[Bug]: Simlock leases expire while watched when the gateway limits TTL to five minutes #35982

import { createRequire } from 'node:module';
import { pathToFileURL } from 'node:url';
import { mkdtempSync, mkdirSync, rmSync, readFileSync, writeFileSync } from 'node:fs';
import { join, resolve } from 'node:path';
import { tmpdir } from 'node:os';
import { execFileSync } from 'node:child_process';
import { createServer } from 'node:http';
const root = resolve(process.argv[2] || '.');
const scratch = mkdtempSync(join(tmpdir(), 't3-simlock-renew-'));
for (const name of ['HOME', 'TMPDIR', 'T3CODE_HOME']) { process.env[name] = join(scratch, name); mkdirSync(process.env[name]); }
const require = createRequire(join(root, 'apps/server/package.json'));
const load = name => import(pathToFileURL(require.resolve(name)).href);
const local = name => import(pathToFileURL(join(root, name)).href);
let result = 2;
let server;
try {
 console.log('Node ' + process.version + ' (' + process.platform + ' ' + process.arch + ')');
 console.log(execFileSync('git', ['--version'], {encoding:'utf8'}).trim());
 console.log('T3 ' + execFileSync('git', ['-C', root, 'rev-parse', 'HEAD'], {encoding:'utf8'}).trim());
 console.log('Effect ' + JSON.parse(readFileSync(require.resolve('effect/package.json'))).version);
 const [Effect, Layer, TestClock, NodeServices, HttpClient, HttpClientResponse, ProcessRunner, ServerConfig, SecretResolver, Host] = await Promise.all([
  load('effect/Effect'),load('effect/Layer'),load('effect/testing/TestClock'),load('@effect/platform-node/NodeServices'),load('effect/http/HttpClient'),load('effect/http/HttpClientResponse'),
  local('apps/server/src/processRunner.ts'),local('apps/server/src/config.ts'),local('packages/sec' + 'ret-provider-core/src/server/SecretResolver.ts'),local('apps/server/src/device/SimlockDeviceHost.ts')
 ]);
 const requests=[]; let now=0, maxTtl=600000, deadline=300000, closes=0;
 server=createServer(async(req,res)=>{
  let raw=''; for await (const chunk of req) raw+=chunk;
  const body=raw?JSON.parse(raw):{};
  let status=200, json={};
  if(req.headers.authorization!=='Bearer fixture-token') status=401;
  else if(req.url==='/v1/catalog') json={platforms:[{platform:'ios',modelRuntimes:{'iPhone 16':['27.0']}}]};
  else if(req.url.endsWith('/renew')) {
   if(now>=deadline) status=404;
   else if(body.ttlMs>maxTtl) {status=400;json={error:{code:'BAD_REQUEST',message:'ttlMs exceeds lease.maxTtlMs'}};}
   else deadline=now+(body.ttlMs ?? 300000);
  } else if(req.method==='DELETE') status=202;
  else status=404;
  requests.push({method:req.method,path:req.url,body,status});
  res.writeHead(status,{'content-type':'application/json'});res.end(JSON.stringify(json));
 });
 await new Promise(resolve=>server.listen(0,'127.0.0.1',resolve));
 const gateway='http://127.0.0.1:'+server.address().port;
 const http=HttpClient.make(request=>Effect.promise(async()=>{
  const response=await fetch(request.url,{method:request.method,headers:request.headers,body:request.body._tag==='Uint8Array'?request.body.body:undefined});
  return HttpClientResponse.fromWeb(request,response);
 }));
 const runner=ProcessRunner.ProcessRunner.of({run:input=>Effect.sync(()=>{
  const args=input.args.slice(1), config=JSON.parse(readFileSync(args[args.indexOf('--config')+1], 'utf8'));
  const session=args[args.indexOf('--session')+1];
  if(args[0]==='open') {
   mkdirSync(join(config.stateDir,'remote-connections'),{recursive:true});
   writeFileSync(join(config.stateDir,'remote-connections',session+'.json'), JSON.stringify({leaseId:'fixture-lease',lease:{ttlMs:300000,ttlDeadline:deadline}}));
  }
  if(args[0]==='close') closes++;
  return {stdout:'{}',stderr:'',code:0,timedOut:false,stdoutTruncated:false,stderrTruncated:false,stdoutInvalidUtf8:false,stderrInvalidUtf8:false};
 })});
 // A response latch synchronizes each virtual-clock advance with the real local HTTP response.
 const latches=[]; const observedHttp=HttpClient.make(request=>http.execute(request).pipe(Effect.tap(()=>Effect.sync(()=>latches.shift()?.()))));
 async function scenario(label,limit) {
  now=0;maxTtl=limit;deadline=300000;requests.length=0;
  const program=Effect.gen(function*(){
   const host=yield* Host.make({kind:'simlock',id:'fixture',label:'Fixture',gatewayUrl:gateway,agentToken:'fixture-token',maxLeases:1,maxLeaseMinutes:60},Effect.succeed({nodePath:'node',entryPath:'fake-agent-device.mjs'}));
   const ready=yield* host.ensureReady(()=>Effect.void);
   const device=(yield* ready.devices.list).devices[0];
   yield* ready.devices.boot(device);
   for(const step of [120000,240000,360000]) {
    now=step; const received=new Promise(resolve=>latches.push(resolve));
    yield* TestClock.adjust('2 minutes');
    yield* Effect.promise(()=>received);
   }
   const renews=requests.filter(r=>r.path.endsWith('/renew'));
   console.log(label+': '+JSON.stringify(renews.map(r=>({at:renews.indexOf(r)*120000+120000,ttlMs:r.body.ttlMs,status:r.status}))));
   console.log(label+': deadline='+deadline+' now='+now);
   return renews;
  }).pipe(Effect.scoped,Effect.provideService(HttpClient.HttpClient,observedHttp),Effect.provideService(ProcessRunner.ProcessRunner,runner),Effect.provideService(ServerConfig.ServerConfig,{stateDir:join(scratch,'state')}),Effect.provideService(SecretResolver.SecretResolver,{read:()=>Effect.succeed([]),invalidate:()=>Effect.void,label:p=>Effect.succeed(p)}),Effect.provide(Layer.mergeAll(NodeServices.layer,TestClock.layer())));
  return await Effect.runPromise(program);
 }
 const control=await scenario('control maxTtlMs=600000',600000);
 if(!control.every(r=>r.status===200)) throw Error('control failed');
 const failing=await scenario('gateway maxTtlMs=300000',300000);
 if(failing[0]?.status===400&&failing[1]?.status===400&&failing[2]?.status===404) result=1;
 else if(failing.every(r=>r.status===200)) result=0;
 else throw Error('unexpected renewal results');
} catch(e) { console.error(String(e)); result=2; }
finally { if(server) await new Promise(resolve=>server.close(resolve));rmSync(scratch,{recursive:true,force:true}); }
console.log(result===1?'RESULT: defect reproduced':result===0?'RESULT: expected behavior':'RESULT: inconclusive');
process.exitCode=result;