test(fifa17): prove host economy concurrency and failure rollback

Two real host-dispatch test files (no fakes) driving Server::try_handle_economy
against a live in-process Core over the real blocking client + durable
MarketStore/PileStore + JsonIdentityStore, each racer its own OS thread
(off-runtime pattern).

economy_concurrency.rs — 8 races x 50 iterations:
  A two BUYs (coins for one) -> exactly one 200 + one 461, final 0, one debit.
  B duplicate owned-pack open -> one redemption, +11 once, entitlement once.
  C duplicate quick-sell -> one sell + one credit + one removal.
  D two market buyers -> one win, one debit, one mint, sold once.
  E reward+BUY -> no lost update (Core relative UPDATE under BEGIN IMMEDIATE).
  F move+quick-sell / G list+quick-sell -> one coherent transition.
  H 1000 concurrent mints -> unique + reversible wire ids, monotonic watermark.

economy_failure.rs — 10 fault-injection sub-cases, all fail-closed:
  BUY/open-redeem/generator/pile/identity, quick-sell, move, market
  reserve/purchase/complete. CRITICAL complete-sale-after-commit = SAFE: the
  listing is left `reserved` (not active), so the active->reserved reserve CAS
  can never win again -> not buyable, exactly one debit + one mint. No E3.

Fault injection uses test-file CoreEconomy/ExternalIdentityStore doubles plus a
NARROW, inert-by-default `StoreFault` seam in market_store.rs + pile_store.rs
(the concrete stores have no trait boundary; 3 `tripped()` checks + a field,
zero behaviour unless a test arms it). `parking_lot` promoted to a normal dep
(the seam's Mutex is used at lib scope). Classifier/ROUTE_AUTHORITY/Python
untouched. host lib 71/71; both new tests pass.

This commit is contained in:

OpenFUT Agent

2026-08-13 22:30:35 +00:00

parent 43917a0051

commit b1643309f6

5 changed files with 1659 additions and 2 deletions

									
										openfut-utas-host/Cargo.toml
									
		+3
		
												View File
												
				@@ -27,6 +27,9 @@ rand = "0.8"

				# (sqlx runtime-tokio). Created once in `Server::from_config`, shared via `Arc`;

				# the `AsyncBridge` bridges the synchronous thread-per-connection dispatch to it.

				tokio = { version = "1", features = ["rt-multi-thread"] }

				# Fast, non-poisoning mutex guarding the in-memory hot paths of the durable

				# market/pile stores (used in `src/market_store.rs` / `src/pile_store.rs`).

				parking_lot = "0.12"

				[dev-dependencies]

				parking_lot = "0.12"