#!/usr/bin/env sh set -eu root=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd) work=$(mktemp -d "${TMPDIR:-/tmp}/zds-smoke.XXXXXX") port="${ZDS_SMOKE_PORT:-2585}" db="${work}/zds-smoke.sqlite3" blob_root="${work}/zds-smoke-blobs" log="${work}/zds-smoke.log" base="http://127.0.0.1:${port}" jwt_secret="smoke-jwt-secret" cleanup() { status=$? if [ -n "${server_pid:-}" ]; then kill "$server_pid" 2>/dev/null || true wait "$server_pid" 2>/dev/null || true fi if [ -n "${plc_stub_pid:-}" ]; then kill "$plc_stub_pid" 2>/dev/null || true wait "$plc_stub_pid" 2>/dev/null || true fi if [ "$status" -eq 0 ]; then rm -rf "$work" else echo "Smoke failed; diagnostic files: $work" >&2 fi } trap cleanup EXIT trap 'exit 130' INT trap 'exit 143' TERM cd "$root" rm -f "$db" "$db-wal" "$db-shm" "$log" rm -rf "$blob_root" mkdir -p "$blob_root" if [ "${ZDS_SMOKE_PREBUILT:-0}" != 1 ]; then zig build smoke-build fi # stand-in PLC directory so createAccount genesis never reaches plc.directory; # it also hosts a public OAuth client's metadata so PAR can be exercised. plc_port="${ZDS_SMOKE_PLC_PORT:-2586}" client_id="http://127.0.0.1:${plc_port}/oauth-client-metadata.json" python3 -c " import json from http.server import BaseHTTPRequestHandler, HTTPServer metadata = json.dumps({ 'client_id': '$client_id', 'client_name': 'smoke', 'redirect_uris': ['http://127.0.0.1/callback'], 'scope': 'atproto repo:*', 'grant_types': ['authorization_code', 'refresh_token'], 'response_types': ['code'], 'token_endpoint_auth_method': 'none', 'application_type': 'native', 'dpop_bound_access_tokens': True, }).encode() class Stub(BaseHTTPRequestHandler): def do_GET(self): if self.path != '/oauth-client-metadata.json': self.send_response(404) self.end_headers() return self.send_response(200) self.send_header('content-type', 'application/json') self.send_header('content-length', str(len(metadata))) self.end_headers() self.wfile.write(metadata) def do_POST(self): self.rfile.read(int(self.headers.get('content-length', 0))) self.send_response(200) self.end_headers() def log_message(self, *args): pass HTTPServer(('127.0.0.1', $plc_port), Stub).serve_forever() " & plc_stub_pid=$! # run the installed binary directly so $! is the server itself; killing the # `zig build run` wrapper orphans zds and leaves the port taken for the next run ZDS_PLC_ROTATION_KEY=1111111111111111111111111111111111111111111111111111111111111111 \ ./zig-out/bin/zds \ --host 127.0.0.1 \ --jwt-secret "$jwt_secret" \ --port "$port" \ --db "$db" \ --blobstore-path "$blob_root" \ --public-url "$base" \ --server-did did:web:localhost \ --handle-domains .test \ --invite-required \ --admin-token smoke-admin-token \ --operator-handle smoke-operator.test \ --plc-directory "http://127.0.0.1:${plc_port}" \ >"$log" 2>&1 & server_pid=$! i=0 while [ "$i" -lt 80 ]; do if curl -fsS "$base/xrpc/_health" >/dev/null 2>&1; then break fi i=$((i + 1)) sleep 0.1 done curl -fsS "$base/xrpc/_health" >/dev/null # A normal build must never pick up cached operator drawings implicitly. account_page=$(curl -fsS "$base/account/manage") if printf '%s' "$account_page" | grep -q '/ui/icon?cid='; then echo 'unconfigured build unexpectedly includes custom drawings' >&2 exit 1 fi test "$(curl -sS -o /dev/null -w '%{http_code}' "$base/ui/icon?cid=bafkreidhkabyea5vkonzvfdjvgbinqt76kovuli7hrwqqffx5cx2nf4chi")" = 404 stats_page=$(curl -fsS "$base/stats") printf '%s' "$stats_page" | grep -q '

pds health

' printf '%s' "$stats_page" | grep -q '

writes