feat(engine): auto-save Time Attack sessions across launches

Classic, Zen, and Challenge already auto-saved correctly via the
existing game_state.json path — GameState carries mode and the
save/restore systems are mode-agnostic. Time Attack was the gap:
the per-deal GameState round-tripped fine, but the session-level
TimeAttackResource (10-minute countdown + accumulated wins)
defaulted on every launch, so closing mid-session reset the timer
and erased the win count.

Adds a sibling time_attack_session.json next to game_state.json,
atomic .tmp + rename via the existing save pattern. The new
TimeAttackSession struct carries remaining_secs, wins, and
saved_at_unix_secs (wall-clock anchor for stale-session detection).
load_time_attack_session_from_at takes an injectable now() so
tests can drive deterministic clock scenarios.

Load logic: if now_unix - saved_at_unix_secs > remaining_secs the
window expired in real time while the app was closed — return None
so the player isn't dropped into a session whose timer ran out
behind their back. Otherwise restore remaining_secs minus the
real-world elapsed delta. Handles clock-running-backwards (NTP
correction, VM clock drift) by clamping the elapsed delta at zero.

time_attack_plugin wires four new systems: load on Startup, clear
stale file when a fresh session starts (rare — only matters when
the previous session was abandoned + a new one started without
exit/relaunch), 30-second auto-save while a session is active,
delete file on natural expiry, and save on AppExit. The save file
is removed every time the session ends so a stale "session exists"
state can't pollute the next launch.

No GameState schema bump needed — the per-mode session lives in
its own file. stats / progress / achievements / settings unaffected.

8 new storage tests cover round-trip, expired-discard, time-decay,
atomic-write, missing-file, corrupt-file, delete idempotency, and
clock-backwards. 6 new plugin tests cover exit-persists,
exit-clears, auto-save-cadence, auto-save-noop-when-inactive,
new-session-clears-stale, and natural-expiry-clears.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
funman300
2026-05-05 01:06:35 +00:00
parent 1a1047664b
commit 000143231b
3 changed files with 655 additions and 4 deletions
+336 -2
View File
@@ -3,9 +3,33 @@
//! level ≥ `CHALLENGE_UNLOCK_LEVEL`); each win during the session bumps the
//! counter and auto-deals a fresh game. When the timer expires the session
//! ends and `TimeAttackEndedEvent` fires.
//!
//! ## Persistence
//!
//! Classic / Zen / Challenge mid-deals already round-trip through
//! `game_state.json` (the file carries `mode: GameMode`, so the deal *and*
//! its mode flag both survive a window close). Time Attack additionally
//! has session-level state — the 10-minute window remaining and the running
//! win counter — that lives in [`TimeAttackResource`], not in `GameState`.
//! That extra state is persisted to the sibling file
//! `time_attack_session.json` via [`solitaire_data::TimeAttackSession`] so
//! closing the window mid-Time-Attack does not lose the session.
//!
//! The file is written periodically (every ~30 real seconds, mirroring the
//! game-state auto-save cadence) and on `AppExit`. It is deleted on session
//! end, on a fresh session start, and on quit-to-menu. Load happens once at
//! plugin startup; if the persisted window expired during the time the app
//! was closed, the file is treated as missing.
use std::path::PathBuf;
use std::time::{SystemTime, UNIX_EPOCH};
use bevy::prelude::*;
use solitaire_core::game_state::GameMode;
use solitaire_data::{
delete_time_attack_session_at, load_time_attack_session_from, save_time_attack_session_to,
time_attack_session_path, TimeAttackSession,
};
use crate::challenge_plugin::CHALLENGE_UNLOCK_LEVEL;
use crate::events::{
@@ -33,12 +57,52 @@ pub struct TimeAttackEndedEvent {
pub wins: u32,
}
/// Real-world seconds between Time Attack session-state auto-saves.
///
/// Mirrors the game-state auto-save cadence in `game_plugin::AUTO_SAVE_INTERVAL_SECS`
/// so a crash loses at most ~30 s of session-timer progress.
const TIME_ATTACK_AUTO_SAVE_INTERVAL_SECS: f32 = 30.0;
/// Persistence path for `time_attack_session.json`. `None` disables I/O
/// (used in headless tests so they don't touch the real data dir).
#[derive(Resource, Debug, Clone)]
pub struct TimeAttackSessionPath(pub Option<PathBuf>);
/// Accumulated real-world seconds since the last Time Attack session save.
/// Exposed as a `Resource` so tests can pre-seed it past the threshold without
/// needing to control `Time::delta_secs()` (mirrors `game_plugin::AutoSaveTimer`).
#[derive(Resource, Default)]
pub struct TimeAttackAutoSaveTimer(pub f32);
/// Implements the 10-minute Time Attack mode: counts down the session timer, tracks wins per session, and fires `TimeAttackEndedEvent` when time expires.
pub struct TimeAttackPlugin;
impl TimeAttackPlugin {
/// Plugin variant with persistence disabled. Use in headless tests to
/// avoid touching the real `time_attack_session.json` on disk.
pub fn headless() -> Self {
Self
}
}
impl Plugin for TimeAttackPlugin {
fn build(&self, app: &mut App) {
app.init_resource::<TimeAttackResource>()
let path = time_attack_session_path();
// Restore any saved session that hasn't yet expired in real time.
// A missing file or an expired window both yield `None`, in which
// case the resource keeps its default (inactive) value.
let initial_session = path
.as_deref()
.and_then(load_time_attack_session_from)
.map_or_else(TimeAttackResource::default, |s| TimeAttackResource {
active: true,
remaining_secs: s.remaining_secs,
wins: s.wins,
});
app.insert_resource(initial_session)
.insert_resource(TimeAttackSessionPath(path))
.init_resource::<TimeAttackAutoSaveTimer>()
.add_message::<TimeAttackEndedEvent>()
.add_message::<GameWonEvent>()
.add_message::<NewGameRequestEvent>()
@@ -49,10 +113,13 @@ impl Plugin for TimeAttackPlugin {
handle_start_time_attack_request.before(GameMutation),
)
.add_systems(Update, advance_time_attack)
.add_systems(Update, auto_deal_on_time_attack_win.after(GameMutation));
.add_systems(Update, auto_deal_on_time_attack_win.after(GameMutation))
.add_systems(Update, auto_save_time_attack_session)
.add_systems(Last, save_time_attack_session_on_exit);
}
}
#[allow(clippy::too_many_arguments)]
fn handle_start_time_attack_request(
keys: Res<ButtonInput<KeyCode>>,
mut requests: MessageReader<StartTimeAttackRequestEvent>,
@@ -60,6 +127,8 @@ fn handle_start_time_attack_request(
mut session: ResMut<TimeAttackResource>,
mut new_game: MessageWriter<NewGameRequestEvent>,
mut info_toast: MessageWriter<InfoToastEvent>,
path: Option<Res<TimeAttackSessionPath>>,
mut auto_save_timer: ResMut<TimeAttackAutoSaveTimer>,
) {
// Either T or the HUD Modes-popover "Time Attack" row triggers this.
let button_clicked = requests.read().count() > 0;
@@ -77,6 +146,18 @@ fn handle_start_time_attack_request(
remaining_secs: TIME_ATTACK_DURATION_SECS,
wins: 0,
};
// Reset the auto-save accumulator so the first save lands a full
// interval from now, not immediately because of an old residual value
// left over from a previous session.
auto_save_timer.0 = 0.0;
// Delete any leftover persisted session file from a prior run so the
// fresh window starts at exactly TIME_ATTACK_DURATION_SECS rather than
// resuming whatever the disk happened to hold. Failures here are
// logged but never fatal.
if let Some(p) = path.as_ref().and_then(|r| r.0.as_deref())
&& let Err(e) = delete_time_attack_session_at(p) {
warn!("time_attack_session: failed to delete stale session: {e}");
}
new_game.write(NewGameRequestEvent {
seed: None,
mode: Some(GameMode::TimeAttack),
@@ -89,6 +170,7 @@ fn advance_time_attack(
mut session: ResMut<TimeAttackResource>,
mut ended: MessageWriter<TimeAttackEndedEvent>,
paused: Option<Res<crate::pause_plugin::PausedResource>>,
path: Option<Res<TimeAttackSessionPath>>,
) {
if !session.active {
return;
@@ -102,6 +184,12 @@ fn advance_time_attack(
session.active = false;
session.remaining_secs = 0.0;
ended.write(TimeAttackEndedEvent { wins });
// Session ended naturally — delete the persisted file so the next
// launch sees no in-progress session.
if let Some(p) = path.as_ref().and_then(|r| r.0.as_deref())
&& let Err(e) = delete_time_attack_session_at(p) {
warn!("time_attack_session: failed to delete on expiry: {e}");
}
}
}
@@ -124,6 +212,80 @@ fn auto_deal_on_time_attack_win(
}
}
/// Returns the current Unix-seconds wall-clock time, falling back to 0 if
/// the system time predates the epoch (impossible under any sane clock,
/// but the fallback keeps the function infallible).
fn current_unix_secs() -> u64 {
SystemTime::now()
.duration_since(UNIX_EPOCH)
.map_or(0, |d| d.as_secs())
}
/// Periodically persists the live `TimeAttackResource` to
/// `time_attack_session.json` every 30 real-world seconds while a session
/// is active. The accumulator uses real-clock delta so it keeps ticking
/// even if the in-game timer is paused — the goal is "if the OS kills the
/// process now, how much do we lose?" and pause does not change that.
fn auto_save_time_attack_session(
time: Res<Time>,
session: Res<TimeAttackResource>,
path: Option<Res<TimeAttackSessionPath>>,
mut timer: ResMut<TimeAttackAutoSaveTimer>,
) {
if !session.active {
return;
}
timer.0 += time.delta_secs();
if timer.0 < TIME_ATTACK_AUTO_SAVE_INTERVAL_SECS {
return;
}
timer.0 -= TIME_ATTACK_AUTO_SAVE_INTERVAL_SECS;
let Some(p) = path.as_ref().and_then(|r| r.0.as_deref()) else {
return;
};
let payload = TimeAttackSession {
remaining_secs: session.remaining_secs,
wins: session.wins,
saved_at_unix_secs: current_unix_secs(),
};
if let Err(e) = save_time_attack_session_to(p, &payload) {
warn!("time_attack_session: auto-save failed: {e}");
}
}
/// Last-schedule companion to `game_plugin::save_game_state_on_exit`:
/// flushes the live session resource to disk on `AppExit` so a graceful
/// quit does not lose the timer + win count. If the session is inactive
/// the persisted file is deleted instead, leaving a clean slate for the
/// next launch.
fn save_time_attack_session_on_exit(
mut exit_events: MessageReader<AppExit>,
session: Res<TimeAttackResource>,
path: Res<TimeAttackSessionPath>,
) {
if exit_events.is_empty() {
return;
}
exit_events.clear();
let Some(p) = path.0.as_deref() else { return };
if !session.active {
if let Err(e) = delete_time_attack_session_at(p) {
warn!("time_attack_session: failed to delete on exit: {e}");
}
return;
}
let payload = TimeAttackSession {
remaining_secs: session.remaining_secs,
wins: session.wins,
saved_at_unix_secs: current_unix_secs(),
};
if let Err(e) = save_time_attack_session_to(p, &payload) {
warn!("time_attack_session: failed to save on exit: {e}");
}
}
#[cfg(test)]
mod tests {
use super::*;
@@ -140,6 +302,12 @@ mod tests {
.add_plugins(ProgressPlugin::headless())
.add_plugins(TimeAttackPlugin);
app.init_resource::<ButtonInput<KeyCode>>();
// Disable session persistence — tests must not touch the real
// ~/.local/share/solitaire_quest/time_attack_session.json.
app.insert_resource(TimeAttackSessionPath(None));
// The plugin's startup-load hook may have populated TimeAttackResource
// from a real on-disk session. Reset it so each test starts inactive.
*app.world_mut().resource_mut::<TimeAttackResource>() = TimeAttackResource::default();
app.update();
app
}
@@ -302,4 +470,170 @@ mod tests {
"TimeAttackEndedEvent must not fire while paused"
);
}
// -----------------------------------------------------------------------
// Persistence tests — closing the window mid-Time-Attack must not lose
// the session timer or the running win count.
// -----------------------------------------------------------------------
fn tmp_ta_path(name: &str) -> std::path::PathBuf {
std::env::temp_dir().join(format!("engine_test_ta_{name}.json"))
}
/// On `AppExit`, an active session must be flushed to disk so the next
/// launch can restore it.
#[test]
fn exit_persists_active_session() {
use solitaire_data::load_time_attack_session_from;
let path = tmp_ta_path("exit_save");
let _ = std::fs::remove_file(&path);
let mut app = headless_app();
app.insert_resource(TimeAttackSessionPath(Some(path.clone())));
*app.world_mut().resource_mut::<TimeAttackResource>() = TimeAttackResource {
active: true,
remaining_secs: 240.0,
wins: 4,
};
app.world_mut().write_message(AppExit::Success);
app.update();
// Plugin stamps `saved_at_unix_secs` with the current wall clock,
// and we load immediately, so wall-clock elapsed is ~0 and the
// restored remaining_secs should match what we wrote within a tiny
// epsilon (allowing for the test taking a few seconds to run).
let loaded =
load_time_attack_session_from(&path).expect("file should exist after exit");
assert!(
(loaded.remaining_secs - 240.0).abs() < 5.0,
"remaining_secs must round-trip within 5 s tolerance, got {}",
loaded.remaining_secs,
);
assert_eq!(loaded.wins, 4, "wins must round-trip");
let _ = std::fs::remove_file(&path);
}
/// On `AppExit` with no active session, any stale persisted file must
/// be deleted so the next launch starts clean.
#[test]
fn exit_clears_persisted_file_when_no_active_session() {
let path = tmp_ta_path("exit_clear");
// Pre-create a stale file.
std::fs::write(&path, b"{\"remaining_secs\":100.0,\"wins\":1,\"saved_at_unix_secs\":0}")
.expect("write stale");
assert!(path.exists());
let mut app = headless_app();
app.insert_resource(TimeAttackSessionPath(Some(path.clone())));
// Default = inactive session.
app.world_mut().write_message(AppExit::Success);
app.update();
assert!(!path.exists(), "stale file must be deleted on exit when session is inactive");
}
/// `auto_save_time_attack_session` writes the session once the
/// accumulator crosses 30 s while the session is active.
#[test]
fn auto_save_writes_after_30_seconds() {
use solitaire_data::load_time_attack_session_from;
let path = tmp_ta_path("auto_save_30s");
let _ = std::fs::remove_file(&path);
let mut app = headless_app();
app.insert_resource(TimeAttackSessionPath(Some(path.clone())));
*app.world_mut().resource_mut::<TimeAttackResource>() = TimeAttackResource {
active: true,
remaining_secs: 500.0,
wins: 2,
};
// Pre-seed the timer past the threshold so the very next update fires the save.
app.insert_resource(TimeAttackAutoSaveTimer(TIME_ATTACK_AUTO_SAVE_INTERVAL_SECS + 0.1));
app.update();
assert!(path.exists(), "auto-save file must exist after timer crosses threshold");
let loaded = load_time_attack_session_from(&path).expect("session must load");
assert_eq!(loaded.wins, 2);
let _ = std::fs::remove_file(&path);
}
/// Auto-save is a no-op when no session is active — we should not be
/// littering the user's data dir with empty session files just because
/// the app was running.
#[test]
fn auto_save_is_noop_when_session_inactive() {
let path = tmp_ta_path("auto_save_noop");
let _ = std::fs::remove_file(&path);
let mut app = headless_app();
app.insert_resource(TimeAttackSessionPath(Some(path.clone())));
// Session stays at default (inactive). Timer is past threshold.
app.insert_resource(TimeAttackAutoSaveTimer(TIME_ATTACK_AUTO_SAVE_INTERVAL_SECS + 0.1));
app.update();
assert!(!path.exists(), "auto-save must not fire when session is inactive");
}
/// Starting a fresh session must delete any stale persisted file so a
/// player who quit Time Attack mid-window, came back, then started a
/// brand-new session begins at exactly TIME_ATTACK_DURATION_SECS.
#[test]
fn starting_new_session_deletes_stale_persisted_file() {
let path = tmp_ta_path("start_clears");
// Pre-create a stale file.
std::fs::write(&path, b"{\"remaining_secs\":42.0,\"wins\":99,\"saved_at_unix_secs\":0}")
.expect("write stale");
let mut app = headless_app();
app.insert_resource(TimeAttackSessionPath(Some(path.clone())));
// Player must be at unlock level for the start-handler to act.
app.world_mut().resource_mut::<ProgressResource>().0.level = CHALLENGE_UNLOCK_LEVEL;
press_t(&mut app);
app.update();
assert!(!path.exists(), "stale persisted file must be cleared at session start");
// And the live resource must reflect a fresh session, not the stale data.
let session = app.world().resource::<TimeAttackResource>();
assert!(session.active);
assert_eq!(session.wins, 0, "wins must reset to 0, not the stale 99");
assert!(
(session.remaining_secs - TIME_ATTACK_DURATION_SECS).abs() < 1.0,
"remaining_secs must reset to TIME_ATTACK_DURATION_SECS, not the stale 42; got {}",
session.remaining_secs,
);
}
/// Natural session expiry (timer reaches 0) must delete the persisted
/// file so the next launch does not see an "active" session that has
/// already ended.
#[test]
fn session_expiry_deletes_persisted_file() {
let path = tmp_ta_path("expiry_clears");
// Pre-create a file that simulates the auto-save's prior write.
std::fs::write(&path, b"{\"remaining_secs\":1.0,\"wins\":7,\"saved_at_unix_secs\":0}")
.expect("write");
assert!(path.exists());
let mut app = headless_app();
app.insert_resource(TimeAttackSessionPath(Some(path.clone())));
// Session about to expire on the next update tick.
*app.world_mut().resource_mut::<TimeAttackResource>() = TimeAttackResource {
active: true,
remaining_secs: -1.0,
wins: 7,
};
app.update();
assert!(!path.exists(), "persisted file must be deleted on natural expiry");
let session = app.world().resource::<TimeAttackResource>();
assert!(!session.active);
}
}