**Verified (final pass, phase 11 — all 7 tasks already in `complete/`)**
- Gate from the wire on a restarted dev server: `/system`→`303 /login?next=/system` (`/llm?range=1h`→`/login?next=/llm%3Frange%3D1h`), `/api/summary`+`/api/config`→`401 {"ok":false,…}`, `/api/health`→`200`; signed-in `GET` of all six pages `200`, `/login`→`303 /`.
- Auth flows on a throwaway server (`:8199`, `/tmp` DB — dev `auth.verifier` untouched): wrong pw `401`, `testpass` `200`, password change `200`, **old cookie `401` / new cookie `200`**, old pw `401` / new pw `200`, short new `422`, wrong current `403`, cookie write without CSRF `403`, logout `200`; 5 failures then `429 retry-after: 60`; `login-denied`/`password-changed`/`password-denied` events; `meta` = the two auth keys.
- Fail-closed boot (no seed, empty DB): **exit 3**, message names `DASH_ADMIN_PASSWORD`, `auth.verifier`, and the `DELETE FROM meta …` reset. `dev-server.sh status` + the Containerfile `HEALTHCHECK` python one-liner both `200`/exit 0 unauthenticated.
- Live payloads unchanged (phases 01–10 walk): `/api/summary` keys + 8 alerts + hosts 3/2 live; UPS `simulated:false` with charge/load/runtime severity; deskwork `nvme0n1` 51 °C/19 159 h/11 % wear; gateway `smartctl_available:false`; driveripper `unreachable` stub.
**Tests/lint (all green)**: `bash .agents/validate.sh` → exit 0 — `1140 passed, 11 skipped`, coverage `98.62%` (floor 94), ruff `All checks passed!`, pyright `0 errors`, `node --check` clean, repo hygiene clean. `uv run pytest -m live --live` → `8 passed, 3 failed`, all `driveripper: 10.1.0.126:9120 … ConnectError` (pre-existing, auth-free; probe confirms nothing listening).
**Completion criteria**: all met except the live-suite caveat above — installing the driveripper agent needs root on that host (no `ops` grant), so per the live-infra rule I made **no live change**; task 07's five screenshots (`auth-login/-rejected/-locked-out/-signed-in-overview/-settings.png`) remain the browser evidence, and the login/rotation/lockout flows were re-proved over HTTP this pass.
**Docs**: README — fixed "only place the CSRF token is published" (login/password responses mint one), added the undocumented `DASH_RELOAD` row, stated that Sign out ends only this browser's cookie. `AGENTS.md` — new known gap 8 (stateless logout cannot revoke a copied token), gap-4 dev-store sizes dated, fleet section notes `data/` is gitignored. `api.py` — same `status` docstring imprecision fixed. Verified the 4 `DASH_*` rows, reset command, seed-wins rule and invariant 12 against `app.py`/`config.py`.
**Deviations**: no dependency bump (`uv pip list --outdated` advisory: certifi/fastapi/starlette — phase added none); verification notes appended to `data/logs/NOTES-auth.md` §10.
**Next pending phase**: `12_nut_self_test_verdict`.
403 lines
17 KiB
Python
403 lines
17 KiB
Python
"""History store: rollups, retention, and the honesty of an empty chart.
|
|
|
|
The rollup queries are plain SQL with positional bindings, and a mismatch there used to
|
|
raise on every maintenance tick while the poller swallowed it — so every window past the
|
|
raw retention was silently empty. These tests fail loudly if that ever happens again.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import time
|
|
from typing import Any
|
|
|
|
import pytest
|
|
|
|
from dashboards.store import (
|
|
HOUR,
|
|
MINUTE,
|
|
RES_HOUR,
|
|
RES_MIN,
|
|
RES_RAW,
|
|
Event,
|
|
Sample,
|
|
SampleStore,
|
|
samples_from_flat,
|
|
select_window,
|
|
)
|
|
|
|
|
|
def add_series(db, source: str, host: str, metric: str, values, *, start: float, step: float,
|
|
res: str = RES_RAW) -> None:
|
|
for i, value in enumerate(values):
|
|
# the private handle is the point: writing at an explicit resolution is what
|
|
# the resolution-choice tests need
|
|
db._db.execute(
|
|
"INSERT INTO sample (source, host, metric, res, ts, value) VALUES (?,?,?,?,?,?)",
|
|
(source, host, metric, res, start + i * step, float(value)),
|
|
)
|
|
db._db.commit()
|
|
|
|
|
|
def test_store_starts_in_wal_mode(db) -> None:
|
|
"""Readers poll while the writer commits; without WAL the API would hit locked errors."""
|
|
assert db._db.execute("PRAGMA journal_mode").fetchone()[0].lower() == "wal"
|
|
|
|
|
|
def test_add_and_query_roundtrip(db) -> None:
|
|
now = time.time()
|
|
db.add("host", "driveripper", "cpu.usage_pct", 42.5, ts=now)
|
|
points = db.query("host", "driveripper", "cpu.usage_pct", start=now - 60)
|
|
assert points == [(now, 42.5)]
|
|
|
|
|
|
def test_query_is_bounded_and_ascending(db) -> None:
|
|
base = 1_700_000_000.0
|
|
add_series(db, "host", "h", "m", [3, 1, 2], start=base, step=10)
|
|
assert db.query("host", "h", "m", start=base - 1) == [(base, 3.0), (base + 10, 1.0), (base + 20, 2.0)]
|
|
assert len(db.query("host", "h", "m", start=base - 1, limit=2)) == 2
|
|
|
|
|
|
def test_query_tail_keeps_the_newest_rows(db) -> None:
|
|
base = 1_700_000_000.0
|
|
add_series(db, "host", "h", "m", range(100), start=base, step=10)
|
|
head = db.query("host", "h", "m", start=base - 1, limit=3)
|
|
tail = db.query("host", "h", "m", start=base - 1, limit=3, tail=True)
|
|
assert [v for _, v in head] == [0.0, 1.0, 2.0]
|
|
assert [v for _, v in tail] == [97.0, 98.0, 99.0]
|
|
assert tail == sorted(tail), "tail must still come back oldest-first"
|
|
|
|
|
|
def test_samples_from_flat_drops_unknown_and_none() -> None:
|
|
payload: dict[str, Any] = {"a": 1.0, "b": None, "c": "nope"}
|
|
samples = samples_from_flat("host", "gw", payload, ts=5.0)
|
|
assert [(s.metric, s.value) for s in samples] == [("a", 1.0)]
|
|
|
|
|
|
def test_maintain_rolls_raw_into_minutes(db) -> None:
|
|
"""Regression: the rollup statement had 7 placeholders and 6 bindings."""
|
|
now = time.time()
|
|
# two full, aligned minute buckets — see the hour test for why alignment matters
|
|
minute = int(now // MINUTE) * MINUTE
|
|
add_series(db, "host", "h", "cpu.usage_pct", [10, 20, 30, 40], start=minute - 4 * MINUTE,
|
|
step=1)
|
|
add_series(db, "host", "h", "cpu.usage_pct", [1, 1, 1, 1], start=minute - 3 * MINUTE, step=1)
|
|
counts = db.maintain(now=now)
|
|
assert counts["to_minute"] > 0
|
|
minutes = db.query("host", "h", "cpu.usage_pct", res=RES_MIN, start=now - 3600)
|
|
assert minutes, "no 1m rollup was written"
|
|
assert [round(value) for _ts, value in minutes] == [25, 1]
|
|
|
|
|
|
def test_maintain_is_idempotent(db) -> None:
|
|
"""Rollups run on a timer: running twice must not double-count or duplicate rows."""
|
|
now = time.time()
|
|
minute = int(now // MINUTE) * MINUTE
|
|
add_series(db, "host", "h", "m", [10, 20], start=minute - 4 * MINUTE, step=1)
|
|
first = db.maintain(now=now)
|
|
rows = db.query("host", "h", "m", res=RES_MIN, start=now - 3600)
|
|
count = db.count()
|
|
second = db.maintain(now=now)
|
|
assert rows == db.query("host", "h", "m", res=RES_MIN, start=now - 3600)
|
|
assert first["to_minute"] == second["to_minute"]
|
|
assert db.count() == count, "re-running maintenance duplicated samples"
|
|
|
|
|
|
def test_maintain_rolls_minutes_into_hours(db) -> None:
|
|
now = time.time()
|
|
# buckets are aligned to the epoch (`ts/3600*3600`), not to "hours from now", so the
|
|
# fixtures start on a boundary or the two hours mix into a third, averaged bucket
|
|
hour = int(now // HOUR) * HOUR
|
|
# two *complete* hours of minute buckets: the current and previous hour are still
|
|
# filling in, and maintenance must not touch them (see the partial-bucket test)
|
|
add_series(db, "host", "h", "m", [1] * 60, start=hour - 5 * HOUR, step=60, res=RES_MIN)
|
|
add_series(db, "host", "h", "m", [3] * 60, start=hour - 4 * HOUR, step=60, res=RES_MIN)
|
|
counts = db.maintain(now=now)
|
|
assert counts["to_hour"] > 0
|
|
hours = db.query("host", "h", "m", res=RES_HOUR, start=now - 86_400)
|
|
assert sorted(round(v) for _, v in hours) == [1.0, 3.0]
|
|
|
|
|
|
|
|
def test_maintain_prunes_expired_raw(db) -> None:
|
|
now = time.time()
|
|
old = now - (db.raw_keep_seconds + 7200)
|
|
add_series(db, "host", "h", "m", [1, 2], start=old, step=60)
|
|
add_series(db, "host", "h", "fresh", [1], start=now - 60, step=1)
|
|
counts = db.maintain(now=now)
|
|
assert counts["pruned"] >= 2
|
|
assert db.query("host", "h", "m", start=0) == []
|
|
|
|
|
|
def test_maintain_records_timestamp_in_stats(db) -> None:
|
|
db.maintain()
|
|
stats = db.stats()
|
|
assert stats["last_maintain"] is not None
|
|
assert "samples_by_res" in stats and "path" in stats
|
|
|
|
|
|
def test_pick_res_prefers_the_finest_resolution_that_fits(db) -> None:
|
|
now = time.time()
|
|
add_series(db, "host", "h", "m", list(range(500)), start=now - 3600, step=1)
|
|
assert db.pick_res("host", "h", "m", 3600, 600) == RES_RAW
|
|
add_series(db, "host", "h", "m", list(range(4000)), start=now - 7200, step=1)
|
|
assert db.pick_res("host", "h", "m", 7200, 600) == RES_RAW, "raw still fits"
|
|
add_series(db, "host", "h", "m", list(range(120)), start=now - 7200, step=60,
|
|
res=RES_MIN)
|
|
# 4500 raw points blow the 600 budget, so the minute rollup takes over
|
|
assert db.pick_res("host", "h", "m", 7200, 600) == RES_MIN
|
|
|
|
|
|
def test_pick_res_never_picks_an_empty_resolution(db) -> None:
|
|
"""A fresh install has raw only: choosing 1h because it 'fits' would chart nothing."""
|
|
now = time.time()
|
|
add_series(db, "host", "h", "m", [1] * 2000, start=now - 7200, step=1)
|
|
assert db.pick_res("host", "h", "m", 86_400, 600) == RES_RAW
|
|
|
|
|
|
def test_history_falls_back_to_raw_when_rollups_lag(db) -> None:
|
|
now = time.time()
|
|
add_series(db, "host", "h", "m", list(range(1500)), start=now - 1500, step=1)
|
|
points = db.history("host", "h", "m", span=3600, max_points=600)
|
|
assert len(points) > 0, "empty chart while raw data exists"
|
|
assert len(points) <= 600
|
|
|
|
|
|
def test_history_always_keeps_the_newest_point(db) -> None:
|
|
now = time.time()
|
|
values = list(range(2000))
|
|
add_series(db, "host", "h", "m", values, start=now - 2000, step=1)
|
|
points = db.history("host", "h", "m", span=3600, max_points=50)
|
|
assert points[-1][1] == pytest.approx(values[-1])
|
|
|
|
|
|
def test_series_names_and_hosts(db) -> None:
|
|
db.add("host", "a", "cpu.usage_pct", 1.0)
|
|
db.add("host", "a", "mem.used_pct", 2.0)
|
|
db.add("host", "b", "cpu.usage_pct", 3.0)
|
|
db.add("llm", "gufo", "llm.decode_tokens_per_second", 4.0)
|
|
assert db.series_names("host", "a") == ["cpu.usage_pct", "mem.used_pct"]
|
|
assert db.hosts("host") == ["a", "b"]
|
|
assert db.series_names("llm") == ["llm.decode_tokens_per_second"]
|
|
|
|
|
|
def test_delete_series_cleans_up(db) -> None:
|
|
db.add("host", "a", "gone.metric", 1.0)
|
|
db.add("host", "a", "keep.metric", 2.0)
|
|
assert db.delete_series("host", "a", "gone.metric") == 1
|
|
assert db.series_names("host", "a") == ["keep.metric"]
|
|
|
|
|
|
def test_events_roundtrip_and_filter(db) -> None:
|
|
now = time.time()
|
|
db.log_event(Event(ts=now, source="host", host="a", kind="down", severity="error",
|
|
message="a is not answering", data={"fails": 3}))
|
|
db.log_event(Event(ts=now + 1, source="nut", host="cyberpower", kind="state",
|
|
severity="warn", message="OL → OB"))
|
|
everything = db.recent_events(10)
|
|
assert [e.host for e in everything] == ["cyberpower", "a"]
|
|
assert everything[-1].data == {"fails": 3}
|
|
assert [e.source for e in db.recent_events(10, source="nut")] == ["nut"]
|
|
assert len(db.recent_events(1)) == 1
|
|
# the API hands out plain JSON, so the boundary has to be serialisable
|
|
assert everything[0].as_json()["message"] == "OL → OB"
|
|
|
|
|
|
def test_event_as_json_is_serialisable(db) -> None:
|
|
event = Event(ts=1.0, source="host", host="a", kind="up", severity="info", message="ok")
|
|
payload = event.as_json()
|
|
assert payload["severity"] == "info" and payload["data"] is None
|
|
|
|
|
|
def test_count_filters_by_resolution(db) -> None:
|
|
now = time.time()
|
|
db.add("host", "h", "m", 1.0, ts=now)
|
|
add_series(db, "host", "h", "m", [2.0], start=now, step=1, res=RES_MIN)
|
|
assert db.count() == 2
|
|
assert db.count(res=RES_RAW) == 1
|
|
assert db.count(res=RES_HOUR) == 0
|
|
|
|
|
|
def test_add_many_reports_inserted_rows(db) -> None:
|
|
now = time.time()
|
|
rows = [Sample("host", "h", f"m{i}", float(i), now) for i in range(5)]
|
|
assert db.add_many(rows) == 5
|
|
assert db.count() == 5
|
|
|
|
|
|
def test_store_reopens_without_losing_history(tmp_path) -> None:
|
|
path = tmp_path / "reopen.sqlite3"
|
|
first = SampleStore(path)
|
|
now = time.time()
|
|
first.add("host", "h", "m", 7.0, ts=now)
|
|
first.close()
|
|
second = SampleStore(path)
|
|
try:
|
|
assert second.query("host", "h", "m", start=now - 5) == [(now, 7.0)]
|
|
finally:
|
|
second.close()
|
|
|
|
|
|
def test_select_window_maps_range_onto_presets() -> None:
|
|
assert select_window(60, [300, 3600, 86_400]) == 300
|
|
assert select_window(3600, [300, 3600, 86_400]) == 3600
|
|
assert select_window(86_401, [300, 3600, 86_400]) == 86_400
|
|
|
|
|
|
def test_rollup_does_not_average_a_partial_minute(db) -> None:
|
|
"""A bucket is only rolled once its whole window is in the past, or it gets rewritten."""
|
|
now = time.time()
|
|
add_series(db, "host", "h", "m", [1, 1, 1], start=now - 5, step=1) # current minute
|
|
db.maintain(now=now)
|
|
assert db.query("host", "h", "m", res=RES_MIN, start=now - 600) == []
|
|
|
|
|
|
def test_hour_constant_is_used_in_retention(db) -> None:
|
|
assert db.raw_keep_seconds == pytest.approx(48 * HOUR)
|
|
|
|
|
|
# ---- a 300-second source (phase 09: `disks` samples SMART every 5 minutes) -- #
|
|
#
|
|
# The rollup SQL groups by minute and hour buckets, so a source slower than a minute
|
|
# puts one raw row in every fifth bucket and nothing in the other four. Two things had to
|
|
# be true and are asserted rather than assumed: an empty bucket produces *no* rollup row
|
|
# (inventing a value for a minute nothing was sampled is rule 2), and the hour bucket
|
|
# still averages the samples it did get.
|
|
|
|
SMART_STEP = 300.0
|
|
|
|
|
|
def test_a_300s_source_rolls_into_minutes_without_inventing_the_empty_ones(db) -> None:
|
|
now = time.time()
|
|
# five SMART polls at exactly the phase's cadence (-30, -25, -20, -15, -10 minutes),
|
|
# so every bucket is fully in the past (+60 s slack) and maintenance may roll all five
|
|
start = int(now // MINUTE) * MINUTE - 30 * MINUTE
|
|
add_series(db, "disks", "driveripper", "disk.temp_c@nvme0n1",
|
|
[38, 39, 38, 40, 37], start=start, step=SMART_STEP)
|
|
counts = db.maintain(now=now)
|
|
minutes = db.query("disks", "driveripper", "disk.temp_c@nvme0n1", res=RES_MIN, start=0)
|
|
assert counts["to_minute"] == 5
|
|
assert [value for _ts, value in minutes] == [38.0, 39.0, 38.0, 40.0, 37.0], (
|
|
"a bucket holding one sample rolls up that sample, unchanged")
|
|
assert [int(ts) for ts, _value in minutes] == [
|
|
int(start + index * SMART_STEP // MINUTE * MINUTE) for index in range(5)], (
|
|
"every fifth minute bucket has a row; the empty ones must have none")
|
|
assert db.count(res=RES_MIN) == 5, "empty buckets became fabricated rows"
|
|
|
|
|
|
def test_a_300s_source_averages_into_the_hour_bucket_it_lands_in(db) -> None:
|
|
now = time.time()
|
|
# aligned to the epoch, and old enough that the hour bucket is complete: 12 samples
|
|
# five minutes apart inside one hour average to their mean, not to a sample count
|
|
hour = int(now // HOUR) * HOUR - 3 * HOUR
|
|
add_series(db, "disks", "driveripper", "disk.power_on_hours@nvme0n1",
|
|
[100, 100, 100, 100, 100, 100, 100, 100, 100, 100, 100, 124],
|
|
start=hour, step=SMART_STEP)
|
|
db.maintain(now=now)
|
|
db.maintain(now=now) # the 1h pass reads 1m rows, so the first pass only makes them
|
|
hours = db.query("disks", "driveripper", "disk.power_on_hours@nvme0n1", res=RES_HOUR,
|
|
start=0)
|
|
assert len(hours) == 1
|
|
assert hours[0][0] == hour
|
|
assert hours[0][1] == pytest.approx((11 * 100 + 124) / 12)
|
|
|
|
|
|
def test_a_300s_series_is_queryable_at_every_resolution(db) -> None:
|
|
"""A 5-minute series over a 1h window is 12 points; `pick_res` must find them raw."""
|
|
now = time.time()
|
|
add_series(db, "disks", "driveripper", "disk.reallocated@nvme0n1",
|
|
[8] * 12, start=now - 3600 + 60, step=SMART_STEP)
|
|
assert db.pick_res("disks", "driveripper", "disk.reallocated@nvme0n1", 3600, 600) == RES_RAW
|
|
points = db.history("disks", "driveripper", "disk.reallocated@nvme0n1", span=3600)
|
|
assert len(points) == 12, "the chart is empty while raw history exists"
|
|
db.maintain(now=now)
|
|
db.maintain(now=now)
|
|
# with rollups present, a long window reads the rolled-up series, not 288 raw rows
|
|
assert db.pick_res("disks", "driveripper", "disk.reallocated@nvme0n1",
|
|
24 * 3600, 600) in (RES_MIN, RES_RAW)
|
|
|
|
|
|
def test_a_300s_source_is_pruned_by_the_existing_retention(db) -> None:
|
|
"""288 rows a day per series is fine for 48h and not fine forever — rule 9."""
|
|
now = time.time()
|
|
expired = now - db.raw_keep_seconds - 6 * SMART_STEP
|
|
add_series(db, "disks", "h", "disk.temp_c@sda", [30] * 4, start=expired, step=SMART_STEP)
|
|
add_series(db, "disks", "h", "disk.temp_c@sdb", [30], start=now - SMART_STEP,
|
|
step=SMART_STEP)
|
|
counts = db.maintain(now=now)
|
|
assert counts["pruned"] >= 4
|
|
assert db.query("disks", "h", "disk.temp_c@sda", start=0) == []
|
|
assert len(db.query("disks", "h", "disk.temp_c@sdb", start=0)) == 1
|
|
|
|
|
|
# ---- meta: the durable key/value state (phase 11) --------------------------- #
|
|
|
|
|
|
def test_get_meta_answers_none_for_a_key_nobody_wrote(db) -> None:
|
|
"""`None` and `""` are different sentences here.
|
|
|
|
`auth.verifier` missing means "this box has never been seeded" (fail closed at startup),
|
|
while a value means "the credential lives here". A store that returned `""` for an absent
|
|
row would read as a corrupt one instead.
|
|
"""
|
|
assert db.get_meta("no.such.key") is None
|
|
db.set_meta("empty.on.purpose", "")
|
|
assert db.get_meta("empty.on.purpose") == ""
|
|
|
|
|
|
def test_meta_round_trips_through_a_reopen(db) -> None:
|
|
db.set_meta("auth.session_secret", "ab" * 32)
|
|
assert db.get_meta("auth.session_secret") == "ab" * 32
|
|
db.close()
|
|
reopened = SampleStore(db.path)
|
|
try:
|
|
assert reopened.get_meta("auth.session_secret") == "ab" * 32
|
|
finally:
|
|
reopened.close()
|
|
|
|
|
|
def test_set_meta_replaces_instead_of_adding(db) -> None:
|
|
"""One row per key (`INSERT OR REPLACE`), because `key` is the primary key.
|
|
|
|
An `INSERT` alone would raise on the second write, which is the change-password path
|
|
(`auth.update_verifier`) failing after the user pressed Save.
|
|
"""
|
|
db.set_meta("auth.verifier", "first")
|
|
db.set_meta("auth.verifier", "second")
|
|
assert db.get_meta("auth.verifier") == "second"
|
|
(rows,) = db._db.execute( # the private handle is the point: exactly one row, not two
|
|
"SELECT COUNT(*) FROM meta WHERE key='auth.verifier'").fetchone()
|
|
assert rows == 1
|
|
|
|
|
|
def test_delete_meta_reports_whether_a_row_was_there(db) -> None:
|
|
"""The rowcount is the whole point: the password-reset procedure has to say what it did."""
|
|
db.set_meta("auth.verifier", "x")
|
|
assert db.delete_meta("auth.verifier") == 1
|
|
assert db.delete_meta("auth.verifier") == 0
|
|
assert db.get_meta("auth.verifier") is None
|
|
|
|
|
|
def test_delete_meta_touches_only_the_key_it_names(db) -> None:
|
|
"""A reset that deletes one row too many deletes the operator's only credential."""
|
|
db.set_meta("auth.verifier", "the-verifier")
|
|
db.set_meta("auth.session_secret", "the-secret")
|
|
db.set_meta("last_maintain", "1700000000.0")
|
|
|
|
assert db.delete_meta("auth.session_secret") == 1
|
|
|
|
assert db.get_meta("auth.session_secret") is None
|
|
assert db.get_meta("auth.verifier") == "the-verifier"
|
|
assert db.get_meta("last_maintain") == "1700000000.0"
|
|
|
|
|
|
def test_stats_reads_last_maintain_through_get_meta(db) -> None:
|
|
"""One path to the table.
|
|
|
|
`stats()` reported `None` before any maintenance ran and the timestamp afterwards; that
|
|
behaviour is pinned here while the read goes through the same helper everything else uses,
|
|
and it is why the helper is called outside `stats()`'s own lock (`threading.Lock` is not
|
|
reentrant — call it inside and the dashboard deadlocks on the first `/api/health`).
|
|
"""
|
|
assert db.stats()["last_maintain"] is None
|
|
db.maintain(now=1_700_000_000.0)
|
|
assert db.stats()["last_maintain"] == 1_700_000_000.0
|