Artifact [d585ade2a1]

Artifact d585ade2a1b8bfd18a3cb8fad0a594a70684b2e49f1e4c8e7b47628545c07a95:

• File internal/sync/exchange_draft_test.go — part of check-in [821cf115ce] at 2026-10-12 22:48:22 on branch main — fix(sync): refuse push and pull cards naming another project (#309) (#353)

  fossil's page_xfer compares a push or pull card's PROJECTCODE with the repository's project-code before any capability check and, on a mismatch, resets the reply, answers "error wrong project" and breaks out of the card loop (section 8.5). The handler accepted either card whatever its project code.

  The refusal goes through a new breakLoop, which the undecodable file card path now shares: the reply is reset to the one error, no later card is processed, and the post-loop work and timestamp still follow. Tests that synced repositories created with different project codes now create them with a shared one, and the DST simulator gives its leaves the upstream's. (user: [email protected], size: 7454) [annotate] [blame] [check-ins using]

package sync

// The clone and sync exchanges against draft-fossil-sync-protocol-00
// (#255): clone replies carry only cfile cards, a clone session sends
// nothing but at most an operation-less cleanup after clone_seqno 0, every
// request ends with a randomness comment, and every completed reply ends
// with the timestamp comment.

import (
	"context"
	"fmt"
	"path/filepath"
	"strings"
	"testing"
	"time"

	"github.com/danmestas/go-libfossil/db"
	"github.com/danmestas/go-libfossil/internal/blob"
	libfossil "github.com/danmestas/go-libfossil/internal/fsltype"
	"github.com/danmestas/go-libfossil/internal/hash"
	"github.com/danmestas/go-libfossil/internal/manifest"
	"github.com/danmestas/go-libfossil/internal/repo"
	"github.com/danmestas/go-libfossil/internal/xfer"
)

// recordingTransport serves requests with HandleSync on src and keeps
// every request and reply.
type recordingTransport struct {
	src      *repo.Repo
	requests []*xfer.Message
	replies  []*xfer.Message
}

func (rt *recordingTransport) Exchange(
	ctx context.Context, req *xfer.Message,
) (*xfer.Message, error) {
	resp, err := HandleSync(ctx, rt.src, req)
	if err != nil {
		return nil, err
	}
	rt.requests = append(rt.requests, req)
	rt.replies = append(rt.replies, resp)
	return resp, nil
}

// deltaHistoryRepo commits several close versions of one file with delta
// storage, so the older versions are stored as deltas.
func deltaHistoryRepo(t *testing.T) *repo.Repo {
	t.Helper()
	r := setupSyncTestRepo(t)
	var parent libfossil.FslID
	for v := 0; v < 5; v++ {
		var b strings.Builder
		for i := 0; i < 200; i++ {
			fmt.Fprintf(&b, "line %04d: the quick brown fox jumps over the lazy dog\n", i)
			if i == 50+v {
				fmt.Fprintf(&b, "version %d\n", v)
			}
		}
		rid, _, err := manifest.Checkin(r, manifest.CheckinOpts{
			Files:   []manifest.File{{Name: "f.txt", Content: []byte(b.String())}},
			Comment: fmt.Sprintf("v%d", v),
			User:    "testuser",
			Parent:  parent,
			Delta:   true,
			Time:    time.Date(2026, 1, 1, v, 0, 0, 0, time.UTC),
		})
		if err != nil {
			t.Fatal(err)
		}
		parent = rid
	}
	return r
}

func lastCardIsComment(m *xfer.Message, prefix string) bool {
	if len(m.Cards) == 0 {
		return false
	}
	c, ok := m.Cards[len(m.Cards)-1].(*xfer.CommentCard)
	return ok && strings.HasPrefix(c.Text, prefix)
}

func hasCard[T xfer.Card](m *xfer.Message) bool {
	for _, c := range m.Cards {
		if _, ok := c.(T); ok {
			return true
		}
	}
	return false
}

func TestCloneExchangeFollowsDraft(t *testing.T) {
	rt := &recordingTransport{src: deltaHistoryRepo(t)}
	dst := filepath.Join(t.TempDir(), "clone.fossil")
	r, _, err := Clone(context.Background(), dst, rt, CloneOpts{})
	if err != nil {
		t.Fatalf("Clone: %v", err)
	}
	defer r.Close()

	deltas, exhausted := 0, false
	for i, req := range rt.requests {
		if exhausted && (hasCard[*xfer.CloneCard](req) || hasCard[*xfer.PullCard](req) ||
			hasCard[*xfer.PushCard](req)) {
			t.Errorf("request %d carries an operation after clone_seqno 0", i)
		}
		if !lastCardIsComment(req, "") {
			t.Errorf("request %d does not end with a randomness comment", i)
		}
		reply := rt.replies[i]
		if !lastCardIsComment(reply, "timestamp ") {
			t.Errorf("reply %d does not end with the timestamp comment", i)
		}
		for _, c := range reply.Cards {
			switch c := c.(type) {
			case *xfer.FileCard:
				t.Errorf("reply %d carries a file card in a clone (%s)", i, c.UUID)
			case *xfer.CFileCard:
				if c.DeltaSrc != "" {
					deltas++
				}
			case *xfer.CloneSeqNoCard:
				exhausted = exhausted || c.SeqNo == 0
			}
		}
	}
	if deltas == 0 {
		t.Fatal("test setup: the clone carried no delta, so it proves nothing about deltas")
	}
	if !exhausted {
		t.Fatal("the clone never received clone_seqno 0")
	}
	if n := len(rt.requests); n > 2 {
		t.Errorf("clone made %d requests; a one-batch clone is the clone request and a cleanup", n)
	}
}

// Every sync request ends with randomness, with or without a login card;
// it used to appear only on requests that carried a login.
func TestSyncRequestsEndWithRandomness(t *testing.T) {
	src := deltaHistoryRepo(t)
	dst := setupSyncTestRepo(t)
	projectCode, err := src.Config("project-code")
	if err != nil {
		t.Fatal(err)
	}
	rt := &recordingTransport{src: src}
	if _, err := Sync(context.Background(), dst, rt, SyncOpts{
		Pull: true, ProjectCode: projectCode,
	}); err != nil {
		t.Fatalf("Sync: %v", err)
	}
	if len(rt.requests) == 0 {
		t.Fatal("Sync sent no request")
	}
	for i, req := range rt.requests {
		if !lastCardIsComment(req, "") {
			t.Errorf("pull request %d does not end with a randomness comment", i)
		}
		if !lastCardIsComment(rt.replies[i], "timestamp ") {
			t.Errorf("reply %d does not end with the timestamp comment", i)
		}
	}
}

// scriptedTransport answers each request with the next scripted reply, then
// with empty replies.
type scriptedTransport struct {
	replies []*xfer.Message
	n       int
}

func (st *scriptedTransport) Exchange(context.Context, *xfer.Message) (*xfer.Message, error) {
	st.n++
	if st.n <= len(st.replies) {
		return st.replies[st.n-1], nil
	}
	return &xfer.Message{}, nil
}

// A clone whose server stops before clone_seqno 0 fails rather than
// returning a partial repository, whatever the replies lacked: a push card
// in the first reply, or in a later one.
func TestCloneThatNeverFinishesFails(t *testing.T) {
	blob := []byte("one artifact")
	cases := map[string][]*xfer.Message{
		"first reply without push": {{}},
		"refusal without push": {{Cards: []xfer.Card{
			&xfer.ErrorCard{Message: "not authorized to clone"},
		}}},
		"later reply without push": {
			{Cards: []xfer.Card{
				&xfer.CloneSeqNoCard{SeqNo: 2},
				&xfer.PushCard{ServerCode: "s1", ProjectCode: testPC},
			}},
			{Cards: []xfer.Card{
				&xfer.FileCard{UUID: hash.SHA1(blob), Content: blob},
				&xfer.CloneSeqNoCard{SeqNo: 9},
			}},
		},
	}
	for name, replies := range cases {
		t.Run(name, func(t *testing.T) {
			dst := filepath.Join(t.TempDir(), "clone.fossil")
			r, _, err := Clone(context.Background(), dst, &scriptedTransport{replies: replies},
				CloneOpts{})
			if err == nil {
				r.Close()
				t.Fatal("Clone of an unfinished transfer succeeded")
			}
		})
	}
}

// A phantom the server cannot supply is asked for once, and does not hold
// a pull open (draft §3.7: "Remaining phantoms alone MUST NOT continue").
func TestSyncDoesNotLingerOnUnservablePhantom(t *testing.T) {
	src := deltaHistoryRepo(t)
	dst := setupSyncTestRepo(t)
	projectCode, err := src.Config("project-code")
	if err != nil {
		t.Fatal(err)
	}
	if _, err := Sync(context.Background(), dst, &recordingTransport{src: src}, SyncOpts{
		Pull: true, ProjectCode: projectCode,
	}); err != nil {
		t.Fatalf("first Sync: %v", err)
	}
	missing := hash.SHA1([]byte("an artifact no peer has"))
	if err := dst.WithTx(func(tx *db.Tx) error {
		_, err := blob.StorePhantom(tx, missing)
		return err
	}); err != nil {
		t.Fatal(err)
	}

	rt := &recordingTransport{src: src}
	res, err := Sync(context.Background(), dst, rt, SyncOpts{Pull: true, ProjectCode: projectCode})
	if err != nil {
		t.Fatalf("Sync: %v", err)
	}
	asked := 0
	for _, req := range rt.requests {
		for _, c := range req.Cards {
			if g, ok := c.(*xfer.GimmeCard); ok && g.UUID == missing {
				asked++
			}
		}
	}
	if asked != 1 {
		t.Errorf("the missing artifact was asked for %d times, want once", asked)
	}
	if res.Rounds != 1 {
		t.Errorf("Sync took %d rounds, want 1", res.Rounds)
	}
}