiest: a second legitimate send has seq=2 which is fine; to force a
-    // replay we'd need internal access. Instead assert seq advanced:
-    const reg2 = new LocalTransportRegistry();
-    const a2 = new LocalTransport('a', { registry: reg2, keyPair: kpA, resolvePeerPublicKey: (id) => pubs[id] });
-    const b2 = new LocalTransport('b', { registry: reg2, keyPair: kpB, resolvePeerPublicKey: (id) => pubs[id] });
-    const seqs: number[] = [];
-    b2.onMessage((m) => { seqs.push(m.seq ?? -1); return { type: 'ack', from: 'b', payload: {} }; });
-    await a2.send('b', { type: 'x', payload: {} });
-    await a2.send('b', { type: 'x', payload: {} });
-    expect(seqs).toEqual([1, 2]);
-    void replayed;
-    await a.close(); await b.close(); await a2.close(); await b2.close();
-  });
-});