1001. 1001 failures += 1;
1002. 1002 match classify_poll_error(&e) {
1003. 1003 PollBlock::Conflict => {
1004. 1004 // A rival appeared mid-run: hand over gracefully
1005. 1005 // and stand by for auto-takeover.
1006. 1006 eprintln!(
1007. 1007 "[telegram] lost ownership to another getUpdates consumer; entering hot standby ({})",
1008. 1008 identity()
1009. 1009 );
1010. 1010 self.await_ownership().await;
1011. 1011 }
1012. 1012 PollBlock::Transient => {
1013. 1013 // Never give up (docs/design/31-network-resilience.md):
1014. 1014 // outages, DHCP switches, and sleep/wake are all
1015. 1015 // ordinary transients. Backoff doubles to a 30s
1016. 1016 // cap — the same ceiling as hot standby — and
1017. 1017 // resets on first success. The offset cursor
1018. 1018 // makes every recovery gap-free.
1019. 1019 if failures == 1 || failures.is_multiple_of(10) {
1020. 1020 eprintln!("[telegram] poll failed ({failures} consecutive): {e}");
1021. 1021 }
1022. 1022 tokio::time::sleep(std::time::Duration::from_secs(
1023. 1023 standby_backoff_secs(failures),
1024. 1024 ))
1025. 1025 .await;
1026. 1026 }
1027. 1027 }
1028. 1028 }
1029. 1029 }
1030. 1030 }
1031. 1031 }
1032. 1032}
1033. 1033
1034. 1034#[cfg(test)]
1035. 1035#[allow(clippy::unwrap_used, clippy::expect_used)]
1036. 1036mod tests {
1037. 1037 use super::*;
1038. 1038
1039. 1039 #[test]
1040. 1040 fn approve_button_maps_to_a_yes_verdict_with_the_request_id() {
1041. 1041 assert_eq!(
1042. 1042 callback_data_to_verdict_text("approve:ab12cd34"),
1043. 1043 ("approve", Some("yes ab12cd34".into()))
1044. 1044 );
1045. 1045 }
1046. 1046
1047. 1047 #[test]
1048. 1048 fn deny_button_maps_to_a_no_verdict_with_the_request_id() {
1049. 1049 assert_eq!(
1050. 1050 callback_data_to_verdict_text("deny:ab12cd34"),
1051. 1051 ("deny", Some("no ab12cd34".into()))
1052. 1052 );
1053. 1053 }
1054. 1054
1055. 1055 #[test]
1056. 1056 fn unknown_callback_data_is_rejected_not_guessed() {
1057. 1057 assert_eq!(
1058. 1058 callback_data_to_verdict_text("something-else"),
1059. 1059 ("something-else", None)
1060. 1060 );
1061. 1061 assert_eq!(callback_data_to_verdict_text(""), ("", None));
1062. 1062 }
1063. 1063
1064. 1064 #[test]
1065. 1065 fn classify_maps_conflict_vs_transient() {
1066. 1066 assert_eq!(
1067. 1067 classify_poll_error("getUpdates returned 409 Conflict"),
1068. 1068 PollBlock::Conflict
1069. 1069 );
1070. 1070 assert_eq!(
1071. 1071 classify_poll_error("getUpdates returned 502 Bad Gateway"),
1072. 1072 PollBlock::Transient
1073. 1073 );
1074. 1074 assert_eq!(
1075. 1075 classify_poll_error("getUpdates: error sending request"),
1076. 1076 PollBlock::Transient
1077. 1077 );
1078. 1078 }
1079. 1079
1080. 1080 #[tokio::test]
1081. 1081 async fn telegram_http_errors_never_include_bot_token_or_url() {
1082. 1082 let error = reqwest::Client::new()
1083. 1083 .get("http://127.0.0.1:1/botsecret-token/getUpdates")
1084. 1084 .send()
1085. 1085 .await
1086. 1086 .unwrap_err();
1087. 1087 let rendered = telegram_http_error("getUpdates", &error);
1088. 1088 assert!(!rendered.contains("secret-token"));
1089. 1089 assert!(!rendered.contains("127.0.0.1"));
1090. 1090 assert!(!rendered.contains("/bot"));
1091. 1091 }
1092. 1092
1093. 1093 #[tokio::test]
1094. 1094 async fn opus_conversion_rejects_invalid_wav_without_claiming_delivery() {
1095. 1095 let result = wav_to_telegram_opus(b"not-a-wav".to_vec()).await;
1096. 1096 assert!(result.is_err());
1097. 1097 let error = result.unwrap_err();
1098. 1098 assert!(error.contains("ffmpeg") || error.contains("conversion"));
1099. 1099 }
1100. 1100
1101. 1101 #[test]
1102. 1102 fn gateway_reply_keeps_session_for_voice_receipt() {
1103. 1103 let value = serde_json::json!({
1104. 1104 "text": "reply",
1105. 1105 "session_id": "session-42",
1106. 1106 "delivery": {"status": "delivered"}
1107. 1107 });
1108. 1108 assert_eq!(value["session_id"].as_str(), Some("session-42"));
1109. 1109 assert_eq!(value["text"].as_str(), Some("reply"));
1110. 1110 }
1111. 1111
1112. 1112 #[test]
1113. 1113 fn standby_backoff_doubles_and_caps_at_thirty() {
1114. 1114 assert_eq!(standby_backoff_secs(0), 1);
1115. 1115 assert_eq!(standby_backoff_secs(1), 2);
1116. 1116 assert_eq!(standby_backoff_secs(5), 30);
1117. 1117 assert_eq!(standby_backoff_secs(50), 30);
1118. 1118 }
1119. 1119
1120. 1120 #[test]
1121. 1121 fn instance_lock_is_exclusive_per_token_and_released_on_drop() {
1122. 1122 let dir = tempfile::tempdir().unwrap();
1123. 1123 let a = InstanceLock::acquire(&dir.path().to_path_buf(), "tok-A");
1124. 1124 assert!(a.is_ok(), "first holder acquires");
1125. 1125 let b = InstanceLock::acquire(&dir.path().to_path_buf(), "tok-A");
1126. 1126 assert!(b.is_err(), "second holder on SAME token rejected");
1127. 1127 let c = InstanceLock::acquire(&dir.path().to_path_buf(), "tok-B");
1128. 1128 assert!(c.is_ok(), "different token = different lock file");
1129. 1129 drop(a);
1130. 1130 let d = InstanceLock::acquire(&dir.path().to_path_buf(), "tok-A");
1131. 1131 assert!(d.is_ok(), "flock releases when holder drops");
1132. 1132 }
1133. 1133}
1134. 1134