coordinode-lsm-tree 7.6.0

// SPDX-License-Identifier: Apache-2.0
// Copyright (c) 2026-present, Dmitry Prudnikov

use super::*;
use crate::fs::MemFs;

const MIB: u64 = 1024 * 1024;

fn check(quota_headroom: u64) -> Check {
    Check {
        quota_headroom,
        floor: Floor::MayConsume,
    }
}

fn demand<'a>(fs: &'a MemFs, path: &'a str, bytes: u64) -> Demand<'a> {
    Demand {
        fs,
        path: Path::new(path),
        bytes,
    }
}

/// A folder a compaction writes nothing to takes no part in the check: a full
/// volume holding only such a folder does not refuse what fits elsewhere.
#[test]
fn a_folder_written_nothing_does_not_refuse_a_reservation() {
    let roomy = MemFs::with_capacity(100 * MIB);
    let full = MemFs::with_capacity(0);
    let pool = Arc::new(CapacityPool::default());
    let keep = Check {
        quota_headroom: u64::MAX,
        floor: Floor::Keep,
    };
    assert!(
        pool.reserve(
            1,
            &[
                demand(&roomy, "/tables", 10 * MIB),
                demand(&full, "/blobs", 0)
            ],
            Some(keep),
        )
        .is_some(),
        "the tables fit their volume; the blob folder takes nothing",
    );
}

/// A reservation that goes after its tree left the pool gives back what the
/// volume still holds for it and nothing of the forgotten quota, leaving no
/// account of the tree behind.
#[test]
fn a_reservation_dropped_after_its_tree_left_restores_no_account() {
    let fs = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());
    let room = pool.hold(3, &[demand(&fs, "/tables", MIB)]);
    pool.forget(3);
    assert_eq!(pool.held_on(&fs, Path::new("/tables")), MIB);
    drop(room);
    assert_eq!(pool.held_on(&fs, Path::new("/tables")), 0);
    assert!(!pool.accounts(3));
}

/// A slice reserved within the room it measured is checked against the tree's
/// quota as it stands: what does not fit it is refused, however much room the
/// volume keeps.
#[test]
fn reservation_within_its_room_is_refused_past_the_quota() {
    let fs = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());
    assert!(
        pool.reserve_within(
            1,
            &[(demand(&fs, "/tables", MIB), u64::MAX)],
            check(MIB / 2)
        )
        .is_none(),
        "a MiB does not fit half a MiB of quota",
    );
    assert!(
        pool.reserve_within(
            1,
            &[(demand(&fs, "/tables", MIB), u64::MAX)],
            check(2 * MIB)
        )
        .is_some(),
        "it fits two",
    );
}

/// Two compactions on one volume cannot both take the same free bytes: the
/// second is checked against what the first holds, and the room the first
/// gives back as it goes is the second's again.
#[test]
fn second_reservation_sees_what_the_first_holds() {
    let fs = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());

    let first = pool
        .reserve(1, &[demand(&fs, "/a", 60 * MIB)], Some(check(u64::MAX)))
        .expect("60 of 100 MiB fits");
    assert!(
        pool.reserve(2, &[demand(&fs, "/b", 60 * MIB)], Some(check(u64::MAX)))
            .is_none(),
        "the second 60 MiB would take bytes the first holds",
    );
    assert_eq!(pool.available(&fs, Path::new("/b")), 40 * MIB);

    drop(first);
    assert_eq!(
        pool.held(Pool::Volume(fs.volume_id(Path::new("/a")).expect("id"))),
        0
    );
    assert!(
        pool.reserve(2, &[demand(&fs, "/b", 60 * MIB)], Some(check(u64::MAX)))
            .is_some()
    );
}

/// Folders of one volume share its room; folders on volumes proven apart do
/// not.
#[test]
fn folders_share_a_volume_and_volumes_apart_do_not() {
    let shared = MemFs::with_capacity(100 * MIB);
    let other = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());

    let _held = pool
        .reserve(1, &[demand(&shared, "/tables", 60 * MIB)], None)
        .expect("unchecked");
    assert!(
        !pool.would_fit(2, &[demand(&shared, "/blobs", 60 * MIB)], check(u64::MAX)),
        "another folder of the same volume",
    );
    assert!(
        pool.would_fit(2, &[demand(&other, "/blobs", 60 * MIB)], check(u64::MAX)),
        "a volume proven apart",
    );
}

/// The demands of one compaction on one volume add up.
#[test]
fn demands_of_one_compaction_on_one_volume_add_up() {
    let fs = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());
    assert!(!pool.would_fit(
        1,
        &[
            demand(&fs, "/tables", 60 * MIB),
            demand(&fs, "/blobs", 60 * MIB)
        ],
        check(u64::MAX),
    ));
    assert!(pool.would_fit(
        1,
        &[
            demand(&fs, "/tables", 60 * MIB),
            demand(&fs, "/blobs", 30 * MIB)
        ],
        check(u64::MAX),
    ));
}

/// A folder no volume id is reported for is proven apart from none: it takes
/// room counted in every volume, and every volume's room counts it.
#[test]
fn an_unproven_folder_shares_every_volume() {
    assert!(Pool::Unproven.shares(Pool::Volume(1)));
    assert!(Pool::Volume(1).shares(Pool::Unproven));
    assert!(!Pool::Volume(1).shares(Pool::Volume(2)));
    assert!(!Pool::Volume(1).shares(Pool::Quota(1)));
    assert!(!Pool::Quota(1).shares(Pool::Quota(2)));

    let mut held = crate::HashMap::default();
    held.insert(Pool::Unproven, 30);
    held.insert(Pool::Volume(1), 10);
    held.insert(Pool::Volume(2), 20);
    assert_eq!(held_against(&held, Pool::Volume(1)), 40);
    assert_eq!(held_against(&held, Pool::Unproven), 60);
}

/// The quota caps what a tree's compactions hold together, on whatever
/// volumes they write.
#[test]
fn the_quota_caps_what_a_trees_compactions_hold_together() {
    let a = MemFs::with_capacity(100 * MIB);
    let b = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());
    let _first = pool
        .reserve(1, &[demand(&a, "/t", 30 * MIB)], Some(check(50 * MIB)))
        .expect("30 of a 50 MiB quota");
    assert!(
        pool.reserve(1, &[demand(&b, "/t", 30 * MIB)], Some(check(50 * MIB)))
            .is_none(),
        "60 MiB in all past a 50 MiB quota",
    );
    assert!(
        pool.reserve(2, &[demand(&b, "/t", 30 * MIB)], Some(check(50 * MIB)))
            .is_some(),
        "another tree's quota is its own",
    );
    assert_eq!(pool.quota_held(1), 30 * MIB);
}

/// What lands is the volume's to count: the grant holds that much less, and
/// the rest goes back when the reservation does. The quota's grant is held
/// whole until then.
#[test]
fn landed_bytes_leave_the_grant_and_the_rest_goes_back_on_drop() -> crate::Result<()> {
    let fs = MemFs::with_capacity(100 * MIB);
    let volume = Pool::Volume(fs.volume_id(Path::new("/t")).expect("id"));
    let pool = Arc::new(CapacityPool::default());
    let room = pool
        .reserve(1, &[demand(&fs, "/t", 60 * MIB)], Some(check(u64::MAX)))
        .expect("fits");

    room.landed(&fs, Path::new("/t"), 25 * MIB)?;
    assert_eq!(pool.held(volume), 35 * MIB);
    assert_eq!(pool.quota_held(1), 60 * MIB);

    drop(room);
    assert_eq!(pool.held(volume), 0);
    assert_eq!(pool.quota_held(1), 0);
    Ok(())
}

/// An output past its grant is taken on while the volume keeps the flush
/// floor beside it, and stops its compaction when it does not.
#[test]
fn an_output_past_its_grant_grows_it_or_stops_the_compaction() -> crate::Result<()> {
    let fs = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());
    let room = pool
        .reserve(1, &[demand(&fs, "/t", 10 * MIB)], Some(check(u64::MAX)))
        .expect("fits");

    // Plenty free: the excess is taken on, and the quota holds it.
    room.landed(&fs, Path::new("/t"), 15 * MIB)?;
    assert!(!room.refused());
    assert_eq!(pool.quota_held(1), 15 * MIB);

    // The volume keeps less than the floor: the compaction stops.
    fs.set_capacity(MIB / 2);
    let err = room
        .landed(&fs, Path::new("/t"), MIB)
        .expect_err("no room past the grant");
    assert!(matches!(err, crate::Error::StorageFull { .. }), "{err:?}");
    assert!(room.refused());
    Ok(())
}

/// An unchecked reservation refuses nothing, but a checked one sharing the
/// pool counts it.
#[test]
fn an_unchecked_reservation_is_counted_by_a_checked_one() -> crate::Result<()> {
    let fs = MemFs::with_capacity(100 * MIB);
    let pool = Arc::new(CapacityPool::default());
    let unchecked = pool
        .reserve(1, &[demand(&fs, "/t", 150 * MIB)], None)
        .expect("an unchecked reservation always holds");
    assert!(!pool.would_fit(2, &[demand(&fs, "/t", MIB)], check(u64::MAX)));
    // Past its grant on a volume with no room left, it still refuses nothing.
    fs.set_capacity(0);
    unchecked.landed(&fs, Path::new("/t"), 200 * MIB)?;
    assert!(!unchecked.refused());
    Ok(())
}

/// Taking more on after admission is checked and held in one step, for the
/// others to see, and refused whole when it does not fit.
#[test]
fn room_taken_on_later_is_checked_and_held_until_the_reservation_goes() {
    let fs = MemFs::with_capacity(100 * MIB);
    let volume = Pool::Volume(fs.volume_id(Path::new("/t")).expect("id"));
    let pool = Arc::new(CapacityPool::default());
    let room = pool
        .reserve(1, &[demand(&fs, "/t", 10 * MIB)], Some(check(u64::MAX)))
        .expect("fits");
    let _other = pool
        .reserve(2, &[demand(&fs, "/u", 60 * MIB)], Some(check(u64::MAX)))
        .expect("fits");

    assert!(
        !room.try_add(&demand(&fs, "/blobs", 40 * MIB), check(u64::MAX)),
        "40 MiB do not fit beside the 70 the two hold of 100",
    );
    assert_eq!(pool.held(volume), 70 * MIB, "a refusal takes nothing");

    assert!(room.try_add(&demand(&fs, "/blobs", 20 * MIB), check(u64::MAX)));
    assert_eq!(pool.held(volume), 90 * MIB);
    assert_eq!(pool.quota_held(1), 30 * MIB);
    drop(room);
    assert_eq!(pool.held(volume), 60 * MIB);
    assert_eq!(pool.quota_held(1), 0);
}

/// Room taken on later on a volume the reservation held nothing on is a
/// grant of its own there, given back on drop; nothing taken on is no change.
#[test]
fn room_taken_on_another_volume_is_a_grant_of_its_own() {
    let tables = MemFs::with_capacity(100 * MIB);
    let blobs = MemFs::with_capacity(100 * MIB);
    let blob_volume = Pool::Volume(blobs.volume_id(Path::new("/b")).expect("id"));
    let pool = Arc::new(CapacityPool::default());
    let room = pool
        .reserve(1, &[demand(&tables, "/t", 10 * MIB)], Some(check(u64::MAX)))
        .expect("fits");

    assert!(room.try_add(&demand(&blobs, "/b", 0), check(u64::MAX)));
    assert_eq!(pool.held(blob_volume), 0, "nothing taken on");
    assert_eq!(pool.quota_held(1), 10 * MIB);

    assert!(room.try_add(&demand(&blobs, "/b", 30 * MIB), check(u64::MAX)));
    assert_eq!(pool.held(blob_volume), 30 * MIB);
    assert_eq!(pool.quota_held(1), 40 * MIB);
    drop(room);
    assert_eq!(pool.held(blob_volume), 0);
    assert_eq!(pool.quota_held(1), 0);
}

/// A file landed on a volume nothing was reserved on is excess whole: the
/// quota takes it on while the volume keeps its floor, and it holds nothing
/// of that volume's account, being written already.
#[test]
fn a_file_landed_on_an_unreserved_volume_is_excess() -> crate::Result<()> {
    let tables = MemFs::with_capacity(100 * MIB);
    let other = MemFs::with_capacity(100 * MIB);
    let other_volume = Pool::Volume(other.volume_id(Path::new("/o")).expect("id"));
    let pool = Arc::new(CapacityPool::default());
    let room = pool
        .reserve(1, &[demand(&tables, "/t", 10 * MIB)], Some(check(u64::MAX)))
        .expect("fits");
    room.landed(&other, Path::new("/o"), 5 * MIB)?;
    assert_eq!(pool.quota_held(1), 15 * MIB);
    assert_eq!(pool.held(other_volume), 0);
    drop(room);
    assert_eq!(pool.quota_held(1), 0);
    Ok(())
}

/// The pool's debug form names it without dumping the account.
#[test]
fn the_pool_debugs_by_name() {
    assert_eq!(
        format!("{:?}", CapacityPool::default()),
        "CapacityPool { .. }"
    );
}

/// Folders with no volume id share the unproven pool though they may lie on
/// volumes apart: each must hold what they take together, so the least free
/// space any of them reports is the pool's.
#[test]
fn an_unproven_pool_takes_the_least_free_space_of_its_folders() {
    let (volumes, total) = tally(
        [
            (Pool::Unproven, 10, 100 * MIB),
            (Pool::Unproven, 20, 5 * MIB),
            (Pool::Volume(1), 30, 50 * MIB),
        ]
        .into_iter(),
    );
    assert_eq!(total, 60);
    assert_eq!(
        volumes,
        [
            (Pool::Unproven, 30, 5 * MIB),
            (Pool::Volume(1), 30, 50 * MIB)
        ]
    );
}

/// A compaction of the same tree that starts and is installed while another
/// runs is counted too, though it was neither held when the other started nor
/// is held when the other grows.
#[test]
fn quota_growth_counts_a_compaction_started_and_installed_meanwhile() {
    let fs = MemFs::with_capacity(u64::MAX);
    let pool = Arc::new(CapacityPool::default());
    let first = pool
        .reserve(1, &[demand(&fs, "/t", 30 * MIB)], Some(check(100 * MIB)))
        .expect("30 of a 100 MiB quota");
    let second = pool
        .reserve(1, &[demand(&fs, "/t", 50 * MIB)], Some(check(100 * MIB)))
        .expect("80 of a 100 MiB quota");
    // Installed: its 50 MiB are in the footprint now, held no longer.
    drop(second);

    let err = first
        .landed(&fs, Path::new("/t"), 60 * MIB)
        .expect_err("50 installed and 60 written are past the 100 MiB quota");
    assert!(matches!(err, crate::Error::StorageFull { .. }), "{err:?}");
}

/// A compaction of the same tree installed while another runs puts its bytes
/// into the footprint the other's quota headroom predates: the other may not
/// count them free when its outputs outgrow its grant.
#[test]
fn quota_growth_counts_what_an_installed_compaction_held() {
    let fs = MemFs::with_capacity(u64::MAX);
    let pool = Arc::new(CapacityPool::default());
    let first = pool
        .reserve(1, &[demand(&fs, "/t", 50 * MIB)], Some(check(100 * MIB)))
        .expect("50 of a 100 MiB quota");
    let second = pool
        .reserve(1, &[demand(&fs, "/t", 30 * MIB)], Some(check(100 * MIB)))
        .expect("80 of a 100 MiB quota");
    // Installed: its 50 MiB are in the footprint now, held no longer.
    drop(first);

    let err = second
        .landed(&fs, Path::new("/t"), 60 * MIB)
        .expect_err("50 installed and 60 written are past the 100 MiB quota");
    assert!(matches!(err, crate::Error::StorageFull { .. }), "{err:?}");
}