@paperclipai/server 2026.817.0 → 2026.818.0-beta.1

package/dist/services/workspace-runtime-exposure-backfill.test.js

@@ -0,0 +1,149 @@
+/**
+ * Backfill decision coverage for PAP-17158.
+ *
+ * `decideManagedRuntimeExposureBackfill` is the whole contract for which
+ * pre-feature workspaces get upgraded to HTTPS in place and which are left
+ * alone, so each branch is asserted by its reason code rather than only by the
+ * resulting action.
+ */
+import { describe, expect, it } from "vitest";
+import { decideManagedRuntimeExposureBackfill, decideStaleExposureReclaim, } from "./workspace-runtime.js";
+/** A persisted, running, pre-feature Paperclip App dev runtime. */
+function httpOnlyRunningRow(overrides = {}) {
+    return {
+        mode: "auto",
+        brokerAvailable: true,
+        provider: "local_process",
+        serviceName: "paperclip-dev",
+        command: "pnpm dev --bind lan",
+        status: "running",
+        hasExposure: false,
+        declaredIntent: "unset",
+        ...overrides,
+    };
+}
+describe("decideManagedRuntimeExposureBackfill", () => {
+    it("reprovisions a running HTTP-only managed worktree runtime", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow())).toEqual({
+            action: "reprovision",
+            reason: "http_only_managed_service",
+        });
+    });
+    it("reprovisions a service that is mid-start as well as one already running", () => {
+        for (const status of ["provisioning", "starting", "running"]) {
+            expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ status })).action).toBe("reprovision");
+        }
+    });
+    it("leaves a stopped service to pick the default up on its next start", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ status: "stopped" }))).toEqual({
+            action: "keep",
+            reason: "stopped_defaults_on_next_start",
+        });
+    });
+    it("preserves a deliberate opt-out", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ declaredIntent: "disabled" }))).toEqual({
+            action: "keep",
+            reason: "deliberate_opt_out",
+        });
+    });
+    it("is idempotent: a row that already carries exposure state is never re-driven", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ hasExposure: true }))).toEqual({
+            action: "keep",
+            reason: "already_exposed",
+        });
+        // Repeated deploys see the same row and must keep converging on "keep".
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ hasExposure: true })).action).toBe("keep");
+    });
+    it("leaves unmanaged and custom services alone", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({
+            serviceName: "preview",
+            command: "pnpm vite",
+        }))).toEqual({ action: "keep", reason: "unmanaged_or_custom_service" });
+    });
+    it("leaves external (non local_process) runtime services alone", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ provider: "external" }))).toEqual({
+            action: "keep",
+            reason: "not_a_managed_local_process",
+        });
+    });
+    it("does nothing when the automatic default is switched off", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ mode: "off" }))).toEqual({
+            action: "keep",
+            reason: "https_default_disabled",
+        });
+    });
+    it("skips the backfill when the host broker is unavailable, unless forced", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ brokerAvailable: false }))).toEqual({
+            action: "keep",
+            reason: "broker_unavailable",
+        });
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ brokerAvailable: false, mode: "force" })).action).toBe("reprovision");
+    });
+    it("never takes down a row it cannot restart from a configured entry", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ declaredIntent: null }))).toEqual({
+            action: "keep",
+            reason: "no_configured_service_entry",
+        });
+    });
+    it("reprovisions an explicit opt-in that is somehow running without exposure", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({ declaredIntent: "enabled" })).action).toBe("reprovision");
+    });
+    it("checks the opt-out before broker availability so an opt-out never depends on host state", () => {
+        expect(decideManagedRuntimeExposureBackfill(httpOnlyRunningRow({
+            declaredIntent: "disabled",
+            brokerAvailable: false,
+        })).reason).toBe("deliberate_opt_out");
+    });
+});
+/**
+ * PAP-17285 regression coverage for the global startup exposure sweep.
+ *
+ * A server restart at 12:25:49 UTC deleted the operator-preserved `42000/52000`
+ * Serve mappings by issuing broker removals for two stale `stopped` rows — 2 and
+ * 3 days old, both claiming the same recycled pair — purely on those rows'
+ * authority. The sweep spans every execution workspace and company on the host
+ * and runs on every start, so "trust the row" is an unbounded delete primitive.
+ * These pin the corroboration contract that replaced it.
+ */
+const RUNTIME = "c4a0f1d8-be27-4f95-970e-443fe4a517b7";
+const OTHER_RUNTIME = "c0cca855-0d56-47fc-beca-9f3e3b8d341f";
+describe("decideStaleExposureReclaim", () => {
+    it("defers instead of removing when the broker cannot be reached", () => {
+        // Unreachable broker proves nothing. Fail closed toward preservation: a
+        // mapping we cannot attribute must never be deleted on a guess.
+        expect(decideStaleExposureReclaim({ runtimeId: RUNTIME, ownedListeners: null })).toEqual({
+            action: "defer",
+            reason: "broker_unreachable",
+        });
+    });
+    it("clears stale bookkeeping WITHOUT a Serve mutation when the broker owns nothing for the runtime", () => {
+        // The 12:28:19 row: 3 days old, claiming a pair that had since been recycled.
+        // Nothing of ours is published under this runtime, so there is nothing to
+        // remove — only local bookkeeping to tidy.
+        expect(decideStaleExposureReclaim({ runtimeId: RUNTIME, ownedListeners: [] })).toEqual({
+            action: "clear_bookkeeping",
+            reason: "not_owned_by_broker",
+        });
+        expect(decideStaleExposureReclaim({
+            runtimeId: RUNTIME,
+            ownedListeners: [{ runtimeId: OTHER_RUNTIME, port: 42000 }],
+        })).toEqual({ action: "clear_bookkeeping", reason: "not_owned_by_broker" });
+    });
+    it("reclaims only when the broker still attributes a listener to that exact runtime", () => {
+        // Genuine orphan GC — the behaviour PAP-17207 row 7 requires — is preserved.
+        expect(decideStaleExposureReclaim({
+            runtimeId: RUNTIME,
+            ownedListeners: [{ runtimeId: RUNTIME, port: 42001 }],
+        })).toEqual({ action: "reclaim", reason: "owned_by_broker" });
+    });
+    it("attributes by runtimeId and never by port, so a recycled port cannot cross-authorize", () => {
+        // Two rows claiming the same recycled pair is exactly the observed state. If
+        // this matched on port, either row could authorize deleting the other's
+        // mapping — which is the shape of the original loss.
+        expect(decideStaleExposureReclaim({
+            runtimeId: RUNTIME,
+            ownedListeners: [{ runtimeId: OTHER_RUNTIME, port: 42000 }, { runtimeId: OTHER_RUNTIME, port: 52000 }],
+        }).action).toBe("clear_bookkeeping");
+    });
+});
+//# sourceMappingURL=workspace-runtime-exposure-backfill.test.js.map

package/dist/services/workspace-runtime-exposure-backfill.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runtime-exposure-backfill.test.js","sourceRoot":"","sources":["../../src/services/workspace-runtime-exposure-backfill.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,oCAAoC,EACpC,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAEhC,mEAAmE;AACnE,SAAS,kBAAkB,CAAC,YAAiF,EAAE;IAC7G,OAAO;QACL,IAAI,EAAE,MAAe;QACrB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,eAAe;QACzB,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,OAAgB;QAChC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,2BAA2B;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,KAAK,MAAM,MAAM,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9F,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,gCAAgC;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvG,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9F,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,wEAAwE;QACxE,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC;YAC7D,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjG,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACxF,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnG,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;QACH,MAAM,CACJ,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3G,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjG,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CACJ,oCAAoC,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/F,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,CACJ,oCAAoC,CAAC,kBAAkB,CAAC;YACtD,cAAc,EAAE,UAAU;YAC1B,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC,CAAC,MAAM,CACX,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,OAAO,GAAG,sCAAsC,CAAC;AACvD,MAAM,aAAa,GAAG,sCAAsC,CAAC;AAE7D,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,CAAC,0BAA0B,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACvF,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,8EAA8E;QAC9E,0EAA0E;QAC1E,2CAA2C;QAC3C,MAAM,CAAC,0BAA0B,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACrF,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;QACH,MAAM,CACJ,0BAA0B,CAAC;YACzB,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SAC5D,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,6EAA6E;QAC7E,MAAM,CACJ,0BAA0B,CAAC;YACzB,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SACtD,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,6EAA6E;QAC7E,wEAAwE;QACxE,qDAAqD;QACrD,MAAM,CACJ,0BAA0B,CAAC;YACzB,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SACvG,CAAC,CAAC,MAAM,CACV,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/workspace-runtime-exposure.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workspace-runtime-exposure.test.d.ts.map

package/dist/services/workspace-runtime-exposure.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runtime-exposure.test.d.ts","sourceRoot":"","sources":["../../src/services/workspace-runtime-exposure.test.ts"],"names":[],"mappings":""}