gowalk-cicd 1.0.64 → 1.0.65

package/action/.daemux-version

@@ -1 +1 @@
-1.0.64
+1.0.65

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.64
+1.0.65

package/android-action/scripts/jvm_proxy_relay.py

@@ -13,6 +13,11 @@ import threading
 from urllib.parse import unquote, urlsplit
 
 
+# A tunnel carries whole SDK/NDK/CMake downloads and Gradle's keep-alive pools; an
+# idle read is not a failure, so pumps wait long and the tunnel closes cleanly.
+IDLE_TIMEOUT = 900.0
+
+
 class Relay:
     def __init__(self, proxy: str):
         self.proxy = urlsplit(proxy)
@@ -56,13 +61,14 @@ class Relay:
         return reader, writer
 
     async def _pump(self, reader, writer):
-        while data := await asyncio.wait_for(reader.read(65536), timeout=120):
+        while data := await asyncio.wait_for(reader.read(65536), timeout=IDLE_TIMEOUT):
             writer.write(data)
             await writer.drain()
 
     async def _handle(self, reader, writer):
         upstream = None
         pumps = []
+        established = False
         try:
             request = await asyncio.wait_for(reader.readuntil(b"\r\n\r\n"), timeout=15)
             upstream_reader, upstream = await self._upstream(request)
@@ -72,12 +78,17 @@ class Relay:
                     raise ConnectionError("upstream tunnel refused")
                 writer.write(b"HTTP/1.1 200 Connection established\r\n\r\n")
                 await writer.drain()
+            established = True
             pumps = [asyncio.create_task(self._pump(reader, upstream)),
                      asyncio.create_task(self._pump(upstream_reader, writer))]
             await asyncio.wait(pumps, return_when=asyncio.FIRST_COMPLETED)
         except (OSError, ValueError, IndexError, asyncio.TimeoutError,
                 asyncio.IncompleteReadError, asyncio.LimitOverrunError):
-            writer.write(b"HTTP/1.1 502 Proxy unavailable\r\nContent-Length: 0\r\nConnection: close\r\n\r\n")
+            # Once bytes flow, the stream is the client's protocol (usually TLS): a
+            # 502 written into it corrupts the transfer instead of failing it, so an
+            # established connection only closes.
+            if not established:
+                writer.write(b"HTTP/1.1 502 Proxy unavailable\r\nContent-Length: 0\r\nConnection: close\r\n\r\n")
         finally:
             for task in pumps:
                 task.cancel()

package/android-action/scripts/test_jvm_proxy_relay.py

@@ -1,6 +1,6 @@
 """Real socket and Java proofs: authenticated upstream only, no target fallback."""
 import base64
-from contextlib import closing, contextmanager
+from contextlib import closing, contextmanager, suppress
 import http.client
 from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
 import os
@@ -10,7 +10,9 @@ import socket
 import subprocess
 import tempfile
 import threading
+import time
 import unittest
+from unittest import mock
 
 import jvm_proxy_relay as relay
 
@@ -117,5 +119,30 @@ class JvmProxyTests(unittest.TestCase):
         self.assertIn("-Dorg.gradle.daemon=false", env["GRADLE_OPTS"])
 
 
+class TunnelLifetimeTests(unittest.TestCase):
+    def test_idle_tunnel_outlives_a_short_pause_and_never_receives_a_502(self):
+        # A CMake/NDK download reads a remote zip through one keep-alive tunnel with
+        # pauses between range requests; the relay must neither time the pause out
+        # nor inject an HTTP status into the established byte stream.
+        with upstream() as (proxy, _seen), mock.patch.object(relay, "IDLE_TIMEOUT", 0.3):
+            with relay.running(proxy) as port:
+                with socket.create_connection(("127.0.0.1", port), timeout=5) as client:
+                    client.sendall(b"CONNECT unresolvable.invalid:443 HTTP/1.1\r\nHost: ignored\r\n\r\n")
+                    self.assertIn(b"200", client.recv(4096))
+                    client.sendall(b"abcd")
+                    self.assertEqual(client.recv(4), b"abcd")
+                    time.sleep(0.6)  # longer than the (patched) idle timeout: the pumps have given up
+                    client.settimeout(2)
+                    received = b""
+                    with suppress(OSError):
+                        while chunk := client.recv(4096):
+                            received += chunk
+                    self.assertNotIn(b"502", received)
+                    self.assertNotIn(b"HTTP/1.1", received)
+
+    def test_idle_timeout_is_long_enough_for_sdk_downloads(self):
+        self.assertGreaterEqual(relay.IDLE_TIMEOUT, 600)
+
+
 if __name__ == "__main__":
     unittest.main()

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.64
+1.0.65

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.64",
+  "version": "1.0.65",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {