batpak 0.7.0

//! Store platform backend surface.
//! Harness pattern: State-Machine Harness (profile/admission/open failure lane).
//!
//! PROVES: platform evidence stays descriptive, admission posture is reported
//! through diagnostics, and configured profile mismatch fails open before writer
//! spawn or successful-open observability.
//! CATCHES: profile/reverify drift that downgrades mismatch into warning-only
//! behavior, admits the wrong lock/sync/mmap posture, or appends lifecycle
//! success after a failed platform admission.
//! SEEDED: not random; deterministic tempdir-based opens and checked-in profile
//! fixtures.

use batpak::store::{
    ActiveSegmentReadEvidence, ClockEvidence, HostEvidenceSummary, LockLeafSymlinkProtection,
    MmapAdmissionSummary, MmapEvidence, OpenIndexReport, OpenReportObserver,
    ParentDirSyncAdmissionSummary, ParentDirSyncEvidence, PlatformAdmissionSummary,
    PlatformEvidenceSummary, Store, StoreConfig, StoreDiagnostics, StoreError,
    StoreLockAdmissionSummary, StorePathEvidenceSummary, StorePathStatusEvidence,
};
use std::error::Error;
use std::sync::{Arc, Mutex};
use tempfile::TempDir;

type TestResult = Result<(), Box<dyn Error>>;

fn test_store() -> Result<(Store, TempDir), Box<dyn Error>> {
    let dir = TempDir::new()?;
    let store = Store::open(
        StoreConfig::new(dir.path())
            .with_segment_max_bytes(4096)
            .with_sync_every_n_events(1),
    )?;
    Ok((store, dir))
}

#[test]
fn diagnostics_reports_config() -> TestResult {
    let (store, dir) = test_store()?;
    let diag: StoreDiagnostics = store.diagnostics();
    let expected_data_dir = std::fs::canonicalize(dir.path())?;

    assert_eq!(diag.data_dir, expected_data_dir);
    assert_eq!(diag.segment_max_bytes, 4096);
    assert_eq!(diag.event_count, 1);

    let platform: PlatformEvidenceSummary = diag.platform_evidence.clone();
    let host: HostEvidenceSummary = platform.host;
    assert!(host.process_clock_epoch_marker_ns > 0);
    assert_eq!(
        host.monotonic_clock,
        ClockEvidence::ProcessLocalInstantAnchor
    );

    let store_path: StorePathEvidenceSummary = platform.store_path;
    assert_eq!(
        store_path.path_status,
        StorePathStatusEvidence::ObservedDirectory
    );
    assert_eq!(store_path.mmap_index, MmapEvidence::FileBacked);
    assert_eq!(store_path.sealed_segment_mmap, MmapEvidence::FileBacked);

    let admission: PlatformAdmissionSummary = platform.admission;
    assert_eq!(admission.mmap_index, MmapAdmissionSummary::FileBacked);
    assert_eq!(
        admission.sealed_segment_mmap,
        MmapAdmissionSummary::FileBacked
    );

    #[cfg(unix)]
    {
        assert_eq!(store_path.parent_dir_sync, ParentDirSyncEvidence::UnixFsync);
        assert_eq!(
            admission.parent_dir_sync,
            ParentDirSyncAdmissionSummary::UnixFsync
        );
        assert_eq!(
            store_path.lock_leaf_symlink_protection,
            LockLeafSymlinkProtection::AtomicNoFollow
        );
        assert_eq!(
            admission.store_lock,
            StoreLockAdmissionSummary::AtomicNoFollow
        );
        assert_eq!(
            store_path.active_segment_read,
            ActiveSegmentReadEvidence::UnixReadAt
        );
    }
    #[cfg(not(unix))]
    {
        assert_eq!(
            store_path.parent_dir_sync,
            ParentDirSyncEvidence::RenameOnly
        );
        assert_eq!(
            admission.parent_dir_sync,
            ParentDirSyncAdmissionSummary::RenameOnly
        );
        assert_eq!(
            store_path.lock_leaf_symlink_protection,
            LockLeafSymlinkProtection::BestEffortCheckThenOpen
        );
        assert_eq!(
            admission.store_lock,
            StoreLockAdmissionSummary::BestEffortCheckThenOpen
        );
        assert_eq!(
            store_path.active_segment_read,
            ActiveSegmentReadEvidence::LockedSeekRead
        );
    }

    store.close()?;
    Ok(())
}

#[test]
fn platform_profile_invalid_fails_before_open_completed() -> TestResult {
    let dir = TempDir::new()?;
    let profile_path = dir.path().join("bad-platform-profile.json");
    std::fs::write(&profile_path, b"{not json")?;

    let err = match Store::open(
        StoreConfig::new(dir.path())
            .with_segment_max_bytes(4096)
            .with_platform_profile_path(profile_path.clone()),
    ) {
        Ok(_) => {
            return Err(
                std::io::Error::other("PROPERTY: invalid platform profile must fail open").into(),
            );
        }
        Err(error) => error,
    };
    assert!(
        matches!(
            err,
            StoreError::PlatformProfileInvalid { ref path, .. } if path == &profile_path
        ),
        "expected PlatformProfileInvalid for configured profile, got {err:?}"
    );
    assert!(
        !dir.path().join("000000.fbat").exists(),
        "profile reverify must fail before writer spawn or lifecycle append"
    );
    Ok(())
}

#[test]
fn missing_platform_profile_reports_profile_invalid() -> TestResult {
    let dir = TempDir::new()?;
    let profile_path = dir.path().join("missing-platform-profile.json");

    let err = match Store::open(
        StoreConfig::new(dir.path())
            .with_segment_max_bytes(4096)
            .with_platform_profile_path(profile_path.clone()),
    ) {
        Ok(_) => {
            return Err(
                std::io::Error::other("PROPERTY: missing platform profile must fail open").into(),
            );
        }
        Err(error) => error,
    };
    assert!(
        matches!(
            err,
            StoreError::PlatformProfileInvalid { ref path, .. } if path == &profile_path
        ),
        "expected PlatformProfileInvalid for missing configured profile, got {err:?}"
    );
    Ok(())
}

#[test]
fn impossible_path_mmap_profile_reports_profile_invalid() -> TestResult {
    let dir = TempDir::new()?;
    let profile_path = dir.path().join("impossible-platform-profile.json");
    let body = concat!(
        r#"{"schema_version":1,"#,
        r#""host":{"monotonic_clock":"ProcessLocalInstantAnchor"},"#,
        r#""store_path":{"path_status":"UnknownMissing","parent_dir_sync":"UnixFsync","lock_leaf_symlink_protection":"AtomicNoFollow","mmap_index":"FileBacked","sealed_segment_mmap":"FileBacked","active_segment_read":"UnixReadAt"},"#,
        r#""admission":{"store_lock":"AtomicNoFollow","parent_dir_sync":"UnixFsync","mmap_index":"FileBacked","sealed_segment_mmap":"FileBacked"}}"#
    );
    let fingerprint = crc32fast::hash(body.as_bytes());
    let profile = format!(
        "{}{}{}",
        body.trim_end_matches('}'),
        r#","fingerprint_crc32":"#,
        fingerprint
    ) + "}";
    std::fs::write(&profile_path, profile)?;

    let err = match Store::open(
        StoreConfig::new(dir.path())
            .with_segment_max_bytes(4096)
            .with_platform_profile_path(profile_path.clone()),
    ) {
        Ok(_) => {
            return Err(std::io::Error::other(
                "PROPERTY: impossible path/mmap profile must fail open",
            )
            .into());
        }
        Err(error) => error,
    };
    assert!(
        matches!(
            err,
            StoreError::PlatformProfileInvalid { ref path, .. } if path == &profile_path
        ),
        "expected PlatformProfileInvalid for impossible path/mmap profile, got {err:?}"
    );
    Ok(())
}

#[test]
fn mmap_unavailable_profile_fails_reverify_before_open() -> TestResult {
    let dir = TempDir::new()?;
    let profile_path = std::path::PathBuf::from("tests/fixtures/platform/mmap_unavailable.profile");

    let err = match Store::open(
        StoreConfig::new(dir.path())
            .with_segment_max_bytes(4096)
            .with_platform_profile_path(profile_path.clone()),
    ) {
        Ok(_) => {
            return Err(std::io::Error::other(
                "PROPERTY: mmap-unavailable platform profile must fail current open",
            )
            .into());
        }
        Err(error) => error,
    };
    assert!(
        matches!(
            err,
            StoreError::PlatformProfileMismatch { ref path, .. } if path == &profile_path
        ),
        "expected PlatformProfileMismatch for unavailable mmap posture, got {err:?}"
    );
    assert!(
        !dir.path().join("000000.fbat").exists(),
        "mmap profile mismatch must fail before writer spawn or lifecycle append"
    );
    Ok(())
}

#[test]
fn without_platform_profile_path_clears_reverify_requirement() -> TestResult {
    let dir = TempDir::new()?;
    let missing_profile = dir.path().join("missing-platform-profile.json");

    let store = Store::open(
        StoreConfig::new(dir.path())
            .with_segment_max_bytes(4096)
            .with_platform_profile_path(missing_profile)
            .without_platform_profile_path(),
    )?;
    store.close()?;
    Ok(())
}

#[test]
fn platform_profile_match_allows_open_and_mismatch_fails_before_lifecycle() -> TestResult {
    let dir = TempDir::new()?;
    #[cfg(unix)]
    let valid_profile = std::path::PathBuf::from("tests/fixtures/platform/linux_basic.profile");
    #[cfg(not(unix))]
    let valid_profile =
        std::path::PathBuf::from("tests/fixtures/platform/non_unix_best_effort_lock.profile");
    let store = Store::open(
        StoreConfig::new(dir.path())
            .with_segment_max_bytes(4096)
            .with_platform_profile_path(valid_profile),
    )?;
    store.close()?;

    let mismatch_dir = TempDir::new()?;
    #[cfg(unix)]
    let mismatch_profile =
        std::path::PathBuf::from("tests/fixtures/platform/profile_mismatch.profile");
    #[cfg(not(unix))]
    let mismatch_profile = std::path::PathBuf::from("tests/fixtures/platform/linux_basic.profile");
    let observed_reports = Arc::new(Mutex::new(Vec::<OpenIndexReport>::new()));
    let observer: OpenReportObserver = {
        let observed_reports = Arc::clone(&observed_reports);
        Arc::new(move |report: &OpenIndexReport| {
            if let Ok(mut reports) = observed_reports.lock() {
                reports.push(report.clone());
            }
        })
    };
    let err = match Store::open(
        StoreConfig::new(mismatch_dir.path())
            .with_segment_max_bytes(4096)
            .with_open_report_observer(Some(observer))
            .with_platform_profile_path(mismatch_profile.clone()),
    ) {
        Ok(_) => {
            return Err(std::io::Error::other(
                "PROPERTY: mismatched platform profile must fail open",
            )
            .into());
        }
        Err(error) => error,
    };
    assert!(
        matches!(
            err,
            StoreError::PlatformProfileMismatch { ref path, .. } if path == &mismatch_profile
        ),
        "expected PlatformProfileMismatch, got {err:?}"
    );
    assert!(
        !mismatch_dir.path().join("000000.fbat").exists(),
        "profile mismatch must fail before writer spawn or lifecycle append"
    );
    assert!(
        observed_reports
            .lock()
            .map_err(|_| std::io::Error::other("observed reports lock poisoned"))?
            .is_empty(),
        "profile mismatch must fail before successful-open report observability"
    );
    Ok(())
}