rustfs/crates/heal/tests/heal_integration_test.rs

// Copyright 2024 RustFS Team
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

use http::HeaderMap;
use rustfs_common::heal_channel::{HealOpts, HealScanMode};
use rustfs_heal::heal::{
    manager::{HealConfig, HealManager},
    storage::{ECStoreHealStorage, HealObjectOptions as ObjectOptions, HealPutObjReader as PutObjReader, HealStorageAPI},
    task::{HealOptions, HealPriority, HealRequest, HealTaskStatus, HealType},
};
use serial_test::serial;
use std::{
    path::{Path, PathBuf},
    sync::Arc,
    time::Duration,
};
use tokio::fs;
use tracing::info;
use walkdir::WalkDir;

mod storage_api;

use storage_api::integration::{BucketOperations, ECStore, ObjectIO as _, ObjectOperations as _};

const HEAL_FORMAT_WAIT_TIMEOUT: Duration = Duration::from_secs(25);
const HEAL_FORMAT_WAIT_INTERVAL: Duration = Duration::from_millis(250);
const NON_INLINE_TEST_DATA_SIZE: usize = 256 * 1024 + 137;

fn non_inline_test_data() -> Vec<u8> {
    (0..NON_INLINE_TEST_DATA_SIZE).map(|idx| (idx % 251) as u8).collect()
}

async fn wait_for_path_exists(path: &Path, timeout: Duration, interval: Duration) -> bool {
    let deadline = tokio::time::Instant::now() + timeout;
    loop {
        if path.exists() {
            return true;
        }
        if tokio::time::Instant::now() >= deadline {
            return false;
        }
        tokio::time::sleep(interval).await;
    }
}

/// Test helper: build the shared 4-disk temp-dir ECStore environment
/// (rustfs-test-utils, backlog#1153 infra-1) and wrap it in the heal storage
/// layer. Port 0 + uuid temp dirs keep this parallel-safe under nextest.
async fn heal_env() -> (Vec<PathBuf>, Arc<ECStore>, Arc<ECStoreHealStorage>) {
    let env = rustfs_test_utils::TestECStoreEnv::builder()
        .prefix("rustfs_heal_heal_test")
        .build()
        .await;
    let heal_storage = Arc::new(ECStoreHealStorage::new(env.ecstore.clone()));
    (env.disk_paths, env.ecstore, heal_storage)
}

/// Test helper: Create a test bucket
async fn create_test_bucket(ecstore: &Arc<ECStore>, bucket_name: &str) {
    (**ecstore)
        .make_bucket(bucket_name, &Default::default())
        .await
        .expect("Failed to create test bucket");
    info!("Created test bucket: {}", bucket_name);
}

/// Test helper: Upload test object
async fn upload_test_object(ecstore: &Arc<ECStore>, bucket: &str, object: &str, data: &[u8]) {
    let mut reader = PutObjReader::from_vec(data.to_vec());
    let object_info = (**ecstore)
        .put_object(bucket, object, &mut reader, &ObjectOptions::default())
        .await
        .expect("Failed to upload test object");

    info!("Uploaded test object: {}/{} ({} bytes)", bucket, object, object_info.size);
}

mod serial_tests {
    use super::*;

    #[tokio::test(flavor = "multi_thread", worker_threads = 4)]
    #[serial]
    async fn test_heal_object_basic() {
        let (disk_paths, ecstore, heal_storage) = heal_env().await;

        // Create test bucket and object
        let bucket_name = "test-heal-object-basic";
        let object_name = "test-object.txt";
        let test_data = non_inline_test_data();

        create_test_bucket(&ecstore, bucket_name).await;
        upload_test_object(&ecstore, bucket_name, object_name, &test_data).await;
        let _obj_dir = disk_paths[0].join(bucket_name).join(object_name);
        // ─── 1️⃣ delete single data shard file ─────────────────────────────────────
        let obj_dir = disk_paths[0].join(bucket_name).join(object_name);
        // find part file at depth 2, e.g. .../<uuid>/part.1
        let target_part = WalkDir::new(&obj_dir)
            .min_depth(2)
            .max_depth(2)
            .into_iter()
            .filter_map(Result::ok)
            .find(|e| e.file_type().is_file() && e.file_name().to_str().map(|n| n.starts_with("part.")).unwrap_or(false))
            .map(|e| e.into_path())
            .expect("Failed to locate part file to delete");

        std::fs::remove_file(&target_part).expect("failed to delete part file");
        assert!(!target_part.exists());
        println!("✅ Deleted shard part file: {target_part:?}");

        let heal_opts = HealOpts {
            recreate: true,
            remove: false,
            update_parity: true,
            ..Default::default()
        };
        let (object_result, object_error) = heal_storage
            .heal_object(bucket_name, object_name, None, &heal_opts)
            .await
            .expect("failed to heal object");
        info!("heal_object result: {:?}, error: {:?}", object_result, object_error);
        assert!(object_error.is_none(), "heal_object returned error: {object_error:?}");

        // `test_heal_format_with_data` covers on-disk shard restoration. Here we
        // focus on the object-level healing contract: the object must remain
        // readable with intact contents after healing.
        let mut reader = ecstore
            .get_object_reader(bucket_name, object_name, None, HeaderMap::new(), &ObjectOptions::default())
            .await
            .expect("Failed to get object reader after heal");

        let mut downloaded_data = Vec::new();
        tokio::io::copy(&mut reader, &mut downloaded_data)
            .await
            .expect("Failed to read healed object data");

        assert_eq!(downloaded_data, test_data, "Healed object data does not match original");

        info!("Heal object basic test passed");
    }

    // Regression for PR #4356 review (issues #3231, #3191): healing an object that
    // needs no shard repair must still reclaim leaked pre-#3510 data dirs.
    //
    // The reclaim was originally wired only into `heal_object`'s post-heal tail,
    // which is unreachable when `disks_to_heal_count == 0` — exactly the state of
    // the objects the sweep targets (valid `xl.meta`, all shards present, plus one
    // orphaned UUID data dir). A healthy heal took the early return and reclaimed
    // nothing. This drives the full heal path on an untouched object and asserts
    // the stray dir is swept, while a dry-run heal leaves it in place.
    #[tokio::test(flavor = "multi_thread", worker_threads = 4)]
    #[serial]
    async fn test_heal_object_reclaims_orphan_data_dir_when_healthy() {
        let (disk_paths, ecstore, heal_storage) = heal_env().await;

        let bucket_name = "test-heal-reclaim-orphan";
        let object_name = "healthy-object.bin";
        let test_data = non_inline_test_data();

        create_test_bucket(&ecstore, bucket_name).await;
        upload_test_object(&ecstore, bucket_name, object_name, &test_data).await;

        // Plant a leaked, unreferenced UUID data dir under the object on every disk
        // that actually holds the object (i.e. has an `xl.meta`). Planting on a disk
        // without `xl.meta` would (correctly) trip the fail-closed guard and abort
        // the whole reclaim, so we only seed disks that carry the object.
        let orphan_dir = uuid::Uuid::new_v4().to_string();
        let mut seeded_orphans: Vec<PathBuf> = Vec::new();
        for disk_path in &disk_paths {
            let obj_dir = disk_path.join(bucket_name).join(object_name);
            if !obj_dir.join("xl.meta").exists() {
                continue;
            }
            let stray = obj_dir.join(&orphan_dir);
            fs::create_dir_all(&stray).await.expect("orphan data dir should be created");
            fs::write(stray.join("part.1"), b"leaked pre-#3510 data")
                .await
                .expect("orphan part should be written");
            seeded_orphans.push(stray);
        }
        assert!(
            !seeded_orphans.is_empty(),
            "test setup failed: no disk carried the object to seed an orphan under"
        );

        let dry_run_opts = HealOpts {
            dry_run: true,
            recreate: true,
            remove: false,
            update_parity: true,
            ..Default::default()
        };
        let (_res, err) = heal_storage
            .heal_object(bucket_name, object_name, None, &dry_run_opts)
            .await
            .expect("dry-run heal should succeed");
        assert!(err.is_none(), "dry-run heal returned error: {err:?}");
        for stray in &seeded_orphans {
            assert!(stray.exists(), "dry-run heal must NOT remove the orphan data dir: {stray:?}");
        }

        // Snapshot the live (referenced) data dirs so we can assert they survive.
        let mut live_dirs: Vec<PathBuf> = Vec::new();
        for disk_path in &disk_paths {
            let obj_dir = disk_path.join(bucket_name).join(object_name);
            if !obj_dir.join("xl.meta").exists() {
                continue;
            }
            for entry in WalkDir::new(&obj_dir)
                .min_depth(1)
                .max_depth(1)
                .into_iter()
                .filter_map(Result::ok)
            {
                let name = entry.file_name().to_string_lossy().to_string();
                if entry.file_type().is_dir() && name != orphan_dir {
                    live_dirs.push(entry.into_path());
                }
            }
        }
        assert!(!live_dirs.is_empty(), "expected at least one live data dir to remain");

        let heal_opts = HealOpts {
            dry_run: false,
            recreate: true,
            remove: false,
            update_parity: true,
            ..Default::default()
        };
        let (_res, err) = heal_storage
            .heal_object(bucket_name, object_name, None, &heal_opts)
            .await
            .expect("heal should succeed");
        assert!(err.is_none(), "heal returned error: {err:?}");

        for stray in &seeded_orphans {
            assert!(!stray.exists(), "healthy heal must reclaim the orphan data dir: {stray:?}");
        }
        for live in &live_dirs {
            assert!(live.exists(), "referenced data dir must be preserved: {live:?}");
        }
        for disk_path in &disk_paths {
            let obj_dir = disk_path.join(bucket_name).join(object_name);
            if obj_dir.exists() {
                assert!(obj_dir.join("xl.meta").exists(), "xl.meta must be preserved: {obj_dir:?}");
            }
        }

        // The object must remain intact and readable after the reclaim.
        let mut reader = ecstore
            .get_object_reader(bucket_name, object_name, None, HeaderMap::new(), &ObjectOptions::default())
            .await
            .expect("Failed to get object reader after reclaim");
        let mut downloaded_data = Vec::new();
        tokio::io::copy(&mut reader, &mut downloaded_data)
            .await
            .expect("Failed to read object after reclaim");
        assert_eq!(downloaded_data, test_data, "object contents must survive orphan reclaim");

        info!("Heal object orphan-reclaim test passed");
    }

    #[tokio::test(flavor = "multi_thread", worker_threads = 4)]
    #[serial]
    async fn test_heal_bucket_basic() {
        let (disk_paths, ecstore, heal_storage) = heal_env().await;

        // Create test bucket
        let bucket_name = "test-heal-bucket-basic";
        create_test_bucket(&ecstore, bucket_name).await;

        // ─── 1️⃣ delete bucket dir on disk ──────────────
        let broken_bucket_path = disk_paths[0].join(bucket_name);
        assert!(broken_bucket_path.exists(), "bucket dir does not exist on disk");
        std::fs::remove_dir_all(&broken_bucket_path).expect("failed to delete bucket dir on disk");
        assert!(!broken_bucket_path.exists(), "bucket dir still exists after deletion");
        println!("✅ Deleted bucket directory on disk: {broken_bucket_path:?}");

        // Create heal manager with faster interval
        let cfg = HealConfig {
            heal_interval: Duration::from_millis(1),
            ..Default::default()
        };
        let heal_manager = HealManager::new(heal_storage.clone(), Some(cfg));
        heal_manager.start().await.unwrap();

        // Submit heal request for the bucket
        let heal_request = HealRequest::new(
            HealType::Bucket {
                bucket: bucket_name.to_string(),
            },
            HealOptions {
                dry_run: false,
                recursive: true,
                remove_corrupted: false,
                recreate_missing: false,
                scan_mode: HealScanMode::Normal,
                update_parity: false,
                timeout: Some(Duration::from_secs(300)),
                pool_index: None,
                set_index: None,
            },
            HealPriority::Normal,
        );

        let task_id = heal_request.id.clone();
        let admission = heal_manager
            .submit_heal_request(heal_request)
            .await
            .expect("Failed to submit bucket heal request");
        assert!(admission.is_admitted(), "bucket heal request should be admitted");

        info!("Submitted bucket heal request with task ID: {}", task_id);

        // Wait for task completion
        tokio::time::sleep(tokio::time::Duration::from_secs(5)).await;

        // Attempt to fetch task status (optional)
        if let Ok(status) = heal_manager.get_task_status(&task_id).await {
            if status == HealTaskStatus::Completed {
                info!("Bucket heal task status: {:?}", status);
            } else {
                panic!("Bucket heal task status: {status:?}");
            }
        }

        // ─── 3️⃣ Verify bucket directory is restored on every disk ───────
        assert!(broken_bucket_path.exists(), "bucket dir does not exist on disk");

        info!("Heal bucket basic test passed");
    }

    #[tokio::test(flavor = "multi_thread", worker_threads = 4)]
    #[serial]
    async fn test_heal_format_basic() {
        let (disk_paths, _ecstore, heal_storage) = heal_env().await;

        // ─── 1️⃣ delete format.json on one disk ──────────────
        let format_path = disk_paths[0].join(".rustfs.sys").join("format.json");
        assert!(format_path.exists(), "format.json does not exist on disk");
        std::fs::remove_file(&format_path).expect("failed to delete format.json on disk");
        assert!(!format_path.exists(), "format.json still exists after deletion");
        println!("✅ Deleted format.json on disk: {format_path:?}");

        let (_format_result, format_error) = heal_storage.heal_format(false).await.expect("failed to run heal_format");
        if let Some(err) = format_error {
            info!("heal_format returned error: {:?}", err);
        }

        let restored = wait_for_path_exists(&format_path, HEAL_FORMAT_WAIT_TIMEOUT, HEAL_FORMAT_WAIT_INTERVAL).await;
        assert!(restored, "format.json does not exist on disk after heal");

        // ─── 2️⃣ verify format.json is restored ───────
        assert!(format_path.exists(), "format.json does not exist on disk after heal");

        info!("Heal format basic test passed");
    }

    #[tokio::test(flavor = "multi_thread", worker_threads = 4)]
    #[serial]
    async fn test_heal_format_with_data() {
        let (disk_paths, ecstore, heal_storage) = heal_env().await;

        // Create test bucket and object
        let bucket_name = "test-heal-format-with-data";
        let object_name = "test-object.txt";
        let test_data = non_inline_test_data();

        create_test_bucket(&ecstore, bucket_name).await;
        upload_test_object(&ecstore, bucket_name, object_name, &test_data).await;
        let obj_dir = disk_paths[0].join(bucket_name).join(object_name);
        let target_part = WalkDir::new(&obj_dir)
            .min_depth(2)
            .max_depth(2)
            .into_iter()
            .filter_map(Result::ok)
            .find(|e| e.file_type().is_file() && e.file_name().to_str().map(|n| n.starts_with("part.")).unwrap_or(false))
            .map(|e| e.into_path())
            .expect("Failed to locate part file to delete");

        // ─── 1️⃣ delete format.json on one disk ──────────────
        let format_path = disk_paths[0].join(".rustfs.sys").join("format.json");
        std::fs::remove_dir_all(&disk_paths[0]).expect("failed to delete all contents under disk_paths[0]");
        std::fs::create_dir_all(&disk_paths[0]).expect("failed to recreate disk_paths[0] directory");
        println!("✅ Deleted format.json on disk: {:?}", disk_paths[0]);

        let (_format_result, format_error) = heal_storage.heal_format(false).await.expect("failed to run heal_format");
        if let Some(err) = format_error {
            info!("heal_format returned warning/error: {:?}", err);
        }

        let bucket_heal_opts = HealOpts {
            recursive: true,
            recreate: true,
            ..Default::default()
        };
        heal_storage
            .heal_bucket(bucket_name, &bucket_heal_opts)
            .await
            .expect("failed to heal bucket");

        let heal_opts = HealOpts {
            recreate: true,
            remove: false,
            ..Default::default()
        };
        let (object_result, object_error) = heal_storage
            .heal_object(bucket_name, object_name, None, &heal_opts)
            .await
            .expect("failed to heal object");
        info!("heal_object result: {:?}, error: {:?}", object_result, object_error);
        assert!(object_error.is_none(), "heal_object returned error: {object_error:?}");

        let format_restored = wait_for_path_exists(&format_path, HEAL_FORMAT_WAIT_TIMEOUT, HEAL_FORMAT_WAIT_INTERVAL).await;
        assert!(format_restored, "format.json does not exist on disk after heal");
        let target_restored = wait_for_path_exists(&target_part, HEAL_FORMAT_WAIT_TIMEOUT, HEAL_FORMAT_WAIT_INTERVAL).await;

        // ─── 3️⃣ verify format.json is restored ───────
        assert!(format_path.exists(), "format.json does not exist on disk after heal");
        assert!(target_restored, "part file was not restored after heal");

        // ─── 3️⃣ verify each part file is restored ───────
        assert!(target_part.exists());

        // Verify object metadata is accessible
        let obj_info = ecstore
            .get_object_info(bucket_name, object_name, &ObjectOptions::default())
            .await
            .expect("Expected object to be readable after heal");
        assert_eq!(obj_info.size as usize, test_data.len());

        // Actually read the object data to verify integrity
        let mut reader = ecstore
            .get_object_reader(bucket_name, object_name, None, HeaderMap::new(), &ObjectOptions::default())
            .await
            .expect("Failed to get object reader");

        let mut downloaded_data = Vec::new();
        tokio::io::copy(&mut reader, &mut downloaded_data)
            .await
            .expect("Failed to read object data");

        assert_eq!(downloaded_data, test_data, "Healed object data does not match original");

        info!("Heal format with data test passed");
    }

    #[tokio::test(flavor = "multi_thread", worker_threads = 4)]
    #[serial]
    async fn test_heal_storage_api_direct() {
        let (_disk_paths, ecstore, heal_storage) = heal_env().await;

        // Test direct heal storage API calls

        // Test heal_format
        let format_result = heal_storage.heal_format(true).await; // dry run
        assert!(format_result.is_ok());
        info!("Direct heal_format test passed");

        // Test heal_bucket
        let bucket_name = "test-bucket-direct";
        create_test_bucket(&ecstore, bucket_name).await;

        let heal_opts = HealOpts {
            recursive: true,
            dry_run: true,
            remove: false,
            recreate: false,
            scan_mode: HealScanMode::Normal,
            update_parity: false,
            no_lock: false,
            pool: None,
            set: None,
        };

        let bucket_result = heal_storage.heal_bucket(bucket_name, &heal_opts).await;
        assert!(bucket_result.is_ok());
        info!("Direct heal_bucket test passed");

        // Test heal_object
        let object_name = "test-object-direct.txt";
        let test_data = b"Test data for direct heal API";
        upload_test_object(&ecstore, bucket_name, object_name, test_data).await;

        let object_heal_opts = HealOpts {
            recursive: false,
            dry_run: true,
            remove: false,
            recreate: false,
            scan_mode: HealScanMode::Normal,
            update_parity: false,
            no_lock: false,
            pool: None,
            set: None,
        };

        let object_result = heal_storage
            .heal_object(bucket_name, object_name, None, &object_heal_opts)
            .await;
        assert!(object_result.is_ok());
        info!("Direct heal_object test passed");

        info!("Direct heal storage API test passed");
    }
}