mirror of
https://github.com/priyanshujain/sanderling.git
synced 2026-10-02 11:07:10 +00:00
* feat(cli): add --max-steps for step-bounded runs runner.Options.MaxSteps already worked but was unreachable from the command line. A step budget is what makes two generators comparable: one making a model call per step and one drawing from a PRNG are not comparable per second. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * feat(trace): record arm membership and host in meta.json meta.json recorded the seed but not which picker ran, how it was configured, what budget it was given, or which machine produced it. A directory of runs cannot be attributed to an experiment cell without those, which makes any factorial computed from such a directory unanalysable after the fact. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * feat(cli): add --arm and populate run meta from it Model and instructions are recorded only when the LLM picker is the one that will actually run, so a spec declaring generator = llm() that is run under the seeded picker does not label its trace with a model it never called. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * feat(campaign): sweep seeds for one experiment cell campaign.json lists the seeds a sweep intended to run and is written before the first run, so a host that dropped runs shows up as missing seeds rather than as a smaller sample. Seed 0 is rejected: sanderling test reads it as "derive a seed from the clock", which is why conformance/gates.sh controls nothing today. Each run contributes one runs.jsonl line carrying steps to first violation by origin step, the step that armed the failed obligation, so the survival analysis never reopens a trace. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * fix(runner): no silent generator fallback, and llm on web --generator llm against a spec declaring no generator = llm(...) logged a warning and ran the seeded picker. For a comparison campaign that is silent arm corruption: the run completes, the directory looks correct, and the wrong policy drove it. It is now fatal. pickSources also returned the V8 source for both action and extractor on web before it looked at the generator, so the llm policy was unreachable there. The two axes are now independent: the driver picks the extractor source, the flag picks the action source, and llmSource composes with either because the runner populates the candidate list and screenshot on every platform. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * fix(chrome): make the hierarchy dump agree with the web runtime Three facts differed between the dump the goja host reads and the DOM the V8 host reads, so the two enumerated different candidates on one page. scrollable was never emitted, and worker.go reads exactly that attribute while targets.ts requires it for scrolls, so the goja host could not offer a single web scroll. clickable tested el.onclick, which React assigns to its root container for event delegation, making the whole viewport a tap target here and in no other enumeration. Both now resolve through the selector sets in pkg/spec/src/web-runtime.ts. The dump also rooted at body while collectTargets walks querySelectorAll("*"), so the goja host never saw html, where page-level scrolling lives. It now roots at documentElement and skips the head subtree, which is all zero-bounds and would otherwise carry script and title text into the trace. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * fix(conformance): give the gate reproducible seeds SEED defaulted to 0 and sanderling test reads --seed 0 as "derive a seed from the clock", so the tunable controlled nothing and a gate failure could not be re-run. SEEDS now takes one explicit non-zero seed per run, recorded in the results table so a failing row names its stream. The five runs stay on five different streams: a gate that scored one path five times would catch less than one that scores five. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * fix(chrome): emit editable as a plain boolean editable was emitted as `isEditable || null`, and an absent field sends internal/hierarchy into the native fallback, which reads any class name containing "EditText" as an Android text widget. On web that is just a CSS class, so a page styling a div with it was editable to the goja host and not to the web runtime, and the model policy could be offered typing into a div. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * fix(spec): leave the head subtree out of the web target walk collectTargets walked querySelectorAll("*") while the hierarchy dump skips head, so the two hosts enumerated different element sets on every page with a <head>. No candidate changes: builtinCandidates pushes only for targets acceptsTarget admits, and head elements have no positive bounds, so the list the draw ranges over is untouched. What changes is that targetIndex now means the same thing on both hosts. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * test(chrome): compare the facts both hosts derive from one DOM The existing parity harness hand-authors the facts on both sides, so it proves that given identical facts both hosts select identical candidates, and says nothing about the two code paths that derive those facts from a real page. Four divergences lived in that blind spot and it passed throughout. This drives one real page and compares clickable, enabled, editable, scrollable and positiveBounds element by element, plus the element sets themselves, which is what catches a host that omits html or includes head. Reverting any of the four fixes makes it fail naming the element and the fact. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * chore(make): run the browser packages one at a time Both launch Chrome and launching two at once has failed with "Launch: context canceled". Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * style: remove every em-dash and en-dash Eighteen occurrences across fourteen files. Each sentence was repunctuated to suit what the dash was doing rather than swapped for a hyphen, which produces comma splices. The minus sign in folio-web's ledger is a minus sign and stays. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * fix(chrome): honor the caller context in Launch Launch and clearState ran against d.tabCtx, so a target that accepts the connection and never answers wedged the process past its own --duration and through SIGTERM, needing SIGKILL. Unattended that is a campaign worker lost for the rest of the sweep with no diagnostic. The browser is still allocated against d.tabCtx first, because chromedp starts Chrome under whichever context calls Run first and allocating under a caller deadline would kill the browser when Launch returns. Everything after allocation goes through runCtx. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * fix(sidecarassets): publish the extracted jar through a rename Extract wrote a 96 MB jar with a plain WriteFile into a temp path every sanderling process on the host shares. On a cold host several concurrent workers all miss the checksum and all write the same path, and O_TRUNC lets one spawn a JVM against another's half-written archive. A fresh experiment host is exactly a cold host. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * feat(campaign): kill a run that outlives --run-timeout A wedged run holds its worker for the rest of the sweep, and on an unattended host nothing else will send it a signal. Defaults to three times --duration and must exceed it. A killed run is recorded as timed_out rather than as a generic failure, so the analysis can tell a lost cell from a real crash. Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX * style(test): gofmt browser_test.go Claude-Session: https://claude.ai/code/session_01A5KmftdEJ49A9z5mF5ESrX
332 lines
11 KiB
Go
332 lines
11 KiB
Go
// Package testrun wires together the device, bundler, runner, and verifier into a single test pipeline.
|
|
package testrun
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"io"
|
|
"os"
|
|
"path/filepath"
|
|
"strconv"
|
|
"time"
|
|
|
|
"github.com/priyanshujain/sanderling/internal/android"
|
|
"github.com/priyanshujain/sanderling/internal/bundler"
|
|
"github.com/priyanshujain/sanderling/internal/driver"
|
|
"github.com/priyanshujain/sanderling/internal/runner"
|
|
"github.com/priyanshujain/sanderling/internal/trace"
|
|
"github.com/priyanshujain/sanderling/internal/verifier"
|
|
)
|
|
|
|
const sidecarStartupTimeout = 30 * time.Second
|
|
|
|
// Options are the parameters for a single test pipeline run.
|
|
type Options struct {
|
|
Spec string
|
|
BundleID string
|
|
Platform string
|
|
AVD string
|
|
Device string
|
|
IosDevice string
|
|
IosAppPath string
|
|
AndroidAppPath string
|
|
Duration time.Duration
|
|
MaxSteps int
|
|
Seed int64
|
|
Output string
|
|
ClearData bool
|
|
// Arm labels the experiment cell this run belongs to and is recorded in
|
|
// meta.json so a directory of runs can be attributed to a cell.
|
|
Arm string
|
|
// Generator selects the action picker: "llm" or the default seeded picker.
|
|
Generator string
|
|
|
|
// iosUDID, iosIsSimulator, and iosCoreDeviceID are filled by Execute after
|
|
// resolving the iOS target, then read by buildDriver to choose the simulator
|
|
// companion or the physical-device driver. On the device path iosUDID is the
|
|
// hardware UDID and iosCoreDeviceID is the CoreDevice id.
|
|
iosUDID string
|
|
iosIsSimulator bool
|
|
iosCoreDeviceID string
|
|
}
|
|
|
|
// Execute runs the full test pipeline: bundle, launch app, verify properties.
|
|
// buildRunMeta assembles the run's meta.json. Model and Instructions are
|
|
// recorded only when the LLM picker is the one that will actually run, so a
|
|
// spec that declares generator = llm() but is run under the seeded picker does
|
|
// not label its trace with a model it never called.
|
|
func buildRunMeta(options Options, bundleSHA256 string, seed int64, host string, llmConfig verifier.LLMConfig, hasLLMConfig bool) trace.Meta {
|
|
meta := trace.Meta{
|
|
Seed: seed,
|
|
SpecPath: options.Spec,
|
|
BundleSHA256: bundleSHA256,
|
|
Platform: options.Platform,
|
|
BundleID: options.BundleID,
|
|
StartedAt: time.Now().UTC(),
|
|
SanderlingVersion: "0.0.1",
|
|
Arm: options.Arm,
|
|
Generator: options.Generator,
|
|
MaxSteps: options.MaxSteps,
|
|
DurationMillis: options.Duration.Milliseconds(),
|
|
Host: host,
|
|
}
|
|
if options.Generator == "llm" && hasLLMConfig {
|
|
meta.Model = llmConfig.Model
|
|
meta.Instructions = llmConfig.Instructions
|
|
}
|
|
return meta
|
|
}
|
|
|
|
func Execute(ctx context.Context, options Options, stdout io.Writer) error {
|
|
switch options.Platform {
|
|
case "android":
|
|
if err := android.EnsureDevice(ctx, options.Device, options.AVD, stdout); err != nil {
|
|
return err
|
|
}
|
|
if err := android.PrepareDevice(ctx, options.Device, stdout); err != nil {
|
|
return err
|
|
}
|
|
// Switch to 3-button navigation for the run so fuzzer swipes cannot
|
|
// trigger the gesture-nav home/back and fling the app off screen;
|
|
// restore the original mode when the run ends.
|
|
restoreNav := android.ForceThreeButtonNav(ctx, options.Device, stdout)
|
|
defer restoreNav()
|
|
case "ios":
|
|
resolved, err := resolveIOSTarget(ctx, options, stdout)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
options = resolved
|
|
}
|
|
prep, err := prepareBundleInputs(options)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
aliases := prep.aliases
|
|
seed := prep.seed
|
|
defines := prep.defines
|
|
specAPIPath := prep.specAPIPath
|
|
bundle, err := bundler.Bundle(bundler.Options{
|
|
EntryFile: options.Spec,
|
|
RuntimeFile: prep.gojaRuntimePath,
|
|
Defines: defines,
|
|
Aliases: aliases,
|
|
})
|
|
if err != nil {
|
|
return fmt.Errorf("bundle spec: %w", err)
|
|
}
|
|
fmt.Fprintf(stdout, "bundled spec: %d bytes (sha256=%s)\n", len(bundle.JavaScript), bundle.SHA256[:12])
|
|
|
|
var webBundle bundler.Result
|
|
if options.Platform == "web" {
|
|
runtimePath := resolveWebRuntimePath(specAPIPath, options.Spec)
|
|
if runtimePath == "" {
|
|
return fmt.Errorf("web-runtime.ts not found near %s; checkout pkg/spec or set @sanderling/spec alias", options.Spec)
|
|
}
|
|
webBundle, err = bundler.BundleWeb(bundler.WebOptions{
|
|
EntryFile: options.Spec,
|
|
WebRuntimeFile: runtimePath,
|
|
Defines: defines,
|
|
Aliases: aliases,
|
|
})
|
|
if err != nil {
|
|
return fmt.Errorf("bundle web spec: %w", err)
|
|
}
|
|
fmt.Fprintf(stdout, "bundled web spec: %d bytes (sha256=%s)\n", len(webBundle.JavaScript), webBundle.SHA256[:12])
|
|
}
|
|
|
|
activeDriver, cleanup, err := buildDriver(ctx, options, stdout)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer cleanup()
|
|
|
|
if err := activeDriver.Launch(ctx, options.BundleID, options.ClearData, nil); err != nil {
|
|
return fmt.Errorf("launch app: %w", err)
|
|
}
|
|
|
|
if web, ok := activeDriver.(driver.WebDriver); ok && len(webBundle.JavaScript) > 0 {
|
|
if err := web.InstallBundle(ctx, webBundle.JavaScript); err != nil {
|
|
return fmt.Errorf("install web bundle: %w", err)
|
|
}
|
|
}
|
|
|
|
verifierInstance, err := verifier.New(
|
|
verifier.WithSeed(uint64(seed)),
|
|
verifier.WithPlatform(options.Platform),
|
|
verifier.WithAppPackage(options.BundleID),
|
|
)
|
|
if err != nil {
|
|
return fmt.Errorf("verifier: %w", err)
|
|
}
|
|
if err := verifierInstance.Load(string(bundle.JavaScript)); err != nil {
|
|
return fmt.Errorf("load spec: %w", err)
|
|
}
|
|
fmt.Fprintln(stdout, "spec loaded into verifier")
|
|
|
|
runDirectory := filepath.Join(options.Output, time.Now().UTC().Format("20060102-150405"))
|
|
traceWriter, err := trace.NewWriter(runDirectory)
|
|
if err != nil {
|
|
return fmt.Errorf("trace writer: %w", err)
|
|
}
|
|
defer traceWriter.Close()
|
|
hostname, _ := os.Hostname()
|
|
llmConfig, hasLLMConfig := verifierInstance.LLMConfig()
|
|
meta := buildRunMeta(options, bundle.SHA256, seed, hostname, llmConfig, hasLLMConfig)
|
|
if err := traceWriter.WriteMeta(meta); err != nil {
|
|
return fmt.Errorf("trace meta: %w", err)
|
|
}
|
|
defer func() {
|
|
endedAt := time.Now().UTC()
|
|
meta.EndedAt = &endedAt
|
|
_ = traceWriter.WriteMeta(meta)
|
|
}()
|
|
fmt.Fprintf(stdout, "trace dir: %s\n", runDirectory)
|
|
|
|
if options.MaxSteps > 0 {
|
|
fmt.Fprintf(stdout, "running for %s or %d steps, whichever comes first (seed=%d)\n", options.Duration, options.MaxSteps, seed)
|
|
} else {
|
|
fmt.Fprintf(stdout, "running for %s (seed=%d)\n", options.Duration, seed)
|
|
}
|
|
summary, err := runner.Run(ctx, runner.Options{
|
|
Duration: options.Duration,
|
|
MaxSteps: options.MaxSteps,
|
|
IdleTimeout: 1 * time.Second,
|
|
BundleID: options.BundleID,
|
|
Driver: activeDriver,
|
|
Verifier: verifierInstance,
|
|
TraceWriter: traceWriter,
|
|
Logger: newProgressLogger(stdout),
|
|
Generator: options.Generator,
|
|
})
|
|
|
|
terminateCtx, terminateCancel := context.WithTimeout(context.Background(), 5*time.Second)
|
|
_ = activeDriver.Terminate(terminateCtx)
|
|
terminateCancel()
|
|
|
|
if err != nil {
|
|
return fmt.Errorf("runner: %w", err)
|
|
}
|
|
|
|
fmt.Fprintf(stdout, "\nelapsed: %s\n", summary.EndTime.Sub(summary.StartTime).Round(time.Millisecond))
|
|
runner.RenderSummary(stdout, summary, options.Platform)
|
|
return nil
|
|
}
|
|
|
|
// bundleInputs holds the pre-driver assembly: alias map, seed, esbuild defines,
|
|
// and the resolved spec-API/goja-runtime paths the bundler consumes.
|
|
type bundleInputs struct {
|
|
aliases map[string]string
|
|
seed int64
|
|
defines map[string]string
|
|
specAPIPath string
|
|
gojaRuntimePath string
|
|
}
|
|
|
|
// prepareBundleInputs builds the alias map, defines, seed, and resolves the
|
|
// goja runtime path. It is the pure (no driver/JVM) front half of Execute,
|
|
// returning the documented error when the runtime entry cannot be located.
|
|
func prepareBundleInputs(options Options) (bundleInputs, error) {
|
|
aliases := map[string]string{}
|
|
specAPIPath := resolveSpecAPIPath(options.Spec)
|
|
if specAPIPath != "" {
|
|
aliases["@sanderling/spec"] = specAPIPath
|
|
base := filepath.Dir(specAPIPath)
|
|
aliases["@sanderling/spec/defaults"] = filepath.Join(base, "defaults/index.ts")
|
|
aliases["@sanderling/spec/defaults/properties"] = filepath.Join(base, "defaults/properties.ts")
|
|
}
|
|
seed := resolveSeed(options.Seed)
|
|
defines := map[string]string{
|
|
"SANDERLING_TEST_PHONE": os.Getenv("SANDERLING_TEST_PHONE"),
|
|
"SANDERLING_TEST_OTP": os.Getenv("SANDERLING_TEST_OTP"),
|
|
"SANDERLING_SEED": strconv.FormatInt(seed, 10),
|
|
}
|
|
gojaRuntimePath := resolveGojaRuntimePath(specAPIPath, options.Spec)
|
|
if gojaRuntimePath == "" {
|
|
return bundleInputs{}, fmt.Errorf("goja-runtime.ts not found near %s; checkout pkg/spec or set @sanderling/spec alias", options.Spec)
|
|
}
|
|
return bundleInputs{
|
|
aliases: aliases,
|
|
seed: seed,
|
|
defines: defines,
|
|
specAPIPath: specAPIPath,
|
|
gojaRuntimePath: gojaRuntimePath,
|
|
}, nil
|
|
}
|
|
|
|
// resolveSeed returns the configured seed, or a time-derived one when unset.
|
|
// The same value seeds both the goja PRNG and the web bundle's SANDERLING_SEED
|
|
// define, so a single run is reproducible across both runtimes.
|
|
func resolveSeed(configured int64) int64 {
|
|
if configured != 0 {
|
|
return configured
|
|
}
|
|
return time.Now().UnixNano()
|
|
}
|
|
|
|
// resolveWebRuntimePath returns the path to pkg/spec/src/web-runtime.ts.
|
|
func resolveWebRuntimePath(specAPIPath, userSpecPath string) string {
|
|
return resolveRuntimeSibling(specAPIPath, userSpecPath, "web-runtime.ts")
|
|
}
|
|
|
|
// resolveGojaRuntimePath returns the path to pkg/spec/src/goja-runtime.ts, the
|
|
// native verifier's runtime entry that installs __sanderlingNextAction__.
|
|
func resolveGojaRuntimePath(specAPIPath, userSpecPath string) string {
|
|
return resolveRuntimeSibling(specAPIPath, userSpecPath, "goja-runtime.ts")
|
|
}
|
|
|
|
// resolveRuntimeSibling finds a runtime-entry file that sits beside the spec-API
|
|
// index.ts. Tries the spec-API checkout first (so monorepo development works
|
|
// without publishing the package), then falls back to a node_modules path.
|
|
func resolveRuntimeSibling(specAPIPath, userSpecPath, filename string) string {
|
|
if specAPIPath != "" {
|
|
candidate := filepath.Join(filepath.Dir(specAPIPath), filename)
|
|
if _, err := os.Stat(candidate); err == nil {
|
|
return candidate
|
|
}
|
|
}
|
|
if absoluteSpec, err := filepath.Abs(userSpecPath); err == nil {
|
|
directory := filepath.Dir(absoluteSpec)
|
|
for {
|
|
candidate := filepath.Join(directory, "node_modules", "@sanderling", "spec", "src", filename)
|
|
if _, err := os.Stat(candidate); err == nil {
|
|
return candidate
|
|
}
|
|
parent := filepath.Dir(directory)
|
|
if parent == directory {
|
|
break
|
|
}
|
|
directory = parent
|
|
}
|
|
}
|
|
return ""
|
|
}
|
|
|
|
// resolveSpecAPIPath returns the path to pkg/spec/src/index.ts inside
|
|
// a sanderling source checkout, searched upward from the spec file and the cwd.
|
|
// Returns "" when not found, in which case esbuild resolves @sanderling/spec via
|
|
// node_modules the way a downstream user's project would.
|
|
func resolveSpecAPIPath(specPath string) string {
|
|
var candidates []string
|
|
if absoluteSpec, err := filepath.Abs(specPath); err == nil {
|
|
directory := filepath.Dir(absoluteSpec)
|
|
for {
|
|
candidates = append(candidates, filepath.Join(directory, "pkg/spec/src/index.ts"))
|
|
parent := filepath.Dir(directory)
|
|
if parent == directory {
|
|
break
|
|
}
|
|
directory = parent
|
|
}
|
|
}
|
|
if cwd, err := os.Getwd(); err == nil {
|
|
candidates = append(candidates, filepath.Join(cwd, "pkg/spec/src/index.ts"))
|
|
}
|
|
for _, candidate := range candidates {
|
|
if _, err := os.Stat(candidate); err == nil {
|
|
return candidate
|
|
}
|
|
}
|
|
return ""
|
|
}
|