silent 2.16.1

Silent Web Framework
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
use super::ConnectionService;
use super::config::ServerConfig;
use super::listener::{Listen, ListenersBuilder};
#[cfg(feature = "metrics")]
use super::metrics::{
    record_accept_err, record_accept_ok, record_forced_shutdown, record_graceful_shutdown,
    record_handler_duration, record_handler_err, record_handler_ok, record_handler_timeout,
    record_rate_limiter_closed, record_rate_limiter_timeout, record_shutdown_duration,
    record_wait_duration,
};
use crate::core::socket_addr::SocketAddr as CoreSocketAddr;
use std::io;
use std::net::SocketAddr;
#[cfg(not(target_os = "windows"))]
use std::path::Path;
use std::sync::Arc;
#[cfg(test)]
use std::sync::OnceLock;
#[cfg(feature = "scheduler")]
use std::sync::atomic::{AtomicBool, Ordering};
use std::time::{Duration, Instant};
use tokio::signal;
use tokio::sync::Semaphore;
use tokio::task::JoinSet;
#[cfg(test)]
static SHUTDOWN_NOTIFY: OnceLock<tokio::sync::Notify> = OnceLock::new();
#[cfg(feature = "scheduler")]
static SCHEDULER_RUNNING: AtomicBool = AtomicBool::new(false);

#[cfg(test)]
fn trigger_test_shutdown() {
    SHUTDOWN_NOTIFY
        .get_or_init(tokio::sync::Notify::new)
        .notify_waiters();
}

fn test_shutdown_future() -> impl std::future::Future<Output = ()> {
    #[cfg(test)]
    {
        SHUTDOWN_NOTIFY
            .get_or_init(tokio::sync::Notify::new)
            .notified()
    }
    #[cfg(not(test))]
    {
        futures_util::future::pending::<()>()
    }
}

#[cfg(feature = "scheduler")]
fn ensure_scheduler_running() {
    if SCHEDULER_RUNNING
        .compare_exchange(false, true, Ordering::AcqRel, Ordering::Acquire)
        .is_ok()
    {
        tokio::spawn(async {
            use crate::scheduler::{SCHEDULER, Scheduler};

            Scheduler::schedule(SCHEDULER.clone()).await;
            SCHEDULER_RUNNING.store(false, Ordering::Release);
        });
    }
}

type ListenCallback = Box<dyn Fn(&[CoreSocketAddr]) + Send + Sync>;

/// 限流器配置(令牌桶算法)。
///
/// # 参数说明
///
/// - `capacity`: 令牌桶容量(允许的最大突发连接数)
/// - `refill_every`: 令牌补充间隔(每次补充 1 个令牌)
/// - `max_wait`: 获取令牌的最大等待时间,超时则拒绝连接
///
/// # Examples
///
/// ```
/// use silent::RateLimiterConfig;
/// use std::time::Duration;
///
/// let config = RateLimiterConfig {
///     capacity: 10,
///     refill_every: Duration::from_millis(10),
///     max_wait: Duration::from_secs(2),
/// };
/// ```
#[derive(Clone, Copy, Debug)]
pub struct RateLimiterConfig {
    /// 令牌桶容量(允许的最大突发连接数)
    pub capacity: usize,
    /// 令牌补充间隔(每次补充 1 个令牌)
    pub refill_every: Duration,
    /// 获取令牌的最大等待时间,超时则拒绝连接
    pub max_wait: Duration,
}

/// 与协议无关的通用网络服务器。
///
/// `NetServer` 提供底层网络监听和连接分发能力,支持任意协议的自定义处理逻辑。
/// 它负责:
/// - 监听一个或多个网络地址(TCP/Unix Socket)
/// - 接受新连接并分发给用户提供的 `ConnectionService` 处理器
/// - 可选的连接限流(令牌桶算法)
/// - 优雅关停(等待活动连接完成或超时强制取消)
///
/// # Examples
///
/// 基本的 TCP 回显服务器:
///
/// ```no_run
/// use silent::{NetServer, RateLimiterConfig, BoxedConnection, SocketAddr};
/// use std::time::Duration;
/// use tokio::io::{AsyncReadExt, AsyncWriteExt};
///
/// #[tokio::main]
/// async fn main() {
///     let handler = |mut stream: BoxedConnection, peer: SocketAddr| async move {
///         let mut buf = vec![0u8; 1024];
///         let n = stream.read(&mut buf).await?;
///         stream.write_all(&buf[..n]).await?;
///         Ok::<(), Box<dyn std::error::Error + Send + Sync>>(())
///     };
///
///     let rate_config = RateLimiterConfig {
///         capacity: 100,
///         refill_every: Duration::from_millis(10),
///         max_wait: Duration::from_secs(1),
///     };
///
///     NetServer::new()
///         .bind("127.0.0.1:8080".parse().unwrap()).unwrap()
///         .with_rate_limiter(rate_config)
///         .with_shutdown(Duration::from_secs(30))
///         .serve(handler)
///         .await;
/// }
/// ```
///
/// # 限流
///
/// 使用 [`with_rate_limiter`](Self::with_rate_limiter) 配置令牌桶限流器:
/// - `capacity`: 令牌桶容量(允许的最大突发连接数)
/// - `refill_every`: 补充间隔(每次补充 1 个令牌)
/// - `max_wait`: 获取令牌的最大等待时间
///
/// # 优雅关停
///
/// 使用 [`with_shutdown`](Self::with_shutdown) 配置关停行为:
/// - 收到 Ctrl-C 或 SIGTERM 信号后停止接受新连接
/// - 等待活动连接在指定时间内完成
/// - 超时后强制取消剩余连接
///
/// # 错误处理
///
/// 连接处理器返回的错误会被记录到日志,但不会影响服务器主循环。
/// 服务器会继续接受新连接,除非收到关停信号或遇到严重的监听器错误。
pub struct NetServer {
    listeners_builder: ListenersBuilder,
    shutdown_callback: Option<Box<dyn Fn() + Send + Sync>>,
    listen_callback: Option<ListenCallback>,
    rate_limiter: Option<RateLimiter>,
    shutdown_cfg: ShutdownConfig,
    config: ServerConfig,
}

impl Default for NetServer {
    fn default() -> Self {
        Self::new()
    }
}

impl NetServer {
    /// 创建一个新的 NetServer 实例。
    ///
    /// 默认配置:
    /// - 无监听器(需要调用 [`bind`](Self::bind) 或 [`listen`](Self::listen) 添加)
    /// - 无限流限制
    /// - 立即强制关停(graceful_wait = 0)
    ///
    /// # Examples
    ///
    /// ```no_run
    /// use silent::NetServer;
    ///
    /// let server = NetServer::new();
    /// ```
    pub fn new() -> Self {
        Self {
            listeners_builder: ListenersBuilder::new(),
            shutdown_callback: None,
            listen_callback: None,
            rate_limiter: None,
            shutdown_cfg: ShutdownConfig::default(),
            config: ServerConfig::default(),
        }
    }

    pub(crate) fn from_parts(
        listeners_builder: ListenersBuilder,
        shutdown_callback: Option<Box<dyn Fn() + Send + Sync>>,
        listen_callback: Option<ListenCallback>,
        config: ServerConfig,
    ) -> Self {
        Self {
            listeners_builder,
            shutdown_callback,
            listen_callback,
            rate_limiter: None,
            shutdown_cfg: ShutdownConfig::default(),
            config,
        }
    }

    /// 绑定 TCP 监听地址。
    ///
    /// 可以多次调用以监听多个地址。
    ///
    /// # Examples
    ///
    /// ```no_run
    /// use silent::NetServer;
    ///
    /// let server = NetServer::new()
    ///     .bind("127.0.0.1:8080".parse().unwrap()).unwrap()
    ///     .bind("127.0.0.1:8081".parse().unwrap()).unwrap();
    /// ```
    #[inline]
    pub fn bind(mut self, addr: SocketAddr) -> Result<Self, io::Error> {
        self.listeners_builder.bind(addr)?;
        Ok(self)
    }

    /// 绑定 Unix Domain Socket 监听路径(仅非 Windows 平台)。
    ///
    /// # Examples
    ///
    /// ```no_run
    /// # #[cfg(not(target_os = "windows"))]
    /// # {
    /// use silent::NetServer;
    ///
    /// let server = NetServer::new()
    ///     .bind_unix("/tmp/my_service.sock");
    /// # }
    /// ```
    #[cfg(not(target_os = "windows"))]
    #[inline]
    pub fn bind_unix<P: AsRef<Path>>(mut self, path: P) -> Result<Self, io::Error> {
        self.listeners_builder.bind_unix(path)?;
        Ok(self)
    }

    /// 添加自定义监听器。
    ///
    /// 用于高级场景,允许使用自定义的监听器实现。
    ///
    /// # Examples
    ///
    /// ```no_run
    /// use silent::NetServer;
    /// use tokio::net::TcpListener;
    ///
    /// # #[tokio::main]
    /// # async fn main() {
    /// let custom_listener = TcpListener::bind("127.0.0.1:8080").await.unwrap();
    /// let server = NetServer::new()
    ///     .listen(silent::Listener::from(custom_listener));
    /// # }
    /// ```
    #[inline]
    pub fn listen<T: Listen + Send + Sync + 'static>(mut self, listener: T) -> Self {
        self.listeners_builder.add_listener(Box::new(listener));
        self
    }

    /// 设置监听成功后的回调函数。
    ///
    /// 回调函数会在所有监听器成功绑定后被调用,接收实际监听的地址列表。
    ///
    /// # Examples
    ///
    /// ```no_run
    /// use silent::NetServer;
    ///
    /// let server = NetServer::new()
    ///     .bind("127.0.0.1:0".parse().unwrap()).unwrap()  // 随机端口
    ///     .on_listen(|addrs| {
    ///         println!("Server listening on: {:?}", addrs);
    ///     });
    /// ```
    pub fn on_listen<F>(mut self, callback: F) -> Self
    where
        F: Fn(&[CoreSocketAddr]) + Send + Sync + 'static,
    {
        self.listen_callback = Some(Box::new(callback));
        self
    }

    /// 设置关停时的回调函数。
    ///
    /// 回调函数会在收到关停信号后、开始关停流程前被调用。
    ///
    /// # Examples
    ///
    /// ```no_run
    /// use silent::NetServer;
    ///
    /// let server = NetServer::new()
    ///     .bind("127.0.0.1:8080".parse().unwrap()).unwrap()
    ///     .set_shutdown_callback(|| {
    ///         println!("Server is shutting down...");
    ///     });
    /// ```
    pub fn set_shutdown_callback<F>(mut self, callback: F) -> Self
    where
        F: Fn() + Send + Sync + 'static,
    {
        self.shutdown_callback = Some(Box::new(callback));
        self
    }

    /// 配置连接限流器(令牌桶算法)。
    ///
    /// 限流器用于控制连接接受速率,防止服务器过载。
    ///
    /// # Examples
    ///
    /// ```no_run
    /// use silent::{NetServer, RateLimiterConfig};
    /// use std::time::Duration;
    ///
    /// let config = RateLimiterConfig {
    ///     capacity: 10,
    ///     refill_every: Duration::from_millis(10),
    ///     max_wait: Duration::from_secs(2),
    /// };
    ///
    /// let server = NetServer::new()
    ///     .bind("127.0.0.1:8080".parse().unwrap()).unwrap()
    ///     .with_rate_limiter(config);
    /// ```
    pub fn with_rate_limiter(mut self, config: RateLimiterConfig) -> Self {
        self.rate_limiter = Some(RateLimiter::new(
            config.capacity,
            config.refill_every,
            config.max_wait,
        ));
        self
    }

    /// 配置优雅关停等待时间。
    ///
    /// 当收到关停信号(Ctrl-C 或 SIGTERM)时:
    /// 1. 停止接受新连接
    /// 2. 等待活动连接在 `graceful_wait` 时间内完成
    /// 3. 超时后强制取消剩余连接
    ///
    /// 默认值为 0,表示立即强制关停。
    ///
    /// # Examples
    ///
    /// 等待最多 30 秒让连接优雅完成:
    ///
    /// ```no_run
    /// use silent::NetServer;
    /// use std::time::Duration;
    ///
    /// let _server = NetServer::new()
    ///     .bind("127.0.0.1:8080".parse().unwrap()).unwrap()
    ///     .with_shutdown(Duration::from_secs(30));
    /// ```
    pub fn with_shutdown(mut self, graceful_wait: Duration) -> Self {
        self.shutdown_cfg.graceful_wait = graceful_wait;
        self
    }

    /// 启动服务器(异步版本)。
    ///
    /// 此方法会阻塞当前任务,直到收到关停信号(Ctrl-C 或 SIGTERM)。
    ///
    /// # 行为
    ///
    /// 1. 绑定所有配置的监听器
    /// 2. 调用 `on_listen` 回调(如果设置)
    /// 3. 进入主事件循环:
    ///    - 接受新连接(受限流器控制)
    ///    - 为每个连接调用 `handler`
    ///    - 监听关停信号(Ctrl-C 或 SIGTERM)
    /// 4. 收到信号后执行优雅关停
    ///
    /// # Panics
    ///
    /// 如果服务器循环内部发生错误,将 panic。
    ///
    /// # Examples
    ///
    /// ```no_run
    /// use silent::{NetServer, BoxedConnection, SocketAddr};
    /// use std::time::Duration;
    ///
    /// #[tokio::main]
    /// async fn main() {
    ///     let handler = |_s: BoxedConnection, _p: SocketAddr| async move {
    ///         Ok::<_, Box<dyn std::error::Error + Send + Sync>>(())
    ///     };
    ///
    ///     NetServer::new()
    ///         .bind("127.0.0.1:8080".parse().unwrap()).unwrap()
    ///         .serve(handler)
    ///         .await;
    /// }
    /// ```
    ///
    /// 提示:若处理器包含状态或不易 `Clone`,可使用 [`serve_arc`](Self::serve_arc)
    /// 或 [`serve_dyn`](Self::serve_dyn) 传入 `Arc` 包装。
    pub async fn serve<H>(self, handler: H)
    where
        H: ConnectionService + 'static,
    {
        if let Err(e) = self.serve_arc(std::sync::Arc::new(handler)).await {
            panic!("server loop failed: {}", e);
        }
    }

    /// 启动服务器(阻塞版本),内部创建多线程 Tokio 运行时。
    ///
    /// 同 [`serve`](Self::serve)。若处理器不易 `Clone`,推荐使用
    /// [`serve_arc`](Self::serve_arc) 或 [`serve_dyn`](Self::serve_dyn)。
    pub fn run<H>(self, handler: H)
    where
        H: ConnectionService + 'static,
    {
        let runtime = tokio::runtime::Builder::new_multi_thread()
            .enable_all()
            .build()
            .expect("failed to build Tokio runtime");
        runtime.block_on(async move {
            if let Err(e) = self.serve_arc(std::sync::Arc::new(handler)).await {
                panic!("server loop failed: {}", e);
            }
        })
    }

    /// 使用 Arc 包装的处理器(泛型版)。
    ///
    /// 适用于携带共享状态的处理器,实现 `ConnectionService` 即可。
    pub async fn serve_arc<H>(self, handler: std::sync::Arc<H>) -> io::Result<()>
    where
        H: ConnectionService + 'static,
    {
        // 向下转为 trait 对象,复用 dyn 版本
        self.serve_dyn(handler as std::sync::Arc<dyn ConnectionService>)
            .await
    }

    /// 使用 `Arc<dyn ConnectionService>` 的处理器。
    ///
    /// 适用于动态分发场景或需要跨 crate 以 trait 对象形式传递处理器的情况。
    pub async fn serve_dyn(self, handler: std::sync::Arc<dyn ConnectionService>) -> io::Result<()> {
        self.serve_connection_loop(handler).await
    }

    async fn serve_connection_loop(
        mut self,
        handler: std::sync::Arc<dyn ConnectionService>,
    ) -> io::Result<()> {
        let loop_started = Instant::now();
        let mut listeners = self.listeners_builder.listen()?;
        let addrs = listeners.local_addrs().to_vec();
        let handler_timeout = self.config.connection_limits.handler_timeout;
        if let Some(cb) = &self.listen_callback {
            (cb)(&addrs);
        } else {
            // 默认打印监听地址(逐行展示,更清晰)
            if addrs.len() == 1 {
                tracing::info!("listening on {}", format!("{:?}", addrs[0]));
            } else {
                let lines = addrs
                    .iter()
                    .map(|a| format!("  - {:?}", a))
                    .collect::<Vec<_>>()
                    .join("\n");
                tracing::info!("listening on:\n{}", lines);
            }
        }

        #[cfg(feature = "scheduler")]
        ensure_scheduler_running();

        let mut join_set: JoinSet<()> = JoinSet::new();
        let mut shutdown = ShutdownHandle::new(self.shutdown_callback.take(), self.shutdown_cfg);
        let rate = self_rate_limiter(self.rate_limiter.as_ref());
        // 启动限流器补充任务(若配置)
        let mut refill_handle = rate.as_ref().map(|r| r.spawn_refill_task());

        loop {
            tokio::select! {
                biased;
                _ = shutdown.signal() => {
                    tracing::info!(
                        elapsed = ?loop_started.elapsed(),
                        tasks = join_set.len(),
                        "shutdown signal received"
                    );
                    break;
                }
                accept_result = listeners.accept() => {
                    match accept_result {
                        None => {
                            tracing::info!(elapsed = ?loop_started.elapsed(), "listener closed, shutting down");
                            break;
                        }
                        Some(Ok((stream, peer_addr))) => {
                            #[cfg(feature = "metrics")]
                            record_accept_ok();
                            if let Some(rate) = &rate {
                                let semaphore = rate.semaphore.clone();
                                let max_wait = rate.max_wait;
                                let handler = handler.clone();
                                let peer = peer_addr.clone();
                                let accepted_at = Instant::now();
                                tracing::info!(%peer, "accepted connection");
                                join_set.spawn(async move {
                                    match tokio::time::timeout(max_wait, semaphore.acquire_owned()).await {
                                        Ok(Ok(_permit)) => {
                                            let wait_cost = accepted_at.elapsed();
                                            #[cfg(feature = "metrics")]
                                            record_wait_duration(wait_cost.as_nanos() as u64);
                                            if let Some(timeout) = handler_timeout {
                                                match tokio::time::timeout(timeout, handler.call(stream, peer.clone())).await {
                                                    Ok(res) => {
                                                        if let Err(err) = res {
                                                            tracing::error!("Failed to serve connection: {:?}", err);
                                                        } else {
                                            #[cfg(feature = "metrics")]
                                                            record_handler_duration(accepted_at.elapsed().as_nanos() as u64);
                                                            tracing::debug!(%peer, wait = ?wait_cost, handle = ?accepted_at.elapsed(), "connection served");
                                                        }
                                                    }
                                                    Err(_) => {
                                            #[cfg(feature = "metrics")]
                                                        record_handler_timeout();
                                                        tracing::warn!(
                                                            %peer,
                                                            wait = ?wait_cost,
                                                            "Connection handler timed out for peer"
                                                        );
                                                    }
                                                }
                                            } else {
                                                let handle_started = Instant::now();
                                                if let Err(err) = handler.call(stream, peer.clone()).await {
                                            #[cfg(feature = "metrics")]
                                                    record_handler_err();
                                                    tracing::error!("Failed to serve connection: {:?}", err);
                                                } else {
                                            #[cfg(feature = "metrics")]
                                                    record_handler_ok();
                                            #[cfg(feature = "metrics")]
                                                    record_handler_duration(handle_started.elapsed().as_nanos() as u64);
                                                    tracing::debug!(%peer, wait = ?wait_cost, handle = ?handle_started.elapsed(), "connection served");
                                                }
                                            }
                                        }
                                        Ok(Err(_)) => {
                                            #[cfg(feature = "metrics")]
                                            record_rate_limiter_closed();
                                            tracing::warn!(%peer, "Rate limiter closed, dropping connection");
                                        }
                                        Err(_) => {
                                            #[cfg(feature = "metrics")]
                                            record_rate_limiter_timeout();
                                            tracing::warn!(%peer, "Rate limiter timeout, dropping connection");
                                        }
                                    }
                                });
                            } else {
                                let handler = handler.clone();
                                let peer = peer_addr.clone();
                                let accepted_at = Instant::now();
                                tracing::info!(%peer, "accepted connection");
                                join_set.spawn(async move {
                                    if let Some(timeout) = handler_timeout {
                                        match tokio::time::timeout(timeout, handler.call(stream, peer.clone())).await {
                                            Ok(res) => {
                                                if let Err(err) = res {
                                            #[cfg(feature = "metrics")]
                                                    record_handler_err();
                                                    tracing::error!("Failed to serve connection: {:?}", err);
                                                } else {
                                            #[cfg(feature = "metrics")]
                                                    record_handler_ok();
                                            #[cfg(feature = "metrics")]
                                                    record_handler_duration(accepted_at.elapsed().as_nanos() as u64);
                                                    tracing::debug!(%peer, handle = ?accepted_at.elapsed(), "connection served");
                                                }
                                            }
                                            Err(_) => {
                                            #[cfg(feature = "metrics")]
                                                record_handler_timeout();
                                                tracing::warn!(%peer, "Connection handler timed out for peer");
                                            }
                                        }
                                    } else {
                                        let handle_started = Instant::now();
                                        if let Err(err) = handler.call(stream, peer.clone()).await {
                                            #[cfg(feature = "metrics")]
                                            record_handler_err();
                                            tracing::error!("Failed to serve connection: {:?}", err);
                                        } else {
                                            #[cfg(feature = "metrics")]
                                            record_handler_ok();
                                            tracing::debug!(%peer, handle = ?handle_started.elapsed(), "connection served");
                                        }
                                    }
                                });
                            }
                        }
                        Some(Err(e)) => {
                                            #[cfg(feature = "metrics")]
                            record_accept_err();
                            tracing::error!(error = ?e, tasks = join_set.len(), "accept connection failed");
                        }
                    }
                }
                Some(join_result) = join_set.join_next() => {
                    if let Err(err) = join_result {
                        tracing::error!(error = ?err, "connection task panicked");
                    }
                }
                // 测试关停注入点(非测试构建为 pending,不影响选择其他分支)
                _ = test_shutdown_future() => {
                    tracing::info!("test shutdown notify received");
                    break;
                }
            }
        }

        // 优雅关停:等待活动任务在指定时间内完成
        if shutdown.shutdown_cfg.graceful_wait > Duration::from_millis(0) {
            let graceful_started = Instant::now();
            // 使用 timeout 等待所有任务完成,超时后自动结束
            let _ = tokio::time::timeout(shutdown.shutdown_cfg.graceful_wait, async {
                while let Some(join_result) = join_set.join_next().await {
                    if let Err(err) = join_result
                        && err.is_panic()
                    {
                        tracing::error!(error = ?err, "connection task panicked during graceful shutdown");
                    }
                }
            })
            .await;
            tracing::debug!(
                elapsed = ?graceful_started.elapsed(),
                remaining = join_set.len(),
                "graceful shutdown wait finished"
            );
            #[cfg(feature = "metrics")]
            record_graceful_shutdown();
            #[cfg(feature = "metrics")]
            record_shutdown_duration("graceful", graceful_started.elapsed().as_nanos() as u64);
        }

        // 结束限流补充任务
        if let Some(h) = &mut refill_handle {
            h.abort();
            let _ = h.await;
        }

        // 强制取消剩余任务并清理
        join_set.abort_all();
        let abort_started = Instant::now();
        while let Some(join_result) = join_set.join_next().await {
            if let Err(err) = join_result
                && err.is_panic()
            {
                tracing::error!(error = ?err, "connection task panicked during forced shutdown");
            }
        }
        tracing::debug!(elapsed = ?abort_started.elapsed(), "forced shutdown complete");
        #[cfg(feature = "metrics")]
        record_forced_shutdown();
        #[cfg(feature = "metrics")]
        record_shutdown_duration("forced", abort_started.elapsed().as_nanos() as u64);

        Ok(())
    }
}

#[derive(Clone)]
struct RateLimiter {
    semaphore: Arc<Semaphore>,
    max_wait: Duration,
    capacity: usize,
    refill_every: Duration,
}

impl RateLimiter {
    fn new(capacity: usize, refill_every: Duration, max_wait: Duration) -> Self {
        let semaphore = Arc::new(Semaphore::new(capacity));
        Self {
            semaphore,
            max_wait,
            capacity,
            refill_every,
        }
    }

    fn spawn_refill_task(&self) -> tokio::task::JoinHandle<()> {
        let sem = self.semaphore.clone();
        let capacity = self.capacity;
        let refill_every = self.refill_every;
        tokio::spawn(async move {
            let mut ticker = tokio::time::interval(refill_every);
            loop {
                ticker.tick().await;
                if sem.available_permits() < capacity {
                    sem.add_permits(1);
                }
            }
        })
    }
}

#[derive(Clone, Copy)]
struct ShutdownConfig {
    graceful_wait: Duration,
}

impl Default for ShutdownConfig {
    fn default() -> Self {
        Self {
            graceful_wait: Duration::from_secs(0),
        }
    }
}

fn self_rate_limiter(rate: Option<&RateLimiter>) -> Option<RateLimiter> {
    rate.cloned()
}

struct ShutdownHandle {
    shutdown_callback: Option<Box<dyn Fn() + Send + Sync>>,
    shutdown_cfg: ShutdownConfig,
}

impl ShutdownHandle {
    fn new(callback: Option<Box<dyn Fn() + Send + Sync>>, shutdown_cfg: ShutdownConfig) -> Self {
        let shutdown_callback = callback;
        Self {
            shutdown_callback,
            shutdown_cfg,
        }
    }

    async fn signal(&mut self) {
        #[cfg(unix)]
        {
            let mut term =
                tokio::signal::unix::signal(tokio::signal::unix::SignalKind::terminate())
                    .expect("Failed to install SIGTERM handler");
            tokio::select! {
                _ = signal::ctrl_c() => (),
                _ = term.recv() => (),
            }
        }

        #[cfg(not(unix))]
        {
            tokio::select! {
                _ = signal::ctrl_c() => (),
            }
        }

        if let Some(cb) = &self.shutdown_callback {
            (cb)();
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::server::connection;
    use crate::server::connection::BoxedConnection;
    use crate::server::listener::Listen;
    use crate::{AcceptFuture, BoxError};
    use std::sync::atomic::{AtomicBool, AtomicUsize, Ordering};

    #[tokio::test]
    async fn test_rate_limiter_capacity_limit() {
        // 测试容量限制:初始容量为 2,应能获取 2 个令牌
        let limiter = RateLimiter::new(2, Duration::from_secs(60), Duration::from_secs(1));

        // 获取前 2 个令牌应该成功
        let _permit1 = limiter
            .semaphore
            .clone()
            .acquire_owned()
            .await
            .expect("first permit should be available");

        let _permit2 = limiter
            .semaphore
            .clone()
            .acquire_owned()
            .await
            .expect("second permit should be available");

        // 第 3 个令牌应该不可用
        assert_eq!(limiter.semaphore.available_permits(), 0);
    }

    #[tokio::test]
    async fn test_rate_limiter_refill_adds_permit() {
        // 容量为 1,间隔很短,验证补充后可用许可数恢复
        let limiter = RateLimiter::new(1, Duration::from_millis(20), Duration::from_millis(10));
        // 先消耗掉唯一的许可
        let _permit = limiter
            .semaphore
            .clone()
            .acquire_owned()
            .await
            .expect("permit should be available");
        assert_eq!(limiter.semaphore.available_permits(), 0);

        // 启动补充任务,并等待一小段时间
        let handle = limiter.spawn_refill_task();
        tokio::time::sleep(Duration::from_millis(30)).await;
        // 至少应补回 1 个许可
        assert!(limiter.semaphore.available_permits() >= 1);
        handle.abort();
        let _ = handle.await;
    }

    struct TestListener {
        addr: std::net::SocketAddr,
        accepts: Arc<AtomicUsize>,
        once_conn: tokio::sync::Mutex<Option<BoxedConnection>>,
    }

    impl TestListener {
        fn new(conn: BoxedConnection, addr: std::net::SocketAddr) -> Self {
            Self {
                addr,
                accepts: Arc::new(AtomicUsize::new(0)),
                once_conn: tokio::sync::Mutex::new(Some(conn)),
            }
        }
    }

    impl Listen for TestListener {
        fn accept(&self) -> AcceptFuture<'_> {
            let accepts = self.accepts.clone();
            let addr = self.addr;
            let once = self.once_conn.try_lock();
            // 第一次返回一个连接,之后挂起(避免忙等)
            if let Ok(mut guard) = once
                && let Some(conn) = guard.take()
            {
                accepts.fetch_add(1, Ordering::SeqCst);
                return Box::pin(async move {
                    Ok((conn, crate::core::socket_addr::SocketAddr::from(addr)))
                });
            }
            Box::pin(async move {
                futures_util::future::pending::<
                    std::io::Result<(
                        Box<dyn connection::Connection + Send + Sync>,
                        crate::core::socket_addr::SocketAddr,
                    )>,
                >()
                .await
            })
        }

        fn local_addr(&self) -> std::io::Result<crate::core::socket_addr::SocketAddr> {
            Ok(crate::core::socket_addr::SocketAddr::from(self.addr))
        }
    }

    #[tokio::test]
    async fn test_net_server_on_listen_and_handler_called_then_abort() {
        // 构造一个一次性连接(不会真正读写)
        let (_a, b) = tokio::io::duplex(8);
        let boxed: BoxedConnection = Box::new(b);
        let addr: std::net::SocketAddr = "127.0.0.1:0".parse().unwrap();
        let listener = TestListener::new(boxed, addr);

        // 标记 on_listen 是否被调用
        let on_listen_called = Arc::new(AtomicBool::new(false));
        let flag = on_listen_called.clone();

        // 处理器:什么都不做,直接返回 Ok
        let handler =
            |_s: BoxedConnection, _p: CoreSocketAddr| async move { Ok::<(), BoxError>(()) };

        // 启动 NetServer(在后台任务中),短暂等待回调触发后中止
        let server = NetServer::new().listen(listener).on_listen(move |_addrs| {
            flag.store(true, Ordering::SeqCst);
        });

        let jh = tokio::spawn(async move {
            server.serve(handler).await;
        });

        tokio::time::sleep(Duration::from_millis(50)).await;
        assert!(on_listen_called.load(Ordering::SeqCst));
        // 中止后台任务,避免等待关停信号
        jh.abort();
        let _ = jh.await;
    }

    struct TestErrListener {
        addr: std::net::SocketAddr,
        sent_err: Arc<AtomicBool>,
    }

    impl TestErrListener {
        fn new(addr: std::net::SocketAddr) -> Self {
            Self {
                addr,
                sent_err: Arc::new(AtomicBool::new(false)),
            }
        }
    }

    impl Listen for TestErrListener {
        fn accept(&self) -> AcceptFuture<'_> {
            let sent = self.sent_err.clone();
            Box::pin(async move {
                if !sent.swap(true, Ordering::SeqCst) {
                    Err(std::io::Error::other("accept failed (test)"))
                } else {
                    futures_util::future::pending::<
                        std::io::Result<(
                            Box<dyn connection::Connection + Send + Sync>,
                            crate::core::socket_addr::SocketAddr,
                        )>,
                    >()
                    .await
                }
            })
        }

        fn local_addr(&self) -> std::io::Result<crate::core::socket_addr::SocketAddr> {
            Ok(crate::core::socket_addr::SocketAddr::from(self.addr))
        }
    }

    #[tokio::test]
    async fn test_net_server_accept_error_path() {
        let addr: std::net::SocketAddr = "127.0.0.1:0".parse().unwrap();
        let listener = TestErrListener::new(addr);
        let on_listen_called = Arc::new(AtomicBool::new(false));
        let flag = on_listen_called.clone();
        let handler_calls = Arc::new(AtomicUsize::new(0));
        let hc = handler_calls.clone();

        let handler = move |_s: BoxedConnection, _p: CoreSocketAddr| {
            let hc = hc.clone();
            async move {
                hc.fetch_add(1, Ordering::SeqCst);
                Ok::<(), BoxError>(())
            }
        };

        let server = NetServer::new().listen(listener).on_listen(move |_addrs| {
            flag.store(true, Ordering::SeqCst);
        });

        let jh = tokio::spawn(async move { server.serve(handler).await });
        tokio::time::sleep(Duration::from_millis(50)).await;
        assert!(on_listen_called.load(Ordering::SeqCst));
        assert_eq!(handler_calls.load(Ordering::SeqCst), 0);
        jh.abort();
        let _ = jh.await;
    }

    #[tokio::test]
    async fn test_net_server_rate_limiter_timeout_drops_connection() {
        // 连接一次:由于容量=0 且 max_wait 极短,应超时丢弃,不调用处理器
        let (_a, b) = tokio::io::duplex(8);
        let boxed: BoxedConnection = Box::new(b);
        let addr: std::net::SocketAddr = "127.0.0.1:0".parse().unwrap();
        let listener = TestListener::new(boxed, addr);

        let calls = Arc::new(AtomicUsize::new(0));
        let calls_cl = calls.clone();
        let handler = move |_s: BoxedConnection, _p: CoreSocketAddr| {
            let calls_cl = calls_cl.clone();
            async move {
                calls_cl.fetch_add(1, Ordering::SeqCst);
                Ok::<(), BoxError>(())
            }
        };

        let server = NetServer::new()
            .with_rate_limiter(RateLimiterConfig {
                capacity: 0,
                refill_every: Duration::from_millis(100),
                max_wait: Duration::from_millis(5),
            })
            .listen(listener);

        let jh = tokio::spawn(async move { server.serve(handler).await });
        tokio::time::sleep(Duration::from_millis(50)).await;
        assert_eq!(
            calls.load(Ordering::SeqCst),
            0,
            "handler should not be called due to timeout"
        );
        jh.abort();
        let _ = jh.await;
    }

    #[tokio::test]
    async fn test_net_server_handler_panic_logged() {
        // 任务内部 panic,join_next 分支应被驱动(仅覆盖,不断言日志)
        let (_a, b) = tokio::io::duplex(8);
        let boxed: BoxedConnection = Box::new(b);
        let addr: std::net::SocketAddr = "127.0.0.1:0".parse().unwrap();
        let listener = TestListener::new(boxed, addr);

        let handler = |_s: BoxedConnection, _p: CoreSocketAddr| async move {
            panic!("panic in handler (test)");
            #[allow(unreachable_code)]
            Ok::<(), BoxError>(())
        };

        let server = NetServer::new().listen(listener);
        let jh = tokio::spawn(async move { server.serve(handler).await });
        tokio::time::sleep(Duration::from_millis(50)).await;
        jh.abort();
        let _ = jh.await;
    }

    #[tokio::test]
    async fn test_net_server_graceful_shutdown_timeout() {
        // 一次连接,handler 故意延迟,触发优雅关停等待超时
        let (_a, b) = tokio::io::duplex(8);
        let boxed: BoxedConnection = Box::new(b);
        let addr: std::net::SocketAddr = "127.0.0.1:0".parse().unwrap();
        let listener = TestListener::new(boxed, addr);

        let handler = |_s: BoxedConnection, _p: CoreSocketAddr| async move {
            tokio::time::sleep(Duration::from_millis(50)).await;
            Ok::<(), BoxError>(())
        };

        let server = NetServer::new()
            .with_shutdown(Duration::from_millis(10))
            .listen(listener);

        let jh = tokio::spawn(async move { server.serve(handler).await });
        // 等 on_listen 后小等,然后触发测试关停通知
        tokio::time::sleep(Duration::from_millis(10)).await;
        trigger_test_shutdown();
        // 若优雅关停未正确处理,此处会卡住超时
        let _ = jh.await;
    }

    #[tokio::test]
    async fn test_net_server_rate_limiter_permit_calls_handler() {
        // 容量=1,允许一次连接调用
        let (_a, b) = tokio::io::duplex(8);
        let boxed: BoxedConnection = Box::new(b);
        let addr: std::net::SocketAddr = "127.0.0.1:0".parse().unwrap();
        let listener = TestListener::new(boxed, addr);

        let calls = Arc::new(AtomicUsize::new(0));
        let calls_cl = calls.clone();
        let handler = move |_s: BoxedConnection, _p: CoreSocketAddr| {
            let calls_cl = calls_cl.clone();
            async move {
                calls_cl.fetch_add(1, Ordering::SeqCst);
                Ok::<(), BoxError>(())
            }
        };

        let server = NetServer::new()
            .with_rate_limiter(RateLimiterConfig {
                capacity: 1,
                refill_every: Duration::from_millis(1000),
                max_wait: Duration::from_millis(50),
            })
            .listen(listener);

        let jh = tokio::spawn(async move { server.serve(handler).await });
        tokio::time::sleep(Duration::from_millis(50)).await;
        assert_eq!(
            calls.load(Ordering::SeqCst),
            1,
            "handler should be called exactly once"
        );
        jh.abort();
        let _ = jh.await;
    }

    struct TestListenerDelay {
        addr: std::net::SocketAddr,
        once_conn: tokio::sync::Mutex<Option<BoxedConnection>>,
        delay: Duration,
    }

    impl TestListenerDelay {
        fn new(conn: BoxedConnection, addr: std::net::SocketAddr, delay: Duration) -> Self {
            Self {
                addr,
                once_conn: tokio::sync::Mutex::new(Some(conn)),
                delay,
            }
        }
    }

    impl Listen for TestListenerDelay {
        fn accept(&self) -> AcceptFuture<'_> {
            let delay = self.delay;
            let addr = self.addr;
            let once = self.once_conn.try_lock();
            if let Ok(mut guard) = once
                && let Some(conn) = guard.take()
            {
                return Box::pin(async move {
                    tokio::time::sleep(delay).await;
                    Ok((conn, crate::core::socket_addr::SocketAddr::from(addr)))
                });
            }
            Box::pin(async move {
                futures_util::future::pending::<
                    std::io::Result<(
                        Box<dyn connection::Connection + Send + Sync>,
                        crate::core::socket_addr::SocketAddr,
                    )>,
                >()
                .await
            })
        }

        fn local_addr(&self) -> std::io::Result<crate::core::socket_addr::SocketAddr> {
            Ok(crate::core::socket_addr::SocketAddr::from(self.addr))
        }
    }

    #[tokio::test]
    async fn test_net_server_multi_listeners_race() {
        // 快慢两个 listener,优先处理较快的连接一次
        let (_a1, b1) = tokio::io::duplex(8);
        let boxed1: BoxedConnection = Box::new(b1);
        let (_a2, b2) = tokio::io::duplex(8);
        let boxed2: BoxedConnection = Box::new(b2);
        let addr: std::net::SocketAddr = "127.0.0.1:0".parse().unwrap();

        let fast = TestListenerDelay::new(boxed1, addr, Duration::from_millis(1));
        let slow = TestListenerDelay::new(boxed2, addr, Duration::from_millis(50));

        let calls = Arc::new(AtomicUsize::new(0));
        let calls_cl = calls.clone();
        let handler = move |_s: BoxedConnection, _p: CoreSocketAddr| {
            let calls_cl = calls_cl.clone();
            async move {
                calls_cl.fetch_add(1, Ordering::SeqCst);
                Ok::<(), BoxError>(())
            }
        };

        let server = NetServer::new().listen(fast).listen(slow);
        let jh = tokio::spawn(async move { server.serve(handler).await });
        tokio::time::sleep(Duration::from_millis(80)).await;
        assert_eq!(
            calls.load(Ordering::SeqCst),
            1,
            "only fast listener's connection handled"
        );
        jh.abort();
        let _ = jh.await;
    }

    #[tokio::test]
    async fn test_net_server_on_listen_addrs_content() {
        let (_a, b) = tokio::io::duplex(8);
        let boxed: BoxedConnection = Box::new(b);
        let addr: std::net::SocketAddr = "127.0.0.1:5555".parse().unwrap();
        let listener = TestListener::new(boxed, addr);

        let seen = Arc::new(tokio::sync::Mutex::new(Vec::<CoreSocketAddr>::new()));
        let seen_cl = seen.clone();
        let server = NetServer::new().listen(listener).on_listen(move |addrs| {
            let addrs = addrs.to_vec();
            let seen_cl = seen_cl.clone();
            tokio::spawn(async move {
                *seen_cl.lock().await = addrs;
            });
        });

        let handler =
            |_s: BoxedConnection, _p: CoreSocketAddr| async move { Ok::<(), BoxError>(()) };
        let jh = tokio::spawn(async move { server.serve(handler).await });
        tokio::time::sleep(Duration::from_millis(20)).await;
        let addrs = seen.lock().await.clone();
        assert_eq!(addrs.len(), 1);
        assert!(matches!(addrs[0], CoreSocketAddr::Tcp(_)));
        jh.abort();
        let _ = jh.await;
    }

    #[tokio::test]
    async fn test_net_server_on_listen_multi_addrs() {
        let (_a1, b1) = tokio::io::duplex(8);
        let boxed1: BoxedConnection = Box::new(b1);
        let (_a2, b2) = tokio::io::duplex(8);
        let boxed2: BoxedConnection = Box::new(b2);
        let addr1: std::net::SocketAddr = "127.0.0.1:60000".parse().unwrap();
        let addr2: std::net::SocketAddr = "127.0.0.1:60001".parse().unwrap();
        let l1 = TestListener::new(boxed1, addr1);
        let l2 = TestListener::new(boxed2, addr2);

        let seen = Arc::new(tokio::sync::Mutex::new(Vec::<CoreSocketAddr>::new()));
        let seen_cl = seen.clone();
        let server = NetServer::new()
            .listen(l1)
            .listen(l2)
            .on_listen(move |addrs| {
                let addrs = addrs.to_vec();
                let seen_cl = seen_cl.clone();
                tokio::spawn(async move {
                    *seen_cl.lock().await = addrs;
                });
            });

        let handler =
            |_s: BoxedConnection, _p: CoreSocketAddr| async move { Ok::<(), BoxError>(()) };
        let jh = tokio::spawn(async move { server.serve(handler).await });
        tokio::time::sleep(Duration::from_millis(20)).await;
        let addrs = seen.lock().await.clone();
        assert_eq!(addrs.len(), 2);
        jh.abort();
        let _ = jh.await;
    }
}