Probe canonical lifecycle boundaries

Author: chubes4

packages/runtime-cloudflare/src/worker.ts

@@ -566,6 +566,16 @@ async function runBootProbe(phase: string, bucket: R2Bucket): Promise<Response>
     }
   }
 
+  if (["canonical-current-user", "canonical-init", "canonical-site-status", "canonical-wp-loaded"].includes(phase)) {
+    const runtime = await bootWordPressRuntime("do-not-attempt-installing", true, true, undefined, await packagedCanonicalMarkdownSeed(), new Uint8Array(markdownPrimaryBootstrapIndex), "https://canonical-probe.invalid", {}, bucket, true)
+    try {
+      const evidence = (await runtime.php.run({ code: canonicalLifecycleProbeCode(phase) })).text.trim()
+      return probeResponse(phase, JSON.parse(evidence) as Record<string, boolean | number | string>)
+    } finally {
+      runtime.php.exit()
+    }
+  }
+
   if (phase === "canonical-wordpress" || phase === "canonical-bootstrap-setup") {
     const canonicalSeed = await packagedCanonicalMarkdownSeed()
     const runtime = await bootWordPressRuntime("do-not-attempt-installing", true, true, undefined, canonicalSeed, new Uint8Array(markdownPrimaryBootstrapIndex), "https://canonical-probe.invalid", {}, bucket, true)
@@ -993,6 +1003,41 @@ file_put_contents($settings_path, str_replace($needle, $replacement, $settings))
 require '/wordpress/wp-load.php';`
 }
 
+function canonicalLifecycleProbeCode(phase: string): string {
+  const stops: Record<string, { needle: string; after?: boolean }> = {
+    "canonical-current-user": { needle: "// Set up current user." },
+    "canonical-init": { needle: "do_action( 'init' );", after: true },
+    "canonical-site-status": { needle: "// Check site status." },
+    "canonical-wp-loaded": { needle: "do_action( 'wp_loaded' );", after: true },
+  }
+  const stop = stops[phase]
+  if (!stop) throw new Error(`Unknown canonical lifecycle probe phase: ${phase}`)
+
+  return `<?php
+$settings_path = '/wordpress/wp-settings.php';
+$settings = file_get_contents($settings_path);
+$needle = ${JSON.stringify(stop.needle)};
+if (substr_count($settings, $needle) !== 1) {
+    throw new Exception('WordPress canonical lifecycle probe needle was not uniquely found.');
+}
+$stop = <<<'PHP'
+echo json_encode(array(
+    'wordpressVersion' => $wp_version,
+    'bootstrapPhase' => '${phase}',
+    'completed' => true,
+    'memoryBytes' => memory_get_usage(true),
+    'peakMemoryBytes' => memory_get_peak_usage(true),
+    'wpCronInitAttached' => false !== has_action('init', 'wp_cron'),
+    'updateScheduleInitAttached' => false !== has_action('init', 'wp_schedule_update_checks'),
+    'privacyScheduleInitAttached' => false !== has_action('init', 'wp_schedule_delete_old_privacy_export_files'),
+));
+return;
+PHP;
+$replacement = ${stop.after ? "$needle . \"\\n\" . \$stop" : "$stop . \"\\n\" . $needle"};
+file_put_contents($settings_path, str_replace($needle, $replacement, $settings));
+require '/wordpress/wp-load.php';`
+}
+
 async function bootWordPressRuntime(
   wordpressInstallMode: WordPressInstallMode = "install-from-existing-files",
   includeSqlite = true,
@@ -1195,6 +1240,6 @@ function instantiatePrecompiledWasm(module: WebAssembly.Module) {
   return (imports: WebAssembly.Imports, receiveInstance: (instance: WebAssembly.Instance, wasmModule: WebAssembly.Module) => void) => receiveInstance(new WebAssembly.Instance(module, imports), module)
 }
 
-function probeResponse(phase: string, evidence: Record<string, number | string>): Response {
+function probeResponse(phase: string, evidence: Record<string, boolean | number | string>): Response {
   return Response.json({ schema: "wp-codebox/cloudflare-boot-probe/v1", phase, completed: true, evidence })
 }

scripts/cloudflare-local-gate.mjs

@@ -171,6 +171,14 @@ async function assertHealthResponse() {
 async function assertCanonicalProbes() {
   const wordpress = await (await request(`${origin}/?phase=canonical-wordpress`)).json()
   const setup = await (await request(`${origin}/?phase=canonical-bootstrap-setup`)).json()
+  const lifecyclePhases = ["canonical-current-user", "canonical-init", "canonical-site-status", "canonical-wp-loaded"]
+  const lifecycle = await Promise.all(lifecyclePhases.map(async (phase) => {
+    const response = await request(`${origin}/?phase=${phase}`)
+    const body = await response.text()
+    assertNoPhpDiagnostics(body, phase)
+    if (!response.ok) throw new Error(`${phase} failed with ${response.status}: ${body}`)
+    return JSON.parse(body)
+  }))
   const counts = ["canonicalSeedFiles", "postCount", "pageCount", "userCount", "optionCount", "widgetOptionCount", "widgetStateOptionCount", "memoryBytes", "peakMemoryBytes"]
   if (wordpress.completed !== true || typeof wordpress.evidence?.wordpressVersion !== "string" || counts.some((key) => !Number.isInteger(wordpress.evidence?.[key])) || wordpress.evidence.widgetStateOptionCount !== 19 || wordpress.evidence.wpCronInitAttached !== false || wordpress.evidence.updateScheduleInitAttached !== false || wordpress.evidence.privacyScheduleInitAttached !== false) {
     throw new Error(`Canonical WordPress probe did not boot the complete seed: ${JSON.stringify(wordpress)}`)
@@ -179,7 +187,14 @@ async function assertCanonicalProbes() {
   if (setup.completed !== true || typeof setup.evidence?.wordpressVersion !== "string" || changedCounts.some((key) => !Number.isInteger(setup.evidence?.[key])) || setup.evidence.changedPathCount < 1) {
     throw new Error(`Canonical bootstrap setup probe did not produce ephemeral changes: ${JSON.stringify(setup)}`)
   }
-  console.log(`Canonical probes: WordPress ${wordpress.evidence.wordpressVersion}, disabled-cron scheduling callbacks absent at init, ${wordpress.evidence.widgetOptionCount} widget_* options plus sidebars_widgets, ${setup.evidence.changedPathCount} changed ephemeral paths.`)
+  for (const probe of lifecycle) {
+    const evidence = probe.evidence
+    const schedulingAttached = probe.phase === "canonical-current-user"
+    if (probe.completed !== true || !lifecyclePhases.includes(probe.phase) || evidence?.bootstrapPhase !== probe.phase || typeof evidence?.wordpressVersion !== "string" || !Number.isInteger(evidence?.memoryBytes) || !Number.isInteger(evidence?.peakMemoryBytes) || evidence?.wpCronInitAttached !== schedulingAttached || evidence?.updateScheduleInitAttached !== schedulingAttached || evidence?.privacyScheduleInitAttached !== schedulingAttached) {
+      throw new Error(`Canonical lifecycle probe did not stop at its bounded phase: ${JSON.stringify(probe)}`)
+    }
+  }
+  console.log(`Canonical probes: WordPress ${wordpress.evidence.wordpressVersion}, disabled-cron scheduling callbacks absent at init, ${lifecyclePhases.join(", ")} completed, ${wordpress.evidence.widgetOptionCount} widget_* options plus sidebars_widgets, ${setup.evidence.changedPathCount} changed ephemeral paths.`)
 }
 
 async function assertMdiDiagnostics() {

tests/cloudflare-runtime.test.ts

@@ -313,6 +313,29 @@ test("Cloudflare MDI lifecycle diagnostics use the complete packaged seed withou
   assert.match(worker, /function canonicalChangedPathCounts/)
 })
 
+test("Cloudflare canonical lifecycle diagnostics compose the disabled-cron patch with unique bounded stops", async () => {
+  const worker = await readFile(new URL("../packages/runtime-cloudflare/src/worker.ts", import.meta.url), "utf8")
+  const probes = worker.slice(worker.indexOf("async function runBootProbe"), worker.indexOf("if (phase?.startsWith(\"seeded-\"))"))
+  const lifecycle = worker.slice(worker.indexOf("function canonicalLifecycleProbeCode"), worker.indexOf("\nasync function bootWordPressRuntime"))
+
+  for (const phase of ["canonical-current-user", "canonical-init", "canonical-site-status", "canonical-wp-loaded"]) {
+    assert.match(probes, new RegExp(`"${phase}"`))
+    assert.match(lifecycle, new RegExp(`"${phase}"`))
+  }
+  assert.match(probes, /packagedCanonicalMarkdownSeed\(\), new Uint8Array\(markdownPrimaryBootstrapIndex\), "https:\/\/canonical-probe\.invalid", \{\}, bucket, true\)/)
+  assert.match(lifecycle, /substr_count\(\$settings, \$needle\) !== 1/)
+  assert.match(lifecycle, /WordPress canonical lifecycle probe needle was not uniquely found\./)
+  assert.match(lifecycle, /'completed' => true/)
+  assert.match(lifecycle, /'wpCronInitAttached' => false !== has_action\('init', 'wp_cron'\)/)
+  assert.match(lifecycle, /'updateScheduleInitAttached' => false !== has_action\('init', 'wp_schedule_update_checks'\)/)
+  assert.match(lifecycle, /'privacyScheduleInitAttached' => false !== has_action\('init', 'wp_schedule_delete_old_privacy_export_files'\)/)
+  assert.doesNotMatch(lifecycle, /get_option|\$wpdb|\$_COOKIE|AUTH_KEY|password|token/i)
+  assert.equal((lifecycle.match(/do_action\( 'init' \);/g) ?? []).length, 1)
+  assert.equal((lifecycle.match(/do_action\( 'wp_loaded' \);/g) ?? []).length, 1)
+  assert.match(lifecycle, /stop\.after \? "\$needle/)
+  assert.match(lifecycle, /: "\$stop/)
+})
+
 test("Cloudflare canonical runtime patches the unique init call with the disabled-cron scheduling policy", async () => {
   const worker = await readFile(new URL("../packages/runtime-cloudflare/src/worker.ts", import.meta.url), "utf8")
   const patcher = worker.slice(worker.indexOf("function patchCanonicalDisabledCronSchedulingPolicyAtInit"), worker.indexOf("\nfunction collectRuntimeFiles"))