wallclock-timer 0.1.0

//! Timer implementation that runs on its own thread and uses wall-clock deadlines.
//!
//! This module emits errors via the `log` crate. Provide a logger implementation
//! in your application to see these messages.

use crate::{
    ClosureState,
    timers::{State, WallClockTimer},
};
use crossbeam_channel as channel;
use rustc_hash::FxHashMap;
use snafu::prelude::*;
use std::{
    cmp::Ordering,
    collections::{BinaryHeap, hash_map},
    fmt,
    hash::Hash,
    thread,
    time::{Duration, SystemTime},
};

/// Abstraction over time for testing.
pub trait Clock: Send + 'static {
    /// Return the current wall-clock time.
    fn now(&self) -> SystemTime;
}

/// System clock backed by `SystemTime::now()`.
#[derive(Debug, Clone, Copy)]
pub struct RealClock;

impl Clock for RealClock {
    fn now(&self) -> SystemTime {
        SystemTime::now()
    }
}

/// Errors returned by the thread timer APIs.
#[derive(Debug, Snafu)]
pub enum ThreadTimerError {
    /// Failed to spawn the timer thread.
    #[snafu(display("Failed to spawn timer thread: {source}"))]
    SpawnThread { source: std::io::Error },
    /// Failed to send a message to the timer thread.
    #[snafu(display("Failed to send message to timer thread"))]
    SendMessage,
    /// Timer thread panicked while running.
    #[snafu(display("Timer thread panicked while waiting to join"))]
    JoinThread,
}

impl PartialEq for ThreadTimerError {
    fn eq(&self, other: &Self) -> bool {
        match (self, other) {
            (ThreadTimerError::SpawnThread { .. }, _)
            | (_, ThreadTimerError::SpawnThread { .. }) => false,
            (ThreadTimerError::SendMessage, ThreadTimerError::SendMessage) => true,
            (ThreadTimerError::JoinThread, ThreadTimerError::JoinThread) => true,
            _ => false,
        }
    }
}

#[derive(Debug)]
enum TimerMsg<I, O>
where
    I: Hash + Clone + Eq + Ord,
    O: State<Id = I>,
{
    Schedule(TimerEntry<I, O>),
    Cancel(I),
    Stop,
}

/// A shorthand for a reference to a [[TimerWithThread]] with closure actions.
pub type ClosureTimerRef<I> = TimerRef<I, ClosureState<I>>;

/// A shorthand for a reference to a [[TimerWithThread]] with UUID closure actions.
#[cfg(feature = "uuid")]
#[cfg_attr(docsrs, doc(cfg(feature = "uuid")))]
pub type UuidClosureTimerRef = TimerRef<uuid::Uuid, ClosureState<uuid::Uuid>>;

/// A shorthand for a timer that uses UUID closure actions.
#[cfg(feature = "uuid")]
#[cfg_attr(docsrs, doc(cfg(feature = "uuid")))]
pub type UuidClosureTimer = TimerWithThread<uuid::Uuid, ClosureState<uuid::Uuid>>;

/// A reference to a thread timer.
pub struct TimerRef<I, O>
where
    I: Hash + Clone + Eq + Ord,
    O: State<Id = I>,
{
    work_queue: channel::Sender<TimerMsg<I, O>>,
}

impl<I, O> WallClockTimer for TimerRef<I, O>
where
    I: Hash + Clone + Eq + Ord,
    O: State<Id = I>,
{
    type Id = I;
    type State = O;
    type Error = ThreadTimerError;

    fn schedule_at(
        &mut self,
        deadline: SystemTime,
        state: Self::State,
    ) -> Result<(), ThreadTimerError> {
        let entry = TimerEntry { deadline, state };
        self.work_queue
            .send(TimerMsg::Schedule(entry))
            .map_err(|err| {
                log::error!("Failed to send schedule message: {}", err);
                ThreadTimerError::SendMessage
            })
    }

    fn cancel(&mut self, id: Self::Id) -> Result<(), ThreadTimerError> {
        self.work_queue.send(TimerMsg::Cancel(id)).map_err(|err| {
            log::error!("Failed to send cancel message: {}", err);
            ThreadTimerError::SendMessage
        })
    }
}

// Explicit Clone implementation, because O does not need to be Clone for the [[TimerRef]] to be Clone.
impl<I, O> Clone for TimerRef<I, O>
where
    I: Hash + Clone + Eq + Ord,
    O: State<Id = I>,
{
    fn clone(&self) -> Self {
        Self {
            work_queue: self.work_queue.clone(),
        }
    }
}

/// Default value for [[TimerWithThread::new]] `max_wait_time` argument.
pub const DEFAULT_MAX_WAIT: Duration = Duration::from_secs(5);

/// A timer implementation that uses its own thread.
///
/// This instance is essentially the owning handle.
/// Non-owning references can be created with [[TimerWithThread::timer_ref]] and are always cloneable.
pub struct TimerWithThread<I, O>
where
    I: Hash + Clone + Eq + Ord,
    O: State<Id = I>,
{
    timer_thread: thread::JoinHandle<()>,
    work_queue: channel::Sender<TimerMsg<I, O>>,
}

impl<I, O> TimerWithThread<I, O>
where
    I: Hash + Clone + Eq + Ord + fmt::Debug + Send + 'static,
    O: State<Id = I> + fmt::Debug + Send + 'static,
{
    /// Create a new timer with its own thread.
    ///
    /// `max_wait_time` is the maximum time we wait until we check the clock again,
    /// in case it jumped (e.g. after sleep or due to a timezone change).
    pub fn new(max_wait_time: Duration) -> Result<TimerWithThread<I, O>, ThreadTimerError> {
        Self::new_with_clock(RealClock, max_wait_time)
    }

    /// Create a new timer with its own thread using a custom clock.
    ///
    /// This is mostly meant for testing, but can also be used to supply other clock sources
    /// than [[SystemTime]].
    ///
    /// `max_wait_time` is the maximum time we wait until we check the clock again,
    /// in case it jumped (e.g. after sleep or due to a timezone change).
    pub fn new_with_clock<C>(
        clock: C,
        max_wait_time: Duration,
    ) -> Result<TimerWithThread<I, O>, ThreadTimerError>
    where
        C: Clock,
    {
        let (s, r) = channel::unbounded();
        let handle = thread::Builder::new()
            .name("wallclock-timer-thread".to_string())
            .spawn(move || {
                let timer = TimerThread::new(r, clock, max_wait_time);
                timer.run();
            })
            .context(SpawnThreadSnafu)?;
        Ok(TimerWithThread {
            timer_thread: handle,
            work_queue: s,
        })
    }

    /// Returns a shareable reference to this timer.
    pub fn timer_ref(&self) -> TimerRef<I, O> {
        TimerRef {
            work_queue: self.work_queue.clone(),
        }
    }

    /// Shut this timer down and wait for the thread to join.
    pub fn shutdown(self) -> Result<(), ThreadTimerError> {
        if let Err(send_err) = self.work_queue.send(TimerMsg::Stop) {
            log::error!("Failed to send stop message: {}", send_err);
            // We can't be sure the time_thread will ever finish.
            if self.timer_thread.is_finished() {
                // But if it did, we can print the error message.
                if self.timer_thread.join().is_err() {
                    log::error!("The timer thread panicked. See stderr for more information.");
                }
            } // Otherwise we'll just leak it, rather than risking blocking this thread as well.
            SendMessageSnafu.fail()
        } else {
            self.timer_thread.join().map_err(|_| {
                log::error!("The timer thread panicked. See stderr for more information.");
                JoinThreadSnafu.build()
            })
        }
    }

    /// Same as `shutdown`, but doesn't wait for the thread to join.
    pub fn shutdown_async(&self) -> Result<(), ThreadTimerError> {
        self.work_queue.send(TimerMsg::Stop).map_err(|err| {
            log::error!("Failed to send stop message: {}", err);
            SendMessageSnafu.build()
        })
    }
}

#[cfg(feature = "uuid")]
impl TimerWithThread<uuid::Uuid, ClosureState<uuid::Uuid>> {
    /// Create a UUID-based timer using closure states.
    pub fn for_uuid_closures(max_wait_time: Duration) -> Result<Self, ThreadTimerError> {
        Self::new(max_wait_time)
    }
}

impl<I, O> fmt::Debug for TimerWithThread<I, O>
where
    I: Hash + Clone + Eq + Ord,
    O: State<Id = I>,
{
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        write!(f, "<TimerWithThread>")
    }
}

impl<I, O> Default for TimerWithThread<I, O>
where
    I: Hash + Clone + Eq + Ord + fmt::Debug + Send + 'static,
    O: State<Id = I> + fmt::Debug + Send + 'static,
{
    fn default() -> Self {
        Self::new(DEFAULT_MAX_WAIT).expect("Failed to create default timer")
    }
}

#[derive(Debug, PartialEq, Eq)]
struct HeapEntry<I> {
    deadline: SystemTime,
    id: I,
}

impl<I> PartialOrd for HeapEntry<I>
where
    I: Eq + Ord,
{
    fn partial_cmp(&self, other: &Self) -> Option<Ordering> {
        Some(self.cmp(other))
    }
}

impl<I> Ord for HeapEntry<I>
where
    I: Eq + Ord,
{
    fn cmp(&self, other: &Self) -> Ordering {
        // match other.deadline.cmp(&self.deadline) {
        //     Ordering::Equal => other.sid.cmp(&self.id),
        //     ord => ord,
        // }
        other
            .deadline
            .cmp(&self.deadline)
            .then_with(|| other.id.cmp(&self.id))
    }
}

/// A concrete entry for an outstanding timeout using a wall-clock deadline.
#[derive(Debug)]
struct TimerEntry<I, O>
where
    I: Hash + Clone + Eq,
    O: State<Id = I>,
{
    /// The wall clock deadline at which this should trigger.
    pub deadline: SystemTime,
    /// The information to store along with the timer.
    pub state: O,
}

impl<I, O> TimerEntry<I, O>
where
    I: Hash + Clone + Eq,
    O: State<Id = I>,
{
    /// A reference to the id associated with this entry.
    pub fn id(&self) -> &I {
        self.state.id()
    }
}

struct TimerThread<I, O, C>
where
    I: Hash + Clone + Eq + Ord + fmt::Debug,
    O: State<Id = I> + fmt::Debug,
    C: Clock + Send + 'static,
{
    entry_queue: BinaryHeap<HeapEntry<I>>,
    entries: FxHashMap<I, TimerEntry<I, O>>,
    work_queue: channel::Receiver<TimerMsg<I, O>>,
    running: bool,
    clock: C,
    max_wait_time: Duration,
}

impl<I, O, C> TimerThread<I, O, C>
where
    I: Hash + Clone + Eq + Ord + fmt::Debug,
    O: State<Id = I> + fmt::Debug,
    C: Clock + Send + 'static,
{
    fn new(
        work_queue: channel::Receiver<TimerMsg<I, O>>,
        clock: C,
        max_wait_time: Duration,
    ) -> Self {
        TimerThread {
            entry_queue: BinaryHeap::new(),
            entries: FxHashMap::default(),
            work_queue,
            running: true,
            clock,
            max_wait_time,
        }
    }

    fn run(mut self) {
        'run_loop: while self.running {
            let now = self.clock.now();
            // eprintln!(
            //     "Checking run loop at {now:?}. State: running={}, entry_queue={:?}, entries={:?}",
            //     self.running, self.entry_queue, self.entries
            // );
            self.process_due(now);
            if !self.running {
                break 'run_loop;
            }

            match self.next_deadline() {
                None => match self.work_queue.recv() {
                    Ok(msg) => self.handle_msg(msg),
                    Err(channel::RecvError) => {
                        log::error!("Channel died, stopping timer thread...");
                        break 'run_loop;
                    }
                },
                Some(deadline) => {
                    if deadline <= now {
                        continue 'run_loop;
                    }
                    // Take a new reading of the clock, since some time could have passed processing the due entries.
                    let wait = deadline
                        .duration_since(self.clock.now())
                        .unwrap_or(Duration::ZERO)
                        .min(self.max_wait_time);
                    match self.work_queue.recv_timeout(wait) {
                        Ok(msg) => self.handle_msg(msg),
                        Err(channel::RecvTimeoutError::Timeout) => {
                            continue 'run_loop;
                        }
                        Err(channel::RecvTimeoutError::Disconnected) => {
                            log::error!("Channel died, stopping timer thread...");
                            break 'run_loop;
                        }
                    }
                }
            }
        }
    }

    fn handle_msg(&mut self, msg: TimerMsg<I, O>) {
        match msg {
            TimerMsg::Stop => {
                log::info!("Timer thread received stop signal. Shutting down...");
                self.running = false
            }
            TimerMsg::Schedule(entry) => self.schedule_entry(entry),
            TimerMsg::Cancel(id) => match self.entries.remove(&id) {
                Some(e) => {
                    log::info!("Cancelled timer entry {e:?}");
                }
                None => {
                    log::warn!(
                        "Could not find timer entry with {id:?} to cancel. It might have expired already?"
                    );
                }
            },
        }
    }

    fn schedule_entry(&mut self, entry: TimerEntry<I, O>) {
        let now = self.clock.now();
        if entry.deadline <= now {
            log::debug!(
                "Triggering entry with id {:?} instead of scheduling, since it's already expired.",
                entry.id()
            );
            entry.state.trigger();
            return;
        }
        let id = entry.id().clone();
        self.insert_entry(id, entry);
    }

    fn insert_entry(&mut self, id: I, entry: TimerEntry<I, O>) {
        match self.entries.entry(id) {
            hash_map::Entry::Occupied(e) => {
                log::error!(
                    "Attempted to re-insert a timer entry with an already existing id. Scheduled timer ids must be unique! Existing entry: {:?}, new entry: {:?}",
                    e,
                    entry
                );
            }
            hash_map::Entry::Vacant(e) => {
                let id = entry.id().clone();
                let deadline = entry.deadline;
                e.insert(entry);
                self.entry_queue.push(HeapEntry { deadline, id });
            }
        }
    }

    fn process_due(&mut self, now: SystemTime) {
        while let Some(scheduled) = self.pop_next_due(now) {
            scheduled.state.trigger();
        }
    }

    #[inline(always)]
    fn next_deadline(&mut self) -> Option<SystemTime> {
        self.entry_queue.peek().map(|entry| entry.deadline)
    }

    fn pop_next_due(&mut self, now: SystemTime) -> Option<TimerEntry<I, O>> {
        if let Some(top) = self.entry_queue.peek() {
            if top.deadline > now {
                return None;
            }
            let entry = self.entry_queue.pop().expect("peeked entry");
            let scheduled = self.entries.remove(&entry.id);
            if scheduled.is_none() {
                log::debug!("Skipping entry {entry:?}, because it always already cancelled.");
            }
            scheduled
        } else {
            None
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::timers::ClosureTimer;
    use std::{
        sync::{
            Arc,
            Mutex,
            Once,
            atomic::{AtomicUsize, Ordering as AtomicOrdering},
        },
        time::Instant,
    };

    fn init_logger() {
        static INIT: Once = Once::new();
        INIT.call_once(|| {
            let _ = simple_logger::SimpleLogger::new().init();
            log::set_max_level(log::LevelFilter::Debug);
        });
    }

    #[derive(Clone)]
    struct MockClock {
        now: Arc<Mutex<SystemTime>>,
    }

    impl MockClock {
        fn new(start: SystemTime) -> Self {
            Self {
                now: Arc::new(Mutex::new(start)),
            }
        }

        fn advance(&self, delta: Duration) {
            let mut guard = self.now.lock().expect("clock lock");
            *guard = guard.checked_add(delta).expect("advance");
        }

        fn set(&self, time: SystemTime) {
            let mut guard = self.now.lock().expect("clock lock");
            *guard = time;
        }
    }

    impl Clock for MockClock {
        fn now(&self) -> SystemTime {
            *self.now.lock().expect("clock lock")
        }
    }

    #[derive(Clone, Debug, Default)]
    struct AtomicCounter {
        inner: Arc<AtomicUsize>,
    }

    impl AtomicCounter {
        fn new() -> Self {
            Self {
                inner: Arc::new(AtomicUsize::new(0)),
            }
        }

        fn increment(&self) {
            self.inner.fetch_add(1, AtomicOrdering::SeqCst);
        }

        fn get(&self) -> usize {
            self.inner.load(AtomicOrdering::SeqCst)
        }
    }

    #[derive(Debug)]
    struct TestState {
        id: u64,
        hits: AtomicCounter,
    }

    impl State for TestState {
        type Id = u64;

        fn id(&self) -> &Self::Id {
            &self.id
        }

        fn trigger(self) {
            self.hits.increment();
        }
    }

    #[test]
    fn mock_clock_triggers_on_deadline() {
        init_logger();
        let clock = MockClock::new(SystemTime::UNIX_EPOCH);
        let timer = TimerWithThread::<u64, TestState>::new_with_clock(
            clock.clone(),
            Duration::from_millis(5),
        )
        .expect("timer");
        let mut tref = timer.timer_ref();
        let hits = AtomicCounter::new();
        let hits2 = AtomicCounter::new();

        let deadline = SystemTime::UNIX_EPOCH + Duration::from_millis(5);
        tref.schedule_at(
            deadline,
            TestState {
                id: 1,
                hits: hits.clone(),
            },
        )
        .expect("schedule");

        let later_deadline = SystemTime::UNIX_EPOCH + Duration::from_secs(20);
        tref.schedule_at(
            later_deadline,
            TestState {
                id: 2,
                hits: hits2.clone(),
            },
        )
        .expect("schedule");

        // Wait a good bit longer than the initial timeout to ensure it's properly controlled by
        // the clock.
        thread::sleep(Duration::from_millis(20));
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 0);

        clock.advance(Duration::from_millis(6));
        wait_for_hits(&hits, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 1);
        assert_eq!(hits2.get(), 0);

        clock.advance(Duration::from_secs(20));
        wait_for_hits(&hits2, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 1);
        assert_eq!(hits2.get(), 1);

        timer.shutdown().expect("shutdown");
    }

    #[test]
    fn wake_on_message_while_waiting_long_timeout() {
        init_logger();
        let timer = TimerWithThread::<u64, TestState>::default();
        let mut tref = timer.timer_ref();

        let far_hits = AtomicCounter::new();
        let far_deadline = SystemTime::now() + Duration::from_hours(1000);
        tref.schedule_at(
            far_deadline,
            TestState {
                id: 1,
                hits: far_hits.clone(),
            },
        )
        .expect("schedule");

        // Wait a bit so the thread can go to sleep on the listening channel.
        thread::sleep(Duration::from_millis(5));

        let near_hits = AtomicCounter::new();
        let near_deadline = SystemTime::now() + Duration::from_millis(50);
        tref.schedule_at(
            near_deadline,
            TestState {
                id: 2,
                hits: near_hits.clone(),
            },
        )
        .expect("schedule");

        wait_for_hits(&near_hits, 1, Duration::from_secs(2));
        assert_eq!(near_hits.get(), 1);
        assert_eq!(far_hits.get(), 0);

        timer.shutdown().expect("shutdown");
    }

    #[test]
    fn time_jump_forward_triggers_immediately() {
        init_logger();
        let clock = MockClock::new(SystemTime::UNIX_EPOCH);
        let timer = TimerWithThread::<u64, TestState>::new_with_clock(
            clock.clone(),
            Duration::from_millis(5),
        )
        .expect("timer");
        let mut tref = timer.timer_ref();
        let hits = AtomicCounter::new();
        let hits2 = AtomicCounter::new();

        let deadline = SystemTime::UNIX_EPOCH + Duration::from_secs(10);
        let far_deadline = SystemTime::UNIX_EPOCH + Duration::from_secs(90);
        tref.schedule_at(
            deadline,
            TestState {
                id: 1,
                hits: hits.clone(),
            },
        )
        .expect("schedule");
        tref.schedule_at(
            far_deadline,
            TestState {
                id: 2,
                hits: hits2.clone(),
            },
        )
        .expect("schedule");

        // Wait to ensure nothing gets triggered without advancing the clock.
        thread::sleep(Duration::from_millis(20));
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 0);

        clock.advance(Duration::from_secs(30));
        wait_for_hits(&hits, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 1);
        assert_eq!(hits2.get(), 0);

        clock.advance(Duration::from_secs(100));
        wait_for_hits(&hits2, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 1);
        assert_eq!(hits2.get(), 1);

        timer.shutdown().expect("shutdown");
    }

    #[test]
    fn time_jump_backward_does_not_trigger_early() {
        init_logger();
        let start = SystemTime::UNIX_EPOCH + Duration::from_secs(100);
        let clock = MockClock::new(start);
        let timer = TimerWithThread::<u64, TestState>::new_with_clock(
            clock.clone(),
            Duration::from_millis(5),
        )
        .expect("timer");
        let mut tref = timer.timer_ref();
        let hits = AtomicCounter::new();
        let hits2 = AtomicCounter::new();

        // Essentially 110
        let deadline = start + Duration::from_secs(10);
        // Essentially 140
        let later_deadline = start + Duration::from_secs(40);
        tref.schedule_at(
            deadline,
            TestState {
                id: 1,
                hits: hits.clone(),
            },
        )
        .expect("schedule");
        tref.schedule_at(
            later_deadline,
            TestState {
                id: 2,
                hits: hits2.clone(),
            },
        )
        .expect("schedule");

        // Wait to ensure nothing gets triggered without advancing the clock.
        thread::sleep(Duration::from_millis(20));
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 0);

        // Jump the clock backwards (to 70)
        clock.set(start - Duration::from_secs(30));
        // Wait a bit for the test thread to wake up and check the clock.
        thread::sleep(Duration::from_millis(20));
        // Nothing should have gotten triggered.
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 0);

        // Advance forward again (to 90)
        clock.advance(Duration::from_secs(20));
        // Wait a bit for the test thread to wake up and check the clock.
        thread::sleep(Duration::from_millis(20));
        // Nothing should have gotten triggered.
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 0);

        // Advance forward again past the first deadline (to 111)
        clock.advance(Duration::from_secs(21));
        wait_for_hits(&hits, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 1);
        assert_eq!(hits2.get(), 0);

        // Advance forward past the second deadline (to 142)
        clock.advance(Duration::from_secs(31));
        wait_for_hits(&hits2, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 1);
        assert_eq!(hits2.get(), 1);

        timer.shutdown().expect("shutdown");
    }

    #[test]
    fn closure_timer_schedules_actions() {
        init_logger();
        let clock = MockClock::new(SystemTime::UNIX_EPOCH);
        let timer = TimerWithThread::<u64, crate::timers::ClosureState<u64>>::new_with_clock(
            clock.clone(),
            Duration::from_millis(5),
        )
        .expect("timer");
        let mut tref = timer.timer_ref();

        let hits = AtomicCounter::new();
        let hits2 = AtomicCounter::new();

        let hits_clone = hits.clone();
        tref.schedule_action_at(
            1,
            SystemTime::UNIX_EPOCH + Duration::from_secs(5),
            move |_| {
                hits_clone.increment();
            },
        )
        .expect("schedule");
        let hits2_clone = hits2.clone();
        tref.schedule_action_at(
            2,
            SystemTime::UNIX_EPOCH + Duration::from_secs(50),
            move |_| {
                hits2_clone.increment();
            },
        )
        .expect("schedule");

        thread::sleep(Duration::from_millis(20));
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 0);

        clock.advance(Duration::from_secs(10));
        wait_for_hits(&hits, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 1);
        assert_eq!(hits2.get(), 0);

        clock.advance(Duration::from_secs(50));
        wait_for_hits(&hits2, 1, Duration::from_secs(2));
        assert_eq!(hits2.get(), 1);
        timer.shutdown().expect("shutdown");
    }

    #[test]
    fn cancel_prevents_overdue_trigger_with_multiple_timers() {
        init_logger();
        let clock = MockClock::new(SystemTime::UNIX_EPOCH);
        let timer = TimerWithThread::<u64, TestState>::new_with_clock(
            clock.clone(),
            Duration::from_millis(5),
        )
        .expect("timer");
        let mut tref = timer.timer_ref();
        let hits = AtomicCounter::new();
        let hits2 = AtomicCounter::new();

        let deadline = SystemTime::UNIX_EPOCH + Duration::from_secs(5);
        tref.schedule_at(
            deadline,
            TestState {
                id: 1,
                hits: hits.clone(),
            },
        )
        .expect("schedule");
        tref.schedule_at(
            deadline,
            TestState {
                id: 2,
                hits: hits2.clone(),
            },
        )
        .expect("schedule");

        // Wait a bit for things to get scheduled.
        thread::sleep(Duration::from_millis(20));

        tref.cancel(1).expect("cancel");
        thread::sleep(Duration::from_millis(20));
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 0);

        clock.advance(Duration::from_secs(6));
        wait_for_hits(&hits2, 1, Duration::from_secs(2));
        assert_eq!(hits.get(), 0);
        assert_eq!(hits2.get(), 1);

        timer.shutdown().expect("shutdown");
    }

    #[test]
    fn join_thread_error_from_panicking_handler() {
        init_logger();
        let timer = TimerWithThread::<u64, crate::timers::ClosureState<u64>>::new(DEFAULT_MAX_WAIT)
            .expect("timer");
        let mut tref = timer.timer_ref();
        tref.schedule_action_at(1, SystemTime::now(), |_| panic!("boom"))
            .expect("schedule");
        thread::sleep(Duration::from_millis(10));
        let err = timer.shutdown().expect_err("expected shutdown error");
        // Depending on time it may either throw while trying to send the shutdown or while waiting for it.
        const POSSIBLE_ERRORS: [ThreadTimerError; 2] =
            [ThreadTimerError::JoinThread, ThreadTimerError::SendMessage];
        assert!(
            POSSIBLE_ERRORS.contains(&err),
            "Should have gotten a shutdown error but was: {err}"
        );
    }

    fn wait_for_hits(hits: &AtomicCounter, expected: usize, timeout: Duration) {
        let start = Instant::now();
        'wait_loop: while start.elapsed() < timeout {
            if hits.get() >= expected {
                break 'wait_loop;
            }
            thread::yield_now();
        }
    }
}