Files
Agent-System-Backend/internal/store/regeneration_account_write_test.go
T
weichen adcd8fefd2 Fence U3 account writes and stabilize directory cursors
Why: Account disable could be followed by late Backend business writes, API key creation could implicitly create users, account bootstrap locks could invert, and directory cursors were process-local or leaked out-of-scope changes.

Evidence: Local go test ./... and isolated PostgreSQL package suites passed on the staged candidate; exact committed-head SELF replay and stage 6 human review remain pending.

Impact: Adds final account transactions and external-effect checks across HTTP, Host, Bus and run manager; tightens API key issuance and persists versioned cursor signing. Delegated RDM rename still needs the separately proposed real-operator contract, so A1 and stage 6 are not complete.

Refs: Documents U3 r1, approved A1-A4 amendment fb3a821, pending delegated-projection amendment 5783940, Dev feature/iam-u3-account-directory-recovery.
2026-10-14 07:33:54 +00:00

177 lines
6.2 KiB
Go

package store
import (
"errors"
"testing"
core "agent-system-core"
)
func TestPrepareRegenerationAccountCheckedFencesAllWrites(t *testing.T) {
st := openTestStore(t)
for _, account := range []struct {
owner string
admin bool
}{{"admin", true}, {"alice", false}, {"bob", false}} {
if err := st.CreateAccount(account.owner, "", "", account.admin); err != nil {
t.Fatal(err)
}
}
project, err := st.CreateProject("alice", "regeneration")
if err != nil {
t.Fatal(err)
}
conv, err := st.CreateConversation("alice", project.ID, "thread", "")
if err != nil {
t.Fatal(err)
}
run := seedRun(t, st, conv, core.RunCompleted)
target := core.Message{ConversationID: conv.ID, RunID: run.ID, Role: core.RoleAssistant}
sibling := core.Message{ConversationID: conv.ID, RunID: run.ID, Role: core.RoleAssistant}
for _, msg := range []*core.Message{&target, &sibling} {
if err := st.AppendMessage(msg); err != nil {
t.Fatal(err)
}
}
assertUnchanged := func() {
t.Helper()
msgs, err := st.ListMessages(conv.ID)
if err != nil {
t.Fatal(err)
}
if len(msgs) != 2 || msgs[0].Excluded || msgs[1].Excluded || msgs[0].VariantGroup != "" {
t.Fatalf("rejected regeneration changed messages: %+v", msgs)
}
if _, _, ok := st.PeekRegenPending(conv.ID); ok {
t.Fatal("rejected regeneration created pending marker")
}
}
if _, _, err := st.PrepareRegenerationAccountChecked("bob", conv.ID, target.ID, false); !errors.Is(err, ErrNotFound) {
t.Fatalf("foreign actor: %v", err)
}
assertUnchanged()
account, err := st.GetAccountByOwner("alice")
if err != nil {
t.Fatal(err)
}
if _, err := st.SetAccountEnabled("admin", account.ID, account.StateVersion, false); err != nil {
t.Fatal(err)
}
if _, _, err := st.PrepareRegenerationAccountChecked("alice", conv.ID, target.ID, false); !errors.Is(err, ErrAccountForbidden) {
t.Fatalf("disabled actor: %v", err)
}
assertUnchanged()
account, err = st.GetAccountByOwner("alice")
if err != nil {
t.Fatal(err)
}
if _, err := st.SetAccountEnabled("admin", account.ID, account.StateVersion, true); err != nil {
t.Fatal(err)
}
group, index, err := st.PrepareRegenerationAccountChecked("alice", conv.ID, target.ID, false)
if err != nil || group != "var_"+target.ID || index != 1 {
t.Fatalf("active regeneration: group=%q index=%d err=%v", group, index, err)
}
msgs, err := st.ListMessages(conv.ID)
if err != nil || len(msgs) != 2 || !msgs[0].Excluded || !msgs[1].Excluded || msgs[0].VariantGroup != group {
t.Fatalf("active regeneration missed message state: %+v %v", msgs, err)
}
if pendingGroup, pendingIndex, ok := st.PeekRegenPending(conv.ID); !ok || pendingGroup != group || pendingIndex != index {
t.Fatalf("active regeneration marker: group=%q index=%d ok=%v", pendingGroup, pendingIndex, ok)
}
if err := st.ClearRegenPendingAfterFailedStart("alice", conv.ID, group, index, false); err != nil {
t.Fatal(err)
}
if _, _, ok := st.PeekRegenPending(conv.ID); ok {
t.Fatal("failed-start cleanup left pending marker")
}
group, index, err = st.PrepareRegenerationAccountChecked("alice", conv.ID, target.ID, false)
if err != nil {
t.Fatal(err)
}
if err := st.ClearRegenPendingAfterFailedStart("bob", conv.ID, group, index, false); !errors.Is(err, ErrNotFound) {
t.Fatalf("foreign marker cleanup: %v", err)
}
account, err = st.GetAccountByOwner("alice")
if err != nil {
t.Fatal(err)
}
if _, err := st.SetAccountEnabled("admin", account.ID, account.StateVersion, false); err != nil {
t.Fatal(err)
}
if err := st.ClearRegenPendingAfterFailedStart("alice", conv.ID, group, index, false); err != nil {
t.Fatalf("disabled marker safety cleanup: %v", err)
}
if _, _, ok := st.PeekRegenPending(conv.ID); ok {
t.Fatal("failed-start cleanup left stale marker after disable")
}
}
func TestPrepareRegenerationAccountCheckedUsesExistingVariantGroup(t *testing.T) {
st := openTestStore(t)
if err := st.CreateAccount("alice", "", "", false); err != nil {
t.Fatal(err)
}
project, err := st.CreateProject("alice", "regeneration")
if err != nil {
t.Fatal(err)
}
conv, err := st.CreateConversation("alice", project.ID, "thread", "")
if err != nil {
t.Fatal(err)
}
target := core.Message{ConversationID: conv.ID, Role: core.RoleAssistant}
later := core.Message{ConversationID: conv.ID, Role: core.RoleAssistant}
for _, msg := range []*core.Message{&target, &later} {
if err := st.AppendMessage(msg); err != nil {
t.Fatal(err)
}
}
if err := st.SetMessageFlags(target.ID, false, "variants", 1); err != nil {
t.Fatal(err)
}
if err := st.SetMessageFlags(later.ID, false, "variants", 3); err != nil {
t.Fatal(err)
}
group, index, err := st.PrepareRegenerationAccountChecked("alice", conv.ID, target.ID, false)
if err != nil || group != "variants" || index != 4 {
t.Fatalf("existing group: %q index=%d err=%v", group, index, err)
}
if pendingGroup, pendingIndex, ok := st.PeekRegenPending(conv.ID); !ok || pendingGroup != group || pendingIndex != index {
t.Fatalf("next group index: group=%q index=%d ok=%v", pendingGroup, pendingIndex, ok)
}
}
func TestFailedStartCleanupDoesNotRemoveNewerSameGroupMarker(t *testing.T) {
st := openTestStore(t)
if err := st.CreateAccount("alice", "", "", false); err != nil {
t.Fatal(err)
}
project, err := st.CreateProject("alice", "regeneration")
if err != nil {
t.Fatal(err)
}
conv, err := st.CreateConversation("alice", project.ID, "thread", "")
if err != nil {
t.Fatal(err)
}
target := core.Message{ConversationID: conv.ID, Role: core.RoleAssistant}
if err := st.AppendMessage(&target); err != nil {
t.Fatal(err)
}
group, first, err := st.PrepareRegenerationAccountChecked("alice", conv.ID, target.ID, false)
if err != nil {
t.Fatal(err)
}
group2, second, err := st.PrepareRegenerationAccountChecked("alice", conv.ID, target.ID, false)
if err != nil || group2 != group || second <= first {
t.Fatalf("newer marker failed to advance: %q %d -> %q %d: %v", group, first, group2, second, err)
}
if err := st.ClearRegenPendingAfterFailedStart("alice", conv.ID, group, first, false); err != nil {
t.Fatal(err)
}
if gotGroup, gotIndex, ok := st.PeekRegenPending(conv.ID); !ok || gotGroup != group || gotIndex != second {
t.Fatalf("old cleanup removed newer marker: %q %d %v", gotGroup, gotIndex, ok)
}
}