release 1.15.0: CHF fake-incoming ladder (23 rungs to 50k)

devtesting runs a log-spaced amount ladder up to CHF:50000 after the
baseline plumbing probe. Each rung uses geniban debit funding. Defaults
DEVTESTING_LADDER=1 STEPS=23 MAX=50000; stage RUN_TIMEOUT example 1800s.
This commit is contained in:
Hernâni Marques 2026-07-19 04:35:01 +02:00
parent 8f3d221e02
commit 25cb8216b3
No known key found for this signature in database
GPG key ID: CB5738652768F7E9
7 changed files with 257 additions and 65 deletions

View file

@ -6,18 +6,21 @@
#
# Probes:
# 1) CLI reachable (fake-incoming --help)
# 2) geniban → Swiss IBAN
# 3) fake-incoming CHF amount to exchange credit IBAN (nexus IN)
# Bounce "missing reserve public key" = plumbing OK (no real wallet reserve)
# Full credit needs a real reserve pub as --subject (optional later)
# 2) geniban → Swiss IBAN (debit side — “enough money” is synthetic per rung)
# 3) baseline fake-incoming CHF:1.00 (plumbing)
# 4) optional amount ladder: DEVTESTING_LADDER=1 (default) — 23 rungs up to 50k CHF
#
# Env:
# DEVTESTING_SSH default taler-rusty-devtesting (or user@host)
# DEVTESTING_AMOUNT default CHF:1.00
# DEVTESTING_CREDIT_PAYTO exchange IBAN payto (auto from EXCHANGE_PUBLIC/keys if empty)
# DEVTESTING_EXCHANGE_IBAN fallback CH6808573105529100001 (TOPS CHF exchange)
# DEVTESTING_SKIP=1 skip phase
# SKIP_SSH=1 skip (same as other SSH phases)
# DEVTESTING_SSH default taler-rusty-devtesting (or user@host)
# DEVTESTING_AMOUNT baseline amount (default CHF:1.00)
# DEVTESTING_CREDIT_PAYTO exchange IBAN payto
# DEVTESTING_EXCHANGE_IBAN fallback CH6808573105529100001 (TOPS CHF exchange)
# DEVTESTING_LADDER 1 (default) run amount ladder; 0 = baseline only
# DEVTESTING_LADDER_STEPS default 23
# DEVTESTING_LADDER_MAX default 50000 (CHF major units)
# DEVTESTING_LADDER_MIN default 0.01
# DEVTESTING_LADDER_STOP_ON_FAIL 1 (default) stop ladder on hard fail; 0 = continue
# DEVTESTING_SKIP=1 skip phase
#
set -euo pipefail
ROOT=$(cd "$(dirname "$0")" && pwd)
@ -37,8 +40,13 @@ fi
: "${DEVTESTING_SSH:=}"
: "${DEVTESTING_AMOUNT:=CHF:1.00}"
: "${DEVTESTING_EXCHANGE_IBAN:=CH6808573105529100001}"
: "${DEVTESTING_LADDER:=1}"
: "${DEVTESTING_LADDER_STEPS:=23}"
: "${DEVTESTING_LADDER_MAX:=50000}"
: "${DEVTESTING_LADDER_MIN:=0.01}"
: "${DEVTESTING_LADDER_STOP_ON_FAIL:=1}"
: "${SSH_CONNECT_TIMEOUT:=8}"
: "${SSH_CMD_TIMEOUT:=45}"
: "${SSH_CMD_TIMEOUT:=60}"
ssh_dt() {
# Prefer Host alias; fall back to explicit user@host if config missing
@ -61,8 +69,57 @@ ssh_dt() {
fi
}
# Run one fake-incoming. Sets globals: FI_RC FI_FLAT FI_STATUS
# FI_STATUS: ok_bounce | ok_in | ok_cli | fail_ssh | fail_creditor | fail_nexus | fail_other
run_fake_incoming() {
local amount="$1" subject="$2" credit="$3" debit="$4"
local fi_out
FI_RC=0
FI_FLAT=""
FI_STATUS="fail_other"
fi_out=$(ssh_dt fake-incoming \
--amount "${amount}" \
--subject "${subject}" \
--credit-payto "${credit}" \
--debit-payto "${debit}" 2>&1) || FI_RC=$?
FI_FLAT=$(printf '%s' "$fi_out" | tr '\n' ' ')
if printf '%s' "$FI_FLAT" | grep -qiE 'Permission denied|Connection refused|Could not resolve|No such command'; then
FI_STATUS=fail_ssh
return 1
fi
if printf '%s' "$FI_FLAT" | grep -qiE 'Creditor must be the exchange'; then
FI_STATUS=fail_creditor
return 1
fi
if printf '%s' "$FI_FLAT" | grep -qiE 'Missing amount|unable to read secrets|CalledProcessError'; then
if ! printf '%s' "$FI_FLAT" | grep -qE 'libeufin-nexus - IN .* CHF'; then
FI_STATUS=fail_nexus
return 1
fi
fi
if printf '%s' "$FI_FLAT" | grep -qE 'libeufin-nexus - IN .* CHF:[0-9]'; then
if printf '%s' "$FI_FLAT" | grep -qiE 'bounced.*missing reserve public key'; then
FI_STATUS=ok_bounce
return 0
fi
if printf '%s' "$FI_FLAT" | grep -qiE 'bounced'; then
FI_STATUS=ok_bounce
return 0
fi
FI_STATUS=ok_in
return 0
fi
if [ "$FI_RC" -eq 0 ] && printf '%s' "$FI_FLAT" | grep -qi 'Faking incoming CHF'; then
FI_STATUS=ok_cli
return 0
fi
FI_STATUS=fail_other
return 1
}
set_group cli
info "ssh" "DEVTESTING_SSH=${DEVTESTING_SSH} amount=${DEVTESTING_AMOUNT}"
info "ssh" "DEVTESTING_SSH=${DEVTESTING_SSH} baseline=${DEVTESTING_AMOUNT} ladder=${DEVTESTING_LADDER} steps=${DEVTESTING_LADDER_STEPS} max=CHF:${DEVTESTING_LADDER_MAX}"
help_out=$(ssh_dt fake-incoming --help 2>&1) || true
if printf '%s' "$help_out" | grep -q 'fake-incoming'; then
@ -77,7 +134,7 @@ set_group geniban
iban_out=$(ssh_dt geniban 2>&1) || true
iban=$(printf '%s\n' "$iban_out" | grep -E '^CH[0-9A-Z]+$' | tail -1 || true)
if [ -n "$iban" ]; then
ok "geniban" "synthetic IBAN $iban"
ok "geniban" "synthetic IBAN $iban (debit / “withdraw” side for each rung)"
else
fail "geniban" "expected CH… IBAN" "$(printf '%s' "$iban_out" | tr '\n' ' ' | head -c 160)"
exit 1
@ -92,55 +149,174 @@ if [ -z "$credit_payto" ]; then
fi
ok "credit-payto" "$credit_payto"
# Subject: not a real reserve — nexus should bounce missing reserve public key
# (proves CHF fake-incoming path). Real reserve pub would credit wirewatch.
subject="mon-fake-franken-$(date -u +%Y%m%d%H%M%S)-$$"
debit_payto="payto://iban/${iban}?receiver-name=MonDevTest"
ts_base=$(date -u +%Y%m%d%H%M%S)
set_group fake-incoming
# --- baseline plumbing probe ---
set_group baseline
subject="mon-fake-franken-${ts_base}-base-$$"
info "fake-incoming" "amount=${DEVTESTING_AMOUNT} subject=${subject}"
fi_rc=0
fi_out=$(ssh_dt fake-incoming \
--amount "${DEVTESTING_AMOUNT}" \
--subject "${subject}" \
--credit-payto "${credit_payto}" \
--debit-payto "${debit_payto}" 2>&1) || fi_rc=$?
# Normalize multi-line for matching
fi_flat=$(printf '%s' "$fi_out" | tr '\n' ' ')
if printf '%s' "$fi_flat" | grep -qiE 'Permission denied|Connection refused|Could not resolve|No such command'; then
fail "fake-incoming" "SSH/CLI failure" "$(printf '%s' "$fi_flat" | head -c 200)"
exit 1
fi
if printf '%s' "$fi_flat" | grep -qiE 'Creditor must be the exchange'; then
fail "fake-incoming" "wrong credit IBAN (not exchange)" "$(printf '%s' "$fi_flat" | head -c 220)"
exit 1
fi
if printf '%s' "$fi_flat" | grep -qiE 'Missing amount|unable to read secrets|CalledProcessError'; then
# secrets warn alone is soft if we still see IN line
if ! printf '%s' "$fi_flat" | grep -qE 'libeufin-nexus - IN .* CHF'; then
fail "fake-incoming" "nexus rejected request" "$(printf '%s' "$fi_flat" | head -c 220)"
exit 1
fi
fi
if printf '%s' "$fi_flat" | grep -qE 'libeufin-nexus - IN .* CHF:[0-9]'; then
if printf '%s' "$fi_flat" | grep -qiE 'bounced.*missing reserve public key'; then
ok "fake-incoming" "CHF IN accepted by nexus · bounced (no reserve pub) — fake-franken plumbing OK"
info "note" "use real reserve pub as --subject for wirewatch credit (not required for mon probe)"
elif printf '%s' "$fi_flat" | grep -qiE 'bounced'; then
warn "fake-incoming" "CHF IN bounced (other reason)" "$(printf '%s' "$fi_flat" | grep -oiE 'bounced[^ ]* [^ ]*' | head -c 160)"
else
ok "fake-incoming" "CHF IN recorded by nexus (no bounce line)"
fi
elif [ "$fi_rc" -eq 0 ] && printf '%s' "$fi_flat" | grep -qi 'Faking incoming CHF'; then
ok "fake-incoming" "CLI completed CHF fake-incoming"
if run_fake_incoming "$DEVTESTING_AMOUNT" "$subject" "$credit_payto" "$debit_payto"; then
case "$FI_STATUS" in
ok_bounce)
ok "fake-incoming" "CHF IN accepted by nexus · bounce/missing reserve pub — plumbing OK"
info "note" "use real reserve pub as --subject for wirewatch credit (not required for mon probe)"
;;
ok_in) ok "fake-incoming" "CHF IN recorded by nexus (no bounce line)" ;;
ok_cli) ok "fake-incoming" "CLI completed CHF fake-incoming" ;;
*) ok "fake-incoming" "status=${FI_STATUS}" ;;
esac
else
fail "fake-incoming" "no CHF IN line from nexus" "rc=${fi_rc} $(printf '%s' "$fi_flat" | head -c 200)"
exit 1
case "$FI_STATUS" in
fail_ssh)
fail "fake-incoming" "SSH/CLI failure" "$(printf '%s' "$FI_FLAT" | head -c 200)"
exit 1
;;
fail_creditor)
fail "fake-incoming" "wrong credit IBAN (not exchange)" "$(printf '%s' "$FI_FLAT" | head -c 220)"
exit 1
;;
fail_nexus)
fail "fake-incoming" "nexus rejected request" "$(printf '%s' "$FI_FLAT" | head -c 220)"
exit 1
;;
*)
fail "fake-incoming" "no CHF IN line from nexus" "rc=${FI_RC} $(printf '%s' "$FI_FLAT" | head -c 200)"
exit 1
;;
esac
fi
# --- CHF amount ladder (fake-incoming rungs) ---
if [ "${DEVTESTING_LADDER}" = "1" ]; then
set_group ladder
section "devtesting · CHF fake-incoming ladder (→ ${DEVTESTING_LADDER_MAX})"
LADDER_FILE=$(mktemp "${TMPDIR:-/tmp}/devtesting-ladder.XXXXXX")
python3 - <<'PY' "${DEVTESTING_LADDER_MAX}" "${DEVTESTING_LADDER_STEPS}" "${DEVTESTING_LADDER_MIN}" "$LADDER_FILE"
import math, sys
from decimal import Decimal, ROUND_HALF_UP
from pathlib import Path
max_amt = Decimal(sys.argv[1])
steps = max(1, int(sys.argv[2]))
min_amt = Decimal(sys.argv[3])
out = Path(sys.argv[4])
if min_amt <= 0:
min_amt = Decimal("0.01")
if min_amt >= max_amt:
min_amt = max_amt / Decimal(1000)
# CHF: 2 decimal places
q2 = Decimal("0.01")
def quant(v: Decimal) -> Decimal:
if v < min_amt:
v = min_amt
return v.quantize(q2, rounding=ROUND_HALF_UP)
def fmt(v: Decimal) -> str:
q = quant(v)
if q == q.to_integral():
return str(int(q))
return format(q, "f")
if steps == 1:
amts = [quant(max_amt)]
elif steps == 2:
amts = [quant(min_amt), quant(max_amt)]
else:
# Exactly `steps` log-spaced rungs from min → max (includes both ends).
# Guarantees max rung = DEVTESTING_LADDER_MAX (“enough” volume at the top).
amts = []
lo, hi = float(min_amt), float(max_amt)
if hi <= lo:
hi = lo * 10
for i in range(steps):
if steps == 1:
v = max_amt
else:
t = i / (steps - 1)
v = Decimal(str(math.exp(math.log(lo) + t * (math.log(hi) - math.log(lo)))))
amts.append(quant(v))
amts[0] = quant(min_amt)
amts[-1] = quant(max_amt)
# enforce strictly increasing
for i in range(1, len(amts)):
if amts[i] <= amts[i - 1]:
amts[i] = quant(amts[i - 1] + min_amt)
amts[-1] = quant(max_amt)
if amts[-1] <= amts[-2]:
# last-but-one squeezed; leave max exact and drop collision by nudging previous
amts[-2] = quant(max(amts[-3] + min_amt if len(amts) > 2 else min_amt, max_amt - Decimal(1)))
if amts[-2] >= amts[-1]:
amts[-2] = quant(amts[-1] - min_amt)
lines = ["CHF:%s" % fmt(a) for a in amts]
out.write_text("\n".join(lines) + "\n")
PY
n_rungs=$(grep -cE '^CHF:' "$LADDER_FILE" || echo 0)
ladder_sum=$(python3 -c '
from decimal import Decimal
s=Decimal(0)
for ln in open("'"$LADDER_FILE"'"):
ln=ln.strip()
if not ln: continue
s += Decimal(ln.split(":",1)[-1])
print(s)
' 2>/dev/null || echo "?")
info "ladder plan" "steps=${n_rungs} max=CHF:${DEVTESTING_LADDER_MAX} min=CHF:${DEVTESTING_LADDER_MIN} sum≈CHF:${ladder_sum} (synthetic debit geniban each rung)"
info "ladder funding" "each rung uses geniban debit payto — no real bank withdraw; volume covers max rung CHF:${DEVTESTING_LADDER_MAX}"
LADDER_OK=0
LADDER_FAIL=0
LADDER_WARN=0
rung=0
while IFS= read -r amt || [ -n "$amt" ]; do
[ -n "$amt" ] || continue
rung=$((rung + 1))
subject="mon-fake-ladder-${ts_base}-r${rung}-$$"
info "rung ${rung}/${n_rungs}" "amount=${amt} subject=${subject}"
if run_fake_incoming "$amt" "$subject" "$credit_payto" "$debit_payto"; then
case "$FI_STATUS" in
ok_bounce)
ok "rung ${rung}" "${amt} · nexus IN + bounce (plumbing OK)"
LADDER_OK=$((LADDER_OK + 1))
;;
ok_in)
ok "rung ${rung}" "${amt} · nexus IN recorded"
LADDER_OK=$((LADDER_OK + 1))
;;
ok_cli)
ok "rung ${rung}" "${amt} · CLI ok"
LADDER_OK=$((LADDER_OK + 1))
;;
*)
warn "rung ${rung}" "${amt} · status=${FI_STATUS}"
LADDER_WARN=$((LADDER_WARN + 1))
;;
esac
else
fail "rung ${rung}" "${amt} · ${FI_STATUS}" "$(printf '%s' "$FI_FLAT" | head -c 180)"
LADDER_FAIL=$((LADDER_FAIL + 1))
if [ "${DEVTESTING_LADDER_STOP_ON_FAIL}" = "1" ]; then
warn "ladder stop" "DEVTESTING_LADDER_STOP_ON_FAIL=1 after rung ${rung}"
break
fi
fi
done <"$LADDER_FILE"
rm -f "$LADDER_FILE"
info "ladder summary" "ok=${LADDER_OK} warn=${LADDER_WARN} fail=${LADDER_FAIL} / planned=${n_rungs} · max=CHF:${DEVTESTING_LADDER_MAX}"
if [ "$LADDER_FAIL" -gt 0 ] && [ "$LADDER_OK" -eq 0 ]; then
fail "ladder" "all rungs failed"
elif [ "$LADDER_FAIL" -gt 0 ]; then
warn "ladder" "partial failures fail=${LADDER_FAIL} ok=${LADDER_OK}"
else
ok "ladder complete" "ok=${LADDER_OK} through max CHF:${DEVTESTING_LADDER_MAX}"
fi
else
info "ladder" "skipped (DEVTESTING_LADDER=0)"
fi
info "done" "devtesting fake-franken probe finished"