alktunnels/tasks/tunnels/end-to-end-suite.md at 3a447273a824258ed549af16dbb25398869bf4cb

Files

T

glm-5.3-flash 69498b79cc tasks: Phase 2 decomposition — 12-task dependency graph for v1

tasks/architecture/:
- oq-promotion-sync (planning): back-pointers from the phase-0 ledger
  + AGENTS.md to the promoted OQ tracker (the convergence checklist's
  final half)
- oq-tn-14-tracker: the Safe-Exit external-trigger tracker task for
  OQ-TN-14 (unix/stdio placement; [external-trigger, deferred-oq],
  risk trivial, level research per the two-halves rule)

tasks/tunnels/ (the implementation graph, 8 generations):
- crate-init: module skeleton per overview.md's module map
- params: TunnelParams + open-op spec (ADR-001 wire-stable surface)
- wire-codec: frame_datagram/DatagramReader + the 8 POC-pinned test
  families (ADR-003)
- producer-open-op: establisher (dial, plan flow R-01) + pump handler
  (pump_bidi inline R-02) + registration; POC-ported integration tests
- consumer-session: TunnelSession (open/adopt, data planes, teardown
  matrix — ADR-005); generalizes the reverse POC's ReverseTunnel
- producer-listen: the listen establisher + AcceptQueue contract
  (ADR-004 shape 2)
- local-socket-halves: the local feature (TCP/UDP/unix halves
  functions; truncation fail-loud per OQ-TN-13; unix ships per
  OQ-TN-14's lean-yes, stdio deferred)
- review-core-crates: review-injection point before the downstream
  tasks build on the high-risk producer/consumer shapes
- end-to-end-suite: 6 suites / >=20 tests consolidating both POC
  suites against the public API (the spec's executable form)
- review-impl: the phase-gate review (wire/API/conventions/docs sync;
  findings doc per the alkhttp/alkcall house pattern)

Graph verified with taskgraph: 12 tasks valid, no cycles, 8
generations; critical path = oq-promotion-sync -> crate-init ->
params -> wire-codec -> producer-open-op -> consumer-session ->
review-core-crates -> review-impl; risk concentrated in the two
session tasks (both POC-validated); parallel groups available at
generations 1 and 6

2026-09-07 19:07:20 +00:00

3.2 KiB

Raw Blame History

id, name, status, depends_on, scope, risk, impact, level, tags

name

status

depends_on

scope

risk

impact

level

Description

Consolidate the integration coverage into tests/ as the crate's end-to-end suite: every validated POC behavior, re-expressed against the crate's public API (not the POCs' internals). This is the quality gate before the implementation review — the suite is the spec's executable form.

Suites

Forward (-L): consumer open → producer establisher dials → pump_bidi → round-trip; 1 MiB backpressure; typed errors (unknown_resource / dial_failed / FORBIDDEN / timeout-adjacent); per-call opener identity witness (CF-006).
Reverse (-R): hub initiator — open_reverse_channel + adopt + pump_against; odd-ID allocation asserted (ADR-047 §5); identity precedence chain (transport alone / ServingConfig. identity override / token override / identity-less fail-closed); half-close (W4); out-of-band channel/close + self-reaping (W3); concurrent same-resource opens (R-01, no handoff race).
Listen producer: the accept-queue flow end-to-end + its typed errors (from tunnels/producer-listen).
Datagram (udp): forward + reverse datagram sessions via the codec — round-trip, empty datagram (the F-2 layering), chunk-split survival, TCP+UDP concurrent channels on one connection.
Teardown matrix (ADR-005): close / join (with + without pump) / Drop — channel_ids() asserts no leaks on either side after each.
local feature suite: real sockets end-to-end (from tunnels/local-socket-halves — runs after that task lands; the duplex-transport suites above do not need it).

Transport stand-in: tokio::io::duplex (both POCs' harness; the alkcall layer owns real transports — unchanged scope). The suite may share one harness module (tests/common/); the POC harnesses (/workspace/alktunnels-udp-poc/src/harness.rs, /workspace/alktunnels-reverse-poc/src/harness.rs) are the two topologies to unify.

The spec-conformance assertions to keep visible

A failed open never returns a channel_id (no phantom channel — both sides' channel_ids() hold only 0 afterward).
A failed adopt never leaks the session (Drop reaps).
The pump handler's JoinHandle tracks the data plane (a test that simulates early-return would hang/EOF-instantly — the R-02 shape; assert the correct shape survives).

Acceptance Criteria

All 6 suites present; ≥20 integration tests total
cargo test green; cargo test --features local green
Repeat-run stable (3× clean — the POCs' flakiness bar)
Clippy/fmt clean; wasm32 check passes

References

docs/architecture/wire.md + consumer.md + producer.md (the normative behaviors under test)
POC test suites: /workspace/alktunnels-udp-poc/tests/tunnel_poc.rs (10), /workspace/alktunnels-reverse-poc/tests/tunnel_poc.rs (16)

Notes

Agent fills during implementation.

Summary

Agent fills this on completion.

3.2 KiB Raw Blame History Unescape Escape