refactor: extract closeEcVolumes helper to reduce duplication

Address code review feedback by extracting the repeated EC volume
cleanup loop into a closeEcVolumes() helper function.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.github/pull_request_template.md

@@ -12,7 +12,7 @@
 # Checks
 - [ ] I have added unit tests if possible.
 - [ ] I will add related wiki document changes and link to this PR after merging.
-- [ ] All AI code review comments have been addressed. No more comments to fix if reviewed again. Reviewer may request additional gemini and copilot reviews.
+- [ ] All AI code review comments have been addressed. No more comments to fix if reviewed again.
 
 # Checks for AI generated PRs
 - [ ] I have reviewed every line of code.

.github/workflows/container_dev.yml

@@ -3,6 +3,7 @@ name: "docker: build dev containers"
 on:
   push:
     branches: [ master ]
+  workflow_dispatch: {}
 
 permissions:
   contents: read

.github/workflows/container_latest.yml

@@ -4,58 +4,22 @@ on:
   push:
     tags:
       - '*'
-  workflow_dispatch:
-    inputs:
-      source_ref:
-        description: 'Git ref to build (branch, tag, or commit SHA)'
-        required: true
-        default: 'master'
-      image_tag:
-        description: 'Docker tag to publish (without variant suffix)'
-        required: true
-        default: 'latest'
-      variant:
-        description: 'Variant to build manually'
-        required: true
-        type: choice
-        default: all
-        options:
-          - all
-          - standard
-          - large_disk
+  workflow_dispatch: {}
 
 permissions:
   contents: read
 
 jobs:
-  setup:
-    runs-on: ubuntu-latest
-    outputs:
-      variants: ${{ steps.set-variants.outputs.variants }}
-    steps:
-      - name: Select variants for this run
-        id: set-variants
-        run: |
-          if [ "${{ github.event_name }}" = "workflow_dispatch" ] && [ "${{ github.event.inputs.variant }}" != "all" ]; then
-            variants="[\"${{ github.event.inputs.variant }}\"]"
-          else
-            variants='["standard","large_disk"]'
-          fi
-          echo "variants=$variants" >> "$GITHUB_OUTPUT"
-
   build:
-    needs: [setup]
     runs-on: ubuntu-latest
     strategy:
       matrix:
         platform: [amd64, arm64, arm, 386]
-        variant: ${{ fromJSON(needs.setup.outputs.variants) }}
+        variant: [standard, large_disk]
 
     steps:
       - name: Checkout
         uses: actions/checkout@v6
-        with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.source_ref || github.ref }}
       - name: Free Disk Space
         run: |
           echo "Available disk space before cleanup:"
@@ -91,7 +55,7 @@ jobs:
           images: |
             chrislusf/seaweedfs
             ghcr.io/chrislusf/seaweedfs
-          tags: type=raw,value=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }},suffix=${{ steps.config.outputs.tag_suffix }}
+          tags: type=raw,value=latest,suffix=${{ steps.config.outputs.tag_suffix }}
           labels: |
             org.opencontainers.image.title=seaweedfs
             org.opencontainers.image.description=SeaweedFS is a distributed storage system for blobs, objects, files, and data lake, to store and serve billions of files fast!
@@ -133,13 +97,13 @@ jobs:
           file: ./docker/Dockerfile.go_build
           platforms: linux/${{ matrix.platform }}
           # Push to GHCR only during build to avoid Docker Hub rate limits
-          tags: ghcr.io/chrislusf/seaweedfs:${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }}${{ steps.config.outputs.tag_suffix }}-${{ matrix.platform }}
+          tags: ghcr.io/chrislusf/seaweedfs:latest${{ steps.config.outputs.tag_suffix }}-${{ matrix.platform }}
           labels: ${{ steps.docker_meta.outputs.labels }}
           cache-from: type=gha,scope=${{ matrix.variant }}-${{ matrix.platform }}
           cache-to: type=gha,mode=max,scope=${{ matrix.variant }}-${{ matrix.platform }}
           build-args: |
             BUILDKIT_INLINE_CACHE=1
-            BRANCH=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.source_ref || github.sha }}
+            BRANCH=${{ github.sha }}
             ${{ steps.config.outputs.build_args }}
       - name: Clean up build artifacts
         if: always()
@@ -151,16 +115,14 @@ jobs:
 
   create-manifest:
     runs-on: ubuntu-latest
-    needs: [setup, build]
+    needs: [build]
     if: github.event_name != 'pull_request'
     strategy:
       matrix:
-        variant: ${{ fromJSON(needs.setup.outputs.variants) }}
+        variant: [standard, large_disk]
     steps:
       - name: Checkout
         uses: actions/checkout@v6
-        with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.source_ref || github.ref }}
       
       - name: Configure variant
         id: config
@@ -178,7 +140,7 @@ jobs:
           images: |
             chrislusf/seaweedfs
             ghcr.io/chrislusf/seaweedfs
-          tags: type=raw,value=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }},suffix=${{ steps.config.outputs.tag_suffix }}
+          tags: type=raw,value=latest,suffix=${{ steps.config.outputs.tag_suffix }}
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
@@ -200,15 +162,14 @@ jobs:
       - name: Create and push manifest
         run: |
           SUFFIX="${{ steps.config.outputs.tag_suffix }}"
-          BASE_TAG="${{ github.event_name == 'workflow_dispatch' && github.event.inputs.image_tag || 'latest' }}"
           
           # Create manifest on GHCR first (no rate limits)
           echo "Creating GHCR manifest (no rate limits)..."
-          docker buildx imagetools create -t ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX} \
-            ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-amd64 \
-            ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-arm64 \
-            ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-arm \
-            ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-386
+          docker buildx imagetools create -t ghcr.io/chrislusf/seaweedfs:latest${SUFFIX} \
+            ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-amd64 \
+            ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-arm64 \
+            ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-arm \
+            ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-386
           
           # Copy the complete multi-arch image from GHCR to Docker Hub
           # This only requires one pull from GHCR (no rate limit) and one push to Docker Hub
@@ -244,16 +205,16 @@ jobs:
           # Use crane or skopeo to copy, fallback to docker if not available
           if command -v crane &> /dev/null; then
             echo "Using crane to copy..."
-            retry_with_backoff crane copy ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX} chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}
+            retry_with_backoff crane copy ghcr.io/chrislusf/seaweedfs:latest${SUFFIX} chrislusf/seaweedfs:latest${SUFFIX}
           elif command -v skopeo &> /dev/null; then
             echo "Using skopeo to copy..."
-            retry_with_backoff skopeo copy --all docker://ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX} docker://chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}
+            retry_with_backoff skopeo copy --all docker://ghcr.io/chrislusf/seaweedfs:latest${SUFFIX} docker://chrislusf/seaweedfs:latest${SUFFIX}
           else
             echo "Using docker buildx imagetools (pulling 4 images from Docker Hub)..."
             # Fallback: create manifest directly on Docker Hub (pulls from Docker Hub - rate limited)
-            retry_with_backoff docker buildx imagetools create -t chrislusf/seaweedfs:${BASE_TAG}${SUFFIX} \
-              ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-amd64 \
-              ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-arm64 \
-              ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-arm \
-              ghcr.io/chrislusf/seaweedfs:${BASE_TAG}${SUFFIX}-386
+            retry_with_backoff docker buildx imagetools create -t chrislusf/seaweedfs:latest${SUFFIX} \
+              ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-amd64 \
+              ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-arm64 \
+              ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-arm \
+              ghcr.io/chrislusf/seaweedfs:latest${SUFFIX}-386
           fi

.github/workflows/container_release1.yml

@@ -0,0 +1,152 @@
+name: "docker: build release containers for normal volume"
+
+# DISABLED: Merged into container_release_unified.yml
+on:
+  workflow_dispatch:
+    inputs:
+      force_run:
+        description: 'This workflow is disabled. Use container_release_unified.yml instead'
+        required: true
+        default: 'disabled'
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        platform: [amd64, arm64, arm, 386]
+        include:
+          - platform: amd64
+            qemu: false
+          - platform: arm64
+            qemu: true
+          - platform: arm
+            qemu: true
+          - platform: 386
+            qemu: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Free Disk Space
+        run: |
+          echo "Available disk space before cleanup:"
+          df -h
+          # Remove pre-installed tools
+          sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
+          # Clean package managers
+          sudo apt-get clean
+          sudo rm -rf /var/lib/apt/lists/*
+          # Clean Docker aggressively
+          sudo docker system prune -af --volumes
+          # Clean Go cache if it exists
+          [ -d ~/.cache/go-build ] && rm -rf ~/.cache/go-build || true
+          [ -d /go/pkg ] && rm -rf /go/pkg || true
+          echo "Available disk space after cleanup:"
+          df -h
+      - name: Docker meta
+        id: docker_meta
+        uses: docker/metadata-action@v5
+        with:
+          images: chrislusf/seaweedfs
+          tags: type=ref,event=tag
+          flavor: latest=false
+      - name: Set up QEMU
+        if: matrix.qemu
+        uses: docker/setup-qemu-action@v3
+      - name: Create BuildKit config
+        run: |
+          cat > /tmp/buildkitd.toml <<EOF
+          [registry."docker.io"]
+            mirrors = ["https://mirror.gcr.io"]
+          EOF
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          buildkitd-config: /tmp/buildkitd.toml
+      - name: Login to Docker Hub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build ${{ matrix.platform }}
+        uses: docker/build-push-action@v6
+        env:
+          DOCKER_BUILDKIT: 1
+        with:
+          context: ./docker
+          push: ${{ github.event_name != 'pull_request' }}
+          file: ./docker/Dockerfile.go_build
+          platforms: linux/${{ matrix.platform }}
+          tags: ${{ steps.docker_meta.outputs.tags }}-${{ matrix.platform }}
+          labels: ${{ steps.docker_meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          build-args: |
+            BUILDKIT_INLINE_CACHE=1
+            BRANCH=${{ github.sha }}
+      - name: Clean up build artifacts
+        if: always()
+        run: |
+          # Clean up Docker build cache and temporary files
+          sudo docker system prune -f
+          # Remove Go build cache
+          sudo rm -rf /tmp/go-build*
+
+  create-manifest:
+    runs-on: ubuntu-latest
+    needs: [build]
+    if: github.event_name != 'pull_request'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Docker meta
+        id: docker_meta
+        uses: docker/metadata-action@v5
+        with:
+          images: chrislusf/seaweedfs
+          tags: type=ref,event=tag
+          flavor: latest=false
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Create and push manifest
+        run: |
+          # Function to retry command with exponential backoff
+          retry_with_backoff() {
+            local max_attempts=5
+            local timeout=1
+            local attempt=1
+            local exit_code=0
+            
+            while [ $attempt -le $max_attempts ]; do
+              if "$@"; then
+                return 0
+              else
+                exit_code=$?
+              fi
+              
+              if [ $attempt -lt $max_attempts ]; then
+                echo "Attempt $attempt failed. Retrying in ${timeout}s..." >&2
+                sleep $timeout
+                timeout=$((timeout * 2))
+              fi
+              
+              attempt=$((attempt + 1))
+            done
+            
+            echo "Command failed after $max_attempts attempts" >&2
+            return $exit_code
+          }
+          
+          # Create manifest with retry
+          retry_with_backoff docker buildx imagetools create -t ${{ steps.docker_meta.outputs.tags }} \
+            ${{ steps.docker_meta.outputs.tags }}-amd64 \
+            ${{ steps.docker_meta.outputs.tags }}-arm64 \
+            ${{ steps.docker_meta.outputs.tags }}-arm \
+            ${{ steps.docker_meta.outputs.tags }}-386

.github/workflows/container_release2.yml

@@ -0,0 +1,153 @@
+name: "docker: build release containers for large volume"
+
+# DISABLED: Merged into container_release_unified.yml
+on:
+  workflow_dispatch:
+    inputs:
+      force_run:
+        description: 'This workflow is disabled. Use container_release_unified.yml instead'
+        required: true
+        default: 'disabled'
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        platform: [amd64, arm64, arm, 386]
+        include:
+          - platform: amd64
+            qemu: false
+          - platform: arm64
+            qemu: true
+          - platform: arm
+            qemu: true
+          - platform: 386
+            qemu: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Free Disk Space
+        run: |
+          echo "Available disk space before cleanup:"
+          df -h
+          # Remove pre-installed tools
+          sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
+          # Clean package managers
+          sudo apt-get clean
+          sudo rm -rf /var/lib/apt/lists/*
+          # Clean Docker aggressively
+          sudo docker system prune -af --volumes
+          # Clean Go cache if it exists
+          [ -d ~/.cache/go-build ] && rm -rf ~/.cache/go-build || true
+          [ -d /go/pkg ] && rm -rf /go/pkg || true
+          echo "Available disk space after cleanup:"
+          df -h
+      - name: Docker meta
+        id: docker_meta
+        uses: docker/metadata-action@v5
+        with:
+          images: chrislusf/seaweedfs
+          tags: type=ref,event=tag,suffix=_large_disk
+          flavor: latest=false
+      - name: Set up QEMU
+        if: matrix.qemu
+        uses: docker/setup-qemu-action@v3
+      - name: Create BuildKit config
+        run: |
+          cat > /tmp/buildkitd.toml <<EOF
+          [registry."docker.io"]
+            mirrors = ["https://mirror.gcr.io"]
+          EOF
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          buildkitd-config: /tmp/buildkitd.toml
+      - name: Login to Docker Hub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build ${{ matrix.platform }}
+        uses: docker/build-push-action@v6
+        env:
+          DOCKER_BUILDKIT: 1
+        with:
+          context: ./docker
+          push: ${{ github.event_name != 'pull_request' }}
+          file: ./docker/Dockerfile.go_build
+          build-args: |
+            TAGS=5BytesOffset
+            BUILDKIT_INLINE_CACHE=1
+            BRANCH=${{ github.sha }}
+          platforms: linux/${{ matrix.platform }}
+          tags: ${{ steps.docker_meta.outputs.tags }}-${{ matrix.platform }}
+          labels: ${{ steps.docker_meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+      - name: Clean up build artifacts
+        if: always()
+        run: |
+          # Clean up Docker build cache and temporary files
+          sudo docker system prune -f
+          # Remove Go build cache
+          sudo rm -rf /tmp/go-build*
+
+  create-manifest:
+    runs-on: ubuntu-latest
+    needs: [build]
+    if: github.event_name != 'pull_request'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Docker meta
+        id: docker_meta
+        uses: docker/metadata-action@v5
+        with:
+          images: chrislusf/seaweedfs
+          tags: type=ref,event=tag,suffix=_large_disk
+          flavor: latest=false
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Create and push manifest
+        run: |
+          # Function to retry command with exponential backoff
+          retry_with_backoff() {
+            local max_attempts=5
+            local timeout=1
+            local attempt=1
+            local exit_code=0
+            
+            while [ $attempt -le $max_attempts ]; do
+              if "$@"; then
+                return 0
+              else
+                exit_code=$?
+              fi
+              
+              if [ $attempt -lt $max_attempts ]; then
+                echo "Attempt $attempt failed. Retrying in ${timeout}s..." >&2
+                sleep $timeout
+                timeout=$((timeout * 2))
+              fi
+              
+              attempt=$((attempt + 1))
+            done
+            
+            echo "Command failed after $max_attempts attempts" >&2
+            return $exit_code
+          }
+          
+          # Create manifest with retry
+          retry_with_backoff docker buildx imagetools create -t ${{ steps.docker_meta.outputs.tags }} \
+            ${{ steps.docker_meta.outputs.tags }}-amd64 \
+            ${{ steps.docker_meta.outputs.tags }}-arm64 \
+            ${{ steps.docker_meta.outputs.tags }}-arm \
+            ${{ steps.docker_meta.outputs.tags }}-386

.github/workflows/container_release3.yml

@@ -0,0 +1,73 @@
+name: "docker: build release containers for rocksdb"
+
+# DISABLED: Merged into container_release_unified.yml
+on:
+  workflow_dispatch:
+    inputs:
+      force_run:
+        description: 'This workflow is disabled. Use container_release_unified.yml instead'
+        required: true
+        default: 'disabled'
+
+permissions:
+  contents: read
+
+jobs:
+
+  build-large-release-container_rocksdb:
+    runs-on: [ubuntu-latest]
+
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Free Disk Space
+        run: |
+          sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc
+          sudo docker system prune -af
+      -
+        name: Docker meta
+        id: docker_meta
+        uses: docker/metadata-action@v5
+        with:
+          images: chrislusf/seaweedfs
+          tags: type=ref,event=tag,suffix=_large_disk_rocksdb
+          flavor: latest=false
+          labels: |
+            org.opencontainers.image.title=seaweedfs
+            org.opencontainers.image.description=SeaweedFS is a distributed storage system for blobs, objects, files, and data lake, to store and serve billions of files fast!
+            org.opencontainers.image.vendor=Chris Lu
+      -
+        name: Create BuildKit config
+        run: |
+          cat > /tmp/buildkitd.toml <<EOF
+          [registry."docker.io"]
+            mirrors = ["https://mirror.gcr.io"]
+          EOF
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          buildkitd-config: /tmp/buildkitd.toml
+      -
+        name: Login to Docker Hub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      -
+        name: Build
+        uses: docker/build-push-action@v6
+        with:
+          context: ./docker
+          push: ${{ github.event_name != 'pull_request' }}
+          file: ./docker/Dockerfile.rocksdb_large
+          build-args: |
+            BRANCH=${{ github.sha }}
+          platforms: linux/amd64
+          tags: ${{ steps.docker_meta.outputs.tags }}
+          labels: ${{ steps.docker_meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/container_release4.yml

@@ -0,0 +1,72 @@
+name: "docker: build release containers for all tags"
+
+# DISABLED: Merged into container_release_unified.yml
+on:
+  workflow_dispatch:
+    inputs:
+      force_run:
+        description: 'This workflow is disabled. Use container_release_unified.yml instead'
+        required: true
+        default: 'disabled'
+
+permissions:
+  contents: read
+
+jobs:
+  build-default-release-container:
+    runs-on: [ubuntu-latest]
+
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Free Disk Space
+        run: |
+          echo "Before cleanup:"
+          df -h
+          sudo rm -rf /usr/share/dotnet
+          sudo rm -rf /usr/local/lib/android
+          sudo rm -rf /opt/ghc
+          sudo rm -rf /opt/hostedtoolcache/CodeQL
+          sudo docker system prune -af
+          echo "After cleanup:"
+          df -h
+      -
+        name: Docker meta
+        id: docker_meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            chrislusf/seaweedfs
+          tags: |
+            type=ref,event=tag,suffix=_full
+          flavor: |
+            latest=false
+          labels: |
+            org.opencontainers.image.title=seaweedfs
+            org.opencontainers.image.description=SeaweedFS is a distributed storage system for blobs, objects, files, and data lake, to store and serve billions of files fast!
+            org.opencontainers.image.vendor=Chris Lu
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      -
+        name: Login to Docker Hub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      -
+        name: Build
+        uses: docker/build-push-action@v6
+        with:
+          context: ./docker
+          push: ${{ github.event_name != 'pull_request' }}
+          file: ./docker/Dockerfile.go_build
+          build-args: TAGS=elastic,gocdk,rclone,sqlite,tarantool,tikv,ydb
+          platforms: linux/amd64
+          tags: ${{ steps.docker_meta.outputs.tags }}
+          labels: ${{ steps.docker_meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/container_release5.yml

@@ -0,0 +1,62 @@
+name: "docker: build release containers for all tags and large volume"
+
+# DISABLED: Merged into container_release_unified.yml
+on:
+  workflow_dispatch:
+    inputs:
+      force_run:
+        description: 'This workflow is disabled. Use container_release_unified.yml instead'
+        required: true
+        default: 'disabled'
+
+permissions:
+  contents: read
+
+jobs:
+  build-default-release-container:
+    runs-on: [ubuntu-latest]
+
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Free Disk Space
+        run: |
+          sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc
+          sudo docker system prune -af
+      -
+        name: Docker meta
+        id: docker_meta
+        uses: docker/metadata-action@v5
+        with:
+          images: chrislusf/seaweedfs
+          tags: type=ref,event=tag,suffix=_large_disk_full
+          flavor: latest=false
+          labels: |
+            org.opencontainers.image.title=seaweedfs
+            org.opencontainers.image.description=SeaweedFS is a distributed storage system for blobs, objects, files, and data lake, to store and serve billions of files fast!
+            org.opencontainers.image.vendor=Chris Lu
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      -
+        name: Login to Docker Hub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      -
+        name: Build
+        uses: docker/build-push-action@v6
+        with:
+          context: ./docker
+          push: ${{ github.event_name != 'pull_request' }}
+          file: ./docker/Dockerfile.go_build
+          build-args: TAGS=5BytesOffset,elastic,gocdk,rclone,sqlite,tarantool,tikv,ydb
+          platforms: linux/amd64
+          tags: ${{ steps.docker_meta.outputs.tags }}
+          labels: ${{ steps.docker_meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/container_release_unified.yml

@@ -4,35 +4,11 @@ on:
   push:
     tags:
       - '*'
-  workflow_dispatch:
-    inputs:
-      variant:
-        description: 'Variant to build manually'
-        required: true
-        type: choice
-        default: all
-        options:
-          - all
-          - normal
-          - large_disk
-          - full
-          - large_disk_full
-          - rocksdb
-      release_tag:
-        description: 'Release tag to publish (e.g. 3.93)'
-        required: true
-        default: ''
-      rocksdb_version:
-        description: 'RocksDB git tag to use when variant=rocksdb'
-        required: false
-        default: 'v10.10.1'
+  workflow_dispatch: {}
 
 permissions:
   contents: read
 
-env:
-  RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.release_tag || github.ref_name }}
-
 # Limit concurrent builds to avoid rate limits
 concurrency:
   group: release-${{ github.ref }}
@@ -83,11 +59,9 @@ jobs:
             
     steps:
       - name: Checkout
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         uses: actions/checkout@v6
         
       - name: Free Disk Space
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         run: |
           echo "Available disk space before cleanup:"
           df -h
@@ -101,14 +75,13 @@ jobs:
           df -h
           
       - name: Docker meta
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         id: docker_meta
         uses: docker/metadata-action@v5
         with:
           images: |
             chrislusf/seaweedfs
             ghcr.io/chrislusf/seaweedfs
-          tags: type=raw,value=${{ env.RELEASE_TAG }}${{ matrix.tag_suffix }}
+          tags: type=ref,event=tag,suffix=${{ matrix.tag_suffix }}
           flavor: latest=false
           labels: |
             org.opencontainers.image.title=seaweedfs
@@ -116,11 +89,10 @@ jobs:
             org.opencontainers.image.vendor=Chris Lu
             
       - name: Set up QEMU
-        if: (github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant) && contains(matrix.platforms, 'arm')
+        if: contains(matrix.platforms, 'arm')
         uses: docker/setup-qemu-action@v3
         
       - name: Create BuildKit config
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         run: |
           cat > /tmp/buildkitd.toml <<EOF
           [registry."docker.io"]
@@ -128,20 +100,19 @@ jobs:
           EOF
           
       - name: Set up Docker Buildx
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         uses: docker/setup-buildx-action@v3
         with:
           buildkitd-config: /tmp/buildkitd.toml
           
       - name: Login to Docker Hub
-        if: (github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant) && github.event_name != 'pull_request'
+        if: github.event_name != 'pull_request'
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
           
       - name: Login to GHCR
-        if: (github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant) && github.event_name != 'pull_request'
+        if: github.event_name != 'pull_request'
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
@@ -149,7 +120,6 @@ jobs:
           password: ${{ secrets.GHCR_TOKEN }}
           
       - name: Build and push ${{ matrix.variant }}
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         uses: docker/build-push-action@v6
         env:
           DOCKER_BUILDKIT: 1
@@ -160,7 +130,7 @@ jobs:
           platforms: ${{ matrix.platforms }}
           # Push to GHCR to avoid Docker Hub rate limits on pulls
           tags: |
-            ghcr.io/chrislusf/seaweedfs:${{ env.RELEASE_TAG }}${{ matrix.tag_suffix }}
+            ghcr.io/chrislusf/seaweedfs:${{ github.ref_name }}${{ matrix.tag_suffix }}
           labels: ${{ steps.docker_meta.outputs.labels }}
           cache-from: type=gha,scope=${{ matrix.variant }}
           cache-to: type=gha,mode=max,scope=${{ matrix.variant }}
@@ -168,10 +138,9 @@ jobs:
             ${{ matrix.build_args }}
             BUILDKIT_INLINE_CACHE=1
             BRANCH=${{ github.sha }}
-            ${{ matrix.variant == 'rocksdb' && format('ROCKSDB_VERSION={0}', github.event.inputs.rocksdb_version || 'v10.10.1') || '' }}
             
       - name: Clean up build artifacts
-        if: always() && (github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant)
+        if: always()
         run: |
           sudo docker system prune -f
           sudo rm -rf /tmp/go-build*
@@ -197,14 +166,12 @@ jobs:
             
     steps:
       - name: Login to Docker Hub
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
           
       - name: Login to GHCR
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
@@ -212,7 +179,6 @@ jobs:
           password: ${{ secrets.GHCR_TOKEN }}
           
       - name: Install crane
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         run: |
           cd $(mktemp -d)
           curl -sL "https://github.com/google/go-containerregistry/releases/latest/download/go-containerregistry_Linux_x86_64.tar.gz" | tar xz
@@ -220,7 +186,6 @@ jobs:
           crane version
           
       - name: Copy ${{ matrix.variant }} from GHCR to Docker Hub
-        if: github.event_name != 'workflow_dispatch' || github.event.inputs.variant == 'all' || github.event.inputs.variant == matrix.variant
         run: |
           # Function to retry with exponential backoff
           retry_with_backoff() {
@@ -253,15 +218,14 @@ jobs:
           # This is much more efficient than pulling/pushing individual arch images
           echo "Copying ${{ matrix.variant }} from GHCR to Docker Hub..."
           retry_with_backoff crane copy \
-            ghcr.io/chrislusf/seaweedfs:${{ env.RELEASE_TAG }}${{ matrix.tag_suffix }} \
-            chrislusf/seaweedfs:${{ env.RELEASE_TAG }}${{ matrix.tag_suffix }}
+            ghcr.io/chrislusf/seaweedfs:${{ github.ref_name }}${{ matrix.tag_suffix }} \
+            chrislusf/seaweedfs:${{ github.ref_name }}${{ matrix.tag_suffix }}
           
           echo "✓ Successfully copied ${{ matrix.variant }} to Docker Hub"
 
   helm-release:
     runs-on: ubuntu-latest
     needs: [copy-to-dockerhub]
-    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     permissions:
       contents: write
       pages: write
@@ -275,3 +239,7 @@ jobs:
           target_dir: helm
           branch: gh-pages
           helm_version: "3.18.4"
+
+
+
+

.github/workflows/container_rocksdb_version.yml

@@ -4,9 +4,9 @@ on:
   workflow_dispatch:
     inputs:
       rocksdb_version:
-        description: 'RocksDB git tag or branch to build (e.g. v10.10.1)'
+        description: 'RocksDB git tag or branch to build (e.g. v10.5.1)'
         required: true
-        default: 'v10.10.1'
+        default: 'v10.5.1'
       seaweedfs_ref:
         description: 'SeaweedFS git tag, branch, or commit to build'
         required: true

.github/workflows/go.yml

@@ -15,20 +15,24 @@ permissions:
 
 jobs:
 
-  vet:
-    name: Go Vet
+  build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
+
     - name: Set up Go 1.x
       uses: actions/setup-go@a5f9b05d2d216f63e13859e0d847461041025775 # v2
       with:
         go-version: ^1.13
       id: go
+
     - name: Check out code into the Go module directory
       uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
+
     - name: Get dependencies
       run: |
         cd weed; go get -v -t -d ./...
+
     - name: Go Vet (excluding protobuf lock copying)
       run: |
         cd weed
@@ -38,30 +42,8 @@ jobs:
         # Fail only if there are actual vet errors (not counting the filtered lock warnings)
         if grep -q "vet:" vet-output.txt; then exit 1; fi
 
-  build:
-    name: Build
-    runs-on: ubuntu-latest
-    steps:
-    - name: Set up Go 1.x
-      uses: actions/setup-go@a5f9b05d2d216f63e13859e0d847461041025775 # v2
-      with:
-        go-version: ^1.13
-      id: go
-    - name: Check out code into the Go module directory
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
     - name: Build
       run: cd weed; go build -tags "elastic gocdk sqlite ydb tarantool tikv rclone" -v .
 
-  test:
-    name: Test
-    runs-on: ubuntu-latest
-    steps:
-    - name: Set up Go 1.x
-      uses: actions/setup-go@a5f9b05d2d216f63e13859e0d847461041025775 # v2
-      with:
-        go-version: ^1.13
-      id: go
-    - name: Check out code into the Go module directory
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v2
     - name: Test
       run: cd weed; go test -tags "elastic gocdk sqlite ydb tarantool tikv rclone" -v ./...

.github/workflows/helm_ci.yml

@@ -27,7 +27,7 @@ jobs:
 
       - uses: actions/setup-python@v6
         with:
-          python-version: '3.10'
+          python-version: '3.9'
           check-latest: true
 
       - name: Set up chart-testing

.github/workflows/helm_manual_release.yml

@@ -1,25 +0,0 @@
-name: "helm: manual release"
-
-on:
-  workflow_dispatch:
-
-permissions:
-  contents: write
-  pages: write
-
-jobs:
-  helm-release:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: Publish Helm charts
-        uses: stefanprodan/helm-gh-pages@v1.7.0
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          charts_dir: k8s/charts
-          target_dir: helm
-          branch: gh-pages
-          helm_version: "3.18.4"

.github/workflows/s3-spark-tests.yml

@@ -1,80 +0,0 @@
-name: "S3 Spark Integration Tests"
-
-on:
-  pull_request:
-    paths:
-      - 'weed/s3api/**'
-      - 'test/s3/spark/**'
-      - 'test/s3tables/testutil/**'
-      - '.github/workflows/s3-spark-tests.yml'
-  workflow_dispatch:
-
-concurrency:
-  group: ${{ github.head_ref }}/s3-spark-tests
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  s3-spark-issue-repro-tests:
-    name: S3 Spark Issue Reproduction Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 45
-
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Set up Docker
-        uses: docker/setup-buildx-action@v3
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false ./weed
-
-      - name: Pre-pull Spark image
-        run: docker pull apache/spark:3.5.8
-
-      - name: Run S3 Spark integration tests
-        working-directory: test/s3/spark
-        timeout-minutes: 35
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting S3 Spark Integration Tests ==="
-
-          go test -v -timeout 30m . 2>&1 | tee test-output.log || {
-            echo "S3 Spark integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3/spark
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test|docker|spark)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: s3-spark-test-logs
-          path: test/s3/spark/test-output.log
-          retention-days: 3

.github/workflows/s3-tables-tests.yml

@@ -1,625 +0,0 @@
-name: "S3 Tables Integration Tests"
-
-on:
-  pull_request:
-  
-concurrency:
-  group: ${{ github.head_ref }}/s3-tables-tests
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-
-jobs:
-  s3-tables-tests:
-    name: S3 Tables Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Run go mod tidy
-        run: go mod tidy
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false ./weed
-
-      - name: Run S3 Tables Integration Tests
-        timeout-minutes: 25
-        working-directory: test/s3tables/table-buckets
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting S3 Tables Tests ==="
-          
-          # Run S3 Tables integration tests
-          go test -v -timeout 20m . 2>&1 | tee test-output.log || {
-            echo "S3 Tables integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3tables/table-buckets
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-          
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: s3-tables-test-logs
-          path: test/s3tables/table-buckets/test-output.log
-          retention-days: 3
-
-  iceberg-catalog-tests:
-    name: Iceberg Catalog Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Run go mod tidy
-        run: go mod tidy
-
-      - name: Run Iceberg Catalog Integration Tests
-        timeout-minutes: 25
-        working-directory: test/s3tables/catalog
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting Iceberg Catalog Tests ==="
-          
-          # Run Iceberg catalog integration tests using Makefile (handles build)
-          make test 2>&1 | tee test-output.log || {
-            echo "Iceberg catalog integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3tables/catalog
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-          
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test|docker)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: iceberg-catalog-test-logs
-          path: test/s3tables/catalog/test-output.log
-          retention-days: 3
-
-  trino-iceberg-catalog-tests:
-    name: Trino Iceberg Catalog Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Set up Docker
-        uses: docker/setup-buildx-action@v3
-
-      - name: Pre-pull Trino image
-        run: docker pull trinodb/trino:479
-
-      - name: Run go mod tidy
-        run: go mod tidy
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false ./weed
-
-      - name: Run Trino Iceberg Catalog Integration Tests
-        timeout-minutes: 25
-        working-directory: test/s3tables/catalog_trino
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting Trino Iceberg Catalog Tests ==="
-          
-          # Run Trino + Iceberg catalog integration tests
-          go test -v -timeout 20m . 2>&1 | tee test-output.log || {
-            echo "Trino Iceberg catalog integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3tables/catalog_trino
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-          
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test|docker)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: trino-iceberg-catalog-test-logs
-          path: test/s3tables/catalog_trino/test-output.log
-          retention-days: 3
-
-  spark-iceberg-catalog-tests:
-    name: Spark Iceberg Catalog Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Set up Docker
-        uses: docker/setup-buildx-action@v3
-
-      - name: Pre-pull Spark image
-        run: docker pull apache/spark:3.5.1
-
-      - name: Run go mod tidy
-        run: go mod tidy
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false ./weed
-
-      - name: Run Spark Iceberg Catalog Integration Tests
-        timeout-minutes: 25
-        working-directory: test/s3tables/catalog_spark
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting Spark Iceberg Catalog Tests ==="
-          
-          # Run Spark + Iceberg catalog integration tests
-          go test -v -timeout 20m . 2>&1 | tee test-output.log || {
-            echo "Spark Iceberg catalog integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3tables/catalog_spark
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-          
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test|docker)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: spark-iceberg-catalog-test-logs
-          path: test/s3tables/catalog_spark/test-output.log
-          retention-days: 3
-
-  risingwave-catalog-tests:
-    name: RisingWave Catalog Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Set up Docker
-        uses: docker/setup-buildx-action@v3
-
-      - name: Pre-pull RisingWave image
-        run: |
-          docker pull risingwavelabs/risingwave:v2.5.0
-          docker pull postgres:16-alpine
-
-      - name: Run go mod tidy
-        run: go mod tidy
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false ./weed
-
-      - name: Run RisingWave Catalog Integration Tests
-        timeout-minutes: 25
-        working-directory: test/s3tables/catalog_risingwave
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting RisingWave Catalog Tests ==="
-          
-          # Run RisingWave catalog integration tests
-          go test -v -timeout 20m . 2>&1 | tee test-output.log || {
-            echo "RisingWave catalog integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3tables/catalog_risingwave
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-          
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test|docker)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: risingwave-catalog-test-logs
-          path: test/s3tables/catalog_risingwave/test-output.log
-          retention-days: 3
-
-  sts-integration-tests:
-    name: STS Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Set up Docker
-        uses: docker/setup-buildx-action@v3
-
-      - name: Pre-pull Python image
-        run: docker pull python:3
-
-      - name: Run go mod tidy
-        run: go mod tidy
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false ./weed
-
-      - name: Run STS Integration Tests
-        timeout-minutes: 25
-        working-directory: test/s3tables/sts_integration
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting STS Integration Tests ==="
-          
-          # Run STS integration tests
-          go test -v -timeout 20m . 2>&1 | tee test-output.log || {
-            echo "STS integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3tables/sts_integration
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-          
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test|docker)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: sts-integration-test-logs
-          path: test/s3tables/sts_integration/test-output.log
-          retention-days: 3
-
-  lakekeeper-integration-tests:
-    name: Lakekeeper Integration Tests
-    runs-on: ubuntu-22.04
-    timeout-minutes: 30
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Set up Docker
-        uses: docker/setup-buildx-action@v3
-
-      - name: Pre-pull Python image
-        run: docker pull python:3
-        
-      - name: Pre-pull LocalStack image (if needed)
-        run: docker pull localstack/localstack:latest || true
-
-      - name: Run go mod tidy
-        run: go mod tidy
-
-      - name: Install SeaweedFS
-        run: |
-          go install -buildvcs=false ./weed
-
-      - name: Run Lakekeeper Integration Tests
-        timeout-minutes: 25
-        working-directory: test/s3tables/lakekeeper
-        run: |
-          set -x
-          set -o pipefail
-          echo "=== System Information ==="
-          uname -a
-          free -h
-          df -h
-          echo "=== Starting Lakekeeper Integration Tests ==="
-          
-          # Run Lakekeeper integration tests
-          go test -v -timeout 20m . 2>&1 | tee test-output.log || {
-            echo "Lakekeeper integration tests failed"
-            exit 1
-          }
-
-      - name: Show test output on failure
-        if: failure()
-        working-directory: test/s3tables/lakekeeper
-        run: |
-          echo "=== Test Output ==="
-          if [ -f test-output.log ]; then
-            tail -200 test-output.log
-          fi
-          
-          echo "=== Process information ==="
-          ps aux | grep -E "(weed|test|docker)" || true
-
-      - name: Upload test logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: lakekeeper-integration-test-logs
-          path: test/s3tables/lakekeeper/test-output.log
-          retention-days: 3
-
-  s3-tables-build-verification:
-    name: S3 Tables Build Verification
-    runs-on: ubuntu-22.04
-    timeout-minutes: 15
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Verify S3 Tables Package Builds
-        run: |
-          set -x
-          echo "=== Building S3 Tables package ==="
-          go build ./weed/s3api/s3tables || {
-            echo "S3 Tables package build failed"
-            exit 1
-          }
-          echo "S3 Tables package built successfully"
-
-      - name: Verify S3 API Integration Builds
-        run: |
-          set -x
-          echo "=== Building S3 API with S3 Tables integration ==="
-          go build ./weed/s3api || {
-            echo "S3 API build with S3 Tables failed"
-            exit 1
-          }
-          echo "S3 API with S3 Tables integration built successfully"
-
-      - name: Run Go Tests for S3 Tables Package
-        run: |
-          set -x
-          echo "=== Running Go unit tests for S3 Tables ==="
-          go test -v -race -timeout 5m ./weed/s3api/s3tables/... || {
-            echo "S3 Tables unit tests failed"
-            exit 1
-          }
-          echo "S3 Tables unit tests passed"
-
-      - name: Verify Iceberg Package Builds
-        run: |
-          set -x
-          echo "=== Building Iceberg package ==="
-          go build ./weed/s3api/iceberg || {
-            echo "Iceberg package build failed"
-            exit 1
-          }
-          echo "Iceberg package built successfully"
-
-      - name: Run Go Tests for Iceberg Package
-        run: |
-          set -x
-          echo "=== Running Go unit tests for Iceberg ==="
-          go test -v -race -timeout 5m ./weed/s3api/iceberg/... || {
-            echo "Iceberg unit tests failed"
-            exit 1
-          }
-          echo "Iceberg unit tests passed"
-
-  s3-tables-fmt-check:
-    name: S3 Tables Format Check
-    runs-on: ubuntu-22.04
-    timeout-minutes: 10
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Check Go Format
-        run: |
-          set -x
-          echo "=== Checking S3 Tables Go format ==="
-          unformatted=$(gofmt -l ./weed/s3api/s3tables)
-          if [ -n "$unformatted" ]; then
-            echo "Go format check failed - files need formatting"
-            echo "$unformatted"
-            exit 1
-          fi
-          echo "All S3 Tables files are properly formatted"
-
-      - name: Check S3 Tables Test Format
-        run: |
-          set -x
-          echo "=== Checking S3 Tables test format ==="
-          unformatted=$(gofmt -l ./test/s3tables)
-          if [ -n "$unformatted" ]; then
-            echo "Go format check failed for tests"
-            echo "$unformatted"
-            exit 1
-          fi
-          echo "All S3 Tables test files are properly formatted"
-
-      - name: Check Iceberg Format
-        run: |
-          set -x
-          echo "=== Checking Iceberg Go format ==="
-          unformatted=$(gofmt -l ./weed/s3api/iceberg)
-          if [ -n "$unformatted" ]; then
-            echo "Go format check failed for Iceberg - files need formatting"
-            echo "$unformatted"
-            exit 1
-          fi
-          echo "All Iceberg files are properly formatted"
-
-  s3-tables-vet:
-    name: S3 Tables Go Vet Check
-    runs-on: ubuntu-22.04
-    timeout-minutes: 10
-    
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v6
-
-      - name: Set up Go
-        uses: actions/setup-go@v6
-        with:
-          go-version-file: 'go.mod'
-        id: go
-
-      - name: Run Go Vet
-        run: |
-          set -x
-          echo "=== Running go vet on S3 Tables package ==="
-          go vet ./weed/s3api/s3tables/... || {
-            echo "go vet check failed"
-            exit 1
-          }
-          echo "go vet checks passed"
-
-      - name: Run Go Vet on Tests
-        run: |
-          set -x
-          echo "=== Running go vet on S3 Tables tests ==="
-          go vet ./test/s3tables/... || {
-            echo "go vet check failed for tests"
-            exit 1
-          }
-          echo "go vet checks passed for tests"
-
-      - name: Run Go Vet on Iceberg
-        run: |
-          set -x
-          echo "=== Running go vet on Iceberg package ==="
-          go vet ./weed/s3api/iceberg/... || {
-            echo "go vet check failed for Iceberg"
-            exit 1
-          }
-          echo "go vet checks passed for Iceberg"

.github/workflows/volume-server-integration-tests.yml

@@ -1,176 +0,0 @@
-name: "Volume Server Integration Tests"
-
-on:
-  pull_request:
-    branches: [ master ]
-    paths:
-      - 'test/volume_server/**'
-      - 'weed/server/**'
-      - 'weed/storage/**'
-      - 'weed/pb/volume_server.proto'
-      - 'weed/pb/volume_server_pb/**'
-      - 'rust/volume_server/**'
-      - '.github/workflows/volume-server-integration-tests.yml'
-  push:
-    branches: [ master, main ]
-    paths:
-      - 'test/volume_server/**'
-      - 'weed/server/**'
-      - 'weed/storage/**'
-      - 'weed/pb/volume_server.proto'
-      - 'weed/pb/volume_server_pb/**'
-      - 'rust/volume_server/**'
-      - '.github/workflows/volume-server-integration-tests.yml'
-
-concurrency:
-  group: ${{ github.head_ref || github.ref }}/volume-server-integration-tests
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-env:
-  GO_VERSION: '1.24'
-  TEST_TIMEOUT: '30m'
-
-jobs:
-  volume-server-integration-tests:
-    name: Volume Server Integration Tests (${{ matrix.test-type }} - Shard ${{ matrix.shard }})
-    runs-on: ubuntu-22.04
-    timeout-minutes: 45
-    strategy:
-      fail-fast: false
-      matrix:
-        test-type: [grpc, http]
-        shard: [1, 2, 3]
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Set up Go ${{ env.GO_VERSION }}
-        uses: actions/setup-go@v6
-        with:
-          go-version: ${{ env.GO_VERSION }}
-
-      - name: Build SeaweedFS binary
-        run: |
-          cd weed
-          go build -o weed .
-          chmod +x weed
-          ./weed version
-
-      - name: Run volume server integration tests
-        env:
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-        run: |
-          if [ "${{ matrix.test-type }}" == "grpc" ]; then
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-H]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[I-S]"
-            else
-              TEST_PATTERN="^Test[T-Z]"
-            fi
-          else
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-G]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[H-R]"
-            else
-              TEST_PATTERN="^Test[S-Z]"
-            fi
-          fi
-          echo "Running volume server integration tests for ${{ matrix.test-type }} (Shard ${{ matrix.shard }}, pattern: ${TEST_PATTERN})..."
-          go test -v -count=1 -timeout=${{ env.TEST_TIMEOUT }} ./test/volume_server/${{ matrix.test-type }}/... -run "${TEST_PATTERN}"
-
-      - name: Collect logs on failure
-        if: failure()
-        run: |
-          mkdir -p /tmp/volume-server-it-logs
-          find /tmp -maxdepth 1 -type d -name "seaweedfs_volume_server_it_*" -print -exec cp -r {} /tmp/volume-server-it-logs/ \; || true
-
-      - name: Archive logs on failure
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: volume-server-integration-test-logs
-          path: /tmp/volume-server-it-logs/
-          if-no-files-found: warn
-          retention-days: 7
-
-      - name: Test summary
-        if: always()
-        run: |
-          if [ "${{ matrix.test-type }}" == "grpc" ]; then
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-H]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[I-S]"
-            else
-              TEST_PATTERN="^Test[T-Z]"
-            fi
-          else
-            if [ "${{ matrix.shard }}" == "1" ]; then
-              TEST_PATTERN="^Test[A-G]"
-            elif [ "${{ matrix.shard }}" == "2" ]; then
-              TEST_PATTERN="^Test[H-R]"
-            else
-              TEST_PATTERN="^Test[S-Z]"
-            fi
-          fi
-          echo "## Volume Server Integration Test Summary (${{ matrix.test-type }} - Shard ${{ matrix.shard }})" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Suite: test/volume_server/${{ matrix.test-type }} (Pattern: ${TEST_PATTERN})" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Command: go test -v -count=1 -timeout=${{ env.TEST_TIMEOUT }} ./test/volume_server/${{ matrix.test-type }}/... -run \"${TEST_PATTERN}\"" >> "$GITHUB_STEP_SUMMARY"
-
-  volume-server-rust-smoke:
-    name: Volume Server Rust Smoke (${{ matrix.mode }})
-    runs-on: ubuntu-22.04
-    timeout-minutes: 40
-    strategy:
-      fail-fast: false
-      matrix:
-        mode: [exec, proxy, native]
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Set up Go ${{ env.GO_VERSION }}
-        uses: actions/setup-go@v6
-        with:
-          go-version: ${{ env.GO_VERSION }}
-
-      - name: Set up Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Build SeaweedFS binary
-        run: |
-          cd weed
-          go build -o weed .
-          chmod +x weed
-          ./weed version
-
-      - name: Run Rust-mode HTTP smoke tests
-        env:
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-          VOLUME_SERVER_IMPL: rust
-          VOLUME_SERVER_RUST_MODE: ${{ matrix.mode }}
-        run: |
-          go test -v -count=1 -timeout=25m ./test/volume_server/http/... -run "TestAdminStatusAndHealthz|TestUploadReadRangeHeadDeleteRoundTrip"
-
-      - name: Run Rust-mode gRPC smoke tests
-        env:
-          WEED_BINARY: ${{ github.workspace }}/weed/weed
-          VOLUME_SERVER_IMPL: rust
-          VOLUME_SERVER_RUST_MODE: ${{ matrix.mode }}
-        run: |
-          go test -v -count=1 -timeout=25m ./test/volume_server/grpc/... -run "TestStateAndStatusRPCs|TestVolumeSyncStatusAndReadVolumeFileStatus"
-
-      - name: Rust smoke summary
-        if: always()
-        run: |
-          echo "## Volume Server Rust Smoke Summary (${{ matrix.mode }})" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Mode: Go master + Rust volume server launcher (VOLUME_SERVER_IMPL=rust, VOLUME_SERVER_RUST_MODE=${{ matrix.mode }})" >> "$GITHUB_STEP_SUMMARY"
-          echo "- HTTP Command: go test -v -count=1 -timeout=25m ./test/volume_server/http/... -run \"TestAdminStatusAndHealthz|TestUploadReadRangeHeadDeleteRoundTrip\"" >> "$GITHUB_STEP_SUMMARY"
-          echo "- gRPC Command: go test -v -count=1 -timeout=25m ./test/volume_server/grpc/... -run \"TestStateAndStatusRPCs|TestVolumeSyncStatusAndReadVolumeFileStatus\"" >> "$GITHUB_STEP_SUMMARY"

Makefile

@@ -40,7 +40,7 @@ test: admin-generate
 # Admin component targets
 admin-generate:
 	@echo "Generating admin component templates..."
-	@templ generate
+	@cd $(ADMIN_DIR) && $(MAKE) generate
 
 admin-build: admin-generate
 	@echo "Building admin component..."

docker/Dockerfile.local

@@ -4,6 +4,7 @@ COPY  ./weed /usr/bin/weed
 RUN chmod +x /usr/bin/weed && ls -la /usr/bin/weed
 RUN mkdir -p /etc/seaweedfs
 COPY ./filer.toml /etc/seaweedfs/filer.toml
+COPY ./security.toml.example /etc/seaweedfs/security.toml
 COPY ./entrypoint.sh /entrypoint.sh
 
 # Install dependencies and create non-root user

docker/Dockerfile.rocksdb_dev_env

@@ -3,7 +3,7 @@ FROM golang:1.24 AS builder
 RUN apt-get update
 RUN apt-get install -y build-essential libsnappy-dev zlib1g-dev libbz2-dev libgflags-dev liblz4-dev libzstd-dev
 
-ARG ROCKSDB_VERSION=v10.10.1
+ARG ROCKSDB_VERSION=v10.5.1
 ENV ROCKSDB_VERSION=${ROCKSDB_VERSION}
 
 # build RocksDB

docker/Dockerfile.rocksdb_large

@@ -3,7 +3,7 @@ FROM golang:1.24 AS builder
 RUN apt-get update
 RUN apt-get install -y build-essential libsnappy-dev zlib1g-dev libbz2-dev libgflags-dev liblz4-dev libzstd-dev
 
-ARG ROCKSDB_VERSION=v10.10.1
+ARG ROCKSDB_VERSION=v10.5.1
 ENV ROCKSDB_VERSION=${ROCKSDB_VERSION}
 
 # build RocksDB

docker/security.toml.example

@@ -13,22 +13,22 @@ values = "*"
 # - the Master server generates the JWT, which can be used to write a certain file on a volume server
 # - the Volume server validates the JWT on writing
 # the jwt defaults to expire after 10 seconds.
-# [jwt.signing]
-# key = "V1JJVEVTRUNSRVRFWEFNUExFMTIzNDU2Nzg5MDEy" # Example: WRITESECRETEXAMPLE123456789012
+[jwt.signing]
+key = "V1JJVEVTRUNSRVRFWEFNUExFMTIzNDU2Nzg5MDEy" # Example: WRITESECRETEXAMPLE123456789012
 # this jwt signing key is read by master and volume server, and it is used for read operations:
 # - the Master server generates the JWT, which can be used to read a certain file on a volume server
 # - the Volume server validates the JWT on reading
-# [jwt.signing.read]
-# key = "UkVBRFNFQ1JFVUVYQU1QTEUxMjM0NTY3ODkwMTI=" # Example: READSECRETEXAMPLE123456789012
+[jwt.signing.read]
+key = "UkVBRFNFQ1JFVUVYQU1QTEUxMjM0NTY3ODkwMTI=" # Example: READSECRETEXAMPLE123456789012
 # If this JWT key is configured, Filer only accepts writes over HTTP if they are signed with this JWT:
 # - f.e. the S3 API Shim generates the JWT
 # - the Filer server validates the JWT on writing
 # the jwt defaults to expire after 10 seconds.
-# [jwt.filer_signing]
-# key = "RklMRVJXUklURVNFQ1JFVEVYQU1QTEUxMjM0NTY3OA==" # Example: FILERWRITESECRETEXAMPLE12345678
+[jwt.filer_signing]
+key = "RklMRVJXUklURVNFQ1JFVEVYQU1QTEUxMjM0NTY3OA==" # Example: FILERWRITESECRETEXAMPLE12345678
 # If this JWT key is configured, Filer only accepts reads over HTTP if they are signed with this JWT:
 # - f.e. the S3 API Shim generates the JWT
 # - the Filer server validates the JWT on reading
 # the jwt defaults to expire after 10 seconds.
-# [jwt.filer_signing.read]
-# key = "RklMRVJSRUFEU0VDUkVURVhBTVBMRTEyMzQ1Njc4OQ==" # Example: FILERREADSECRETEXAMPLE123456789
+[jwt.filer_signing.read]
+key = "RklMRVJSRUFEU0VDUkVURVhBTVBMRTEyMzQ1Njc4OQ==" # Example: FILERREADSECRETEXAMPLE123456789

go.mod

@@ -5,7 +5,7 @@ go 1.24.9
 require (
 	cloud.google.com/go v0.123.0 // indirect
 	cloud.google.com/go/pubsub v1.50.1
-	cloud.google.com/go/storage v1.59.2
+	cloud.google.com/go/storage v1.59.1
 	github.com/Shopify/sarama v1.38.1
 	github.com/aws/aws-sdk-go v1.55.8
 	github.com/beorn7/perks v1.0.1 // indirect
@@ -46,10 +46,10 @@ require (
 	github.com/jmespath/go-jmespath v0.4.0 // indirect
 	github.com/json-iterator/go v1.1.12
 	github.com/karlseguin/ccache/v2 v2.0.8
-	github.com/klauspost/compress v1.18.3
+	github.com/klauspost/compress v1.18.2
 	github.com/klauspost/reedsolomon v1.13.0
 	github.com/kurin/blazer v0.5.3
-	github.com/linxGnu/grocksdb v1.10.7
+	github.com/linxGnu/grocksdb v1.10.3
 	github.com/mailru/easyjson v0.9.1 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
@@ -86,20 +86,20 @@ require (
 	github.com/xdg-go/scram v1.1.2 // indirect
 	github.com/xdg-go/stringprep v1.0.4 // indirect
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
-	go.etcd.io/etcd/client/v3 v3.6.7
+	go.etcd.io/etcd/client/v3 v3.6.6
 	go.mongodb.org/mongo-driver v1.17.6
 	go.opencensus.io v0.24.0 // indirect
 	gocloud.dev v0.44.0
 	gocloud.dev/pubsub/natspubsub v0.44.0
 	gocloud.dev/pubsub/rabbitpubsub v0.44.0
-	golang.org/x/crypto v0.48.0
+	golang.org/x/crypto v0.47.0
 	golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546
 	golang.org/x/image v0.35.0
 	golang.org/x/net v0.49.0
 	golang.org/x/oauth2 v0.34.0
-	golang.org/x/sys v0.41.0
-	golang.org/x/text v0.34.0 // indirect
-	golang.org/x/tools v0.41.0 // indirect
+	golang.org/x/sys v0.40.0
+	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
 	golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
 	google.golang.org/api v0.258.0
 	google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 // indirect
@@ -120,7 +120,6 @@ require (
 	github.com/ThreeDotsLabs/watermill v1.5.1
 	github.com/a-h/templ v0.3.977
 	github.com/apache/cassandra-gocql-driver/v2 v2.0.0
-	github.com/apache/iceberg-go v0.4.0
 	github.com/apple/foundationdb/bindings/go v0.0.0-20250911184653-27f7192f47c3
 	github.com/arangodb/go-driver v1.6.9
 	github.com/armon/go-metrics v0.4.1
@@ -134,13 +133,13 @@ require (
 	github.com/gin-contrib/sessions v1.0.4
 	github.com/gin-gonic/gin v1.11.0
 	github.com/go-ldap/ldap/v3 v3.4.12
-	github.com/golang-jwt/jwt/v5 v5.3.1
+	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/google/flatbuffers/go v0.0.0-20230108230133-3b8644d32c50
 	github.com/hashicorp/raft v1.7.3
 	github.com/hashicorp/raft-boltdb/v2 v2.3.1
 	github.com/hashicorp/vault/api v1.22.0
-	github.com/jhump/protoreflect v1.18.0
-	github.com/lib/pq v1.11.1
+	github.com/jhump/protoreflect v1.17.0
+	github.com/lib/pq v1.10.9
 	github.com/linkedin/goavro/v2 v2.14.1
 	github.com/mattn/go-sqlite3 v1.14.33
 	github.com/minio/crc64nvme v1.1.1
@@ -153,9 +152,8 @@ require (
 	github.com/redis/go-redis/v9 v9.17.2
 	github.com/schollz/progressbar/v3 v3.19.0
 	github.com/seaweedfs/go-fuse/v2 v2.9.1
-	github.com/shirou/gopsutil/v4 v4.26.1
+	github.com/shirou/gopsutil/v4 v4.25.12
 	github.com/tarantool/go-tarantool/v2 v2.4.1
-	github.com/testcontainers/testcontainers-go v0.39.0
 	github.com/tikv/client-go/v2 v2.0.7
 	github.com/xeipuuv/gojsonschema v1.2.0
 	github.com/ydb-platform/ydb-go-sdk-auth-environ v0.5.1
@@ -170,57 +168,36 @@ require (
 require github.com/k0kubun/colorstring v0.0.0-20150214042306-9440f1994b88 // indirect
 
 require (
-	atomicgo.dev/cursor v0.2.0 // indirect
-	atomicgo.dev/keyboard v0.2.9 // indirect
-	atomicgo.dev/schedule v0.1.0 // indirect
 	cloud.google.com/go/longrunning v0.7.0 // indirect
 	cloud.google.com/go/pubsub/v2 v2.2.1 // indirect
-	dario.cat/mergo v1.0.2 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1 // indirect
-	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
-	github.com/Azure/go-autorest v14.2.0+incompatible // indirect
-	github.com/Azure/go-autorest/autorest/to v0.4.1 // indirect
 	github.com/a1ex3/zstd-seekable-format-go/pkg v0.10.0 // indirect
 	github.com/anchore/go-lzo v0.1.0 // indirect
-	github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
-	github.com/apache/arrow-go/v18 v18.4.1 // indirect
-	github.com/apache/thrift v0.22.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 // indirect
 	github.com/bahlo/generic-list-go v0.2.0 // indirect
 	github.com/bazelbuild/rules_go v0.46.0 // indirect
 	github.com/biogo/store v0.0.0-20201120204734-aad293a2328f // indirect
 	github.com/blevesearch/snowballstem v0.9.0 // indirect
 	github.com/boombuler/barcode v1.1.0 // indirect
+	github.com/bufbuild/protocompile v0.14.1 // indirect
 	github.com/buger/jsonparser v1.1.1 // indirect
 	github.com/cenkalti/backoff/v5 v5.0.3 // indirect
 	github.com/clipperhouse/stringish v0.1.1 // indirect
 	github.com/clipperhouse/uax29/v2 v2.3.0 // indirect
-	github.com/cockroachdb/apd/v3 v3.2.1 // indirect
+	github.com/cockroachdb/apd/v3 v3.1.0 // indirect
 	github.com/cockroachdb/errors v1.11.3 // indirect
 	github.com/cockroachdb/logtags v0.0.0-20241215232642-bb51bb14a506 // indirect
 	github.com/cockroachdb/redact v1.1.5 // indirect
 	github.com/cockroachdb/version v0.0.0-20250314144055-3860cd14adf2 // indirect
-	github.com/containerd/console v1.0.5 // indirect
-	github.com/containerd/errdefs v1.0.0 // indirect
-	github.com/containerd/errdefs/pkg v0.3.0 // indirect
-	github.com/containerd/log v0.1.0 // indirect
-	github.com/containerd/platforms v1.0.0-rc.1 // indirect
-	github.com/cpuguy83/dockercfg v0.3.2 // indirect
 	github.com/dave/dst v0.27.2 // indirect
 	github.com/diskfs/go-diskfs v1.7.0 // indirect
-	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/docker v28.5.0+incompatible // indirect
-	github.com/docker/go-connections v0.6.0 // indirect
-	github.com/docker/go-units v0.5.0 // indirect
 	github.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 // indirect
 	github.com/go-git/go-billy/v5 v5.6.2 // indirect
 	github.com/goccy/go-yaml v1.18.0 // indirect
 	github.com/golang/geo v0.0.0-20210211234256-740aa86cb551 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
-	github.com/gookit/color v1.5.4 // indirect
 	github.com/gopherjs/gopherjs v1.17.2 // indirect
 	github.com/grpc-ecosystem/grpc-gateway v1.16.0 // indirect
-	github.com/hamba/avro/v2 v2.30.0 // indirect
 	github.com/hashicorp/go-rootcerts v1.0.2 // indirect
 	github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 // indirect
 	github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
@@ -230,33 +207,16 @@ require (
 	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
 	github.com/jaegertracing/jaeger v1.47.0 // indirect
-	github.com/jhump/protoreflect/v2 v2.0.0-beta.1 // indirect
 	github.com/jtolds/gls v4.20.0+incompatible // indirect
-	github.com/klauspost/asmfmt v1.3.2 // indirect
 	github.com/kr/pretty v0.3.1 // indirect
 	github.com/kr/text v0.2.0 // indirect
-	github.com/lithammer/fuzzysearch v1.1.8 // indirect
 	github.com/lithammer/shortuuid/v3 v3.0.7 // indirect
-	github.com/magiconair/properties v1.8.10 // indirect
-	github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8 // indirect
-	github.com/minio/c2goasm v0.0.0-20190812172519-36a3d3bbc4f3 // indirect
-	github.com/moby/docker-image-spec v1.3.1 // indirect
-	github.com/moby/go-archive v0.1.0 // indirect
-	github.com/moby/patternmatcher v0.6.0 // indirect
-	github.com/moby/sys/sequential v0.6.0 // indirect
-	github.com/moby/sys/user v0.4.0 // indirect
-	github.com/moby/sys/userns v0.1.0 // indirect
-	github.com/moby/term v0.5.2 // indirect
-	github.com/morikuni/aec v1.0.0 // indirect
-	github.com/opencontainers/go-digest v1.0.0 // indirect
-	github.com/opencontainers/image-spec v1.1.1 // indirect
 	github.com/openzipkin/zipkin-go v0.4.3 // indirect
 	github.com/parquet-go/bitpack v1.0.0 // indirect
 	github.com/parquet-go/jsonlite v1.0.0 // indirect
-	github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741 // indirect
+	github.com/petermattis/goid v0.0.0-20180202154549-b0b1615b78e5 // indirect
 	github.com/pierrre/geohash v1.0.0 // indirect
 	github.com/pquerna/otp v1.5.0 // indirect
-	github.com/pterm/pterm v0.12.81 // indirect
 	github.com/quic-go/qpack v0.6.0 // indirect
 	github.com/quic-go/quic-go v0.57.0 // indirect
 	github.com/rogpeppe/go-internal v1.14.1 // indirect
@@ -264,16 +224,12 @@ require (
 	github.com/sasha-s/go-deadlock v0.3.1 // indirect
 	github.com/smarty/assertions v1.15.0 // indirect
 	github.com/stretchr/objx v0.5.2 // indirect
-	github.com/substrait-io/substrait v0.69.0 // indirect
-	github.com/substrait-io/substrait-go/v4 v4.4.0 // indirect
-	github.com/substrait-io/substrait-protobuf/go v0.71.0 // indirect
 	github.com/twpayne/go-geom v1.4.1 // indirect
 	github.com/twpayne/go-kml v1.5.2 // indirect
 	github.com/ulikunitz/xz v0.5.15 // indirect
 	github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect
-	github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
+	github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
 	github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
-	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
 	github.com/zeebo/xxh3 v1.0.2 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.37.0 // indirect
@@ -281,8 +237,7 @@ require (
 	go.opentelemetry.io/proto/otlp v1.7.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/mod v0.32.0 // indirect
-	golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 // indirect
+	golang.org/x/mod v0.31.0 // indirect
 	gonum.org/v1/gonum v0.16.0 // indirect
 )
 
@@ -299,7 +254,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.3
 	github.com/Azure/azure-sdk-for-go/sdk/storage/azfile v1.5.3 // indirect
-	github.com/Azure/go-ntlmssp v0.1.0 // indirect
+	github.com/Azure/go-ntlmssp v0.0.2-0.20251110135918-10b7b7e7cd26 // indirect
 	github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect
 	github.com/Files-com/files-sdk-go/v3 v3.2.264 // indirect
 	github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 // indirect
@@ -394,7 +349,7 @@ require (
 	github.com/gorilla/securecookie v1.1.2 // indirect
 	github.com/gorilla/sessions v1.4.0 // indirect
 	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
 	github.com/hashicorp/go-hclog v1.6.3 // indirect
 	github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
@@ -477,7 +432,7 @@ require (
 	github.com/tklauser/go-sysconf v0.3.16 // indirect
 	github.com/tklauser/numcpus v0.11.0 // indirect
 	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
-	github.com/twmb/murmur3 v1.1.8 // indirect
+	github.com/twmb/murmur3 v1.1.3 // indirect
 	github.com/ugorji/go/codec v1.3.0 // indirect
 	github.com/unknwon/goconfig v1.0.0 // indirect
 	github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
@@ -492,7 +447,7 @@ require (
 	github.com/zeebo/blake3 v0.2.4 // indirect
 	github.com/zeebo/errs v1.4.0 // indirect
 	go.etcd.io/bbolt v1.4.3 // indirect
-	go.etcd.io/etcd/api/v3 v3.6.7 // indirect
+	go.etcd.io/etcd/api/v3 v3.6.6 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/contrib/detectors/gcp v1.38.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect
@@ -503,11 +458,11 @@ require (
 	go.opentelemetry.io/otel/sdk/metric v1.38.0 // indirect
 	go.opentelemetry.io/otel/trace v1.38.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	go.uber.org/zap v1.27.1 // indirect
+	go.uber.org/zap v1.27.0 // indirect
 	golang.org/x/arch v0.20.0 // indirect
-	golang.org/x/term v0.40.0 // indirect
+	golang.org/x/term v0.39.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
 	gopkg.in/validator.v2 v2.0.1 // indirect

go.sum

@@ -1,11 +1,3 @@
-atomicgo.dev/assert v0.0.2 h1:FiKeMiZSgRrZsPo9qn/7vmr7mCsh5SZyXY4YGYiYwrg=
-atomicgo.dev/assert v0.0.2/go.mod h1:ut4NcI3QDdJtlmAxQULOmA13Gz6e2DWbSAS8RUOmNYQ=
-atomicgo.dev/cursor v0.2.0 h1:H6XN5alUJ52FZZUkI7AlJbUc1aW38GWZalpYRPpoPOw=
-atomicgo.dev/cursor v0.2.0/go.mod h1:Lr4ZJB3U7DfPPOkbH7/6TOtJ4vFGHlgj1nc+n900IpU=
-atomicgo.dev/keyboard v0.2.9 h1:tOsIid3nlPLZ3lwgG8KZMp/SFmr7P0ssEN5JUsm78K8=
-atomicgo.dev/keyboard v0.2.9/go.mod h1:BC4w9g00XkxH/f1HXhW2sXmJFOCWbKn9xrOunSFtExQ=
-atomicgo.dev/schedule v0.1.0 h1:nTthAbhZS5YZmgYbb2+DH8uQIZcTlIrd4eYr3UQxEjs=
-atomicgo.dev/schedule v0.1.0/go.mod h1:xeUa3oAkiuHYh8bKiQBRojqAMq3PXXbJujjb0hw8pEU=
 cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY=
 cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw=
 cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
@@ -485,8 +477,8 @@ cloud.google.com/go/storage v1.22.1/go.mod h1:S8N1cAStu7BOeFfE8KAQzmyyLkK8p/vmRq
 cloud.google.com/go/storage v1.23.0/go.mod h1:vOEEDNFnciUMhBeT6hsJIn3ieU5cFRmzeLgDvXzfIXc=
 cloud.google.com/go/storage v1.27.0/go.mod h1:x9DOL8TK/ygDUMieqwfhdpQryTeEkhGKMi80i/iqR2s=
 cloud.google.com/go/storage v1.28.1/go.mod h1:Qnisd4CqDdo6BGs2AD5LLnEsmSQ80wQ5ogcBBKhU86Y=
-cloud.google.com/go/storage v1.59.2 h1:gmOAuG1opU8YvycMNpP+DvHfT9BfzzK5Cy+arP+Nocw=
-cloud.google.com/go/storage v1.59.2/go.mod h1:cMWbtM+anpC74gn6qjLh+exqYcfmB9Hqe5z6adx+CLI=
+cloud.google.com/go/storage v1.59.1 h1:DXAZLcTimtiXdGqDSnebROVPd9QvRsFVVlptz02Wk58=
+cloud.google.com/go/storage v1.59.1/go.mod h1:cMWbtM+anpC74gn6qjLh+exqYcfmB9Hqe5z6adx+CLI=
 cloud.google.com/go/storagetransfer v1.5.0/go.mod h1:dxNzUopWy7RQevYFHewchb29POFv3/AaBgnhqzqiK0w=
 cloud.google.com/go/storagetransfer v1.6.0/go.mod h1:y77xm4CQV/ZhFZH75PLEXY0ROiS7Gh6pSKrM8dJyg6I=
 cloud.google.com/go/storagetransfer v1.7.0/go.mod h1:8Giuj1QNb1kfLAiWM1bN6dHzfdlDAVC9rv9abHot2W4=
@@ -544,17 +536,11 @@ cloud.google.com/go/workflows v1.7.0/go.mod h1:JhSrZuVZWuiDfKEFxU0/F1PQjmpnpcoIS
 cloud.google.com/go/workflows v1.8.0/go.mod h1:ysGhmEajwZxGn1OhGOGKsTXc5PyxOc0vfKf5Af+to4M=
 cloud.google.com/go/workflows v1.9.0/go.mod h1:ZGkj1aFIOd9c8Gerkjjq7OW7I5+l6cSvT3ujaO/WwSA=
 cloud.google.com/go/workflows v1.10.0/go.mod h1:fZ8LmRmZQWacon9UCX1r/g/DfAXx5VcPALq2CxzdePw=
-dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8=
-dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
 filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
 filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
 gioui.org v0.0.0-20210308172011-57750fc8a0a6/go.mod h1:RSH6KIUZ0p2xy5zHDxgAM4zumjgTw83q2ge/PI+yyw8=
 git.sr.ht/~sbinet/gg v0.3.1/go.mod h1:KGYtlADtqsqANL9ueOFkWymvzUvLMQllU5Ixo+8v3pc=
-github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 h1:He8afgbRMd7mFxO99hRNu+6tazq8nFF9lIwo9JFroBk=
-github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6/go.mod h1:8o94RPi1/7XTJvwPpRSzSUedZrtlirdB3r9Z20bi2f8=
-github.com/AlecAivazis/survey/v2 v2.3.7 h1:6I/u8FvytdGsgonrYsVn2t8t4QiRnh6QSTqkkhIiSjQ=
-github.com/AlecAivazis/survey/v2 v2.3.7/go.mod h1:xUTIdE4KCOIjsBAE1JYsUPoCqYdZ1reCfTwbto0Fduo=
 github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 h1:fou+2+WFTib47nS+nz/ozhEBnvU96bKHy6LjRsY4E28=
 github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0/go.mod h1:t76Ruy8AHvUAC8GfMWJMa0ElSbuIcO03NLpynfbgsPA=
 github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 h1:Hk5QBxZQC1jb2Fwj6mpzme37xbCDdNTxU7O9eb5+LB4=
@@ -574,14 +560,8 @@ github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.3/go.mod h1:URuDvhmATV
 github.com/Azure/azure-sdk-for-go/sdk/storage/azfile v1.5.3 h1:sxgSqOB9CDToiaVFpxuvb5wGgGqWa3lCShcm5o0n3bE=
 github.com/Azure/azure-sdk-for-go/sdk/storage/azfile v1.5.3/go.mod h1:XdED8i399lEVblYHTZM8eXaP07gv4Z58IL6ueMlVlrg=
 github.com/Azure/go-ansiterm v0.0.0-20170929234023-d6e3b3328b78/go.mod h1:LmzpDX56iTiv29bbRTIsUNlaFfuhWRQBWjQdVyAevI8=
-github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg=
-github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
-github.com/Azure/go-autorest v14.2.0+incompatible h1:V5VMDjClD3GiElqLWO7mz2MxNAK/vTfRHdAubSIPRgs=
-github.com/Azure/go-autorest v14.2.0+incompatible/go.mod h1:r+4oMnoxhatjLLJ6zxSWATqVooLgysK6ZNox3g/xq24=
-github.com/Azure/go-autorest/autorest/to v0.4.1 h1:CxNHBqdzTr7rLtdrtb5CMjJcDut+WNGCVv7OmS5+lTc=
-github.com/Azure/go-autorest/autorest/to v0.4.1/go.mod h1:EtaofgU4zmtvn1zT2ARsjRFdq9vXx0YWtmElwL+GZ9M=
-github.com/Azure/go-ntlmssp v0.1.0 h1:DjFo6YtWzNqNvQdrwEyr/e4nhU3vRiwenz5QX7sFz+A=
-github.com/Azure/go-ntlmssp v0.1.0/go.mod h1:NYqdhxd/8aAct/s4qSYZEerdPuH1liG2/X9DiVTbhpk=
+github.com/Azure/go-ntlmssp v0.0.2-0.20251110135918-10b7b7e7cd26 h1:gy/jrlpp8EfSyA73a51fofoSfhp5rPNQAUvDr4Dm91c=
+github.com/Azure/go-ntlmssp v0.0.2-0.20251110135918-10b7b7e7cd26/go.mod h1:NYqdhxd/8aAct/s4qSYZEerdPuH1liG2/X9DiVTbhpk=
 github.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1 h1:WJTmL004Abzc5wDB5VtZG2PJk5ndYDgVacGqfirKxjM=
 github.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1/go.mod h1:tCcJZ0uHAmvjsVYzEFivsRTN00oz5BEsRgQHu5JZ9WE=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 h1:XRzhVemXdgvJqCH0sFfrBUTnUJSBrBf7++ypk+twtRs=
@@ -594,8 +574,6 @@ github.com/DATA-DOG/go-sqlmock v1.3.2 h1:2L2f5t3kKnCLxnClDD/PrDfExFFa1wjESgxHG/B
 github.com/DATA-DOG/go-sqlmock v1.3.2/go.mod h1:f/Ixk793poVmq4qj/V1dPUg2JEAKC73Q5eFN3EC/SaM=
 github.com/DataDog/datadog-go v3.2.0+incompatible/go.mod h1:LButxg5PwREeZtORoXG3tL4fMGNddJ+vMq1mwgfaqoQ=
 github.com/DataDog/zstd v1.5.2/go.mod h1:g4AWEaM3yOg3HYfnJ3YIawPnVdXJh9QME85blwSAmyw=
-github.com/DefangLabs/secret-detector v0.0.0-20250403165618-22662109213e h1:rd4bOvKmDIx0WeTv9Qz+hghsgyjikFiPrseXHlKepO0=
-github.com/DefangLabs/secret-detector v0.0.0-20250403165618-22662109213e/go.mod h1:blbwPQh4DTlCZEfk1BLU4oMIhLda2U+A840Uag9DsZw=
 github.com/Files-com/files-sdk-go/v3 v3.2.264 h1:lMHTplAYI9FtmCo/QOcpRxmPA5REVAct1r2riQmDQKw=
 github.com/Files-com/files-sdk-go/v3 v3.2.264/go.mod h1:wGqkOzRu/ClJibvDgcfuJNAqI2nLhe8g91tPlDKRCdE=
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 h1:sBEjpZlNHzK1voKq9695PJSX2o5NEXl7/OL3coiIY0c=
@@ -611,20 +589,11 @@ github.com/IBM/go-sdk-core/v5 v5.21.0/go.mod h1:Q3BYO6iDA2zweQPDGbNTtqft5tDcEpm6
 github.com/Jille/raft-grpc-transport v1.6.1 h1:gN3sjapb+fVbiebS7AfQQgbV2ecTOI7ur7NPPC7Mhoc=
 github.com/Jille/raft-grpc-transport v1.6.1/go.mod h1:HbOjEdu/yzCJ/mjTF6wEOJNbAUpHfU2UOA2hVD4CNFg=
 github.com/JohnCGriffin/overflow v0.0.0-20211019200055-46fa312c352c/go.mod h1:X0CRv0ky0k6m906ixxpzmDRLvX58TFUKS2eePweuyxk=
-github.com/MarvinJWendt/testza v0.1.0/go.mod h1:7AxNvlfeHP7Z/hDQ5JtE3OKYT3XFUeLCDE2DQninSqs=
-github.com/MarvinJWendt/testza v0.2.1/go.mod h1:God7bhG8n6uQxwdScay+gjm9/LnO4D3kkcZX4hv9Rp8=
-github.com/MarvinJWendt/testza v0.2.8/go.mod h1:nwIcjmr0Zz+Rcwfh3/4UhBp7ePKVhuBExvZqnKYWlII=
-github.com/MarvinJWendt/testza v0.2.10/go.mod h1:pd+VWsoGUiFtq+hRKSU1Bktnn+DMCSrDrXDpX2bG66k=
-github.com/MarvinJWendt/testza v0.2.12/go.mod h1:JOIegYyV7rX+7VZ9r77L/eH6CfJHHzXjB69adAhzZkI=
-github.com/MarvinJWendt/testza v0.3.0/go.mod h1:eFcL4I0idjtIx8P9C6KkAuLgATNKpX4/2oUqKc6bF2c=
-github.com/MarvinJWendt/testza v0.4.2/go.mod h1:mSdhXiKH8sg/gQehJ63bINcCKp7RtYewEjXsvsVUPbE=
-github.com/MarvinJWendt/testza v0.5.2 h1:53KDo64C1z/h/d/stCYCPY69bt/OSwjq5KpFNwi+zB4=
-github.com/MarvinJWendt/testza v0.5.2/go.mod h1:xu53QFE5sCdjtMCKk8YMQ2MnymimEctc4n3EjyIYvEY=
 github.com/Masterminds/goutils v1.1.0/go.mod h1:8cTjp+g8YejhMuvIA5y2vz3BpJxksy863GQaJW2MFNU=
 github.com/Masterminds/semver v1.5.0 h1:H65muMkzWKEuNDnfl9d70GUjFniHKHRbFPGBuZ3QEww=
 github.com/Masterminds/semver v1.5.0/go.mod h1:MB6lktGJrhw8PrUyiEoblNEGEQ+RzHPF078ddwwvV3Y=
-github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0=
-github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ=
+github.com/Masterminds/semver/v3 v3.2.0 h1:3MEsd0SM6jqZojhjLWWeBY+Kcjy9i6MQAeY7YgDP83g=
+github.com/Masterminds/semver/v3 v3.2.0/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ=
 github.com/Masterminds/sprig v2.22.0+incompatible/go.mod h1:y6hNFY5UBTIWBxnzTeuNhlNS5hqE0NB0E6fgfo2Br3o=
 github.com/Max-Sum/base32768 v0.0.0-20230304063302-18e6ce5945fd h1:nzE1YQBdx1bq9IlZinHa+HVffy+NmVRoKr+wHN8fpLE=
 github.com/Max-Sum/base32768 v0.0.0-20230304063302-18e6ce5945fd/go.mod h1:C8yoIfvESpM3GD07OCHU7fqI7lhwyZ2Td1rbNbTAhnc=
@@ -667,8 +636,6 @@ github.com/aalpar/deheap v0.0.0-20210914013432-0cc84d79dec3 h1:hhdWprfSpFbN7lz3W
 github.com/aalpar/deheap v0.0.0-20210914013432-0cc84d79dec3/go.mod h1:XaUnRxSCYgL3kkgX0QHIV0D+znljPIDImxlv2kbGv0Y=
 github.com/abbot/go-http-auth v0.4.0 h1:QjmvZ5gSC7jm3Zg54DqWE/T5m1t2AfDu6QlXJT0EVT0=
 github.com/abbot/go-http-auth v0.4.0/go.mod h1:Cz6ARTIzApMJDzh5bRMSUou6UMSp0IEXg9km/ci7TJM=
-github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8=
-github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d/go.mod h1:asat636LX7Bqt5lYEZ27JNDcqxfjdBQuJ/MM4CN/Lzo=
 github.com/ajstarks/deck v0.0.0-20200831202436-30c9fc6549a9/go.mod h1:JynElWSGnm/4RlzPXRlREEwqTHAN3T56Bv2ITsFT3gY=
 github.com/ajstarks/deck/generate v0.0.0-20210309230005-c3f852c02e19/go.mod h1:T13YZdzov6OU0A1+RfKZiZN9ca6VeKdBdyDV+BY97Tk=
 github.com/ajstarks/svgo v0.0.0-20180226025133-644b8db467af/go.mod h1:K08gAheRH3/J6wwsYMMT4xOr94bZjxIelGM0+d/wbFw=
@@ -688,20 +655,10 @@ github.com/andybalholm/brotli v1.2.0/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUS
 github.com/andybalholm/cascadia v1.3.3 h1:AG2YHrzJIm4BZ19iwJ/DAua6Btl3IwJX+VI4kktS1LM=
 github.com/andybalholm/cascadia v1.3.3/go.mod h1:xNd9bqTn98Ln4DwST8/nG+H0yuB8Hmgu1YHNnWw0GeA=
 github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY=
-github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ=
-github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw=
-github.com/apache/arrow-go/v18 v18.4.1 h1:q/jVkBWCJOB9reDgaIZIdruLQUb1kbkvOnOFezVH1C4=
-github.com/apache/arrow-go/v18 v18.4.1/go.mod h1:tLyFubsAl17bvFdUAy24bsSvA/6ww95Iqi67fTpGu3E=
 github.com/apache/arrow/go/v10 v10.0.1/go.mod h1:YvhnlEePVnBS4+0z3fhPfUy7W1Ikj0Ih0vcRo/gZ1M0=
 github.com/apache/cassandra-gocql-driver/v2 v2.0.0 h1:Omnzb1Z/P90Dr2TbVNu54ICQL7TKVIIsJO231w484HU=
 github.com/apache/cassandra-gocql-driver/v2 v2.0.0/go.mod h1:QH/asJjB3mHvY6Dot6ZKMMpTcOrWJ8i9GhsvG1g0PK4=
-github.com/apache/iceberg-go v0.4.0 h1:O3RwMyoc4gZpu9b1aBDJBiH14riga68BWypZVaSHZE0=
-github.com/apache/iceberg-go v0.4.0/go.mod h1:TInpnxHnMdPrsmW/klToy9mM8gs6/6FsI+O2kwtlHMQ=
 github.com/apache/thrift v0.16.0/go.mod h1:PHK3hniurgQaNMZYaCLEqXKsYK8upmhPbmdP2FXSqgU=
-github.com/apache/thrift v0.22.0 h1:r7mTJdj51TMDe6RtcmNdQxgn9XcyfGDOzegMDRg47uc=
-github.com/apache/thrift v0.22.0/go.mod h1:1e7J/O1Ae6ZQMTYdy9xa3w9k+XHWPfRvdPyJeynQ+/g=
-github.com/apparentlymart/go-textseg/v15 v15.0.0 h1:uYvfpb3DyLSCGWnctWKGj857c6ew1u1fNQOlOtuGxQY=
-github.com/apparentlymart/go-textseg/v15 v15.0.0/go.mod h1:K8XmNZdhEBkdlyDdvbmmsvpAG721bKi0joRfFdHIWJ4=
 github.com/apple/foundationdb/bindings/go v0.0.0-20250911184653-27f7192f47c3 h1:WZaTKNHCfcw7fWSR6/RKnCldVzvYZC+Y20Su4lffEIg=
 github.com/apple/foundationdb/bindings/go v0.0.0-20250911184653-27f7192f47c3/go.mod h1:OMVSB21p9+xQUIqlGizHPZfjK+SHws1ht+ZytVDoz9U=
 github.com/appscode/go-querystring v0.0.0-20170504095604-0126cfb3f1dc h1:LoL75er+LKDHDUfU5tRvFwxH0LjPpZN8OoG8Ll+liGU=
@@ -712,7 +669,6 @@ github.com/arangodb/go-velocypack v0.0.0-20200318135517-5af53c29c67e h1:Xg+hGrY2
 github.com/arangodb/go-velocypack v0.0.0-20200318135517-5af53c29c67e/go.mod h1:mq7Shfa/CaixoDxiyAAc5jZ6CVBAyPaNQCGS7mkj4Ho=
 github.com/armon/go-metrics v0.4.1 h1:hR91U9KYmb6bLBYLQjyM+3j+rcd/UhE+G78SFnF8gJA=
 github.com/armon/go-metrics v0.4.1/go.mod h1:E6amYzXo6aW1tqzoZGT755KkbgrJsSdpwZ+3JqfkOG4=
-github.com/atomicgo/cursor v0.0.1/go.mod h1:cBON2QmmrysudxNBFthvMtN32r3jxVRIvzkUiF/RuIk=
 github.com/aws/aws-sdk-go v1.55.8 h1:JRmEUbU52aJQZ2AjX4q4Wu7t4uZjOu71uyNmaWlUkJQ=
 github.com/aws/aws-sdk-go v1.55.8/go.mod h1:ZkViS9AqA6otK+JBBNH2++sx1sgxrPKcSzPPvQkUtXk=
 github.com/aws/aws-sdk-go-v2 v1.41.1 h1:ABlyEARCDLN034NhxlRUSZr4l71mh+T5KAeGh6cerhU=
@@ -793,8 +749,6 @@ github.com/buengese/sgzip v0.1.1 h1:ry+T8l1mlmiWEsDrH/YHZnCVWD2S3im1KLsyO+8ZmTU=
 github.com/buengese/sgzip v0.1.1/go.mod h1:i5ZiXGF3fhV7gL1xaRRL1nDnmpNj0X061FQzOS8VMas=
 github.com/bufbuild/protocompile v0.14.1 h1:iA73zAf/fyljNjQKwYzUHD6AD4R8KMasmwa/FBatYVw=
 github.com/bufbuild/protocompile v0.14.1/go.mod h1:ppVdAIhbr2H8asPk6k4pY7t9zB1OU5DoEw9xY/FUi1c=
-github.com/buger/goterm v1.0.4 h1:Z9YvGmOih81P0FbVtEYTFF6YsSgxSUKEhf/f9bTMXbY=
-github.com/buger/goterm v1.0.4/go.mod h1:HiFWV3xnkolgrBV3mY8m0X0Pumt4zg4QhbdOzQtB8tE=
 github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs=
 github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
 github.com/bwesterb/go-ristretto v1.2.0/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0=
@@ -859,8 +813,8 @@ github.com/cncf/xds/go v0.0.0-20230105202645-06c439db220b/go.mod h1:eXthEFrGJvWH
 github.com/cncf/xds/go v0.0.0-20230310173818-32f1caf87195/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f h1:Y8xYupdHxryycyPlc9Y+bSQAYZnetRJ70VMVKm5CKI0=
 github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f/go.mod h1:HlzOvOjVBOfTGSRXRyY0OiCS/3J1akRGQQpRO/7zyF4=
-github.com/cockroachdb/apd/v3 v3.2.1 h1:U+8j7t0axsIgvQUqthuNm82HIrYXodOV2iWLWtEaIwg=
-github.com/cockroachdb/apd/v3 v3.2.1/go.mod h1:klXJcjp+FffLTHlhIG69tezTDvdP065naDsHzKhYSqc=
+github.com/cockroachdb/apd/v3 v3.1.0 h1:MK3Ow7LH0W8zkd5GMKA1PvS9qG3bWFI95WaVNfyZJ/w=
+github.com/cockroachdb/apd/v3 v3.1.0/go.mod h1:6qgPBMXjATAdD/VefbRP9NoSLKjbB4LCoA7gN4LpHs4=
 github.com/cockroachdb/errors v1.11.3 h1:5bA+k2Y6r+oz/6Z/RFlNeVCesGARKuC6YymtcDrbC/I=
 github.com/cockroachdb/errors v1.11.3/go.mod h1:m4UIW4CDjx+R5cybPsNrRbreomiFqt8o1h1wUVazSd8=
 github.com/cockroachdb/logtags v0.0.0-20241215232642-bb51bb14a506 h1:ASDL+UJcILMqgNeV5jiqR4j+sTuvQNHdf2chuKj1M5k=
@@ -873,39 +827,12 @@ github.com/cognusion/imaging v1.0.2 h1:BQwBV8V8eF3+dwffp8Udl9xF1JKh5Z0z5JkJwAi98
 github.com/cognusion/imaging v1.0.2/go.mod h1:mj7FvH7cT2dlFogQOSUQRtotBxJ4gFQ2ySMSmBm5dSk=
 github.com/colinmarc/hdfs/v2 v2.4.0 h1:v6R8oBx/Wu9fHpdPoJJjpGSUxo8NhHIwrwsfhFvU9W0=
 github.com/colinmarc/hdfs/v2 v2.4.0/go.mod h1:0NAO+/3knbMx6+5pCv+Hcbaz4xn/Zzbn9+WIib2rKVI=
-github.com/compose-spec/compose-go/v2 v2.6.0 h1:/+oBD2ixSENOeN/TlJqWZmUak0xM8A7J08w/z661Wd4=
-github.com/compose-spec/compose-go/v2 v2.6.0/go.mod h1:vPlkN0i+0LjLf9rv52lodNMUTJF5YHVfHVGLLIP67NA=
-github.com/containerd/console v1.0.3/go.mod h1:7LqA/THxQ86k76b8c/EMSiaJ3h1eZkMkXar0TQ1gf3U=
-github.com/containerd/console v1.0.5 h1:R0ymNeydRqH2DmakFNdmjR2k0t7UPuiOV/N/27/qqsc=
-github.com/containerd/console v1.0.5/go.mod h1:YynlIjWYF8myEu6sdkwKIvGQq+cOckRm6So2avqoYAk=
-github.com/containerd/containerd/api v1.8.0 h1:hVTNJKR8fMc/2Tiw60ZRijntNMd1U+JVMyTRdsD2bS0=
-github.com/containerd/containerd/api v1.8.0/go.mod h1:dFv4lt6S20wTu/hMcP4350RL87qPWLVa/OHOwmmdnYc=
-github.com/containerd/containerd/v2 v2.0.5 h1:2vg/TjUXnaohAxiHnthQg8K06L9I4gdYEMcOLiMc8BQ=
-github.com/containerd/containerd/v2 v2.0.5/go.mod h1:Qqo0UN43i2fX1FLkrSTCg6zcHNfjN7gEnx3NPRZI+N0=
 github.com/containerd/continuity v0.0.0-20190827140505-75bee3e2ccb6/go.mod h1:GL3xCUCBDV3CZiTSEKksMWbLE66hEyuu9qyDOOqM47Y=
-github.com/containerd/continuity v0.4.5 h1:ZRoN1sXq9u7V6QoHMcVWGhOwDFqZ4B9i5H6un1Wh0x4=
-github.com/containerd/continuity v0.4.5/go.mod h1:/lNJvtJKUQStBzpVQ1+rasXO1LAWtUQssk28EZvJ3nE=
-github.com/containerd/errdefs v1.0.0 h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI=
-github.com/containerd/errdefs v1.0.0/go.mod h1:+YBYIdtsnF4Iw6nWZhJcqGSg/dwvV7tyJ/kCkyJ2k+M=
-github.com/containerd/errdefs/pkg v0.3.0 h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE=
-github.com/containerd/errdefs/pkg v0.3.0/go.mod h1:NJw6s9HwNuRhnjJhM7pylWwMyAkmCQvQ4GpJHEqRLVk=
-github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
-github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo=
-github.com/containerd/platforms v1.0.0-rc.1 h1:83KIq4yy1erSRgOVHNk1HYdPvzdJ5CnsWaRoJX4C41E=
-github.com/containerd/platforms v1.0.0-rc.1/go.mod h1:J71L7B+aiM5SdIEqmd9wp6THLVRzJGXfNuWCZCllLA4=
-github.com/containerd/ttrpc v1.2.7 h1:qIrroQvuOL9HQ1X6KHe2ohc7p+HP/0VE6XPU7elJRqQ=
-github.com/containerd/ttrpc v1.2.7/go.mod h1:YCXHsb32f+Sq5/72xHubdiJRQY9inL4a4ZQrAbN1q9o=
-github.com/containerd/typeurl/v2 v2.2.3 h1:yNA/94zxWdvYACdYO8zofhrTVuQY73fFU1y++dYSw40=
-github.com/containerd/typeurl/v2 v2.2.3/go.mod h1:95ljDnPfD3bAbDJRugOiShd/DlAAsxGtUBhJxIn7SCk=
 github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4=
 github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec=
 github.com/coreos/go-systemd/v22 v22.6.0 h1:aGVa/v8B7hpb0TKl0MWoAavPDmHvobFe5R5zn0bCJWo=
 github.com/coreos/go-systemd/v22 v22.6.0/go.mod h1:iG+pp635Fo7ZmV/j14KUcmEyWF+0X7Lua8rrTWzYgWU=
-github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA=
-github.com/cpuguy83/dockercfg v0.3.2/go.mod h1:sugsbF4//dDlL/i+S+rtpIWp+5h0BHJHfjj5/jFyUJc=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
-github.com/creack/pty v1.1.18 h1:n56/Zwd5o6whRC5PMGretI4IdRLlmBXYNjScPaBgsbY=
-github.com/creack/pty v1.1.18/go.mod h1:MOBLtS5ELjhRRrroQr9kyvTxUAFNvYEK993ew/Vr4O4=
 github.com/creasty/defaults v1.8.0 h1:z27FJxCAa0JKt3utc0sCImAEb+spPucmKoOdLHvHYKk=
 github.com/creasty/defaults v1.8.0/go.mod h1:iGzKe6pbEHnpMPtfDXZEr0NVxWnPTjb1bbDy08fPzYM=
 github.com/cronokirby/saferith v0.33.0 h1:TgoQlfsD4LIwx71+ChfRcIpjkw+RPOapDEVxa+LhwLo=
@@ -931,36 +858,12 @@ github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/r
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
 github.com/diskfs/go-diskfs v1.7.0 h1:vonWmt5CMowXwUc79jWyGrf2DIMeoOjkLlMnQYGVOs8=
 github.com/diskfs/go-diskfs v1.7.0/go.mod h1:LhQyXqOugWFRahYUSw47NyZJPezFzB9UELwhpszLP/k=
-github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
-github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
 github.com/djherbis/times v1.6.0 h1:w2ctJ92J8fBvWPxugmXIv7Nz7Q3iDMKNx9v5ocVH20c=
 github.com/djherbis/times v1.6.0/go.mod h1:gOHeRAz2h+VJNZ5Gmc/o7iD9k4wW7NMVqieYCY99oc0=
 github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
 github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
-github.com/docker/buildx v0.22.0 h1:pGTcGZa+kxpYUlM/6ACsp1hXhkEDulz++RNXPdE8Afk=
-github.com/docker/buildx v0.22.0/go.mod h1:ThbnUe4kNiStlq6cLXruElyEdSTdPL3k/QerNUmPvHE=
-github.com/docker/cli v28.0.4+incompatible h1:pBJSJeNd9QeIWPjRcV91RVJihd/TXB77q1ef64XEu4A=
-github.com/docker/cli v28.0.4+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
-github.com/docker/cli-docs-tool v0.9.0 h1:CVwQbE+ZziwlPqrJ7LRyUF6GvCA+6gj7MTCsayaK9t0=
-github.com/docker/cli-docs-tool v0.9.0/go.mod h1:ClrwlNW+UioiRyH9GiAOe1o3J/TsY3Tr1ipoypjAUtc=
-github.com/docker/compose/v2 v2.35.0 h1:bU23OeFrbGyHYrKijMSEwkOeDg2TLhAGntU2F3hwX1o=
-github.com/docker/compose/v2 v2.35.0/go.mod h1:S5ejUILn9KTYC6noX3IxznWu3/sb3FxdZqIYbq4seAk=
-github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
-github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v28.5.0+incompatible h1:ZdSQoRUE9XxhFI/B8YLvhnEFMmYN9Pp8Egd2qcaFk1E=
-github.com/docker/docker v28.5.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
-github.com/docker/docker-credential-helpers v0.8.2 h1:bX3YxiGzFP5sOXWc3bTPEXdEaZSeVMrFgOr3T+zrFAo=
-github.com/docker/docker-credential-helpers v0.8.2/go.mod h1:P3ci7E3lwkZg6XiHdRKft1KckHiO9a2rNtyFbZ/ry9M=
-github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c h1:lzqkGL9b3znc+ZUgi7FlLnqjQhcXxkNM/quxIjBVMD0=
-github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c/go.mod h1:CADgU4DSXK5QUlFslkQu2yW2TKzFZcXq/leZfM0UH5Q=
 github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
-github.com/docker/go-connections v0.6.0 h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pMmjSD94=
-github.com/docker/go-connections v0.6.0/go.mod h1:AahvXYshr6JgfUJGdDCs2b5EZG/vmaMAntpSFH5BFKE=
-github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQV8=
-github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw=
 github.com/docker/go-units v0.4.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
-github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
-github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
 github.com/dropbox/dropbox-sdk-go-unofficial/v6 v6.0.5 h1:FT+t0UEDykcor4y3dMVKXIiWJETBpRgERYTGlmMd7HU=
 github.com/dropbox/dropbox-sdk-go-unofficial/v6 v6.0.5/go.mod h1:rSS3kM9XMzSQ6pw91Qgd6yB5jdt70N4OdtrAf74As5M=
@@ -977,8 +880,6 @@ github.com/eapache/queue v1.1.0 h1:YOEu7KNc61ntiQlcEeUIoDTJ2o8mQznoNvUhiigpIqc=
 github.com/eapache/queue v1.1.0/go.mod h1:6eCeP0CKFpHLu8blIFXhExK/dRa7WDZfr6jVFPTqq+I=
 github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A=
 github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ=
-github.com/eiannone/keyboard v0.0.0-20220611211555-0d226195f203 h1:XBBHcIb256gUJtLmY22n99HaZTz+r2Z51xUPi01m3wg=
-github.com/eiannone/keyboard v0.0.0-20220611211555-0d226195f203/go.mod h1:E1jcSv8FaEny+OP/5k9UxZVw9YFWGj7eI4KR/iOBqCg=
 github.com/elastic/gosigar v0.14.3 h1:xwkKwPia+hSfg9GqrCUKYdId102m9qTJIIr7egmK/uo=
 github.com/elastic/gosigar v0.14.3/go.mod h1:iXRIGg2tLnu7LBdpqzyQfGDEidKCfWcCMS0WKyPWoMs=
 github.com/elliotwutingfeng/asciiset v0.0.0-20230602022725-51bbb787efab h1:h1UgjJdAAhj+uPL68n7XASS6bU+07ZX1WJvVS2eyoeY=
@@ -987,8 +888,6 @@ github.com/emersion/go-message v0.18.2 h1:rl55SQdjd9oJcIoQNhubD2Acs1E6IzlZISRTK7
 github.com/emersion/go-message v0.18.2/go.mod h1:XpJyL70LwRvq2a8rVbHXikPgKj8+aI0kGdHlg16ibYA=
 github.com/emersion/go-vcard v0.0.0-20241024213814-c9703dde27ff h1:4N8wnS3f1hNHSmFD5zgFkWCyA4L1kCDkImPAtK7D6tg=
 github.com/emersion/go-vcard v0.0.0-20241024213814-c9703dde27ff/go.mod h1:HMJKR5wlh/ziNp+sHEDV2ltblO4JD2+IdDOWtGcQBTM=
-github.com/emicklei/go-restful/v3 v3.11.0 h1:rAQeMHw1c7zTmncogyy8VvRZwtkmkZ4FxERmMY4rD+g=
-github.com/emicklei/go-restful/v3 v3.11.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
@@ -1039,16 +938,10 @@ github.com/fortytw2/leaktest v1.3.0 h1:u8491cBMTQ8ft8aeV+adlcytMZylmA5nnwwkRZjI8
 github.com/fortytw2/leaktest v1.3.0/go.mod h1:jDsjWgpAGjm2CA7WthBh/CdZYEPF31XHquHwclZch5g=
 github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
 github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
-github.com/fsnotify/fsevents v0.2.0 h1:BRlvlqjvNTfogHfeBOFvSC9N0Ddy+wzQCQukyoD7o/c=
-github.com/fsnotify/fsevents v0.2.0/go.mod h1:B3eEk39i4hz8y1zaWS/wPrAP4O6wkIl7HQwKBr1qH/w=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/fsnotify/fsnotify v1.6.0/go.mod h1:sl3t1tCWJFWoRz9R8WJCbQihKKwmorjAbSClcnxKAGw=
 github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k=
 github.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0=
-github.com/fvbommel/sortorder v1.1.0 h1:fUmoe+HLsBTctBDoaBwpQo5N+nrCp8g/BjKb/6ZQmYw=
-github.com/fvbommel/sortorder v1.1.0/go.mod h1:uk88iVf1ovNn1iLfgUVU2F9o5eO30ui720w+kxuqRs0=
-github.com/fxamacker/cbor/v2 v2.7.0 h1:iM5WgngdRBanHcxugY4JySA0nk1wZorNOpTgCMedv5E=
-github.com/fxamacker/cbor/v2 v2.7.0/go.mod h1:pxXPTn3joSm21Gbwsv0w9OSA2y1HFR9qXEeXQVeNoDQ=
 github.com/gabriel-vasile/mimetype v1.4.11 h1:AQvxbp830wPhHTqc1u7nzoLT+ZFxGY7emj5DR5DYFik=
 github.com/gabriel-vasile/mimetype v1.4.11/go.mod h1:d+9Oxyo1wTzWdyVUPMmXFvp4F9tea18J8ufA774AB3s=
 github.com/geoffgarside/ber v1.2.0 h1:/loowoRcs/MWLYmGX9QtIAbA+V/FrnVLsMMPhwiRm64=
@@ -1102,14 +995,8 @@ github.com/go-ole/go-ole v1.3.0 h1:Dt6ye7+vXGIKZ7Xtk4s6/xVdGDQynvom7xCFEdWr6uE=
 github.com/go-ole/go-ole v1.3.0/go.mod h1:5LS6F96DhAwUc7C+1HLexzMXY1xGRSryjyPPKW6zv78=
 github.com/go-openapi/errors v0.22.4 h1:oi2K9mHTOb5DPW2Zjdzs/NIvwi2N3fARKaTJLdNabaM=
 github.com/go-openapi/errors v0.22.4/go.mod h1:z9S8ASTUqx7+CP1Q8dD8ewGH/1JWFFLX/2PmAYNQLgk=
-github.com/go-openapi/jsonpointer v0.19.6 h1:eCs3fxoIi3Wh6vtgmLTOjdhSpiqphQ+DaPn38N2ZdrE=
-github.com/go-openapi/jsonpointer v0.19.6/go.mod h1:osyAmYz/mB/C3I+WsTTSgw1ONzaLJoLCyoi6/zppojs=
-github.com/go-openapi/jsonreference v0.20.2 h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2KvnJRumpMGbE=
-github.com/go-openapi/jsonreference v0.20.2/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
 github.com/go-openapi/strfmt v0.25.0 h1:7R0RX7mbKLa9EYCTHRcCuIPcaqlyQiWNPTXwClK0saQ=
 github.com/go-openapi/strfmt v0.25.0/go.mod h1:nNXct7OzbwrMY9+5tLX4I21pzcmE6ccMGXl3jFdPfn8=
-github.com/go-openapi/swag v0.22.4 h1:QLMzNJnMGPRNDCbySlcj1x01tzU8/9LTTL9hZZZogBU=
-github.com/go-openapi/swag v0.22.4/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
 github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6Ub6wls=
 github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
 github.com/go-pdf/fpdf v0.5.0/go.mod h1:HzcnA+A23uwogo0tp9yU+l3V+KXhiESpt1PMayhOh5M=
@@ -1159,8 +1046,8 @@ github.com/golang-jwt/jwt/v4 v4.4.1/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w
 github.com/golang-jwt/jwt/v4 v4.4.3/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
 github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
-github.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=
-github.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
+github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
+github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
 github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0/go.mod h1:E/TSTwGwJL78qG/PmXZO1EjYhfJinVAhrmmHX6Z8B9k=
 github.com/golang/geo v0.0.0-20210211234256-740aa86cb551 h1:gtexQ/VGyN+VVFRXSFiguSNcXmS6rkKT+X7FdIrTtfo=
 github.com/golang/geo v0.0.0-20210211234256-740aa86cb551/go.mod h1:QZ0nwyI2jOfgRAoBvP+ab5aRr7c9x7lhGEJrKvBwjWI=
@@ -1170,8 +1057,8 @@ github.com/golang/glog v1.1.0/go.mod h1:pfYeQZ3JWZoXTV5sFc986z3HTpwQs9At6P4ImfuP
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
-github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ=
-github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8/go.mod h1:wcDNUvekVysuuOpQKo3191zZyTpiI6se1N1ULghS0sw=
+github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE=
+github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/mock v1.3.1/go.mod h1:sBzyDLLjw3U8JLTeZvSv8jJB+tU5PVekmnlKIyFUx0Y=
@@ -1217,8 +1104,6 @@ github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl76
 github.com/google/flatbuffers v2.0.8+incompatible/go.mod h1:1AeVuKshWv4vARoZatz6mlQ0JxURH0Kv5+zNeJKJCa8=
 github.com/google/flatbuffers/go v0.0.0-20230108230133-3b8644d32c50 h1:T0YCYlZLzmdsd0bsozI4ecxk03KYOiszof14y7ekQFw=
 github.com/google/flatbuffers/go v0.0.0-20230108230133-3b8644d32c50/go.mod h1:qmRCJW6OqZkfBt584Cmq1im0f4367CLrdABrq5lMOWo=
-github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
-github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
@@ -1272,8 +1157,6 @@ github.com/google/pprof v0.0.0-20250317173921-a4b03ec1a45e/go.mod h1:boTsfXsheKC
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
 github.com/google/s2a-go v0.1.9 h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0=
 github.com/google/s2a-go v0.1.9/go.mod h1:YA0Ei2ZQL3acow2O62kdp9UlnvMmU7kA6Eutn0dXayM=
-github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4=
-github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.2.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -1303,10 +1186,6 @@ github.com/googleapis/gax-go/v2 v2.15.0 h1:SyjDc1mGgZU5LncH8gimWo9lW1DtIfPibOG81
 github.com/googleapis/gax-go/v2 v2.15.0/go.mod h1:zVVkkxAQHa1RQpg9z2AUCMnKhi0Qld9rcmyfL1OZhoc=
 github.com/googleapis/go-type-adapters v1.0.0/go.mod h1:zHW75FOG2aur7gAO2B+MLby+cLsWGBF62rFAi7WjWO4=
 github.com/googleapis/google-cloud-go-testing v0.0.0-20200911160855-bcd43fbb19e8/go.mod h1:dvDLG8qkwmyD9a/MJJN3XJcT3xFxOKAvTZGvuZmac9g=
-github.com/gookit/color v1.4.2/go.mod h1:fqRyamkC1W8uxl+lxCQxOT09l/vYfZ+QeiX3rKQHCoQ=
-github.com/gookit/color v1.5.0/go.mod h1:43aQb+Zerm/BWh2GnrgOQm7ffz7tvQXEKV6BFMl7wAo=
-github.com/gookit/color v1.5.4 h1:FZmqs7XOyGgCAxmWyPslpiok1k05wmY3SJTytgvYFs0=
-github.com/gookit/color v1.5.4/go.mod h1:pZJOeOS8DM43rXbp4AZo1n9zCU2qjpcRko0b6/QJi9w=
 github.com/gopherjs/gopherjs v1.17.2 h1:fQnZVsXk8uxXIStYb0N4bGk7jeyTalG/wsZjQ25dO0g=
 github.com/gopherjs/gopherjs v1.17.2/go.mod h1:pRRIvn/QzFLrKfvEz3qUuEhtE/zLCWfreZ6J5gM2i+k=
 github.com/gorilla/context v1.1.2 h1:WRkNAv2uoa03QNIc1A6u4O7DAGMUVoopZhkiXWA2V1o=
@@ -1321,18 +1200,14 @@ github.com/gorilla/securecookie v1.1.2/go.mod h1:NfCASbcHqRSY+3a8tlWJwsQap2VX5pw
 github.com/gorilla/sessions v1.2.1/go.mod h1:dk2InVEVJ0sfLlnXv9EAgkf6ecYs/i80K/zI+bUmuGM=
 github.com/gorilla/sessions v1.4.0 h1:kpIYOp/oi6MG/p5PgxApU8srsSw9tuFbt46Lt7auzqQ=
 github.com/gorilla/sessions v1.4.0/go.mod h1:FLWm50oby91+hl7p/wRxDth9bWSuk0qVL2emc7lT5ik=
-github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
-github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 h1:UH//fgunKIs4JdUbpDl1VZCDaL56wXCB/5+wF6uHfaI=
 github.com/grpc-ecosystem/go-grpc-middleware v1.4.0/go.mod h1:g5qyo/la0ALbONm6Vbp88Yd8NsDy6rZz+RcrMPxvld8=
 github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo=
 github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0/go.mod h1:hgWBS7lorOAVIJEQMi4ZsPv9hVvWI6+ch50m39Pf2Ks=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.11.3/go.mod h1:o//XUCC/F+yRGJoPO/VU0GSB0f8Nhgmxx0VIRUvaC0w=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4=
-github.com/hamba/avro/v2 v2.30.0 h1:OaIdh0+dZIJ331FO/+YYBwZZRdGVyyHuRSyHsjZLJoA=
-github.com/hamba/avro/v2 v2.30.0/go.mod h1:X6gDhYv6DQVAT56VqOKuW+PLnQrEQqGB9l1nhlMdAdQ=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 h1:X5VWvz21y3gzm9Nw/kaUeku/1+uBhcekkmy4IkffJww=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1/go.mod h1:Zanoh4+gvIgluNqcfMVTJueD4wSS5hT7zTt4Mrutd90=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
 github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
@@ -1370,8 +1245,6 @@ github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/b
 github.com/hashicorp/go-uuid v1.0.2/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=
 github.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
-github.com/hashicorp/go-version v1.7.0 h1:5tqGy27NaOTB8yJKUZELlFAS/LTKJkrmONwQKeRZfjY=
-github.com/hashicorp/go-version v1.7.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
 github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/golang-lru v0.5.4/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
@@ -1402,14 +1275,8 @@ github.com/iancoleman/strcase v0.2.0/go.mod h1:iwCmte+B7n89clKwxIoIXy/HfoL7AsD47
 github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
 github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
 github.com/imdario/mergo v0.3.9/go.mod h1:2EnlNZ0deacrJVfApfmtdGgDfMuh/nq6Ok1EcJh5FfA=
-github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
-github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
-github.com/in-toto/in-toto-golang v0.5.0 h1:hb8bgwr0M2hGdDsLjkJ3ZqJ8JFLL/tgYdAxF/XEFBbY=
-github.com/in-toto/in-toto-golang v0.5.0/go.mod h1:/Rq0IZHLV7Ku5gielPT4wPHJfH1GdHMCq8+WPxw8/BE=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
-github.com/inhies/go-bytesize v0.0.0-20220417184213-4913239db9cf h1:FtEj8sfIcaaBfAKrE1Cwb61YDtYq9JxChK1c7AKce7s=
-github.com/inhies/go-bytesize v0.0.0-20220417184213-4913239db9cf/go.mod h1:yrqSXGoD/4EKfF26AOGzscPOgTTJcyAwM2rpixWT+t4=
 github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=
 github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=
@@ -1432,14 +1299,10 @@ github.com/jcmturner/gokrb5/v8 v8.4.4 h1:x1Sv4HaTpepFkXbt2IkL29DXRf8sOfZXo8eRKh6
 github.com/jcmturner/gokrb5/v8 v8.4.4/go.mod h1:1btQEpgT6k+unzCwX1KdWMEwPPkkgBtP+F6aCACiMrs=
 github.com/jcmturner/rpc/v2 v2.0.3 h1:7FXXj8Ti1IaVFpSAziCZWNzbNuZmnvw/i6CqLNdWfZY=
 github.com/jcmturner/rpc/v2 v2.0.3/go.mod h1:VUJYCIDm3PVOEHw8sgt091/20OJjskO/YJki3ELg/Hc=
-github.com/jhump/protoreflect v1.18.0 h1:TOz0MSR/0JOZ5kECB/0ufGnC2jdsgZ123Rd/k4Z5/2w=
-github.com/jhump/protoreflect v1.18.0/go.mod h1:ezWcltJIVF4zYdIFM+D/sHV4Oh5LNU08ORzCGfwvTz8=
-github.com/jhump/protoreflect/v2 v2.0.0-beta.1 h1:Dw1rslK/VotaUGYsv53XVWITr+5RCPXfvvlGrM/+B6w=
-github.com/jhump/protoreflect/v2 v2.0.0-beta.1/go.mod h1:D9LBEowZyv8/iSu97FU2zmXG3JxVTmNw21mu63niFzU=
+github.com/jhump/protoreflect v1.17.0 h1:qOEr613fac2lOuTgWN4tPAtLL7fUSbuJL5X5XumQh94=
+github.com/jhump/protoreflect v1.17.0/go.mod h1:h9+vUUL38jiBzck8ck+6G/aeMX8Z4QUY/NiJPwPNi+8=
 github.com/jinzhu/copier v0.4.0 h1:w3ciUoD19shMCRargcpm0cm91ytaBhDvuRpz1ODO/U8=
 github.com/jinzhu/copier v0.4.0/go.mod h1:DfbEm0FYsaqBcKcFuvmOZb218JkPGtvSHsKg8S8hyyg=
-github.com/jinzhu/inflection v1.0.0 h1:K317FqzuhWc8YvSVlFMCCUb36O/S9MCKRDI7QkRKD/E=
-github.com/jinzhu/inflection v1.0.0/go.mod h1:h+uFLlag+Qp1Va5pdKtLDYj+kHp5pxUVkryuEj+Srlc=
 github.com/jlaffaye/ftp v0.2.1-0.20240918233326-1b970516f5d3 h1:ZxO6Qr2GOXPdcW80Mcn3nemvilMPvpWqxrNfK2ZnNNs=
 github.com/jlaffaye/ftp v0.2.1-0.20240918233326-1b970516f5d3/go.mod h1:dvLUr/8Fs9a2OBrEnCC5duphbkz/k/mSy5OkXg3PAgI=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
@@ -1478,20 +1341,16 @@ github.com/karlseguin/ccache/v2 v2.0.8 h1:lT38cE//uyf6KcFok0rlgXtGFBWxkI6h/qg4tb
 github.com/karlseguin/ccache/v2 v2.0.8/go.mod h1:2BDThcfQMf/c0jnZowt16eW405XIqZPavt+HoYEtcxQ=
 github.com/karlseguin/expect v1.0.2-0.20190806010014-778a5f0c6003 h1:vJ0Snvo+SLMY72r5J4sEfkuE7AFbixEP2qRbEcum/wA=
 github.com/karlseguin/expect v1.0.2-0.20190806010014-778a5f0c6003/go.mod h1:zNBxMY8P21owkeogJELCLeHIt+voOSduHYTFUbwRAV8=
-github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/keybase/go-keychain v0.0.1 h1:way+bWYa6lDppZoZcgMbYsvC7GxljxrskdNInRtuthU=
 github.com/keybase/go-keychain v0.0.1/go.mod h1:PdEILRW3i9D8JcdM+FmY6RwkHGnhHxXwkPPMeUgOK1k=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
-github.com/klauspost/asmfmt v1.3.2 h1:4Ri7ox3EwapiOjCki+hw14RyKk201CN4rzyCJRFLpK4=
 github.com/klauspost/asmfmt v1.3.2/go.mod h1:AG8TuvYojzulgDAMCnYn50l/5QV3Bs/tp6j0HLHbNSE=
 github.com/klauspost/compress v1.15.9/go.mod h1:PhcZ0MbTNciWF3rruxRgKxI5NkcHHrHUDtV4Yw2GlzU=
-github.com/klauspost/compress v1.18.3 h1:9PJRvfbmTabkOX8moIpXPbMMbYN60bWImDDU7L+/6zw=
-github.com/klauspost/compress v1.18.3/go.mod h1:R0h/fSBs8DE4ENlcrlib3PsXS61voFxhIs2DeRhCvJ4=
+github.com/klauspost/compress v1.18.2 h1:iiPHWW0YrcFgpBYhsA6D1+fqHssJscY/Tm/y2Uqnapk=
+github.com/klauspost/compress v1.18.2/go.mod h1:R0h/fSBs8DE4ENlcrlib3PsXS61voFxhIs2DeRhCvJ4=
 github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
-github.com/klauspost/cpuid/v2 v2.0.10/go.mod h1:g2LTdtYhdyuGPqyWyv7qRAmj1WBqxuObKfj5c0PQa7c=
-github.com/klauspost/cpuid/v2 v2.0.12/go.mod h1:g2LTdtYhdyuGPqyWyv7qRAmj1WBqxuObKfj5c0PQa7c=
 github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y=
 github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
 github.com/klauspost/reedsolomon v1.13.0 h1:E0Cmgf2kMuhZTj6eefnvpKC4/Q4jhCi9YIjcZjK4arc=
@@ -1526,14 +1385,12 @@ github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
 github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
 github.com/lib/pq v0.0.0-20180327071824-d34b9ff171c2/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.8.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lib/pq v1.11.1 h1:wuChtj2hfsGmmx3nf1m7xC2XpK6OtelS2shMY+bGMtI=
-github.com/lib/pq v1.11.1/go.mod h1:/p+8NSbOcwzAEI7wiMXFlgydTwcgTr3OSKMsD2BitpA=
+github.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw=
+github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/linkedin/goavro/v2 v2.14.1 h1:/8VjDpd38PRsy02JS0jflAu7JZPfJcGTwqWgMkFS2iI=
 github.com/linkedin/goavro/v2 v2.14.1/go.mod h1:KXx+erlq+RPlGSPmLF7xGo6SAbh8sCQ53x064+ioxhk=
-github.com/linxGnu/grocksdb v1.10.7 h1:fCi4qvZWo04VgFwGWmO8HQJgUVounJBy+C2TMVPU/ho=
-github.com/linxGnu/grocksdb v1.10.7/go.mod h1:OLQKZwiKwaJiAVCsOzWKvwiLwfZ5Vz8Md5TYR7t7pM8=
-github.com/lithammer/fuzzysearch v1.1.8 h1:/HIuJnjHuXS8bKaiTMeeDlW2/AyIWk2brx1V8LFgLN4=
-github.com/lithammer/fuzzysearch v1.1.8/go.mod h1:IdqeyBClc3FFqSzYq/MXESsS4S0FsZ5ajtkr5xPLts4=
+github.com/linxGnu/grocksdb v1.10.3 h1:0laII9AQ6kFxo5SjhdTfSh9EgF20piD6TMHK6YuDm+4=
+github.com/linxGnu/grocksdb v1.10.3/go.mod h1:OLQKZwiKwaJiAVCsOzWKvwiLwfZ5Vz8Md5TYR7t7pM8=
 github.com/lithammer/shortuuid/v3 v3.0.7 h1:trX0KTHy4Pbwo/6ia8fscyHoGA+mf1jWbPJVuvyJQQ8=
 github.com/lithammer/shortuuid/v3 v3.0.7/go.mod h1:vMk8ke37EmiewwolSO1NLW8vP4ZaKlRuDIi8tWWmAts=
 github.com/lpar/date v1.0.0 h1:bq/zVqFTUmsxvd/CylidY4Udqpr9BOFrParoP6p0x/I=
@@ -1543,8 +1400,6 @@ github.com/lufia/plan9stats v0.0.0-20251013123823-9fd1530e3ec3/go.mod h1:autxFIv
 github.com/lyft/protoc-gen-star v0.6.0/go.mod h1:TGAoBVkt8w7MPG72TrKIu85MIdXwDuzJYeZuUPFPNwA=
 github.com/lyft/protoc-gen-star v0.6.1/go.mod h1:TGAoBVkt8w7MPG72TrKIu85MIdXwDuzJYeZuUPFPNwA=
 github.com/lyft/protoc-gen-star/v2 v2.0.1/go.mod h1:RcCdONR2ScXaYnQC5tUzxzlpA3WVYF7/opLeUgcQs/o=
-github.com/magiconair/properties v1.8.10 h1:s31yESBquKXCV9a/ScB3ESkOjUYYv+X0rg8SYxI99mE=
-github.com/magiconair/properties v1.8.10/go.mod h1:Dhd985XPs7jluiymwWYZ0G4Z61jb3vdS329zhj2hYo0=
 github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
 github.com/mailru/easyjson v0.9.1 h1:LbtsOm5WAswyWbvTEOqhypdPeZzHavpZx96/n553mR8=
 github.com/mailru/easyjson v0.9.1/go.mod h1:1+xMtQp2MRNVL/V1bOzuP3aP8VNwRW55fQUto+XFtTU=
@@ -1558,22 +1413,13 @@ github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/
 github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/mattn/go-runewidth v0.0.3/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU=
-github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
 github.com/mattn/go-runewidth v0.0.19 h1:v++JhqYnZuu5jSKrk9RbgF5v4CGUjqRfBm05byFGLdw=
 github.com/mattn/go-runewidth v0.0.19/go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=
-github.com/mattn/go-shellwords v1.0.12 h1:M2zGm7EW6UQJvDeQxo4T51eKPurbeFbe8WtebGE2xrk=
-github.com/mattn/go-shellwords v1.0.12/go.mod h1:EZzvwXDESEeg03EKmM+RmDnNOPKG4lLtQsUlTZDWQ8Y=
 github.com/mattn/go-sqlite3 v1.14.14/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
 github.com/mattn/go-sqlite3 v1.14.33 h1:A5blZ5ulQo2AtayQ9/limgHEkFreKj1Dv226a1K73s0=
 github.com/mattn/go-sqlite3 v1.14.33/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
-github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b h1:j7+1HpAFS1zy5+Q4qx1fWh90gTKwiN4QCGoY9TWyyO4=
-github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b/go.mod h1:01TrycV0kFyexm33Z7vhZRXopbI8J3TDReVlkTgMUxE=
-github.com/miekg/pkcs11 v1.1.1 h1:Ugu9pdy6vAYku5DEpVWVFPYnzV+bxB+iRdbuFSu7TvU=
-github.com/miekg/pkcs11 v1.1.1/go.mod h1:XsNlhZGX73bx86s2hdc/FuaLm2CPZJemRLMA+WTFxgs=
-github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8 h1:AMFGa4R4MiIpspGNG7Z948v4n35fFGB3RR3G/ry4FWs=
 github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8/go.mod h1:mC1jAcsrzbxHt8iiaC+zU4b1ylILSosueou12R++wfY=
-github.com/minio/c2goasm v0.0.0-20190812172519-36a3d3bbc4f3 h1:+n/aFZefKZp7spd8DFdX7uMikMLXX4oubIzJF4kv/wI=
 github.com/minio/c2goasm v0.0.0-20190812172519-36a3d3bbc4f3/go.mod h1:RagcQ7I8IeTMnF8JTXieKnO4Z6JCsikNEzj0DwauVzE=
 github.com/minio/crc64nvme v1.1.1 h1:8dwx/Pz49suywbO+auHCBpCtlW1OfpcLN7wYgVR6wAI=
 github.com/minio/crc64nvme v1.1.1/go.mod h1:eVfm2fAzLlxMdUGc0EEBGSMmPwmXD5XiNRpnu9J3bvg=
@@ -1584,43 +1430,13 @@ github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db/go.mod h1:l0
 github.com/mitchellh/copystructure v1.0.0/go.mod h1:SNtv71yrdKgLRyLFxmLdkAbkKEFWgYaq1OVrnRcwhnw=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
-github.com/mitchellh/hashstructure/v2 v2.0.2 h1:vGKWl0YJqUNxE8d+h8f6NJLcCJrgbhC4NcD46KavDd4=
-github.com/mitchellh/hashstructure/v2 v2.0.2/go.mod h1:MG3aRVU/N29oo/V/IhBX8GR/zz4kQkprJgF2EVszyDE=
 github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4 h1:BpfhmLKZf+SjVanKKhCgf3bg+511DmU9eDQTen7LLbY=
 github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
 github.com/mitchellh/reflectwalk v1.0.0/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
 github.com/mmcloughlin/geohash v0.9.0 h1:FihR004p/aE1Sju6gcVq5OLDqGcMnpBY+8moBqIsVOs=
 github.com/mmcloughlin/geohash v0.9.0/go.mod h1:oNZxQo5yWJh0eMQEP/8hwQuVx9Z9tjwFUqcTB1SmG0c=
-github.com/moby/buildkit v0.20.1 h1:sT0ZXhhNo5rVbMcYfgttma3TdUHfO5JjFA0UAL8p9fY=
-github.com/moby/buildkit v0.20.1/go.mod h1:Rq9nB/fJImdk6QeM0niKtOHJqwKeYMrK847hTTDVuA4=
-github.com/moby/docker-image-spec v1.3.1 h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0=
-github.com/moby/docker-image-spec v1.3.1/go.mod h1:eKmb5VW8vQEh/BAr2yvVNvuiJuY6UIocYsFu/DxxRpo=
-github.com/moby/go-archive v0.1.0 h1:Kk/5rdW/g+H8NHdJW2gsXyZ7UnzvJNOy6VKJqueWdcQ=
-github.com/moby/go-archive v0.1.0/go.mod h1:G9B+YoujNohJmrIYFBpSd54GTUB4lt9S+xVQvsJyFuo=
-github.com/moby/locker v1.0.1 h1:fOXqR41zeveg4fFODix+1Ch4mj/gT0NE1XJbp/epuBg=
-github.com/moby/locker v1.0.1/go.mod h1:S7SDdo5zpBK84bzzVlKr2V0hz+7x9hWbYC/kq7oQppc=
-github.com/moby/patternmatcher v0.6.0 h1:GmP9lR19aU5GqSSFko+5pRqHi+Ohk1O69aFiKkVGiPk=
-github.com/moby/patternmatcher v0.6.0/go.mod h1:hDPoyOpDY7OrrMDLaYoY3hf52gNCR/YOUYxkhApJIxc=
-github.com/moby/spdystream v0.4.0 h1:Vy79D6mHeJJjiPdFEL2yku1kl0chZpJfZcPpb16BRl8=
-github.com/moby/spdystream v0.4.0/go.mod h1:xBAYlnt/ay+11ShkdFKNAG7LsyK/tmNBVvVOwrfMgdI=
-github.com/moby/sys/atomicwriter v0.1.0 h1:kw5D/EqkBwsBFi0ss9v1VG3wIkVhzGvLklJ+w3A14Sw=
-github.com/moby/sys/atomicwriter v0.1.0/go.mod h1:Ul8oqv2ZMNHOceF643P6FKPXeCmYtlQMvpizfsSoaWs=
-github.com/moby/sys/capability v0.4.0 h1:4D4mI6KlNtWMCM1Z/K0i7RV1FkX+DBDHKVJpCndZoHk=
-github.com/moby/sys/capability v0.4.0/go.mod h1:4g9IK291rVkms3LKCDOoYlnV8xKwoDTpIrNEE35Wq0I=
 github.com/moby/sys/mountinfo v0.7.2 h1:1shs6aH5s4o5H2zQLn796ADW1wMrIwHsyJ2v9KouLrg=
 github.com/moby/sys/mountinfo v0.7.2/go.mod h1:1YOa8w8Ih7uW0wALDUgT1dTTSBrZ+HiBLGws92L2RU4=
-github.com/moby/sys/sequential v0.6.0 h1:qrx7XFUd/5DxtqcoH1h438hF5TmOvzC/lspjy7zgvCU=
-github.com/moby/sys/sequential v0.6.0/go.mod h1:uyv8EUTrca5PnDsdMGXhZe6CCe8U/UiTWd+lL+7b/Ko=
-github.com/moby/sys/signal v0.7.1 h1:PrQxdvxcGijdo6UXXo/lU/TvHUWyPhj7UOpSo8tuvk0=
-github.com/moby/sys/signal v0.7.1/go.mod h1:Se1VGehYokAkrSQwL4tDzHvETwUZlnY7S5XtQ50mQp8=
-github.com/moby/sys/symlink v0.3.0 h1:GZX89mEZ9u53f97npBy4Rc3vJKj7JBDj/PN2I22GrNU=
-github.com/moby/sys/symlink v0.3.0/go.mod h1:3eNdhduHmYPcgsJtZXW1W4XUJdZGBIkttZ8xKqPUJq0=
-github.com/moby/sys/user v0.4.0 h1:jhcMKit7SA80hivmFJcbB1vqmw//wU61Zdui2eQXuMs=
-github.com/moby/sys/user v0.4.0/go.mod h1:bG+tYYYJgaMtRKgEmuueC0hJEAZWwtIbZTB+85uoHjs=
-github.com/moby/sys/userns v0.1.0 h1:tVLXkFOxVu9A64/yh59slHVv9ahO9UIev4JZusOLG/g=
-github.com/moby/sys/userns v0.1.0/go.mod h1:IHUYgu/kao6N8YZlp9Cf444ySSvCmDlmzUcYfDHOl28=
-github.com/moby/term v0.5.2 h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ=
-github.com/moby/term v0.5.2/go.mod h1:d3djjFCrjnB+fl8NJux+EJzu0msscUP+f8it8hPkFLc=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
@@ -1630,14 +1446,10 @@ github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9G
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/montanaflynn/stats v0.7.1 h1:etflOAAHORrCC44V+aR6Ftzort912ZU+YLiSTuV8eaE=
 github.com/montanaflynn/stats v0.7.1/go.mod h1:etXPPgVO6n31NxCd9KQUMvCM+ve0ruNzt6R8Bnaayow=
-github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A=
-github.com/morikuni/aec v1.0.0/go.mod h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
-github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus=
-github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw=
 github.com/nats-io/jwt/v2 v2.5.0 h1:WQQ40AAlqqfx+f6ku+i0pOVm+ASirD4fUh+oQsiE9Ak=
 github.com/nats-io/jwt/v2 v2.5.0/go.mod h1:24BeQtRwxRV8ruvC4CojXlx/WQ/VjuwlYiH+vu/+ibI=
 github.com/nats-io/nats-server/v2 v2.9.23 h1:6Wj6H6QpP9FMlpCyWUaNu2yeZ/qGj+mdRkZ1wbikExU=
@@ -1668,11 +1480,7 @@ github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1Cpa
 github.com/onsi/gomega v1.37.0 h1:CdEG8g0S133B4OswTDC/5XPSzE1OeP29QOioj2PID2Y=
 github.com/onsi/gomega v1.37.0/go.mod h1:8D9+Txp43QWKhM24yyOBEdpkzN8FvJyAwecBgsU4KU0=
 github.com/opencontainers/go-digest v1.0.0-rc1/go.mod h1:cMLVZDEM3+U2I4VmLI6N8jQYUd2OVphdqWwCJHrFt2s=
-github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
-github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.0.1/go.mod h1:BtxoFyWECRxE4U/7sNtV5W15zMzWCbyJoFRP3s7yZA0=
-github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
-github.com/opencontainers/image-spec v1.1.1/go.mod h1:qpqAh3Dmcf36wStyyWU+kCeDgrGnAve2nCC8+7h8Q0M=
 github.com/opencontainers/runc v1.0.0-rc9/go.mod h1:qT5XzbpPznkRYVz/mWwUaVBUv2rmF59PVA73FjuZG0U=
 github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
 github.com/opentracing/opentracing-go v1.2.0 h1:uEJPy/1a5RIPAJ0Ov+OIO8OxWu77jEv+1B0VhjKrZUs=
@@ -1696,17 +1504,14 @@ github.com/pascaldekloe/goe v0.1.0 h1:cBOtyMzM9HTpWjXfbbunk26uA6nG3a8n06Wieeh0Mw
 github.com/pascaldekloe/goe v0.1.0/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
 github.com/patrickmn/go-cache v2.1.0+incompatible h1:HRMgzkcYKYpi3C8ajMPV8OFXaaRUnok+kx1WdO15EQc=
 github.com/patrickmn/go-cache v2.1.0+incompatible/go.mod h1:3Qf8kWWT7OJRJbdiICTKqZju1ZixQ/KpMGzzAfe6+WQ=
-github.com/pelletier/go-toml v1.9.5 h1:4yBQzkHv+7BHq2PQUZF3Mx0IYxG7LsP222s7Agd3ve8=
-github.com/pelletier/go-toml v1.9.5/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c=
 github.com/pelletier/go-toml/v2 v2.2.4 h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=
 github.com/pelletier/go-toml/v2 v2.2.4/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=
 github.com/pengsrc/go-shared v0.2.1-0.20190131101655-1999055a4a14 h1:XeOYlK9W1uCmhjJSsY78Mcuh7MVkNjTzmHx1yBzizSU=
 github.com/pengsrc/go-shared v0.2.1-0.20190131101655-1999055a4a14/go.mod h1:jVblp62SafmidSkvWrXyxAme3gaTfEtWwRPGz5cpvHg=
 github.com/peterh/liner v1.2.2 h1:aJ4AOodmL+JxOZZEL2u9iJf8omNRpqHc/EbrK+3mAXw=
 github.com/peterh/liner v1.2.2/go.mod h1:xFwJyiKIXJZUKItq5dGHZSTBRAuG/CpeNpWLyiNRNwI=
+github.com/petermattis/goid v0.0.0-20180202154549-b0b1615b78e5 h1:q2e307iGHPdTGp0hoxKjt1H5pDo6utceo3dQVK3I5XQ=
 github.com/petermattis/goid v0.0.0-20180202154549-b0b1615b78e5/go.mod h1:jvVRKCrJTQWu0XVbaOlby/2lO20uSCHEMzzplHXte1o=
-github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741 h1:KPpdlQLZcHfTMQRi6bFQ7ogNO0ltFT4PmtwTLW4W+14=
-github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741/go.mod h1:pxMtw7cyUw6B2bRH0ZBANSPg+AoSud1I1iyJHI69jH4=
 github.com/philhofer/fwd v1.1.2/go.mod h1:qkPdfjR2SIEbspLqpe1tO4n5yICnr2DY7mqEx2tUTP0=
 github.com/philhofer/fwd v1.2.0 h1:e6DnBTl7vGY+Gz322/ASL4Gyp1FspeMvx1RNDoToZuM=
 github.com/philhofer/fwd v1.2.0/go.mod h1:RqIHx9QI14HlwKwm98g9Re5prTQ6LdeRQn+gXJFxsJM=
@@ -1787,25 +1592,12 @@ github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4O
 github.com/prometheus/procfs v0.6.0/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
 github.com/prometheus/procfs v0.19.2 h1:zUMhqEW66Ex7OXIiDkll3tl9a1ZdilUOd/F6ZXw4Vws=
 github.com/prometheus/procfs v0.19.2/go.mod h1:M0aotyiemPhBCM0z5w87kL22CxfcH05ZpYlu+b4J7mw=
-github.com/pterm/pterm v0.12.27/go.mod h1:PhQ89w4i95rhgE+xedAoqous6K9X+r6aSOI2eFF7DZI=
-github.com/pterm/pterm v0.12.29/go.mod h1:WI3qxgvoQFFGKGjGnJR849gU0TsEOvKn5Q8LlY1U7lg=
-github.com/pterm/pterm v0.12.30/go.mod h1:MOqLIyMOgmTDz9yorcYbcw+HsgoZo3BQfg2wtl3HEFE=
-github.com/pterm/pterm v0.12.31/go.mod h1:32ZAWZVXD7ZfG0s8qqHXePte42kdz8ECtRyEejaWgXU=
-github.com/pterm/pterm v0.12.33/go.mod h1:x+h2uL+n7CP/rel9+bImHD5lF3nM9vJj80k9ybiiTTE=
-github.com/pterm/pterm v0.12.36/go.mod h1:NjiL09hFhT/vWjQHSj1athJpx6H8cjpHXNAK5bUw8T8=
-github.com/pterm/pterm v0.12.40/go.mod h1:ffwPLwlbXxP+rxT0GsgDTzS3y3rmpAO1NMjUkGTYf8s=
-github.com/pterm/pterm v0.12.81 h1:ju+j5I2++FO1jBKMmscgh5h5DPFDFMB7epEjSoKehKA=
-github.com/pterm/pterm v0.12.81/go.mod h1:TyuyrPjnxfwP+ccJdBTeWHtd/e0ybQHkOS/TakajZCw=
 github.com/putdotio/go-putio/putio v0.0.0-20200123120452-16d982cac2b8 h1:Y258uzXU/potCYnQd1r6wlAnoMB68BiCkCcCnKx1SH8=
 github.com/putdotio/go-putio/putio v0.0.0-20200123120452-16d982cac2b8/go.mod h1:bSJjRokAHHOhA+XFxplld8w2R/dXLH7Z3BZ532vhFwU=
-github.com/puzpuzpuz/xsync/v3 v3.5.1 h1:GJYJZwO6IdxN/IKbneznS6yPkVC+c3zyY/j19c++5Fg=
-github.com/puzpuzpuz/xsync/v3 v3.5.1/go.mod h1:VjzYrABPabuM4KyBh1Ftq6u8nhwY5tBPKP9jpmh0nnA=
 github.com/quic-go/qpack v0.6.0 h1:g7W+BMYynC1LbYLSqRt8PBg5Tgwxn214ZZR34VIOjz8=
 github.com/quic-go/qpack v0.6.0/go.mod h1:lUpLKChi8njB4ty2bFLX2x4gzDqXwUpaO1DP9qMDZII=
 github.com/quic-go/quic-go v0.57.0 h1:AsSSrrMs4qI/hLrKlTH/TGQeTMY0ib1pAOX7vA3AdqE=
 github.com/quic-go/quic-go v0.57.0/go.mod h1:ly4QBAjHA2VhdnxhojRsCUOeJwKYg+taDlos92xb1+s=
-github.com/r3labs/sse v0.0.0-20210224172625-26fe804710bc h1:zAsgcP8MhzAbhMnB1QQ2O7ZhWYVGYSR2iVcjzQuPV+o=
-github.com/r3labs/sse v0.0.0-20210224172625-26fe804710bc/go.mod h1:S8xSOnV3CgpNrWd0GQ/OoQfMtlg2uPRSuTzcSGrzwK8=
 github.com/rabbitmq/amqp091-go v1.10.0 h1:STpn5XsHlHGcecLmMFCtg7mqq0RnD+zFr4uzukfVhBw=
 github.com/rabbitmq/amqp091-go v1.10.0/go.mod h1:Hy4jKW5kQART1u+JkDTF9YYOQUHXqMuhrgxOEeS7G4o=
 github.com/rclone/rclone v1.72.1 h1:Cc/NshKd3/TP3CC0cx9Jg9nTLG8YQ8yLYMTm6Z/LdHk=
@@ -1830,7 +1622,6 @@ github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
 github.com/rfjakob/eme v1.1.2 h1:SxziR8msSOElPayZNFfQw4Tjx/Sbaeeh3eRvrHVMUs4=
 github.com/rfjakob/eme v1.1.2/go.mod h1:cVvpasglm/G3ngEfcfT/Wt0GwhkuO32pf/poW6Nyk1k=
-github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
 github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
 github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
@@ -1863,18 +1654,12 @@ github.com/seaweedfs/goexif v1.0.3 h1:ve/OjI7dxPW8X9YQsv3JuVMaxEyF9Rvfd04ouL+Bz3
 github.com/seaweedfs/goexif v1.0.3/go.mod h1:Oni780Z236sXpIQzk1XoJlTwqrJ02smEin9zQeff7Fk=
 github.com/seaweedfs/raft v1.1.6 h1:e83Xn0boscPnuSiBllUPeWRVS6JKrqJPYBozgFyBiC0=
 github.com/seaweedfs/raft v1.1.6/go.mod h1:9cYlEBA+djJbnf/5tWsCybtbL7ICYpi+Uxcg3MxjuNs=
-github.com/secure-systems-lab/go-securesystemslib v0.4.0 h1:b23VGrQhTA8cN2CbBw7/FulN9fTtqYUdS5+Oxzt+DUE=
-github.com/secure-systems-lab/go-securesystemslib v0.4.0/go.mod h1:FGBZgq2tXWICsxWQW1msNf49F0Pf2Op5Htayx335Qbs=
 github.com/sergi/go-diff v1.0.0/go.mod h1:0CfEIISq7TuYL3j771MWULgwwjU+GofnZX9QAmXWZgo=
 github.com/sergi/go-diff v1.1.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
 github.com/sergi/go-diff v1.2.0 h1:XU+rvMAioB0UC3q1MFrIQy4Vo5/4VsRDQQXHsEya6xQ=
 github.com/sergi/go-diff v1.2.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
-github.com/serialx/hashring v0.0.0-20200727003509-22c0c7ab6b1b h1:h+3JX2VoWTFuyQEo87pStk/a99dzIO1mM9KxIyLPGTU=
-github.com/serialx/hashring v0.0.0-20200727003509-22c0c7ab6b1b/go.mod h1:/yeG0My1xr/u+HZrFQ1tOQQQQrOawfyMUH13ai5brBc=
-github.com/shibumi/go-pathspec v1.3.0 h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI=
-github.com/shibumi/go-pathspec v1.3.0/go.mod h1:Xutfslp817l2I1cZvgcfeMQJG5QnU2lh5tVaaMCl3jE=
-github.com/shirou/gopsutil/v4 v4.26.1 h1:TOkEyriIXk2HX9d4isZJtbjXbEjf5qyKPAzbzY0JWSo=
-github.com/shirou/gopsutil/v4 v4.26.1/go.mod h1:medLI9/UNAb0dOI9Q3/7yWSqKkj00u+1tgY8nvv41pc=
+github.com/shirou/gopsutil/v4 v4.25.12 h1:e7PvW/0RmJ8p8vPGJH4jvNkOyLmbkXgXW4m6ZPic6CY=
+github.com/shirou/gopsutil/v4 v4.25.12/go.mod h1:EivAfP5x2EhLp2ovdpKSozecVXn1TmuG7SMzs/Wh4PU=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMBDgk/93Q=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
@@ -1941,12 +1726,6 @@ github.com/stvp/tempredis v0.0.0-20181119212430-b82af8480203 h1:QVqDTf3h2WHt08Yu
 github.com/stvp/tempredis v0.0.0-20181119212430-b82af8480203/go.mod h1:oqN97ltKNihBbwlX8dLpwxCl3+HnXKV/R0e+sRLd9C8=
 github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
 github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
-github.com/substrait-io/substrait v0.69.0 h1:qfwUe1qKa3PsCclMpubQOF6nqIqS14geUuvzJ1P7gsM=
-github.com/substrait-io/substrait v0.69.0/go.mod h1:MPFNw6sToJgpD5Z2rj0rQrdP/Oq8HG7Z2t3CAEHtkHw=
-github.com/substrait-io/substrait-go/v4 v4.4.0 h1:mFArMNFxlOLyTuhPcaPzZCwYh6kUopTExTy7XOqtYBM=
-github.com/substrait-io/substrait-go/v4 v4.4.0/go.mod h1:GzpaFqO5VRtMkEjATgRxGK5p82OmEtCmszAVYxE+iWc=
-github.com/substrait-io/substrait-protobuf/go v0.71.0 h1:vkYGEEPJ8lWSwaJvX7Y+hEmwmrz5/qeDmGI43JpKJZE=
-github.com/substrait-io/substrait-protobuf/go v0.71.0/go.mod h1:hn+Szm1NmZZc91FwWK9EXD/lmuGBSRTJ5IvHhlG1YnQ=
 github.com/syndtr/goleveldb v1.0.1-0.20190318030020-c3a204f8e965 h1:1oFLiOyVl+W7bnBzGhf7BbIv9loSFQcieWWYIjLqcAw=
 github.com/syndtr/goleveldb v1.0.1-0.20190318030020-c3a204f8e965/go.mod h1:9OrXJhf154huy1nPWmuSrkgjPUtUNhA+Zmy+6AESzuA=
 github.com/t3rm1n4l/go-mega v0.0.0-20251031123324-a804aaa87491 h1:rrGZv6xYk37hx0tW2sYfgbO0PqStbHqz6Bq6oc9Hurg=
@@ -1956,14 +1735,8 @@ github.com/tarantool/go-iproto v1.1.0 h1:HULVOIHsiehI+FnHfM7wMDntuzUddO09DKqu2Wn
 github.com/tarantool/go-iproto v1.1.0/go.mod h1:LNCtdyZxojUed8SbOiYHoc3v9NvaZTB7p96hUySMlIo=
 github.com/tarantool/go-tarantool/v2 v2.4.1 h1:Bk9mh+gMPVmHTSefHvVBpEkf6P2UZA/8xa5kqgyQtyo=
 github.com/tarantool/go-tarantool/v2 v2.4.1/go.mod h1:MTbhdjFc3Jl63Lgi/UJr5D+QbT+QegqOzsNJGmaw7VM=
-github.com/testcontainers/testcontainers-go v0.39.0 h1:uCUJ5tA+fcxbFAB0uP3pIK3EJ2IjjDUHFSZ1H1UxAts=
-github.com/testcontainers/testcontainers-go v0.39.0/go.mod h1:qmHpkG7H5uPf/EvOORKvS6EuDkBUPE3zpVGaH9NL7f8=
-github.com/testcontainers/testcontainers-go/modules/compose v0.39.0 h1:N9Kn9UOIq24o3Y01SFDYF5y3hpq4dNBzDS4pynHb/OQ=
-github.com/testcontainers/testcontainers-go/modules/compose v0.39.0/go.mod h1:7OreVKOBlnD0EmOYXMSBbJkHM8JZQINr34vB0X/NJRs=
 github.com/the42/cartconvert v0.0.0-20131203171324-aae784c392b8 h1:I4DY8wLxJXCrMYzDM6lKCGc3IQwJX0PlTLsd3nQqI3c=
 github.com/the42/cartconvert v0.0.0-20131203171324-aae784c392b8/go.mod h1:fWO/msnJVhHqN1yX6OBoxSyfj7TEj1hHiL8bJSQsK30=
-github.com/theupdateframework/notary v0.7.0 h1:QyagRZ7wlSpjT5N2qQAh/pN+DVqgekv4DzbAiAiEL3c=
-github.com/theupdateframework/notary v0.7.0/go.mod h1:c9DRxcmhHmVLDay4/2fUYdISnHqbFDGRSlXPO0AhYWw=
 github.com/tiancaiamao/gp v0.0.0-20221230034425-4025bc8a4d4a h1:J/YdBZ46WKpXsxsW93SG+q0F8KI+yFrcIDT4c/RNoc4=
 github.com/tiancaiamao/gp v0.0.0-20221230034425-4025bc8a4d4a/go.mod h1:h4xBhSNtOeEosLJ4P7JyKXX7Cabg7AVkWCK5gV2vOrM=
 github.com/tidwall/gjson v1.18.0 h1:FIDeeyB800efLX89e5a8Y0BNH+LOngJyGrIWxG2FKQY=
@@ -1977,8 +1750,6 @@ github.com/tikv/client-go/v2 v2.0.7 h1:nNTx/AR6n8Ew5VtHanFPG8NkFLLXbaNs5/K43DDma
 github.com/tikv/client-go/v2 v2.0.7/go.mod h1:9JNUWtHN8cx8eynHZ9xzdPi5YY6aiN1ILQyhfPUBcMo=
 github.com/tikv/pd/client v0.0.0-20230329114254-1948c247c2b1 h1:bzlSSzw+6qTwPs8pMcPI1bt27TAOhSdAEwdPCz6eBlg=
 github.com/tikv/pd/client v0.0.0-20230329114254-1948c247c2b1/go.mod h1:3cTcfo8GRA2H/uSttqA3LvMfMSHVBJaXk3IgkFXFVxo=
-github.com/tilt-dev/fsnotify v1.4.8-0.20220602155310-fff9c274a375 h1:QB54BJwA6x8QU9nHY3xJSZR2kX9bgpZekRKGkLTmEXA=
-github.com/tilt-dev/fsnotify v1.4.8-0.20220602155310-fff9c274a375/go.mod h1:xRroudyp5iVtxKqZCrA6n2TLFRBf8bmnjr1UD4x+z7g=
 github.com/tinylib/msgp v1.1.8/go.mod h1:qkpG+2ldGg4xRFmx+jfTvZPxfGFhi64BcnL9vkCm/Tw=
 github.com/tinylib/msgp v1.5.0 h1:GWnqAE54wmnlFazjq2+vgr736Akg58iiHImh+kPY2pc=
 github.com/tinylib/msgp v1.5.0/go.mod h1:cvjFkb4RiC8qSBOPMGPSzSAx47nAsfhLVTCZZNuHv5o=
@@ -1986,25 +1757,13 @@ github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYI
 github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI=
 github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw=
 github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ=
-github.com/tmthrgd/go-hex v0.0.0-20190904060850-447a3041c3bc h1:9lRDQMhESg+zvGYmW5DyG0UqvY96Bu5QYsTLvCHdrgo=
-github.com/tmthrgd/go-hex v0.0.0-20190904060850-447a3041c3bc/go.mod h1:bciPuU6GHm1iF1pBvUfxfsH0Wmnc2VbpgvbI9ZWuIRs=
-github.com/tonistiigi/dchapes-mode v0.0.0-20241001053921-ca0759fec205 h1:eUk79E1w8yMtXeHSzjKorxuC8qJOnyXQnLaJehxpJaI=
-github.com/tonistiigi/dchapes-mode v0.0.0-20241001053921-ca0759fec205/go.mod h1:3Iuxbr0P7D3zUzBMAZB+ois3h/et0shEz0qApgHYGpY=
-github.com/tonistiigi/fsutil v0.0.0-20250113203817-b14e27f4135a h1:EfGw4G0x/8qXWgtcZ6KVaPS+wpWOQMaypczzP8ojkMY=
-github.com/tonistiigi/fsutil v0.0.0-20250113203817-b14e27f4135a/go.mod h1:Dl/9oEjK7IqnjAm21Okx/XIxUCFJzvh+XdVHUlBwXTw=
-github.com/tonistiigi/go-csvvalue v0.0.0-20240710180619-ddb21b71c0b4 h1:7I5c2Ig/5FgqkYOh/N87NzoyI9U15qUPXhDD8uCupv8=
-github.com/tonistiigi/go-csvvalue v0.0.0-20240710180619-ddb21b71c0b4/go.mod h1:278M4p8WsNh3n4a1eqiFcV2FGk7wE5fwUpUom9mK9lE=
-github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea h1:SXhTLE6pb6eld/v/cCndK0AMpt1wiVFb/YYmqB3/QG0=
-github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea/go.mod h1:WPnis/6cRcDZSUvVmezrxJPkiO87ThFYsoUiMwWNDJk=
-github.com/tonistiigi/vt100 v0.0.0-20240514184818-90bafcd6abab h1:H6aJ0yKQ0gF49Qb2z5hI1UHxSQt4JMyxebFR15KnApw=
-github.com/tonistiigi/vt100 v0.0.0-20240514184818-90bafcd6abab/go.mod h1:ulncasL3N9uLrVann0m+CDlJKWsIAP34MPcOJF6VRvc=
 github.com/tsuna/gohbase v0.0.0-20201125011725-348991136365 h1:6iRwZdrFUzbcVYZwa8dXTIILGIxmmhjyUPJEcwzPGaU=
 github.com/tsuna/gohbase v0.0.0-20201125011725-348991136365/go.mod h1:zj0GJHGvyf1ed3Jm/Tb4830c/ZKDq+YoLsCt2rGQuT0=
 github.com/tv42/httpunix v0.0.0-20150427012821-b75d8614f926/go.mod h1:9ESjWnEqriFuLhtthL60Sar/7RFoluCcXsuvEwTV5KM=
 github.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=
 github.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=
-github.com/twmb/murmur3 v1.1.8 h1:8Yt9taO/WN3l08xErzjeschgZU2QSrwm1kclYq+0aRg=
-github.com/twmb/murmur3 v1.1.8/go.mod h1:Qq/R7NUyOfr65zD+6Q5IHKsJLwP7exErjN6lyyq3OSQ=
+github.com/twmb/murmur3 v1.1.3 h1:D83U0XYKcHRYwYIpBKf3Pks91Z0Byda/9SJ8B6EMRcA=
+github.com/twmb/murmur3 v1.1.3/go.mod h1:Qq/R7NUyOfr65zD+6Q5IHKsJLwP7exErjN6lyyq3OSQ=
 github.com/twpayne/go-geom v1.4.1 h1:LeivFqaGBRfyg0XJJ9pkudcptwhSSrYN9KZUW6HcgdA=
 github.com/twpayne/go-geom v1.4.1/go.mod h1:k/zktXdL+qnA6OgKsdEGUTA17jbQ2ZPTUa3CCySuGpE=
 github.com/twpayne/go-kml v1.5.2 h1:rFMw2/EwgkVssGS2MT6YfWSPZz6BgcJkLxQ53jnE8rQ=
@@ -2019,22 +1778,6 @@ github.com/ulikunitz/xz v0.5.15 h1:9DNdB5s+SgV3bQ2ApL10xRc35ck0DuIX/isZvIk+ubY=
 github.com/ulikunitz/xz v0.5.15/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14=
 github.com/unknwon/goconfig v1.0.0 h1:rS7O+CmUdli1T+oDm7fYj1MwqNWtEJfNj+FqcUHML8U=
 github.com/unknwon/goconfig v1.0.0/go.mod h1:qu2ZQ/wcC/if2u32263HTVC39PeOQRSmidQk3DuDFQ8=
-github.com/uptrace/bun v1.2.15 h1:Ut68XRBLDgp9qG9QBMa9ELWaZOmzHNdczHQdrOZbEFE=
-github.com/uptrace/bun v1.2.15/go.mod h1:Eghz7NonZMiTX/Z6oKYytJ0oaMEJ/eq3kEV4vSqG038=
-github.com/uptrace/bun/dialect/mssqldialect v1.2.15 h1:QbXtaIlBwx8z0PctUzAQrg4uxRRAKUhkOV4WJvkNo74=
-github.com/uptrace/bun/dialect/mssqldialect v1.2.15/go.mod h1:PJxf6utV3uwiBww37CQVD5jvarUKkJHNqSWDO1GkmN4=
-github.com/uptrace/bun/dialect/mysqldialect v1.2.15 h1:z/Seg0ljdqoATl0RGPBLHkod1bT0RofL5nNvqdt+UcM=
-github.com/uptrace/bun/dialect/mysqldialect v1.2.15/go.mod h1:VUi7mXAL3ttEphcdDta+dXeB7wyI/uvQiE6G8S8ipSQ=
-github.com/uptrace/bun/dialect/oracledialect v1.2.15 h1:M7V0BZXlBWirFg5TM/7KZzvB37bHsjslBufOTb/cQqU=
-github.com/uptrace/bun/dialect/oracledialect v1.2.15/go.mod h1:M79iy3e2GOkQ4ItatKh5Nz3hKrrV14hnCJVhHbpk538=
-github.com/uptrace/bun/dialect/pgdialect v1.2.15 h1:er+/3giAIqpfrXJw+KP9B7ujyQIi5XkPnFmgjAVL6bA=
-github.com/uptrace/bun/dialect/pgdialect v1.2.15/go.mod h1:QSiz6Qpy9wlGFsfpf7UMSL6mXAL1jDJhFwuOVacCnOQ=
-github.com/uptrace/bun/dialect/sqlitedialect v1.2.15 h1:7upGMVjFRB1oI78GQw6ruNLblYn5CR+kxqcbbeBBils=
-github.com/uptrace/bun/dialect/sqlitedialect v1.2.15/go.mod h1:c7YIDaPNS2CU2uI1p7umFuFWkuKbDcPDDvp+DLHZnkI=
-github.com/uptrace/bun/driver/sqliteshim v1.2.15 h1:M/rZJSjOPV4OmfTVnDPtL+wJmdMTqDUn8cuk5ycfABA=
-github.com/uptrace/bun/driver/sqliteshim v1.2.15/go.mod h1:YqwxFyvM992XOCpGJtXyKPkgkb+aZpIIMzGbpaw1hIk=
-github.com/uptrace/bun/extra/bundebug v1.2.15 h1:IY2Z/pVyVg0ApWnQ/pEnwe6BWxlDDATCz7IFZghutCs=
-github.com/uptrace/bun/extra/bundebug v1.2.15/go.mod h1:JuE+BT7NjTZ9UKr74eC8s9yZ9dnQCeufDwFRTC8w3Xo=
 github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
 github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
 github.com/viant/assertly v0.9.0 h1:uB3jO+qmWQcrSCHQRxA2kk88eXAdaklUUDxxCU5wBHQ=
@@ -2051,8 +1794,6 @@ github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/
 github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw=
 github.com/wsxiaoys/terminal v0.0.0-20160513160801-0940f3fc43a0 h1:3UeQBvD0TFrlVjOeLOBz+CPAI8dnbqNSVwUwRrkp7vQ=
 github.com/wsxiaoys/terminal v0.0.0-20160513160801-0940f3fc43a0/go.mod h1:IXCdmsXIht47RaVFLEdVnh1t+pgYtTAhQGj73kz+2DM=
-github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
-github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=
 github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
 github.com/xdg-go/pbkdf2 v1.0.0 h1:Su7DPu48wXMwC3bs7MCNG+z4FhcyEuz5dlvchbq0B0c=
@@ -2061,18 +1802,12 @@ github.com/xdg-go/scram v1.1.2 h1:FHX5I5B4i4hKRVRBCFRxq1iQRej7WO3hhBuJf+UUySY=
 github.com/xdg-go/scram v1.1.2/go.mod h1:RT/sEzTbU5y00aCK8UOx6R7YryM0iF1N2MOmC3kKLN4=
 github.com/xdg-go/stringprep v1.0.4 h1:XLI/Ng3O1Atzq0oBs3TWm+5ZVgkq2aqdlvP9JtoZ6c8=
 github.com/xdg-go/stringprep v1.0.4/go.mod h1:mPGuuIYwz7CmR2bT9j4GbQqutWS1zV24gijq1dTyGkM=
+github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f h1:J9EGpcZtP0E/raorCMxlFGSTBrsSlaDGf3jU/qvAE2c=
 github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU=
-github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo=
-github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU=
 github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0=
 github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ=
 github.com/xeipuuv/gojsonschema v1.2.0 h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74=
 github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y=
-github.com/xhit/go-str2duration/v2 v2.1.0 h1:lxklc02Drh6ynqX+DdPyp5pCKLUQpRT8bp8Ydu2Bstc=
-github.com/xhit/go-str2duration/v2 v2.1.0/go.mod h1:ohY8p+0f07DiV6Em5LKB0s2YpLtXVyJfNt1+BlmyAsU=
-github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778/go.mod h1:2MuV+tbUrU1zIOPMxZ5EncGwgmMJsa+9ucAQZXxsObs=
-github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no=
-github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e/go.mod h1:RbqR21r5mrJuqunuUZ/Dhy/avygyECGrLceyNeo4LiM=
 github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU=
 github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
 github.com/yandex-cloud/go-genproto v0.0.0-20211115083454-9ca41db5ed9e h1:9LPdmD1vqadsDQUva6t2O9MbnyvoOgo8nFNPaOIH5U8=
@@ -2104,8 +1839,6 @@ github.com/yunify/qingstor-sdk-go/v3 v3.2.0 h1:9sB2WZMgjwSUNZhrgvaNGazVltoFUUfuS
 github.com/yunify/qingstor-sdk-go/v3 v3.2.0/go.mod h1:KciFNuMu6F4WLk9nGwwK69sCGKLCdd9f97ac/wfumS4=
 github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0=
 github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0=
-github.com/zclconf/go-cty v1.16.0 h1:xPKEhst+BW5D0wxebMZkxgapvOE/dw7bFTlgSc9nD6w=
-github.com/zclconf/go-cty v1.16.0/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE=
 github.com/zeebo/assert v1.3.0/go.mod h1:Pq9JiuJQpG8JLJdtkwrJESF0Foym2/D9XMU5ciN/wJ0=
 github.com/zeebo/assert v1.3.1 h1:vukIABvugfNMZMQO1ABsyQDJDTVQbn+LWSMy1ol1h6A=
 github.com/zeebo/assert v1.3.1/go.mod h1:Pq9JiuJQpG8JLJdtkwrJESF0Foym2/D9XMU5ciN/wJ0=
@@ -2121,12 +1854,12 @@ go.einride.tech/aip v0.73.0 h1:bPo4oqBo2ZQeBKo4ZzLb1kxYXTY1ysJhpvQyfuGzvps=
 go.einride.tech/aip v0.73.0/go.mod h1:Mj7rFbmXEgw0dq1dqJ7JGMvYCZZVxmGOR3S4ZcV5LvQ=
 go.etcd.io/bbolt v1.4.3 h1:dEadXpI6G79deX5prL3QRNP6JB8UxVkqo4UPnHaNXJo=
 go.etcd.io/bbolt v1.4.3/go.mod h1:tKQlpPaYCVFctUIgFKFnAlvbmB3tpy1vkTnDWohtc0E=
-go.etcd.io/etcd/api/v3 v3.6.7 h1:7BNJ2gQmc3DNM+9cRkv7KkGQDayElg8x3X+tFDYS+E0=
-go.etcd.io/etcd/api/v3 v3.6.7/go.mod h1:xJ81TLj9hxrYYEDmXTeKURMeY3qEDN24hqe+q7KhbnI=
+go.etcd.io/etcd/api/v3 v3.6.6 h1:mcaMp3+7JawWv69p6QShYWS8cIWUOl32bFLb6qf8pOQ=
+go.etcd.io/etcd/api/v3 v3.6.6/go.mod h1:f/om26iXl2wSkcTA1zGQv8reJRSLVdoEBsi4JdfMrx4=
 go.etcd.io/etcd/client/pkg/v3 v3.6.7 h1:vvzgyozz46q+TyeGBuFzVuI53/yd133CHceNb/AhBVs=
 go.etcd.io/etcd/client/pkg/v3 v3.6.7/go.mod h1:2IVulJ3FZ/czIGl9T4lMF1uxzrhRahLqe+hSgy+Kh7Q=
-go.etcd.io/etcd/client/v3 v3.6.7 h1:9WqA5RpIBtdMxAy1ukXLAdtg2pAxNqW5NUoO2wQrE6U=
-go.etcd.io/etcd/client/v3 v3.6.7/go.mod h1:2XfROY56AXnUqGsvl+6k29wrwsSbEh1lAouQB1vHpeE=
+go.etcd.io/etcd/client/v3 v3.6.6 h1:G5z1wMf5B9SNexoxOHUGBaULurOZPIgGPsW6CN492ec=
+go.etcd.io/etcd/client/v3 v3.6.6/go.mod h1:36Qv6baQ07znPR3+n7t+Rk5VHEzVYPvFfGmfF4wBHV8=
 go.mongodb.org/mongo-driver v1.17.6 h1:87JUG1wZfWsr6rIz3ZmpH90rL5tea7O3IHuSwHUpsss=
 go.mongodb.org/mongo-driver v1.17.6/go.mod h1:Hy04i7O2kC4RS06ZrhPRqj/u4DTYkFDAAccj+rVKqgQ=
 go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU=
@@ -2144,22 +1877,14 @@ go.opentelemetry.io/contrib/detectors/gcp v1.38.0 h1:ZoYbqX7OaA/TAikspPl3ozPI6iY
 go.opentelemetry.io/contrib/detectors/gcp v1.38.0/go.mod h1:SU+iU7nu5ud4oCb3LQOhIZ3nRLj6FNVrKgtflbaf2ts=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 h1:YH4g8lQroajqUwWbq/tr2QX1JFmEXaDLgG+ew9bLMWo=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0/go.mod h1:fvPi2qXDqFs8M4B4fmJhE92TyQs9Ydjlg3RvfUp+NbQ=
-go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0 h1:4BZHA+B1wXEQoGNHxW8mURaLhcdGwvRnmhGbm+odRbc=
-go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0/go.mod h1:3qi2EEwMgB4xnKgPLqsDP3j9qxnHDZeHsnAxfjQqTko=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg=
 go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8=
 go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.37.0 h1:zG8GlgXCJQd5BU98C0hZnBbElszTmUgCNCfYneaDL0A=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.37.0/go.mod h1:hOfBCz8kv/wuq73Mx2H2QnWokh/kHZxkh6SNF2bdKtw=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 h1:ZsXq73BERAiNuuFXYqP4MR5hBrjXfMGSO+Cx7qoOZiM=
-go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0/go.mod h1:hg1zaDMpyZJuUzjFxFsRYBoccE86tM9Uf4IqNMUxvrY=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0 h1:Ahq7pZmv87yiyn3jeFz/LekZmPLLdKejuO3NcK9MssM=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0/go.mod h1:MJTqhM0im3mRLw1i8uGHnCvUEeS7VwRyxlLC78PA18M=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.37.0 h1:EtFWSnwW9hGObjkIdmlnWSydO+Qs8OwzfzXLUPg4xOc=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.37.0/go.mod h1:QjUEoiGCPkvFZ/MjK6ZZfNOS6mfVEVKYE99dFhuN2LI=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 h1:lUsI2TYsQw2r1IASwoROaCnjdj2cvC2+Jbxvk6nHnWU=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0/go.mod h1:2HpZxxQurfGxJlJDblybejHB6RX6pmExPNe517hREw4=
 go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.38.0 h1:wm/Q0GAAykXv83wzcKzGGqAnnfLFyFe7RslekZuv+VI=
 go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.38.0/go.mod h1:ra3Pa40+oKjvYh+ZD3EdxFZZB0xdMfuileHAm4nNN7w=
 go.opentelemetry.io/otel/exporters/zipkin v1.36.0 h1:s0n95ya5tOG03exJ5JySOdJFtwGo4ZQ+KeY7Zro4CLI=
@@ -2194,8 +1919,8 @@ go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 go.uber.org/zap v1.18.1/go.mod h1:xg/QME4nWcxGxrpdeYfq7UvYrLh66cuVKdrbD1XF/NI=
 go.uber.org/zap v1.19.0/go.mod h1:xg/QME4nWcxGxrpdeYfq7UvYrLh66cuVKdrbD1XF/NI=
-go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
-go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
+go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
 go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
 go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
@@ -2228,8 +1953,8 @@ golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf
 golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
 golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.47.0 h1:V6e3FRj+n4dbpw86FJ8Fv7XVOql7TEwpHapKoMJ/GO8=
+golang.org/x/crypto v0.47.0/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
 golang.org/x/exp v0.0.0-20180321215751-8460e604b9de/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20180807140117-3d87b88a115f/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -2295,8 +2020,8 @@ golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.13.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
-golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
+golang.org/x/mod v0.31.0 h1:HaW9xtz0+kOcWKwli0ZXy79Ix+UW/vOfmWI5QVd2tgI=
+golang.org/x/mod v0.31.0/go.mod h1:43JraMp9cGx1Rx3AqioxrbrhNsLl2l/iNAvuBkrezpg=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -2487,7 +2212,6 @@ golang.org/x/sys v0.0.0-20210823070655-63515b42dcdf/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20210908233432-aa78b53d3365/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211007075335-d3039528d8ac/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20211013075003-97ac67df715c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211019181941-9d821ace8654/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211117180635-dee7805ff2e1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -2497,7 +2221,6 @@ golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220128215802-99c3d69c2c27/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220209214540-3681064d5158/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220319134239-a9b59b0215f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220328115105-d36c6a25d886/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220408201424-a24fb2fb8a0f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220412211240-33da011f77ad/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -2525,14 +2248,10 @@ golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
-golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
+golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
-golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 h1:O1cMQHRfwNpDfDJerqRoE2oD+AFlyid87D40L/OkkJo=
-golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2/go.mod h1:b7fPSJ0pKZ3ccUh8gnTONJxhn3c/PS6tyzQvyqw4iA8=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
-golang.org/x/term v0.0.0-20210220032956-6a3ed077a48d/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
-golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
 golang.org/x/term v0.3.0/go.mod h1:q750SLmJuPmVoN1blW3UFBPREJfb1KmY3vwxfr+nFDA=
@@ -2545,8 +2264,8 @@ golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
 golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
 golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
-golang.org/x/term v0.40.0 h1:36e4zGLqU4yhjlmxEaagx2KuYbJq3EwY8K943ZsHcvg=
-golang.org/x/term v0.40.0/go.mod h1:w2P8uVp06p2iyKKuvXIm7N/y0UCRt3UfJTfZ7oOpglM=
+golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY=
+golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -2567,8 +2286,8 @@ golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
-golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
+golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
+golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -2647,8 +2366,8 @@ golang.org/x/tools v0.7.0/go.mod h1:4pg6aUX35JBAogB10C9AtvVL+qowtN4pT3CGSQex14s=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.14.0/go.mod h1:uYBEerGOWcJyEORxN+Ek8+TT266gXkNlHdJBwexUsBg=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
-golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
-golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
+golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA=
+golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc=
 golang.org/x/tools/godoc v0.1.0-deprecated h1:o+aZ1BOj6Hsx/GBdJO/s815sqftjSnrZZwyYTHODvtk=
 golang.org/x/tools/godoc v0.1.0-deprecated/go.mod h1:qM63CriJ961IHWmnWa9CjZnBndniPt4a3CK0PVB9bIg=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -2863,8 +2582,8 @@ google.golang.org/genproto v0.0.0-20230222225845-10f96fb3dbec/go.mod h1:3Dl5ZL0q
 google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4/go.mod h1:NWraEVixdDnqcqQ30jipen1STv2r/n24Wb7twVTGR4s=
 google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 h1:LvZVVaPE0JSqL+ZWb6ErZfnEOKIqqFWUJE2D0fObSmc=
 google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9/go.mod h1:QFOrLhdAe2PsTp3vQY4quuLKTi9j3XG3r6JPPaw7MSc=
-google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846 h1:ZdyUkS9po3H7G0tuh955QVyyotWvOD4W0aEapeGeUYk=
-google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846/go.mod h1:Fk4kyraUvqD7i5H6S43sj2W98fbZa75lpZz/eUyhfO0=
+google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba h1:B14OtaXuMaCQsl2deSvNkyPKIzq3BjfxQp8d00QyWx4=
+google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:G5IanEx8/PgI9w6CFcYQf7jMtHQhZruvfM1i3qOqk5U=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 h1:2I6GHUeJ/4shcDpoUlLs/2WPnhg7yJwvXtqcMJt9liA=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
@@ -2933,8 +2652,6 @@ google.golang.org/protobuf v1.30.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqw
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
-gopkg.in/cenkalti/backoff.v1 v1.1.0 h1:Arh75ttbsvlpVA7WtVpH4u9h6Zl46xuptxqLxPiSo4Y=
-gopkg.in/cenkalti/backoff.v1 v1.1.0/go.mod h1:J6Vskwqd+OMVJl8C33mmtxTBs2gyzfv7UDAkHu8BrjI=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -2944,8 +2661,6 @@ gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
 gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
-gopkg.in/ini.v1 v1.67.0 h1:Dgnx+6+nfE+IfzjUEISNeydPJh9AXNNsWbGP9KzCsOA=
-gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/mgo.v2 v2.0.0-20190816093944-a6b53ec6cb22/go.mod h1:yeKp02qBN3iKW1OzL3MGk2IdtZzaj7SFntXj72NppTA=
 gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod h1:l0ndWWf7gzL7RNwBG7wST/UCcT4T24xpD6X8LsfU/+k=
 gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc=
@@ -2971,8 +2686,6 @@ gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gotest.tools/v3 v3.0.2/go.mod h1:3SzNCllyD9/Y+b5r9JIKQ474KzkZyqLqEfYqMsX94Bk=
-gotest.tools/v3 v3.5.2 h1:7koQfIKdy+I8UTetycgUqXWSDwpgv193Ka+qRsmBY8Q=
-gotest.tools/v3 v3.5.2/go.mod h1:LtdLGcnqToBH83WByAAi/wiwSFCArdFIUV/xxN4pcjA=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
@@ -2981,18 +2694,6 @@ honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.1.3/go.mod h1:NgwopIslSNH47DimFoV78dnkksY2EFtX0ajyb3K/las=
-k8s.io/api v0.31.2 h1:3wLBbL5Uom/8Zy98GRPXpJ254nEFpl+hwndmk9RwmL0=
-k8s.io/api v0.31.2/go.mod h1:bWmGvrGPssSK1ljmLzd3pwCQ9MgoTsRCuK35u6SygUk=
-k8s.io/apimachinery v0.31.2 h1:i4vUt2hPK56W6mlT7Ry+AO8eEsyxMD1U44NR22CLTYw=
-k8s.io/apimachinery v0.31.2/go.mod h1:rsPdaZJfTfLsNJSQzNHQvYoTmxhoOEofxtOsF3rtsMo=
-k8s.io/client-go v0.31.2 h1:Y2F4dxU5d3AQj+ybwSMqQnpZH9F30//1ObxOKlTI9yc=
-k8s.io/client-go v0.31.2/go.mod h1:NPa74jSVR/+eez2dFsEIHNa+3o09vtNaWwWwb1qSxSs=
-k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
-k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
-k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340 h1:BZqlfIlq5YbRMFko6/PM7FjZpUb45WallggurYhKGag=
-k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340/go.mod h1:yD4MZYeKMBwQKVht279WycxKyM84kkAx2DPrTXaeb98=
-k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 h1:pUdcCO1Lk/tbT5ztQWOBi5HBgbBP1J8+AsQnQCKsi8A=
-k8s.io/utils v0.0.0-20240711033017-18e509b52bc8/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 lukechampine.com/uint128 v1.1.1/go.mod h1:c4eWIwlEGaxC/+H1VguhU4PHXNWDCDMUlWdIWl2j1gk=
 lukechampine.com/uint128 v1.2.0/go.mod h1:c4eWIwlEGaxC/+H1VguhU4PHXNWDCDMUlWdIWl2j1gk=
 modernc.org/b v1.0.0 h1:vpvqeyp17ddcQWF29Czawql4lDdABCDRbXRAS4+aF2o=
@@ -3065,10 +2766,6 @@ rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8
 rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
-sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
-sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
-sigs.k8s.io/structured-merge-diff/v4 v4.4.1 h1:150L+0vs/8DA78h1u02ooW1/fFq/Lwr+sGiqlzvrtq4=
-sigs.k8s.io/structured-merge-diff/v4 v4.4.1/go.mod h1:N8hJocpFajUSSeSJ9bOZ77VzejKZaXsTtZo4/u7Io08=
 sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=
 sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4=
 storj.io/common v0.0.0-20251107171817-6221ae45072c h1:UDXSrdeLJe3QFouavSW10fYdpclK0YNu3KvQHzqq2+k=
@@ -3083,5 +2780,3 @@ storj.io/picobuf v0.0.4 h1:qswHDla+YZ2TovGtMnU4astjvrADSIz84FXRn0qgP6o=
 storj.io/picobuf v0.0.4/go.mod h1:hSMxmZc58MS/2qSLy1I0idovlO7+6K47wIGUyRZa6mg=
 storj.io/uplink v1.13.1 h1:C8RdW/upALoCyuF16Lod9XGCXEdbJAS+ABQy9JO/0pA=
 storj.io/uplink v1.13.1/go.mod h1:x0MQr4UfFsQBwgVWZAtEsLpuwAn6dg7G0Mpne1r516E=
-tags.cncf.io/container-device-interface v1.0.1 h1:KqQDr4vIlxwfYh0Ed/uJGVgX+CHAkahrgabg6Q8GYxc=
-tags.cncf.io/container-device-interface v1.0.1/go.mod h1:JojJIOeW3hNbcnOH2q0NrWNha/JuHoDZcmYxAZwb2i0=

k8s/charts/seaweedfs/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 description: SeaweedFS
 name: seaweedfs
-appVersion: "4.12"
+appVersion: "4.07"
 # Dev note: Trigger a helm chart release by `git tag -a helm-<version>`
-version: 4.0.412
+version: 4.0.407

k8s/charts/seaweedfs/templates/admin/admin-service.yaml

@@ -2,7 +2,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: {{ include "seaweedfs.componentName" (list . "admin") }}
+  name: {{ printf "%s-admin" (include "seaweedfs.fullname" .) | trunc 63 | trimSuffix "-" }}
   namespace: {{ .Release.Namespace }}
   labels:
     app.kubernetes.io/name: {{ template "seaweedfs.name" . }}

k8s/charts/seaweedfs/templates/s3/s3-deployment.yaml

@@ -150,9 +150,6 @@ spec:
               -auditLogConfig=/etc/sw/s3_auditLogConfig.json \
               {{- end }}
               -filer={{ include "seaweedfs.componentName" (list . "filer-client") }}.{{ .Release.Namespace }}:{{ .Values.filer.port }} \
-              {{- if .Values.s3.icebergPort }}
-              -port.iceberg={{ .Values.s3.icebergPort }} \
-              {{- end }}
               {{- range .Values.s3.extraArgs }}
               {{ . }} \
               {{- end }}
@@ -195,10 +192,6 @@ spec:
             - containerPort: {{ .Values.s3.httpsPort }}
               name: swfs-s3-tls
             {{- end }}
-            {{- if .Values.s3.icebergPort }}
-            - containerPort: {{ .Values.s3.icebergPort }}
-              name: swfs-iceberg
-            {{- end }}
             {{- if .Values.s3.metricsPort }}
             - containerPort: {{ .Values.s3.metricsPort }}
               name: metrics

k8s/charts/seaweedfs/templates/s3/s3-iceberg-ingress.yaml

@@ -1,61 +0,0 @@
-{{- define "seaweedfs.s3.iceberg.ingress.paths" -}}
-paths:
-- path: {{ .Values.s3.icebergIngress.path | quote }}
-  pathType: {{ .Values.s3.icebergIngress.pathType | quote }}
-  backend:
-    {{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion }}
-    service:
-      name: {{ include "seaweedfs.componentName" (list . "s3") }}
-      port:
-        number: {{ .Values.s3.icebergPort }}
-    {{- else }}
-    serviceName: {{ include "seaweedfs.componentName" (list . "s3") }}
-    servicePort: {{ .Values.s3.icebergPort }}
-    {{- end }}
-{{- end -}}
-{{- if and .Values.s3.enabled .Values.s3.icebergPort .Values.s3.icebergIngress.enabled }}
-{{- $hosts := list }}
-{{- if kindIs "slice" .Values.s3.icebergIngress.host }}
-  {{- $hosts = .Values.s3.icebergIngress.host }}
-{{- else if .Values.s3.icebergIngress.host }}
-  {{- $hosts = list .Values.s3.icebergIngress.host }}
-{{- end }}
-{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion }}
-apiVersion: networking.k8s.io/v1
-{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion }}
-apiVersion: networking.k8s.io/v1beta1
-{{- else }}
-apiVersion: extensions/v1beta1
-{{- end }}
-kind: Ingress
-metadata:
-  name: ingress-{{ include "seaweedfs.fullname" . }}-s3-iceberg
-  namespace: {{ .Release.Namespace }}
-  {{- with .Values.s3.icebergIngress.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-  labels:
-    app.kubernetes.io/name: {{ template "seaweedfs.name" . }}
-    helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
-    app.kubernetes.io/managed-by: {{ .Release.Service }}
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/component: s3-iceberg
-spec:
-  {{- if .Values.s3.icebergIngress.className }}
-  ingressClassName: {{ .Values.s3.icebergIngress.className | quote }}
-  {{- end }}
-  tls:
-    {{ .Values.s3.icebergIngress.tls | default list | toYaml | nindent 6}}
-  rules:
-{{- if $hosts }}
-{{- range $host := $hosts }}
-  - host: {{ $host | quote }}
-    http:
-      {{- include "seaweedfs.s3.iceberg.ingress.paths" $ | nindent 6 }}
-{{- end }}
-{{- else }}
-  - http:
-      {{- include "seaweedfs.s3.iceberg.ingress.paths" . | nindent 4 }}
-{{- end }}
-{{- end }}

k8s/charts/seaweedfs/templates/s3/s3-service.yaml

@@ -16,20 +16,11 @@ metadata:
 {{- end }}
 spec:
   internalTrafficPolicy: {{ .Values.s3.internalTrafficPolicy | default "Cluster" }}
-  {{- if and (semverCompare ">=1.31-0" .Capabilities.KubeVersion.GitVersion) (or .Values.s3.trafficDistribution .Values.filer.s3.trafficDistribution) }}
-  trafficDistribution: {{ include "seaweedfs.trafficDistribution" . }}
-  {{- end }}
   ports:
   - name: "swfs-s3"
     port: {{ if .Values.s3.enabled }}{{ .Values.s3.port }}{{ else }}{{ .Values.filer.s3.port }}{{ end }}
     targetPort: {{ if .Values.s3.enabled }}{{ .Values.s3.port }}{{ else }}{{ .Values.filer.s3.port }}{{ end }}
     protocol: TCP
-{{- if and .Values.s3.enabled .Values.s3.icebergPort }}
-  - name: "swfs-iceberg"
-    port: {{ .Values.s3.icebergPort }}
-    targetPort: {{ .Values.s3.icebergPort }}
-    protocol: TCP
-{{- end }}
 {{- if and .Values.s3.enabled .Values.s3.httpsPort }}
   - name: "swfs-s3-tls"
     port: {{ .Values.s3.httpsPort }}

k8s/charts/seaweedfs/templates/shared/_helpers.tpl

@@ -323,12 +323,3 @@ Create the name of the service account to use
 {{- define "seaweedfs.serviceAccountName" -}}
 {{- .Values.global.serviceAccountName | default "seaweedfs" -}}
 {{- end -}}
-
-{{/* Generate a compatible trafficDistribution value due to "PreferClose" fast deprecation in k8s v1.35 */}}
-{{- define "seaweedfs.trafficDistribution" -}}
-{{- if .Values.s3.trafficDistribution -}}
-{{- and (eq .Values.s3.trafficDistribution "PreferClose") (semverCompare ">=1.35-0" .Capabilities.KubeVersion.GitVersion) | ternary "PreferSameZone" .Values.s3.trafficDistribution -}}
-{{- else if .Values.filer.s3.trafficDistribution -}}
-{{- and (eq .Values.filer.s3.trafficDistribution "PreferClose") (semverCompare ">=1.35-0" .Capabilities.KubeVersion.GitVersion) | ternary "PreferSameZone" .Values.filer.s3.trafficDistribution -}}
-{{- end -}}
-{{- end -}}

k8s/charts/seaweedfs/templates/worker/worker-deployment.yaml

@@ -134,7 +134,7 @@ spec:
               {{- if .Values.worker.adminServer }}
               -admin={{ .Values.worker.adminServer }} \
               {{- else }}
-              -admin={{ template "seaweedfs.fullname" . }}-admin.{{ .Release.Namespace }}:{{ .Values.admin.port }}{{ if .Values.admin.grpcPort }}.{{ .Values.admin.grpcPort }}{{ end }} \
+              -admin={{ template "seaweedfs.name" . }}-admin.{{ .Release.Namespace }}:{{ .Values.admin.port }}{{ if .Values.admin.grpcPort }}.{{ .Values.admin.grpcPort }}{{ end }} \
               {{- end }}
               -capabilities={{ .Values.worker.capabilities }} \
               -maxConcurrent={{ .Values.worker.maxConcurrent }} \

k8s/charts/seaweedfs/values.yaml

@@ -909,9 +909,6 @@ s3:
   # add additional https port
   httpsPort: 0
   metricsPort: 9327
-  # Iceberg catalog REST port (Apache Iceberg REST Catalog API)
-  # Set to a port number to enable, or 0/null to disable
-  icebergPort: null
   loggingOverrideLevel: null
   # enable user & permission to s3 (need to inject to all services)
   enableAuth: false
@@ -1053,15 +1050,6 @@ s3:
     annotations: {}
     tls: []
 
-  icebergIngress:
-    enabled: false
-    className: ""
-    host: "seaweedfs-iceberg.cluster.local"
-    path: "/"
-    pathType: Prefix
-    annotations: {}
-    tls: []
-
 sftp:
   enabled: false
   imageOverride: null

rust/volume_server/Cargo.lock

@@ -1,7 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "weed-volume-rs"
-version = "0.1.0"

rust/volume_server/Cargo.toml

@@ -1,6 +0,0 @@
-[package]
-name = "weed-volume-rs"
-version = "0.1.0"
-edition = "2021"
-
-[dependencies]

rust/volume_server/DEV_PLAN.md

@@ -1,245 +0,0 @@
-# Rust Volume Server Parity Implementation Plan
-
-## Objective
-Implement a native Rust volume server that replicates Go volume-server behavior for HTTP and gRPC APIs, so it can become a drop-in replacement validated by existing integration suites.
-
-## Current Focus (2026-02-16)
-- Program focus is now Rust implementation parity, not broad test expansion.
-- `test/volume_server` is treated as the parity gate.
-- Existing Rust launcher modes (`exec`, `proxy`) are transition tools; they are not the final target.
-
-## Current Status
-- Rust crate and launcher are in place.
-- Integration harness can run:
-  - Go master + Go volume (default)
-  - Go master + Rust launcher (`VOLUME_SERVER_IMPL=rust`)
-- Rust launcher `proxy` mode has full-suite integration pass while delegating backend handlers to Go.
-- Rust launcher `native` mode is wired as the default Rust entrypoint and currently bootstraps via supervised Go backend delegation.
-- Native Rust HTTP handlers now serve control/surface paths in `native` mode:
-  - `/status`, `/healthz`
-  - `OPTIONS` admin/public behavior (method allow-list + CORS preflight headers)
-  - `/ui/index.html` with config-driven JWT/access-ui gating
-  - `/favicon.ico` and `/seaweedfsstatic/*`
-  - public non-read methods (`POST`/`PUT`/`DELETE`/unsupported verbs) as `200` no-op passthrough parity
-  - admin unsupported verbs as `400` parity
-- Native Rust control-surface parity now also includes:
-  - `/healthz` status mirroring from backend state transitions (e.g. leave/stopping => `503`)
-  - absolute-form HTTP request-target normalization before native route matching
-- Native Rust HTTP data-path prevalidation now includes:
-  - early malformed vid/fid rejection (`400`) for GET/HEAD/POST/PUT fid-route shapes before delegation
-  - slash-form fid-route parsing for `/{vid}/{fid}` and `/{vid}/{fid}/{filename}` with reserved-path exclusions (`/status`, `/healthz`, `/ui/index.html`, `/stats/*`, static assets)
-  - write-path error prevalidation for fid routes:
-    - malformed multipart form-data requests without a boundary => `400`
-    - requests containing `Content-MD5` header => `400` mismatch parity branch
-    - request bodies exceeding configured `-fileSizeLimitMB` (by `Content-Length`) => `400`
-- Native Rust API/storage handlers are not implemented yet.
-
-## Parity Exit Criteria
-1. Native mode passes:
-   - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http`
-   - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc`
-2. CI runs native Rust mode integration coverage (at least smoke, then expanded shards).
-3. Rust mode defaults to native behavior for integration harness.
-4. Go-backend delegation is removed (or retained only as explicit fallback mode).
-
-## Architecture Workstreams
-
-### A. Runtime and Configuration Parity
-- [x] Add `native` runtime mode in `weed-volume-rs` (bootstrap delegation path).
-- [ ] Parse and honor volume-server CLI/config flags used by integration harness:
-  - [ ] network/bind ports (`-ip`, `-port`, `-port.grpc`, `-port.public`)
-  - [ ] master target/config dir/read mode/throttling/JWT-related config
-  - [ ] size/timeout controls and maintenance state defaults
-- [ ] Implement graceful lifecycle behavior (signals, shutdown, readiness).
-
-### B. Native HTTP Surface
-- [ ] Admin/control endpoints:
-  - [x] `GET /status` (native Rust in `native` mode)
-  - [x] `GET /healthz` (native Rust in `native` mode)
-  - [x] `OPTIONS` admin/public method+CORS control behavior (native Rust in `native` mode)
-  - [x] static/UI endpoints currently exercised
-- [ ] Data read path parity:
-  - [ ] fid parsing/path variants
-  - [ ] conditional headers (`If-Modified-Since`, `If-None-Match`)
-  - [ ] range handling (single/multi/invalid)
-  - [ ] deleted reads, auth checks, read-mode branches
-  - [ ] chunk-manifest and compression/image transformation branches
-- [ ] Data write/delete parity:
-  - [ ] write success/unchanged/error paths
-  - [ ] replication and file-size-limit paths
-  - [ ] delete and chunk-manifest delete branches
-- [ ] Method/CORS/public-port parity for split admin/public behavior.
-
-### C. Native gRPC Surface
-- [ ] Control-plane RPCs:
-  - [ ] `GetState`, `SetState`, `VolumeServerStatus`, `Ping`, `VolumeServerLeave`
-  - [ ] admin lifecycle: allocate/mount/unmount/delete/configure/readonly/writable
-- [ ] Data RPCs:
-  - [ ] `ReadNeedleBlob`, `ReadNeedleMeta`, `WriteNeedleBlob`
-  - [ ] `BatchDelete`, `ReadAllNeedles`
-  - [ ] sync/copy/receive and status endpoints
-- [ ] Stream RPCs:
-  - [ ] tail sender/receiver
-  - [ ] vacuum streams
-  - [ ] query streams
-- [ ] Advanced families:
-  - [ ] erasure coding RPC set
-  - [ ] tiering/remote fetch
-  - [ ] scrub/query mode matrix
-
-### D. Storage Compatibility Layer
-- [ ] Implement volume data/index handling compatible with Go on-disk format.
-- [ ] Preserve cookie/checksum/timestamp semantics used by tests.
-- [ ] Match read/write/delete consistency and error mapping behavior.
-- [ ] Ensure EC metadata/data-path compatibility with existing files.
-
-### E. Operational Hardening
-- [ ] Deterministic startup/readiness and shutdown semantics.
-- [ ] Log/error parity sufficient for debugging and CI triage.
-- [ ] Concurrency/timeout behavior alignment for throttling and streams.
-- [ ] Performance baseline checks vs Go for key flows.
-
-## Milestone Plan
-
-### M0 (Completed): Harness + Launcher Transition
-- [x] Rust launcher integrated into harness.
-- [x] Proxy mode full-suite validation with Go backend delegation.
-
-### M1: Native Skeleton (Control Plane First)
-- [ ] `native` mode boots and serves:
-  - [x] `/status`, `/healthz`
-  - [ ] `GetState`, `SetState`, `VolumeServerStatus`, `Ping`, `VolumeServerLeave`
-- Gate:
-  - [x] targeted HTTP/grpc control tests pass in `native` mode (delegated backend path).
-
-### M2: Native Core Data Paths
-- [ ] Native HTTP read/write/delete baseline parity.
-- [ ] Native gRPC data baseline parity (`Read/WriteNeedle*`, `BatchDelete`, `ReadAllNeedles`).
-- Gate:
-  - core HTTP and gRPC data suites pass in `native` mode.
-
-### M3: Native Stream + Copy/Sync
-- [ ] Tail/copy/receive/sync paths in native mode.
-- Gate:
-  - stream/copy families pass in `native` mode.
-
-### M4: Native Advanced Feature Families
-- [ ] EC, tiering, scrub/query advanced branches.
-- Gate:
-  - full `/test/volume_server/http` and `/test/volume_server/grpc` pass in `native` mode.
-
-### M5: CI/Cutover
-- [x] Add/expand native-mode CI jobs (smoke matrix includes `native`).
-- [x] Make native mode default for Rust integration runs.
-- [ ] Keep `exec`/`proxy` only as explicit fallback modes during rollout.
-
-## Immediate Next Steps
-1. Implement minimal native gRPC state/ping RPC handlers (`GetState`, `SetState`, `VolumeServerStatus`, `Ping`, `VolumeServerLeave`).
-2. Expand native HTTP parity from control/static surface into data-path handlers (read/write/delete variants) while preserving current native control behavior.
-3. Keep rerunning native-mode integration suites as each delegated branch is replaced.
-4. Add mismatch triage notes for each API moved from delegation to native implementation.
-
-## Risk Register
-- On-disk format mismatch risk:
-  - Mitigation: implement format-level compatibility tests early (idx/dat/needle encoding).
-- Behavioral drift in edge branches:
-  - Mitigation: use integration suite failures as primary truth; only add tests for newly discovered untracked branches.
-- Stream/concurrency semantic mismatch:
-  - Mitigation: stabilize with focused interruption/timeout parity tests.
-
-## Progress Log
-- Date: 2026-02-15
-- Change: Added Rust launcher integration (`exec`) and harness wiring.
-- Validation: Rust launcher mode passed smoke and full integration suites while delegating to Go backend.
-- Commits: `7beab85c2`, `880c2e1da`, `63d08e8a9`, `d402573ea`, `3bd20e6a1`, `6ce4d7ede`
-
-- Date: 2026-02-15
-- Change: Added Rust proxy supervisor mode and validated full integration suite.
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=proxy go test -count=1 ./test/volume_server/http`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=proxy go test -count=1 ./test/volume_server/grpc`
-- Commits: `a7f50d23b`, `548b3d9a3`
-
-- Date: 2026-02-16
-- Change: Re-focused plan from test expansion to native Rust implementation parity.
-- Validation basis: latest Rust proxy full-suite pass keeps regression baseline stable while native implementation starts.
-- Commits: `14c863dbf`
-
-- Date: 2026-02-16
-- Change: Added native Rust launcher mode bootstrap, set Rust launcher default mode to `native`, and expanded CI Rust smoke matrix to include `native`.
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc`
-  - `env VOLUME_SERVER_IMPL=rust go test -count=1 ./test/volume_server/http -run '^TestAdminStatusAndHealthz$'`
-  - `env VOLUME_SERVER_IMPL=rust go test -count=1 ./test/volume_server/grpc -run '^TestStateAndStatusRPCs$'`
-- Commits: `70ddbee37`, `61befd10f`, `2e65966c0`
-
-- Date: 2026-02-16
-- Change: Implemented first native Rust HTTP handlers in `native` mode for `/status` and `/healthz` on the admin listener while preserving proxy delegation for other APIs.
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestAdminStatusAndHealthz$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc`
-- Commits: `7e6e0261a`
-
-- Date: 2026-02-16
-- Change: Implemented native Rust `OPTIONS` handling for admin and public listeners in `native` mode, including method allow-list and origin-driven CORS response parity used by integration tests.
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestOptionsMethodsByPort$|^TestOptionsWithOriginIncludesCorsHeaders$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc`
-- Commits: `fbff2cb39`
-
-- Date: 2026-02-16
-- Change: Added native Rust UI/static/public-surface handlers in `native` mode:
-  - `/ui/index.html` with config-driven JWT/access-ui gating parity
-  - `/favicon.ico` and `/seaweedfsstatic/*` static endpoint parity
-  - public non-read methods as `200` no-op passthrough parity
-  - admin unsupported methods as `400` parity
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestAdminStatusAndHealthz$|^TestUiIndexNotExposedWhenJwtSigningEnabled$|^TestUiIndexExposedWhenJwtSigningEnabledAndAccessUITrue$|^TestStaticAssetEndpoints$|^TestStaticAssetEndpointsOnPublicPort$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestOptionsMethodsByPort$|^TestOptionsWithOriginIncludesCorsHeaders$|^TestPublicPortReadOnlyMethodBehavior$|^TestCorsAndUnsupportedMethodBehavior$|^TestUnsupportedMethodTraceParity$|^TestUnsupportedMethodPropfindParity$|^TestUnsupportedMethodConnectParity$|^TestUnsupportedMethodMkcolParity$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc`
-- Commits: `23e4497b2`
-
-- Date: 2026-02-16
-- Change: Hardened native Rust HTTP control-path parity:
-  - `/healthz` now mirrors backend health status (`200`/`503`) in native mode
-  - absolute-form request-target parsing (e.g. `GET http://host/path HTTP/1.1`) now normalizes to route path parity
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestAdminStatusAndHealthz$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http/...`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc/...`
-- Commits: `d6ff6ed6d`
-
-- Date: 2026-02-16
-- Change: Added native malformed fid-route validation in `native` mode:
-  - GET/HEAD/POST/PUT requests matching fid URL shapes now return Rust-native `400 Bad Request` for invalid vid/fid tokens
-  - valid fid-route requests still delegate to backend handlers for storage/data execution paths
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestInvalidReadPathReturnsBadRequest$|^TestWriteInvalidVidAndFidReturnBadRequest$|^TestMalformedVidFidPathReturnsBadRequest$|^TestDownloadLimitInvalidVidWhileOverLimitReturnsBadRequest$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http/...`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc/...`
-- Commits: `1ce0174b2`
-
-- Date: 2026-02-16
-- Change: Added native Rust write-path prevalidation branches for fid routes in `native` mode:
-  - multipart form uploads without boundary now return native `400`
-  - `Content-MD5` requests now return native `400` mismatch branch
-  - `Content-Length` over configured `-fileSizeLimitMB` now returns native `400` limit branch
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestUploadReadRangeHeadDeleteRoundTrip$|^TestWriteMalformedMultipartAndMD5Mismatch$|^TestWriteRejectsPayloadOverFileSizeLimit$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http/...`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc/...`
-- Commits: `94cefd6f4`
-
-- Date: 2026-02-16
-- Change: Broadened native fid-route parser to cover slash-form URLs:
-  - `/{vid}/{fid}` and `/{vid}/{fid}/{filename}` now flow through native malformed vid/fid validation
-  - added explicit non-fid exclusions for control/stats/static paths to preserve route parity
-- Validation:
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http -run '^TestAdminStatusAndHealthz$|^TestReadPathShapesAndIfModifiedSince$|^TestMalformedVidFidPathReturnsBadRequest$'`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/http/...`
-  - `env VOLUME_SERVER_IMPL=rust VOLUME_SERVER_RUST_MODE=native go test -count=1 ./test/volume_server/grpc/...`
-- Commits: `e66983e9b`

seaweedfs-rdma-sidecar/rdma-engine/Cargo.lock

@@ -211,9 +211,9 @@ checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
 
 [[package]]
 name = "bytes"
-version = "1.11.1"
+version = "1.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
 
 [[package]]
 name = "cast"

seaweedfs-rdma-sidecar/rdma-engine/Cargo.toml

@@ -41,7 +41,7 @@ chrono = { version = "0.4", features = ["serde"] }
 
 # Memory management and utilities
 memmap2 = "0.9"
-bytes = "1.11"
+bytes = "1.0"
 parking_lot = "0.12"  # Fast mutexes
 
 # IPC and networking

test/kafka/kafka-client-loadtest/tools/pom.xml

@@ -41,7 +41,7 @@
         <dependency>
             <groupId>org.apache.avro</groupId>
             <artifactId>avro</artifactId>
-            <version>1.11.5</version>
+            <version>1.11.4</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>

test/s3/catalog_trino/trino_catalog_test.go

@@ -1,413 +0,0 @@
-package catalog_trino
-
-import (
-	"context"
-	"crypto/rand"
-	"fmt"
-	"io"
-	"net"
-	"net/http"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strings"
-	"testing"
-	"time"
-)
-
-type TestEnvironment struct {
-	seaweedDir      string
-	weedBinary      string
-	dataDir         string
-	bindIP          string
-	s3Port          int
-	s3GrpcPort      int
-	icebergPort     int
-	masterPort      int
-	masterGrpcPort  int
-	filerPort       int
-	filerGrpcPort   int
-	volumePort      int
-	volumeGrpcPort  int
-	weedProcess     *exec.Cmd
-	weedCancel      context.CancelFunc
-	trinoContainer  string
-	dockerAvailable bool
-}
-
-func TestTrinoIcebergCatalog(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping Trino integration test")
-	}
-
-	env.StartSeaweedFS(t)
-
-	catalogBucket := "default"
-	createTableBucket(t, env, catalogBucket)
-	createObjectBucket(t, env, catalogBucket)
-
-	configDir := env.writeTrinoConfig(t, catalogBucket)
-	env.startTrinoContainer(t, configDir)
-	waitForTrino(t, env.trinoContainer, 60*time.Second)
-
-	schemaName := "trino_" + randomString(6)
-
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("CREATE SCHEMA IF NOT EXISTS iceberg.%s", schemaName))
-	output := runTrinoSQL(t, env.trinoContainer, "SHOW SCHEMAS FROM iceberg")
-	if !strings.Contains(output, schemaName) {
-		t.Fatalf("Expected schema %s in output:\n%s", schemaName, output)
-	}
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SHOW TABLES FROM iceberg.%s", schemaName))
-}
-
-func NewTestEnvironment(t *testing.T) *TestEnvironment {
-	t.Helper()
-
-	wd, err := os.Getwd()
-	if err != nil {
-		t.Fatalf("Failed to get working directory: %v", err)
-	}
-
-	seaweedDir := wd
-	for i := 0; i < 6; i++ {
-		if _, err := os.Stat(filepath.Join(seaweedDir, "go.mod")); err == nil {
-			break
-		}
-		seaweedDir = filepath.Dir(seaweedDir)
-	}
-
-	weedBinary := filepath.Join(seaweedDir, "weed", "weed")
-	if _, err := os.Stat(weedBinary); os.IsNotExist(err) {
-		weedBinary = "weed"
-		if _, err := exec.LookPath(weedBinary); err != nil {
-			t.Skip("weed binary not found, skipping integration test")
-		}
-	}
-
-	dataDir, err := os.MkdirTemp("", "seaweed-trino-test-*")
-	if err != nil {
-		t.Fatalf("Failed to create temp dir: %v", err)
-	}
-
-	bindIP := findBindIP()
-
-	masterPort, masterGrpcPort := mustFreePortPair(t, "Master")
-	volumePort, volumeGrpcPort := mustFreePortPair(t, "Volume")
-	filerPort, filerGrpcPort := mustFreePortPair(t, "Filer")
-	s3Port, s3GrpcPort := mustFreePortPair(t, "S3")
-	icebergPort := mustFreePort(t, "Iceberg")
-
-	return &TestEnvironment{
-		seaweedDir:      seaweedDir,
-		weedBinary:      weedBinary,
-		dataDir:         dataDir,
-		bindIP:          bindIP,
-		s3Port:          s3Port,
-		s3GrpcPort:      s3GrpcPort,
-		icebergPort:     icebergPort,
-		masterPort:      masterPort,
-		masterGrpcPort:  masterGrpcPort,
-		filerPort:       filerPort,
-		filerGrpcPort:   filerGrpcPort,
-		volumePort:      volumePort,
-		volumeGrpcPort:  volumeGrpcPort,
-		dockerAvailable: hasDocker(),
-	}
-}
-
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	securityToml := filepath.Join(env.dataDir, "security.toml")
-	if err := os.WriteFile(securityToml, []byte("# Empty security config for testing\n"), 0644); err != nil {
-		t.Fatalf("Failed to create security.toml: %v", err)
-	}
-
-	ctx, cancel := context.WithCancel(context.Background())
-	env.weedCancel = cancel
-
-	cmd := exec.CommandContext(ctx, env.weedBinary, "mini",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-master.port.grpc", fmt.Sprintf("%d", env.masterGrpcPort),
-		"-volume.port", fmt.Sprintf("%d", env.volumePort),
-		"-volume.port.grpc", fmt.Sprintf("%d", env.volumeGrpcPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-filer.port.grpc", fmt.Sprintf("%d", env.filerGrpcPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.port.grpc", fmt.Sprintf("%d", env.s3GrpcPort),
-		"-s3.port.iceberg", fmt.Sprintf("%d", env.icebergPort),
-		"-s3.iam.readOnly=false",
-		"-ip", env.bindIP,
-		"-ip.bind", env.bindIP,
-		"-dir", env.dataDir,
-	)
-	cmd.Dir = env.dataDir
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-
-	if err := cmd.Start(); err != nil {
-		t.Fatalf("Failed to start SeaweedFS: %v", err)
-	}
-	env.weedProcess = cmd
-
-	if !env.waitForService(fmt.Sprintf("http://%s:%d/v1/config", env.bindIP, env.icebergPort), 30*time.Second) {
-		t.Fatalf("Iceberg REST API did not become ready")
-	}
-}
-
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	t.Helper()
-
-	if env.trinoContainer != "" {
-		_ = exec.Command("docker", "rm", "-f", env.trinoContainer).Run()
-	}
-
-	if env.weedCancel != nil {
-		env.weedCancel()
-	}
-
-	if env.weedProcess != nil {
-		time.Sleep(2 * time.Second)
-		_ = env.weedProcess.Wait()
-	}
-
-	if env.dataDir != "" {
-		_ = os.RemoveAll(env.dataDir)
-	}
-}
-
-func (env *TestEnvironment) waitForService(url string, timeout time.Duration) bool {
-	client := &http.Client{Timeout: 2 * time.Second}
-	deadline := time.Now().Add(timeout)
-	for time.Now().Before(deadline) {
-		resp, err := client.Get(url)
-		if err == nil {
-			resp.Body.Close()
-			if resp.StatusCode == http.StatusOK {
-				return true
-			}
-		}
-		time.Sleep(500 * time.Millisecond)
-	}
-	return false
-}
-
-func (env *TestEnvironment) writeTrinoConfig(t *testing.T, warehouseBucket string) string {
-	t.Helper()
-
-	configDir := filepath.Join(env.dataDir, "trino")
-	if err := os.MkdirAll(configDir, 0755); err != nil {
-		t.Fatalf("Failed to create Trino config dir: %v", err)
-	}
-
-	config := fmt.Sprintf(`connector.name=iceberg
-iceberg.catalog.type=rest
-iceberg.rest-catalog.uri=http://%s:%d
-iceberg.rest-catalog.warehouse=s3://%s/
-iceberg.file-format=PARQUET
-fs.native-s3.enabled=true
-s3.endpoint=http://%s:%d
-s3.path-style-access=true
-s3.aws-access-key=test
-s3.aws-secret-key=test
-s3.region=us-west-2
-`, env.bindIP, env.icebergPort, warehouseBucket, env.bindIP, env.s3Port)
-
-	if err := os.WriteFile(filepath.Join(configDir, "iceberg.properties"), []byte(config), 0644); err != nil {
-		t.Fatalf("Failed to write Trino config: %v", err)
-	}
-
-	return configDir
-}
-
-func (env *TestEnvironment) startTrinoContainer(t *testing.T, configDir string) {
-	t.Helper()
-
-	containerName := "seaweed-trino-" + randomString(8)
-	env.trinoContainer = containerName
-
-	cmd := exec.Command("docker", "run", "-d",
-		"--name", containerName,
-		"--add-host", "host.docker.internal:host-gateway",
-		"-v", fmt.Sprintf("%s:/etc/trino/catalog", configDir),
-		"-v", fmt.Sprintf("%s:/test", env.dataDir),
-		"-e", "AWS_ACCESS_KEY_ID=test",
-		"-e", "AWS_SECRET_ACCESS_KEY=test",
-		"-e", "AWS_REGION=us-west-2",
-		"trinodb/trino",
-	)
-	if output, err := cmd.CombinedOutput(); err != nil {
-		t.Fatalf("Failed to start Trino container: %v\n%s", err, string(output))
-	}
-}
-
-func waitForTrino(t *testing.T, containerName string, timeout time.Duration) {
-	t.Helper()
-
-	deadline := time.Now().Add(timeout)
-	var lastOutput []byte
-	for time.Now().Before(deadline) {
-		cmd := exec.Command("docker", "exec", containerName,
-			"trino", "--catalog", "system", "--schema", "runtime",
-			"--execute", "SELECT 1",
-		)
-		if output, err := cmd.CombinedOutput(); err == nil {
-			return
-		} else {
-			lastOutput = output
-			outputStr := string(output)
-			if strings.Contains(outputStr, "No such container") ||
-				strings.Contains(outputStr, "is not running") {
-				break
-			}
-		}
-		time.Sleep(1 * time.Second)
-	}
-	logs, _ := exec.Command("docker", "logs", containerName).CombinedOutput()
-	t.Fatalf("Timed out waiting for Trino to be ready\nLast output:\n%s\nTrino logs:\n%s", string(lastOutput), string(logs))
-}
-
-func runTrinoSQL(t *testing.T, containerName, sql string) string {
-	t.Helper()
-
-	cmd := exec.Command("docker", "exec", containerName,
-		"trino", "--catalog", "system", "--schema", "runtime",
-		"--output-format", "CSV",
-		"--execute", sql,
-	)
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		t.Fatalf("Trino command failed: %v\nSQL: %s\nOutput:\n%s", err, sql, string(output))
-	}
-	return string(output)
-}
-
-func createTableBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	endpoint := fmt.Sprintf("http://%s:%d/buckets", env.bindIP, env.s3Port)
-	reqBody := fmt.Sprintf(`{"name":"%s"}`, bucketName)
-	req, err := http.NewRequest(http.MethodPut, endpoint, strings.NewReader(reqBody))
-	if err != nil {
-		t.Fatalf("Failed to create request: %v", err)
-	}
-	req.Header.Set("Content-Type", "application/x-amz-json-1.1")
-
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		t.Fatalf("Failed to create table bucket %s: %v", bucketName, err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK && resp.StatusCode != http.StatusConflict {
-		body, _ := io.ReadAll(resp.Body)
-		t.Fatalf("Failed to create table bucket %s, status %d: %s", bucketName, resp.StatusCode, body)
-	}
-}
-
-func createObjectBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	endpoint := fmt.Sprintf("http://%s:%d/%s", env.bindIP, env.s3Port, bucketName)
-	req, err := http.NewRequest(http.MethodPut, endpoint, nil)
-	if err != nil {
-		t.Fatalf("Failed to create S3 bucket request: %v", err)
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		t.Fatalf("Failed to create S3 bucket %s: %v", bucketName, err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK && resp.StatusCode != http.StatusConflict {
-		body, _ := io.ReadAll(resp.Body)
-		t.Fatalf("Failed to create S3 bucket %s, status %d: %s", bucketName, resp.StatusCode, body)
-	}
-}
-
-func hasDocker() bool {
-	cmd := exec.Command("docker", "version")
-	return cmd.Run() == nil
-}
-
-func mustFreePort(t *testing.T, name string) int {
-	t.Helper()
-
-	port, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for %s: %v", name, err)
-	}
-	return port
-}
-
-func mustFreePortPair(t *testing.T, name string) (int, int) {
-	t.Helper()
-
-	httpPort, grpcPort, err := findAvailablePortPair()
-	if err != nil {
-		t.Fatalf("Failed to get free port pair for %s: %v", name, err)
-	}
-	return httpPort, grpcPort
-}
-
-func findAvailablePortPair() (int, int, error) {
-	httpPort, err := getFreePort()
-	if err != nil {
-		return 0, 0, err
-	}
-	grpcPort, err := getFreePort()
-	if err != nil {
-		return 0, 0, err
-	}
-	return httpPort, grpcPort, nil
-}
-
-func getFreePort() (int, error) {
-	listener, err := net.Listen("tcp", "127.0.0.1:0")
-	if err != nil {
-		return 0, err
-	}
-	defer listener.Close()
-
-	addr := listener.Addr().(*net.TCPAddr)
-	return addr.Port, nil
-}
-
-func findBindIP() string {
-	addrs, err := net.InterfaceAddrs()
-	if err != nil {
-		return "127.0.0.1"
-	}
-	for _, addr := range addrs {
-		ipNet, ok := addr.(*net.IPNet)
-		if !ok || ipNet.IP == nil {
-			continue
-		}
-		ip := ipNet.IP.To4()
-		if ip == nil || ip.IsLoopback() || ip.IsLinkLocalUnicast() {
-			continue
-		}
-		return ip.String()
-	}
-	return "127.0.0.1"
-}
-
-func randomString(length int) string {
-	const charset = "abcdefghijklmnopqrstuvwxyz0123456789"
-	b := make([]byte, length)
-	if _, err := rand.Read(b); err != nil {
-		panic("failed to generate random string: " + err.Error())
-	}
-	for i := range b {
-		b[i] = charset[int(b[i])%len(charset)]
-	}
-	return string(b)
-}

test/s3/etag/s3_etag_test.go

@@ -25,7 +25,6 @@ import (
 	"fmt"
 	"io"
 	mathrand "math/rand"
-	"os"
 	"regexp"
 	"strings"
 	"testing"
@@ -86,12 +85,6 @@ func init() {
 
 // getS3Client creates an AWS S3 v2 client for testing
 func getS3Client(t *testing.T) *s3.Client {
-	endpoint := os.Getenv("S3_ENDPOINT")
-	if endpoint == "" {
-		endpoint = defaultConfig.Endpoint
-	}
-	t.Logf("Using S3 endpoint: %s", endpoint)
-
 	cfg, err := config.LoadDefaultConfig(context.TODO(),
 		config.WithRegion(defaultConfig.Region),
 		config.WithCredentialsProvider(credentials.NewStaticCredentialsProvider(
@@ -102,7 +95,7 @@ func getS3Client(t *testing.T) *s3.Client {
 		config.WithEndpointResolverWithOptions(aws.EndpointResolverWithOptionsFunc(
 			func(service, region string, options ...interface{}) (aws.Endpoint, error) {
 				return aws.Endpoint{
-					URL:               endpoint,
+					URL:               defaultConfig.Endpoint,
 					SigningRegion:     defaultConfig.Region,
 					HostnameImmutable: true,
 				}, nil
@@ -410,101 +403,6 @@ func TestMultipartUploadETagFormat(t *testing.T) {
 		"Part count in ETag should match number of parts uploaded")
 }
 
-func TestMultipartUploadETagVerification(t *testing.T) {
-	ctx := context.Background()
-	client := getS3Client(t)
-
-	bucketName := getNewBucketName()
-	err := createTestBucket(ctx, client, bucketName)
-	require.NoError(t, err, "Failed to create test bucket")
-	defer cleanupTestBucket(ctx, client, bucketName)
-
-	// Create test data for multipart upload (11MB = 2 parts: 5MB + 6MB)
-	// Using parts of different sizes to ensure correct calculation
-	part1Size := 5 * 1024 * 1024
-	part2Size := 6 * 1024 * 1024
-	data1 := generateRandomData(part1Size)
-	data2 := generateRandomData(part2Size)
-
-	objectKey := "verify-etag-multipart.bin"
-
-	// Pre-calculate expected ETag
-	md1 := md5.Sum(data1)
-	md2 := md5.Sum(data2)
-	concatenatedMD5s := append(md1[:], md2[:]...)
-	finalMD5 := md5.Sum(concatenatedMD5s)
-	expectedETagValue := fmt.Sprintf("%x-2", finalMD5)
-
-	t.Logf("Expected multipart ETag: %s", expectedETagValue)
-
-	// 1. CreateMultipartUpload
-	createResp, err := client.CreateMultipartUpload(ctx, &s3.CreateMultipartUploadInput{
-		Bucket: aws.String(bucketName),
-		Key:    aws.String(objectKey),
-	})
-	require.NoError(t, err)
-	uploadId := createResp.UploadId
-
-	// 2. UploadPart 1
-	putPart1, err := client.UploadPart(ctx, &s3.UploadPartInput{
-		Bucket:     aws.String(bucketName),
-		Key:        aws.String(objectKey),
-		UploadId:   uploadId,
-		PartNumber: aws.Int32(1),
-		Body:       bytes.NewReader(data1),
-	})
-	require.NoError(t, err)
-	assert.Equal(t, "\""+calculateMD5(data1)+"\"", aws.ToString(putPart1.ETag))
-
-	// 3. UploadPart 2
-	putPart2, err := client.UploadPart(ctx, &s3.UploadPartInput{
-		Bucket:     aws.String(bucketName),
-		Key:        aws.String(objectKey),
-		UploadId:   uploadId,
-		PartNumber: aws.Int32(2),
-		Body:       bytes.NewReader(data2),
-	})
-	require.NoError(t, err)
-	assert.Equal(t, "\""+calculateMD5(data2)+"\"", aws.ToString(putPart2.ETag))
-
-	// 4. CompleteMultipartUpload
-	completeResp, err := client.CompleteMultipartUpload(ctx, &s3.CompleteMultipartUploadInput{
-		Bucket:   aws.String(bucketName),
-		Key:      aws.String(objectKey),
-		UploadId: uploadId,
-		MultipartUpload: &types.CompletedMultipartUpload{
-			Parts: []types.CompletedPart{
-				{ETag: putPart1.ETag, PartNumber: aws.Int32(1)},
-				{ETag: putPart2.ETag, PartNumber: aws.Int32(2)},
-			},
-		},
-	})
-	require.NoError(t, err)
-
-	completeETag := cleanETag(aws.ToString(completeResp.ETag))
-	t.Logf("CompleteMultipartUpload ETag: %s", completeETag)
-	assert.Equal(t, expectedETagValue, completeETag, "CompleteMultipartUpload ETag mismatch")
-
-	// 5. HeadObject
-	headResp, err := client.HeadObject(ctx, &s3.HeadObjectInput{
-		Bucket: aws.String(bucketName),
-		Key:    aws.String(objectKey),
-	})
-	require.NoError(t, err)
-	headETag := cleanETag(aws.ToString(headResp.ETag))
-	assert.Equal(t, expectedETagValue, headETag, "HeadObject ETag mismatch")
-
-	// 6. GetObject
-	getResp, err := client.GetObject(ctx, &s3.GetObjectInput{
-		Bucket: aws.String(bucketName),
-		Key:    aws.String(objectKey),
-	})
-	require.NoError(t, err)
-	getETag := cleanETag(aws.ToString(getResp.ETag))
-	assert.Equal(t, expectedETagValue, getETag, "GetObject ETag mismatch")
-	getResp.Body.Close()
-}
-
 // TestPutObjectETagConsistency verifies ETag consistency between PUT and GET
 func TestPutObjectETagConsistency(t *testing.T) {
 	ctx := context.Background()

test/s3/iam/s3_iam_distributed_test.go

@@ -129,7 +129,6 @@ func TestS3IAMDistributedTests(t *testing.T) {
 			errorMsg := err.Error()
 			return strings.Contains(errorMsg, "timeout") ||
 				strings.Contains(errorMsg, "connection reset") ||
-				strings.Contains(errorMsg, "connection refused") ||
 				strings.Contains(errorMsg, "temporary failure") ||
 				strings.Contains(errorMsg, "TooManyRequests") ||
 				strings.Contains(errorMsg, "ServiceUnavailable") ||

test/s3/iam/s3_sts_credential_prefix_test.go

@@ -1,82 +0,0 @@
-package iam
-
-import (
-	"encoding/xml"
-	"io"
-	"net/http"
-	"net/url"
-	"os"
-	"strings"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestSTSTemporaryCredentialPrefix verifies that STS temporary credentials use ASIA prefix
-// This test ensures AWS compatibility - temporary credentials should use ASIA, not AKIA
-func TestSTSTemporaryCredentialPrefix(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	if !isSTSEndpointRunning(t) {
-		t.Skip("SeaweedFS STS endpoint is not running at", TestSTSEndpoint)
-	}
-
-	// Use test credentials from environment or fall back to defaults
-	accessKey := os.Getenv("STS_TEST_ACCESS_KEY")
-	if accessKey == "" {
-		accessKey = "admin"
-	}
-	secretKey := os.Getenv("STS_TEST_SECRET_KEY")
-	if secretKey == "" {
-		secretKey = "admin"
-	}
-
-	t.Run("assume_role_returns_asia_prefix", func(t *testing.T) {
-		resp, err := callSTSAPIWithSigV4(t, url.Values{
-			"Action":          {"AssumeRole"},
-			"Version":         {"2011-06-15"},
-			"RoleArn":         {"arn:aws:iam::role/admin"},
-			"RoleSessionName": {"asia-prefix-test"},
-		}, accessKey, secretKey)
-		require.NoError(t, err)
-		defer resp.Body.Close()
-
-		body, err := io.ReadAll(resp.Body)
-		require.NoError(t, err)
-
-		if resp.StatusCode != http.StatusOK {
-			t.Logf("Response status: %d, body: %s", resp.StatusCode, string(body))
-			t.Skip("AssumeRole not fully implemented yet")
-		}
-
-		var stsResp AssumeRoleTestResponse
-		err = xml.Unmarshal(body, &stsResp)
-		require.NoError(t, err, "Failed to parse response: %s", string(body))
-
-		creds := stsResp.Result.Credentials
-		require.NotEmpty(t, creds.AccessKeyId, "AccessKeyId should not be empty")
-
-		// Verify ASIA prefix for temporary credentials
-		assert.True(t, strings.HasPrefix(creds.AccessKeyId, "ASIA"),
-			"Temporary credentials must use ASIA prefix (not AKIA for permanent keys), got: %s", creds.AccessKeyId)
-
-		// Verify it's NOT using AKIA (permanent credentials)
-		assert.False(t, strings.HasPrefix(creds.AccessKeyId, "AKIA"),
-			"Temporary credentials must NOT use AKIA prefix (that's for permanent IAM keys), got: %s", creds.AccessKeyId)
-
-		// Verify format: ASIA + 16 hex characters = 20 chars total
-		assert.Equal(t, 20, len(creds.AccessKeyId),
-			"Access key ID should be 20 characters (ASIA + 16 hex chars), got: %s", creds.AccessKeyId)
-
-		t.Logf("✓ Temporary credentials correctly use ASIA prefix: %s", creds.AccessKeyId)
-	})
-
-	t.Run("assume_role_with_web_identity_returns_asia_prefix", func(t *testing.T) {
-		// This test would require OIDC setup, so we'll skip it for now
-		// but the same ASIA prefix validation should apply
-		t.Skip("AssumeRoleWithWebIdentity requires OIDC provider setup")
-	})
-}

test/s3/policy/policy_test.go

@@ -16,25 +16,22 @@ import (
 
 	"github.com/seaweedfs/seaweedfs/weed/command"
 	"github.com/seaweedfs/seaweedfs/weed/glog"
-	"github.com/seaweedfs/seaweedfs/weed/pb"
 	flag "github.com/seaweedfs/seaweedfs/weed/util/fla9"
 	"github.com/stretchr/testify/require"
 )
 
 // TestCluster manages the weed mini instance for integration testing
 type TestCluster struct {
-	dataDir        string
-	ctx            context.Context
-	cancel         context.CancelFunc
-	isRunning      bool
-	wg             sync.WaitGroup
-	masterPort     int
-	masterGrpcPort int
-	volumePort     int
-	filerPort      int
-	filerGrpcPort  int
-	s3Port         int
-	s3Endpoint     string
+	dataDir    string
+	ctx        context.Context
+	cancel     context.CancelFunc
+	isRunning  bool
+	wg         sync.WaitGroup
+	masterPort int
+	volumePort int
+	filerPort  int
+	s3Port     int
+	s3Endpoint string
 }
 
 func TestS3PolicyShellRevised(t *testing.T) {
@@ -56,8 +53,8 @@ func TestS3PolicyShellRevised(t *testing.T) {
 	require.NoError(t, tmpPolicyFile.Close())
 
 	weedCmd := "weed"
-	masterAddr := string(pb.NewServerAddress("127.0.0.1", cluster.masterPort, cluster.masterGrpcPort))
-	filerAddr := string(pb.NewServerAddress("127.0.0.1", cluster.filerPort, cluster.filerGrpcPort))
+	masterAddr := fmt.Sprintf("127.0.0.1:%d", cluster.masterPort)
+	filerAddr := fmt.Sprintf("127.0.0.1:%d", cluster.filerPort)
 
 	// Put
 	execShell(t, weedCmd, masterAddr, filerAddr, fmt.Sprintf("s3.policy -put -name=testpolicy -file=%s", tmpPolicyFile.Name()))
@@ -159,16 +156,17 @@ func findAvailablePort() (int, error) {
 
 // findAvailablePortPair finds an available http port P such that P and P+10000 (grpc) are both available
 func findAvailablePortPair() (int, int, error) {
-	httpPort, err := findAvailablePort()
-	if err != nil {
-		return 0, 0, err
-	}
 	for i := 0; i < 100; i++ {
-		grpcPort, err := findAvailablePort()
+		httpPort, err := findAvailablePort()
 		if err != nil {
 			return 0, 0, err
 		}
-		if grpcPort != httpPort {
+		grpcPort := httpPort + 10000
+
+		// check if grpc port is available
+		listener, err := net.Listen("tcp", fmt.Sprintf("127.0.0.1:%d", grpcPort))
+		if err == nil {
+			listener.Close()
 			return httpPort, grpcPort, nil
 		}
 	}
@@ -190,16 +188,14 @@ func startMiniCluster(t *testing.T) (*TestCluster, error) {
 	ctx, cancel := context.WithCancel(context.Background())
 	s3Endpoint := fmt.Sprintf("http://127.0.0.1:%d", s3Port)
 	cluster := &TestCluster{
-		dataDir:        testDir,
-		ctx:            ctx,
-		cancel:         cancel,
-		masterPort:     masterPort,
-		masterGrpcPort: masterGrpcPort,
-		volumePort:     volumePort,
-		filerPort:      filerPort,
-		filerGrpcPort:  filerGrpcPort,
-		s3Port:         s3Port,
-		s3Endpoint:     s3Endpoint,
+		dataDir:    testDir,
+		ctx:        ctx,
+		cancel:     cancel,
+		masterPort: masterPort,
+		volumePort: volumePort,
+		filerPort:  filerPort,
+		s3Port:     s3Port,
+		s3Endpoint: s3Endpoint,
 	}
 
 	// Disable authentication for tests

test/s3/spark/issue_8234_repro_test.go

@@ -1,76 +0,0 @@
-package spark
-
-import (
-	"strings"
-	"testing"
-)
-
-func setupSparkIssue8234Env(t *testing.T) *TestEnvironment {
-	t.Helper()
-
-	env := NewTestEnvironment()
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping Spark S3 integration test")
-	}
-
-	env.StartSeaweedFS(t)
-	t.Cleanup(func() { env.Cleanup(t) })
-
-	createObjectBucket(t, env, "test")
-	env.startSparkContainer(t)
-	return env
-}
-
-func TestSparkS3AppendIssue8234Regression(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping Spark integration test in short mode")
-	}
-
-	env := setupSparkIssue8234Env(t)
-
-	script := `
-import sys
-import pyspark.sql.types as T
-
-target = "s3a://test/test_table/"
-sc = spark.sparkContext
-df = sc.parallelize([1, 2, 3]).toDF(T.IntegerType())
-
-df.write.format("parquet").mode("append").save(target)
-print("FIRST_APPEND_OK")
-
-try:
-    df.write.format("parquet").mode("append").save(target)
-    print("SECOND_APPEND_OK")
-    spark.stop()
-    sys.exit(0)
-except Exception as err:
-    message = str(err)
-    print("SECOND_APPEND_FAILED")
-    print(message)
-    if "Copy Source must mention the source bucket and key" in message:
-        print("ISSUE_8234_REGRESSION")
-        spark.stop()
-        sys.exit(4)
-    spark.stop()
-    sys.exit(2)
-`
-
-	code, output := runSparkPyScript(t, env.sparkContainer, script, env.s3Port)
-	if code != 0 {
-		if strings.Contains(output, "ISSUE_8234_REGRESSION") {
-			t.Fatalf("issue #8234 regression detected; output:\n%s", output)
-		}
-		t.Fatalf("Spark script exited with code %d; output:\n%s", code, output)
-	}
-
-	if !strings.Contains(output, "FIRST_APPEND_OK") {
-		t.Fatalf("expected first append success marker in output, got:\n%s", output)
-	}
-	if !strings.Contains(output, "SECOND_APPEND_OK") {
-		t.Fatalf("expected second append success marker in output, got:\n%s", output)
-	}
-	if strings.Contains(output, "Copy Source must mention the source bucket and key") {
-		t.Fatalf("unexpected issue #8234 error in output:\n%s", output)
-	}
-}

test/s3/spark/issue_8285_repro_test.go

@@ -1,180 +0,0 @@
-package spark
-
-import (
-	"context"
-	"errors"
-	"fmt"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/aws/aws-sdk-go-v2/aws"
-	"github.com/aws/aws-sdk-go-v2/credentials"
-	"github.com/aws/aws-sdk-go-v2/service/s3"
-	s3types "github.com/aws/aws-sdk-go-v2/service/s3/types"
-)
-
-func TestSparkS3TemporaryDirectoryCleanupIssue8285Regression(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping Spark integration test in short mode")
-	}
-
-	env := setupSparkIssue8234Env(t)
-
-	script := `
-import pyspark.sql.functions as F
-
-target = "s3a://test/issue-8285/output"
-
-spark.conf.set("spark.hadoop.fs.s3a.committer.name", "directory")
-spark.conf.set("spark.hadoop.fs.s3a.committer.magic.enabled", "false")
-spark.conf.set("spark.hadoop.fs.s3a.committer.staging.abort.pending.uploads", "true")
-spark.conf.set("spark.hadoop.fs.s3a.committer.staging.conflict-mode", "append")
-spark.conf.set("spark.hadoop.fs.s3a.committer.staging.tmp.path", "/tmp")
-spark.conf.set("spark.hadoop.fs.s3a.directory.marker.retention", "keep")
-
-df = spark.range(0, 200).repartition(12).withColumn("value", F.col("id") * 2)
-df.write.format("parquet").mode("overwrite").save(target)
-count = spark.read.parquet(target).count()
-print("WRITE_COUNT=" + str(count))
-`
-
-	code, output := runSparkPyScript(t, env.sparkContainer, script, env.s3Port)
-	if code != 0 {
-		t.Fatalf("Spark script exited with code %d; output:\n%s", code, output)
-	}
-	if !strings.Contains(output, "WRITE_COUNT=200") {
-		t.Fatalf("expected write/read success marker in output, got:\n%s", output)
-	}
-
-	keys := listObjectKeysByPrefix(t, env, "test", "issue-8285/")
-	var temporaryKeys []string
-	for _, key := range keys {
-		if hasTemporaryPathSegment(key) {
-			temporaryKeys = append(temporaryKeys, key)
-		}
-	}
-
-	if len(temporaryKeys) > 0 {
-		t.Fatalf("issue #8285 regression detected: found lingering _temporary artifacts: %v\nall keys: %v", temporaryKeys, keys)
-	}
-
-	temporaryCandidates := []string{
-		"issue-8285/output/_temporary/",
-		"issue-8285/output/_temporary/0/",
-		"issue-8285/output/_temporary/0/_temporary/",
-	}
-	lingering := waitForObjectsToDisappear(t, env, "test", temporaryCandidates, 35*time.Second)
-	if len(lingering) > 0 {
-		t.Fatalf("issue #8285 regression detected: lingering temporary directories: %v", lingering)
-	}
-}
-
-func listObjectKeysByPrefix(t *testing.T, env *TestEnvironment, bucketName, prefix string) []string {
-	t.Helper()
-	client := newS3Client(env)
-
-	pager := s3.NewListObjectsV2Paginator(client, &s3.ListObjectsV2Input{
-		Bucket: aws.String(bucketName),
-		Prefix: aws.String(prefix),
-	})
-
-	var keys []string
-	for pager.HasMorePages() {
-		page, err := pager.NextPage(context.Background())
-		if err != nil {
-			t.Fatalf("failed listing objects for prefix %q: %v", prefix, err)
-		}
-		for _, object := range page.Contents {
-			keys = append(keys, aws.ToString(object.Key))
-		}
-	}
-
-	return keys
-}
-
-func headObjectInfo(t *testing.T, env *TestEnvironment, bucketName, key string) (bool, string, error) {
-	t.Helper()
-
-	client := newS3Client(env)
-	output, err := client.HeadObject(context.Background(), &s3.HeadObjectInput{
-		Bucket: aws.String(bucketName),
-		Key:    aws.String(key),
-	})
-	if err == nil {
-		return true, aws.ToString(output.ContentType), nil
-	}
-
-	var notFound *s3types.NotFound
-	if strings.Contains(err.Error(), "NotFound") || strings.Contains(err.Error(), "NoSuchKey") || errors.As(err, &notFound) {
-		return false, "", nil
-	}
-	return false, "", err
-}
-
-func waitForObjectsToDisappear(t *testing.T, env *TestEnvironment, bucketName string, keys []string, timeout time.Duration) []string {
-	t.Helper()
-
-	deadline := time.Now().Add(timeout)
-	pending := make(map[string]struct{}, len(keys))
-	details := make(map[string]string, len(keys))
-	for _, key := range keys {
-		pending[key] = struct{}{}
-	}
-
-	for len(pending) > 0 && time.Now().Before(deadline) {
-		for key := range pending {
-			exists, contentType, err := headObjectInfo(t, env, bucketName, key)
-			if err != nil {
-				details[key] = fmt.Sprintf("%s (head_error=%v)", key, err)
-				continue
-			}
-			if !exists {
-				delete(pending, key)
-				delete(details, key)
-				continue
-			}
-			details[key] = fmt.Sprintf("%s (exists=true, contentType=%q)", key, contentType)
-		}
-		if len(pending) > 0 {
-			time.Sleep(2 * time.Second)
-		}
-	}
-
-	if len(pending) == 0 {
-		return nil
-	}
-
-	var lingering []string
-	for _, key := range keys {
-		if _, ok := pending[key]; !ok {
-			continue
-		}
-		if detail, hasDetail := details[key]; hasDetail {
-			lingering = append(lingering, detail)
-		} else {
-			lingering = append(lingering, key)
-		}
-	}
-	return lingering
-}
-
-func newS3Client(env *TestEnvironment) *s3.Client {
-	cfg := aws.Config{
-		Region:       "us-east-1",
-		Credentials:  aws.NewCredentialsCache(credentials.NewStaticCredentialsProvider(env.accessKey, env.secretKey, "")),
-		BaseEndpoint: aws.String(fmt.Sprintf("http://localhost:%d", env.s3Port)),
-	}
-	return s3.NewFromConfig(cfg, func(o *s3.Options) {
-		o.UsePathStyle = true
-	})
-}
-
-func hasTemporaryPathSegment(key string) bool {
-	for _, segment := range strings.Split(strings.TrimSuffix(key, "/"), "/") {
-		if segment == "_temporary" {
-			return true
-		}
-	}
-	return false
-}

test/s3/spark/setup_test.go

@@ -1,349 +0,0 @@
-package spark
-
-import (
-	"context"
-	"fmt"
-	"io"
-	"math/rand"
-	"net"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/aws/aws-sdk-go-v2/aws"
-	"github.com/aws/aws-sdk-go-v2/credentials"
-	"github.com/aws/aws-sdk-go-v2/service/s3"
-	"github.com/seaweedfs/seaweedfs/test/s3tables/testutil"
-	"github.com/testcontainers/testcontainers-go"
-)
-
-var (
-	miniProcessMu   sync.Mutex
-	lastMiniProcess *exec.Cmd
-)
-
-func stopPreviousMini() {
-	miniProcessMu.Lock()
-	defer miniProcessMu.Unlock()
-
-	if lastMiniProcess != nil && lastMiniProcess.Process != nil {
-		_ = lastMiniProcess.Process.Kill()
-		_ = lastMiniProcess.Wait()
-	}
-	lastMiniProcess = nil
-}
-
-func registerMiniProcess(cmd *exec.Cmd) {
-	miniProcessMu.Lock()
-	lastMiniProcess = cmd
-	miniProcessMu.Unlock()
-}
-
-func clearMiniProcess(cmd *exec.Cmd) {
-	miniProcessMu.Lock()
-	if lastMiniProcess == cmd {
-		lastMiniProcess = nil
-	}
-	miniProcessMu.Unlock()
-}
-
-type TestEnvironment struct {
-	dockerAvailable  bool
-	weedBinary       string
-	seaweedfsDataDir string
-	weedLogPath      string
-	weedLogFile      *os.File
-	masterPort       int
-	filerPort        int
-	s3Port           int
-	accessKey        string
-	secretKey        string
-	sparkContainer   testcontainers.Container
-	masterProcess    *exec.Cmd
-}
-
-func NewTestEnvironment() *TestEnvironment {
-	env := &TestEnvironment{
-		accessKey: "test",
-		secretKey: "test",
-	}
-
-	cmd := exec.Command("docker", "version")
-	env.dockerAvailable = cmd.Run() == nil
-
-	if weedPath, err := exec.LookPath("weed"); err == nil {
-		env.weedBinary = weedPath
-	}
-
-	return env
-}
-
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	if env.weedBinary == "" {
-		t.Skip("weed binary not found in PATH, skipping Spark S3 integration test")
-	}
-
-	stopPreviousMini()
-
-	var err error
-	env.seaweedfsDataDir, err = os.MkdirTemp("", "seaweed-s3-spark-test-")
-	if err != nil {
-		t.Fatalf("failed to create temp directory: %v", err)
-	}
-
-	env.masterPort = mustFreePort(t, "Master")
-	env.filerPort = mustFreePort(t, "Filer")
-	env.s3Port = mustFreePort(t, "S3")
-
-	bindIP := testutil.FindBindIP()
-	iamConfigPath, err := testutil.WriteIAMConfig(env.seaweedfsDataDir, env.accessKey, env.secretKey)
-	if err != nil {
-		t.Fatalf("failed to create IAM config: %v", err)
-	}
-
-	env.masterProcess = exec.Command(
-		env.weedBinary, "mini",
-		"-ip", bindIP,
-		"-ip.bind", "0.0.0.0",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.config", iamConfigPath,
-		"-dir", env.seaweedfsDataDir,
-	)
-	weedLogPath := filepath.Join(env.seaweedfsDataDir, "weed-mini.log")
-	weedLogFile, err := os.Create(weedLogPath)
-	if err != nil {
-		t.Fatalf("failed to create weed log file: %v", err)
-	}
-	env.weedLogPath = weedLogPath
-	env.weedLogFile = weedLogFile
-	env.masterProcess.Stdout = weedLogFile
-	env.masterProcess.Stderr = weedLogFile
-	env.masterProcess.Env = append(os.Environ(),
-		"AWS_ACCESS_KEY_ID="+env.accessKey,
-		"AWS_SECRET_ACCESS_KEY="+env.secretKey,
-	)
-
-	if err := env.masterProcess.Start(); err != nil {
-		t.Fatalf("failed to start weed mini: %v", err)
-	}
-	registerMiniProcess(env.masterProcess)
-
-	if !waitForPort(env.masterPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - master port %d not listening", env.masterPort)
-	}
-	if !waitForPort(env.filerPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - filer port %d not listening", env.filerPort)
-	}
-	if !waitForPort(env.s3Port, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - s3 port %d not listening", env.s3Port)
-	}
-}
-
-func (env *TestEnvironment) startSparkContainer(t *testing.T) {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
-	defer cancel()
-
-	req := testcontainers.ContainerRequest{
-		Image:        "apache/spark:3.5.1",
-		ExposedPorts: []string{"4040/tcp"},
-		Env: map[string]string{
-			"SPARK_LOCAL_IP": "localhost",
-		},
-		ExtraHosts: []string{"host.docker.internal:host-gateway"},
-		Cmd:        []string{"/bin/sh", "-c", "sleep 7200"},
-	}
-
-	container, err := testcontainers.GenericContainer(ctx, testcontainers.GenericContainerRequest{
-		ContainerRequest: req,
-		Started:          true,
-	})
-	if err != nil {
-		t.Fatalf("failed to start spark container: %v", err)
-	}
-	env.sparkContainer = container
-}
-
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	if env.masterProcess != nil && env.masterProcess.Process != nil {
-		_ = env.masterProcess.Process.Kill()
-		_ = env.masterProcess.Wait()
-	}
-	clearMiniProcess(env.masterProcess)
-	if env.weedLogFile != nil {
-		_ = env.weedLogFile.Close()
-	}
-
-	if t.Failed() && os.Getenv("CI") != "" && env.weedLogPath != "" {
-		logData, err := os.ReadFile(env.weedLogPath)
-		if err != nil {
-			t.Logf("failed to read weed mini log file %s: %v", env.weedLogPath, err)
-		} else {
-			// Print the tail to keep CI output manageable while preserving failure context.
-			const maxTailBytes = 64 * 1024
-			start := 0
-			if len(logData) > maxTailBytes {
-				start = len(logData) - maxTailBytes
-			}
-			t.Logf("weed mini logs (tail, %d bytes):\n%s", len(logData)-start, string(logData[start:]))
-		}
-	}
-
-	if env.sparkContainer != nil {
-		ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-		defer cancel()
-		_ = env.sparkContainer.Terminate(ctx)
-	}
-
-	if env.seaweedfsDataDir != "" {
-		_ = os.RemoveAll(env.seaweedfsDataDir)
-	}
-}
-
-func mustFreePort(t *testing.T, name string) int {
-	t.Helper()
-
-	for i := 0; i < 200; i++ {
-		port := 20000 + rand.Intn(30000)
-		listener, err := net.Listen("tcp", fmt.Sprintf("0.0.0.0:%d", port))
-		if err != nil {
-			continue
-		}
-		_ = listener.Close()
-
-		grpcPort := port + 10000
-		if grpcPort > 65535 {
-			continue
-		}
-		grpcListener, err := net.Listen("tcp", fmt.Sprintf("0.0.0.0:%d", grpcPort))
-		if err != nil {
-			continue
-		}
-		_ = grpcListener.Close()
-		return port
-	}
-
-	t.Fatalf("failed to get free port for %s", name)
-	return 0
-}
-
-func waitForPort(port int, timeout time.Duration) bool {
-	deadline := time.Now().Add(timeout)
-	for time.Now().Before(deadline) {
-		conn, err := net.DialTimeout("tcp", fmt.Sprintf("localhost:%d", port), 500*time.Millisecond)
-		if err == nil {
-			_ = conn.Close()
-			return true
-		}
-		time.Sleep(100 * time.Millisecond)
-	}
-	return false
-}
-
-func runSparkPyScript(t *testing.T, container testcontainers.Container, script string, s3Port int) (int, string) {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 12*time.Minute)
-	defer cancel()
-
-	pythonScript := fmt.Sprintf(`
-import glob
-import os
-import sys
-
-spark_home = os.environ.get("SPARK_HOME", "/opt/spark")
-python_path = os.path.join(spark_home, "python")
-py4j_glob = glob.glob(os.path.join(python_path, "lib", "py4j-*.zip"))
-ivy_dir = "/tmp/ivy"
-os.makedirs(ivy_dir, exist_ok=True)
-os.environ["AWS_REGION"] = "us-east-1"
-os.environ["AWS_DEFAULT_REGION"] = "us-east-1"
-os.environ["AWS_ACCESS_KEY_ID"] = "test"
-os.environ["AWS_SECRET_ACCESS_KEY"] = "test"
-
-if python_path not in sys.path:
-    sys.path.insert(0, python_path)
-if py4j_glob and py4j_glob[0] not in sys.path:
-    sys.path.insert(0, py4j_glob[0])
-
-from pyspark.sql import SparkSession
-
-spark = (SparkSession.builder
-    .master("local[2]")
-    .appName("SeaweedFS S3 Spark Issue 8234 Repro")
-    .config("spark.sql.catalogImplementation", "hive")
-    .config("spark.executor.extraJavaOptions", "-Djdk.tls.client.protocols=TLSv1")
-    .config("spark.sql.parquet.int96RebaseModeInRead", "CORRECTED")
-    .config("spark.sql.parquet.int96RebaseModeInWrite", "CORRECTED")
-    .config("spark.sql.parquet.datetimeRebaseModeInRead", "CORRECTED")
-    .config("spark.sql.parquet.datetimeRebaseModeInWrite", "CORRECTED")
-    .config("spark.sql.parquet.enableVectorizedReader", "false")
-    .config("spark.sql.parquet.mergeSchema", "false")
-    .config("spark.sql.parquet.writeLegacyFormat", "true")
-    .config("spark.sql.broadcastTimeout", "-1")
-    .config("spark.network.timeout", "600")
-    .config("spark.hadoop.hive.metastore.schema.verification", "false")
-    .config("spark.hadoop.hive.metastore.schema.verification.record.version", "false")
-    .config("spark.jars.ivy", ivy_dir)
-    .config("spark.jars.packages", "org.apache.hadoop:hadoop-aws:3.3.2,com.amazonaws:aws-java-sdk-bundle:1.12.262")
-    .config("spark.hadoop.fs.s3a.access.key", "test")
-    .config("spark.hadoop.fs.s3a.secret.key", "test")
-    .config("spark.hadoop.fs.s3a.endpoint", "host.docker.internal:%d")
-    .config("spark.hadoop.mapreduce.fileoutputcommitter.algorithm.version", "1")
-    .config("spark.hadoop.fs.s3a.path.style.access", "true")
-    .config("spark.hadoop.fs.s3a.fast.upload", "true")
-    .config("spark.hadoop.fs.s3a.connection.ssl.enabled", "false")
-    .config("spark.hadoop.fs.s3a.multiobjectdelete.enable", "true")
-    .config("spark.hadoop.fs.s3a.directory.marker.retention", "keep")
-    .config("spark.hadoop.fs.s3a.change.detection.version.required", "false")
-    .config("spark.hadoop.fs.s3a.change.detection.mode", "warn")
-    .config("spark.local.dir", "/tmp/spark-temp")
-    .getOrCreate())
-
-%s
-`, s3Port, script)
-
-	code, out, err := container.Exec(ctx, []string{"python3", "-c", pythonScript})
-	var output string
-	if out != nil {
-		outputBytes, readErr := io.ReadAll(out)
-		if readErr != nil {
-			output = fmt.Sprintf("failed to read container output: %v", readErr)
-		} else {
-			output = string(outputBytes)
-		}
-	}
-	if err != nil {
-		output = output + fmt.Sprintf("\ncontainer exec error: %v\n", err)
-	}
-	return code, output
-}
-
-func createObjectBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	cfg := aws.Config{
-		Region:       "us-east-1",
-		Credentials:  aws.NewCredentialsCache(credentials.NewStaticCredentialsProvider(env.accessKey, env.secretKey, "")),
-		BaseEndpoint: aws.String(fmt.Sprintf("http://localhost:%d", env.s3Port)),
-	}
-
-	client := s3.NewFromConfig(cfg, func(o *s3.Options) {
-		o.UsePathStyle = true
-	})
-
-	_, err := client.CreateBucket(context.Background(), &s3.CreateBucketInput{
-		Bucket: aws.String(bucketName),
-	})
-	if err != nil {
-		t.Fatalf("failed to create object bucket %s: %v", bucketName, err)
-	}
-}

test/s3tables/Makefile

@@ -1,321 +0,0 @@
-# Makefile for generating local S3Tables demo data via Trino and Spark.
-
-.PHONY: help check-deps check-services ensure-work-dir ensure-table-bucket \
-	populate-trino populate-spark populate clean
-
-# Local endpoints (host perspective)
-S3_ENDPOINT ?= http://localhost:8333
-CATALOG_ENDPOINT ?= http://localhost:8181
-
-# Container-visible endpoints (localhost -> host.docker.internal)
-S3_ENDPOINT_DOCKER ?= $(subst localhost,host.docker.internal,$(subst 127.0.0.1,host.docker.internal,$(S3_ENDPOINT)))
-CATALOG_ENDPOINT_DOCKER ?= $(subst localhost,host.docker.internal,$(subst 127.0.0.1,host.docker.internal,$(CATALOG_ENDPOINT)))
-
-# Auth and table-bucket settings
-# If credentials are not explicitly provided, try to reuse the ones from a running
-# local weed mini process (often started with inline AWS_ACCESS_KEY_ID/SECRET).
-WEED_RUNTIME_PID := $(shell pgrep -f "weed mini" 2>/dev/null | head -n 1)
-DETECTED_AWS_ACCESS_KEY_ID := $(shell if [ -n "$(WEED_RUNTIME_PID)" ]; then ps eww -p "$(WEED_RUNTIME_PID)" 2>/dev/null | sed -n 's/.*AWS_ACCESS_KEY_ID=\([^[:space:]]*\).*/\1/p'; fi)
-DETECTED_AWS_SECRET_ACCESS_KEY := $(shell if [ -n "$(WEED_RUNTIME_PID)" ]; then ps eww -p "$(WEED_RUNTIME_PID)" 2>/dev/null | sed -n 's/.*AWS_SECRET_ACCESS_KEY=\([^[:space:]]*\).*/\1/p'; fi)
-AWS_ACCESS_KEY_ID ?= $(if $(DETECTED_AWS_ACCESS_KEY_ID),$(DETECTED_AWS_ACCESS_KEY_ID),admin)
-AWS_SECRET_ACCESS_KEY ?= $(if $(DETECTED_AWS_SECRET_ACCESS_KEY),$(DETECTED_AWS_SECRET_ACCESS_KEY),admin)
-AWS_REGION ?= us-east-1
-TABLE_ACCOUNT_ID ?= admin
-TABLE_BUCKET ?= iceberg-tables
-WAREHOUSE ?= s3tablescatalog/$(TABLE_BUCKET)
-
-# Weed shell config for bucket bootstrap
-WEED_BIN ?= weed
-MASTER_ADDR ?= localhost:9333
-
-# Runtime images
-TRINO_IMAGE ?= trinodb/trino:479
-SPARK_IMAGE ?= tabulario/spark-iceberg:latest
-SPARK_PACKAGES ?= org.apache.iceberg:iceberg-spark-runtime-3.5_2.12:1.7.2,org.apache.iceberg:iceberg-aws-bundle:1.7.2
-
-# Demo data layout
-TRINO_NAMESPACE ?= ui_trino
-TRINO_TABLE ?= customers
-SPARK_NAMESPACE ?= ui_spark
-SPARK_TABLE ?= events
-
-# Temp workspace for generated configs/sql
-WORK_DIR ?= /tmp/seaweedfs-s3tables-seed
-
-help: ## Show available targets and key variables
-	@echo "S3Tables local data generator"
-	@echo ""
-	@awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z_-]+:.*?## / {printf "  %-20s %s\n", $$1, $$2}' $(MAKEFILE_LIST)
-	@echo ""
-	@echo "Defaults:"
-	@echo "  S3_ENDPOINT=$(S3_ENDPOINT)"
-	@echo "  CATALOG_ENDPOINT=$(CATALOG_ENDPOINT)"
-	@echo "  TABLE_BUCKET=$(TABLE_BUCKET)"
-	@echo "  WAREHOUSE=$(WAREHOUSE)"
-
-check-deps: ## Verify local dependencies
-	@command -v docker >/dev/null 2>&1 || (echo "docker is required" && exit 1)
-	@if command -v $(WEED_BIN) >/dev/null 2>&1; then \
-		echo "Using weed binary: $(WEED_BIN)"; \
-	elif [ -x "$(WEED_BIN)" ]; then \
-		echo "Using weed binary path: $(WEED_BIN)"; \
-	else \
-		echo "weed binary not found at $(WEED_BIN)"; \
-		echo "Override with WEED_BIN=/path/to/weed"; \
-		exit 1; \
-	fi; \
-	if [ "$(origin AWS_ACCESS_KEY_ID)" = "file" ] && [ -n "$(DETECTED_AWS_ACCESS_KEY_ID)" ]; then \
-		echo "Using AWS access key from running weed mini process: $(DETECTED_AWS_ACCESS_KEY_ID)"; \
-	fi
-
-check-services: check-deps ## Validate local master/S3/catalog endpoints before seeding
-	@set -eu; \
-	master_addr="$(MASTER_ADDR)"; \
-	master_addr="$${master_addr%%,*}"; \
-	master_http=$$(printf '%s' "$$master_addr" | sed -E 's/^([^:]+:[0-9]+)\.[0-9]+$$/\1/'); \
-	echo "check-services: probing master status at http://$$master_http/cluster/status"; \
-	status_json=$$(curl -fsS --max-time 3 "http://$$master_http/cluster/status") || { \
-		echo "ERROR: cannot reach master status endpoint at http://$$master_http/cluster/status"; \
-		echo "Set MASTER_ADDR to a reachable master, e.g. MASTER_ADDR=localhost:9333"; \
-		exit 1; \
-	}; \
-	leader_addr=$$(printf '%s' "$$status_json" | sed -n 's/.*"Leader":"\([^"]*\)".*/\1/p'); \
-	if [ -n "$$leader_addr" ]; then \
-		leader_http=$$(printf '%s' "$$leader_addr" | sed -E 's/^([^:]+:[0-9]+)\.[0-9]+$$/\1/'); \
-		echo "check-services: master reports leader $$leader_addr (http: $$leader_http)"; \
-		if ! curl -fsS --max-time 3 "http://$$leader_http/cluster/status" >/dev/null; then \
-			echo "ERROR: master advertises leader $$leader_addr (http: $$leader_http), but it is unreachable from this host."; \
-			echo "This causes 'weed shell' (and make populate targets) to block waiting for master connection."; \
-			echo "Fix master advertised address (-ip / -ip.bind) or point MASTER_ADDR to a reachable leader."; \
-			exit 1; \
-		fi; \
-	fi; \
-	echo "check-services: probing S3 endpoint $(S3_ENDPOINT)"; \
-	s3_hostport=$$(printf '%s' "$(S3_ENDPOINT)" | sed -E 's#^https?://([^/]+)/?.*$$#\1#'); \
-	s3_host=$${s3_hostport%%:*}; \
-	s3_port=$${s3_hostport##*:}; \
-	if [ "$$s3_host" = "$$s3_port" ]; then \
-		s3_port=80; \
-	fi; \
-	if command -v nc >/dev/null 2>&1; then \
-		nc -z -w 3 "$$s3_host" "$$s3_port" || { \
-			echo "ERROR: S3 endpoint $(S3_ENDPOINT) is not reachable"; \
-			exit 1; \
-		}; \
-	else \
-		curl -sS --max-time 3 -o /dev/null "$(S3_ENDPOINT)" || { \
-			echo "ERROR: S3 endpoint $(S3_ENDPOINT) is not reachable"; \
-			exit 1; \
-		}; \
-	fi; \
-	echo "check-services: probing Iceberg catalog endpoint $(CATALOG_ENDPOINT)/v1/config"; \
-	curl -sS --max-time 3 -o /dev/null "$(CATALOG_ENDPOINT)/v1/config" || { \
-		echo "ERROR: Iceberg catalog endpoint $(CATALOG_ENDPOINT)/v1/config is not responding"; \
-		exit 1; \
-	}; \
-	echo "check-services: probing Iceberg auth with access key $(AWS_ACCESS_KEY_ID)"; \
-	auth_body=$$(mktemp -t s3tables-auth.XXXXXX); \
-	auth_code=$$(curl -sS --max-time 5 \
-		--aws-sigv4 "aws:amz:$(AWS_REGION):s3tables" \
-		--user "$(AWS_ACCESS_KEY_ID):$(AWS_SECRET_ACCESS_KEY)" \
-		-o "$$auth_body" -w "%{http_code}" "$(CATALOG_ENDPOINT)/v1/namespaces" || true); \
-	if [ "$$auth_code" = "403" ] && grep -q "access key ID you provided does not exist" "$$auth_body"; then \
-		echo "ERROR: AWS_ACCESS_KEY_ID=$(AWS_ACCESS_KEY_ID) is not recognized by the running Iceberg service."; \
-		if [ -n "$(DETECTED_AWS_ACCESS_KEY_ID)" ] && [ -n "$(DETECTED_AWS_SECRET_ACCESS_KEY)" ] && [ "$(AWS_ACCESS_KEY_ID)" != "$(DETECTED_AWS_ACCESS_KEY_ID)" ]; then \
-			echo "Detected running weed mini credentials via process env:"; \
-			echo "  AWS_ACCESS_KEY_ID=$(DETECTED_AWS_ACCESS_KEY_ID)"; \
-			echo "Retry with:"; \
-			echo "  make populate AWS_ACCESS_KEY_ID=$(DETECTED_AWS_ACCESS_KEY_ID) AWS_SECRET_ACCESS_KEY=<secret>"; \
-		fi; \
-		rm -f "$$auth_body"; \
-		exit 1; \
-	fi; \
-	if [ "$$auth_code" = "403" ] && grep -q "Access Denied" "$$auth_body"; then \
-		echo "ERROR: provided AWS credentials are valid but do not have permission for Iceberg REST operations."; \
-		rm -f "$$auth_body"; \
-		exit 1; \
-	fi; \
-	rm -f "$$auth_body"
-
-ensure-work-dir: ## Create temporary workspace for generated files
-	@mkdir -p "$(WORK_DIR)/trino/catalog"
-
-ensure-table-bucket: check-services ## Create table bucket if it does not exist
-	@set -eu; \
-	echo "ensure-table-bucket: checking table bucket $(TABLE_BUCKET) for account $(TABLE_ACCOUNT_ID)"; \
-	get_output=$$(printf "s3tables.bucket -get -name $(TABLE_BUCKET) -account $(TABLE_ACCOUNT_ID)\nexit\n" | "$(WEED_BIN)" shell -master="$(MASTER_ADDR)" 2>&1 || true); \
-	if printf '%s' "$$get_output" | grep -q "NoSuchBucket"; then \
-		echo "Creating table bucket: $(TABLE_BUCKET)"; \
-		create_output=$$(printf "s3tables.bucket -create -name $(TABLE_BUCKET) -account $(TABLE_ACCOUNT_ID)\nexit\n" | "$(WEED_BIN)" shell -master="$(MASTER_ADDR)" 2>&1 || true); \
-		if ! printf '%s' "$$create_output" | grep -q "ARN: arn:aws:s3tables:"; then \
-			echo "ERROR: failed to create table bucket $(TABLE_BUCKET)."; \
-			printf '%s\n' "$$create_output"; \
-			exit 1; \
-		fi; \
-		echo "Created table bucket: $(TABLE_BUCKET)"; \
-	elif printf '%s' "$$get_output" | grep -q "ARN: arn:aws:s3tables:"; then \
-		echo "Table bucket already exists: $(TABLE_BUCKET)"; \
-	else \
-		echo "ERROR: unable to verify table bucket $(TABLE_BUCKET)."; \
-		printf '%s\n' "$$get_output"; \
-		exit 1; \
-	fi
-
-populate-trino: ensure-table-bucket ensure-work-dir ## Populate sample data via Trino
-	@echo "populate-trino: writing Trino catalog and SQL seeds"
-	@printf '%s\n' \
-		'connector.name=iceberg' \
-		'iceberg.catalog.type=rest' \
-		'iceberg.rest-catalog.uri=$(CATALOG_ENDPOINT_DOCKER)' \
-		'iceberg.rest-catalog.warehouse=$(WAREHOUSE)' \
-		'iceberg.file-format=PARQUET' \
-		'iceberg.unique-table-location=true' \
-		'fs.native-s3.enabled=true' \
-		's3.endpoint=$(S3_ENDPOINT_DOCKER)' \
-		's3.path-style-access=true' \
-		's3.signer-type=AwsS3V4Signer' \
-		's3.aws-access-key=$(AWS_ACCESS_KEY_ID)' \
-		's3.aws-secret-key=$(AWS_SECRET_ACCESS_KEY)' \
-		's3.region=$(AWS_REGION)' \
-		'iceberg.rest-catalog.security=SIGV4' \
-		'iceberg.rest-catalog.signing-name=s3tables' \
-		'iceberg.rest-catalog.prefix=$(TABLE_BUCKET)' \
-		> "$(WORK_DIR)/trino/catalog/iceberg.properties"
-	@printf '%s\n' \
-		'CREATE SCHEMA IF NOT EXISTS iceberg.$(TRINO_NAMESPACE);' \
-		'CREATE TABLE IF NOT EXISTS iceberg.$(TRINO_NAMESPACE).$(TRINO_TABLE) (' \
-		'  customer_id INTEGER,' \
-		'  customer_name VARCHAR,' \
-		'  country VARCHAR,' \
-		'  signup_date DATE' \
-		') WITH (' \
-		'  format = '\''PARQUET'\'',' \
-		'  partitioning = ARRAY['\''country'\'']' \
-		');' \
-		'INSERT INTO iceberg.$(TRINO_NAMESPACE).$(TRINO_TABLE)' \
-		'SELECT *' \
-		'FROM (' \
-		'  VALUES' \
-		'    (1, '\''Amanda Olson'\'', '\''US'\'', DATE '\''2024-01-10'\''),' \
-		'    (2, '\''Leonard Eads'\'', '\''US'\'', DATE '\''2024-03-22'\''),' \
-		'    (3, '\''Debbie Ward'\'', '\''MX'\'', DATE '\''2025-07-15'\''),' \
-		'    (4, '\''Donald Holt'\'', '\''CA'\'', DATE '\''2025-11-02'\'')' \
-		') AS src (customer_id, customer_name, country, signup_date)' \
-		'WHERE NOT EXISTS (' \
-		'  SELECT 1' \
-		'  FROM iceberg.$(TRINO_NAMESPACE).$(TRINO_TABLE) dst' \
-		'  WHERE dst.customer_id = src.customer_id' \
-		');' \
-		'SELECT count(*) AS row_count FROM iceberg.$(TRINO_NAMESPACE).$(TRINO_TABLE);' \
-		'SELECT count(*) AS us_row_count FROM iceberg.$(TRINO_NAMESPACE).$(TRINO_TABLE) WHERE country = '\''US'\'';' \
-		'SELECT count(*) AS partition_count FROM iceberg.$(TRINO_NAMESPACE)."$(TRINO_TABLE)$$partitions";' \
-	> "$(WORK_DIR)/trino_seed.sql"
-	@echo "populate-trino: starting Trino docker run"
-	@set -eu; \
-	container_name="seaweedfs-s3tables-trino-seed-$$RANDOM-$$RANDOM"; \
-	echo "populate-trino: launching Trino server container $$container_name"; \
-	docker run -d --name "$$container_name" \
-		--add-host host.docker.internal:host-gateway \
-		-v "$(WORK_DIR)/trino/catalog:/etc/trino/catalog" \
-		-v "$(WORK_DIR):/work" \
-		-e AWS_ACCESS_KEY_ID="$(AWS_ACCESS_KEY_ID)" \
-		-e AWS_SECRET_ACCESS_KEY="$(AWS_SECRET_ACCESS_KEY)" \
-		-e AWS_REGION="$(AWS_REGION)" \
-		"$(TRINO_IMAGE)" >/dev/null; \
-	trap 'docker rm -f "$$container_name" >/dev/null 2>&1 || true' EXIT INT TERM; \
-	echo "populate-trino: waiting for Trino server readiness"; \
-	ready=0; \
-	for i in $$(seq 1 90); do \
-		if [ "$$(docker inspect -f '{{.State.Running}}' "$$container_name" 2>/dev/null || echo false)" != "true" ]; then \
-			break; \
-		fi; \
-		if docker exec "$$container_name" trino --execute "SELECT 1" >/dev/null 2>&1; then \
-			ready=1; \
-			break; \
-		fi; \
-		sleep 1; \
-	done; \
-	if [ "$$ready" -ne 1 ]; then \
-		echo "ERROR: Trino server in container $$container_name did not become ready"; \
-		docker logs "$$container_name" | tail -n 200; \
-		exit 1; \
-	fi; \
-	echo "populate-trino: running SQL seed script"; \
-	if ! docker exec "$$container_name" trino --catalog iceberg --output-format CSV --file /work/trino_seed.sql; then \
-		echo "ERROR: Trino seed query failed. Recent container logs:"; \
-		docker logs "$$container_name" | tail -n 200; \
-		exit 1; \
-	fi
-
-populate-spark: ensure-table-bucket ensure-work-dir ## Populate sample data via Spark SQL
-	@printf '%s\n' \
-		'CREATE NAMESPACE IF NOT EXISTS iceberg.$(SPARK_NAMESPACE);' \
-		'CREATE TABLE IF NOT EXISTS iceberg.$(SPARK_NAMESPACE).$(SPARK_TABLE) (' \
-		'  event_id BIGINT,' \
-		'  user_id STRING,' \
-		'  event_type STRING,' \
-		'  event_day STRING' \
-		') USING iceberg PARTITIONED BY (event_day);' \
-		'INSERT INTO iceberg.$(SPARK_NAMESPACE).$(SPARK_TABLE)' \
-		'SELECT *' \
-		'FROM (' \
-		'  VALUES' \
-		'    (1, '\''u001'\'', '\''page_view'\'', '\''2026-02-01'\''),' \
-		'    (2, '\''u002'\'', '\''checkout'\'', '\''2026-02-02'\''),' \
-		'    (3, '\''u003'\'', '\''purchase'\'', '\''2026-02-03'\''),' \
-		'    (4, '\''u004'\'', '\''refund'\'', '\''2026-02-04'\'')' \
-		') AS src (event_id, user_id, event_type, event_day)' \
-		'WHERE NOT EXISTS (' \
-		'  SELECT 1' \
-		'  FROM iceberg.$(SPARK_NAMESPACE).$(SPARK_TABLE) dst' \
-		'  WHERE dst.event_id = src.event_id' \
-		');' \
-		'SELECT count(*) AS row_count FROM iceberg.$(SPARK_NAMESPACE).$(SPARK_TABLE);' \
-		'SELECT count(*) AS partition_day_rows FROM iceberg.$(SPARK_NAMESPACE).$(SPARK_TABLE) WHERE event_day = '\''2026-02-02'\'';' \
-		'SELECT event_day, count(*) AS rows_per_day FROM iceberg.$(SPARK_NAMESPACE).$(SPARK_TABLE) GROUP BY event_day ORDER BY event_day;' \
-	> "$(WORK_DIR)/spark_seed.sql"
-	@echo "populate-spark: starting Spark docker run"
-	@docker run --rm \
-		--entrypoint /bin/bash \
-		--add-host host.docker.internal:host-gateway \
-		-v "$(WORK_DIR):/work" \
-		-e AWS_ACCESS_KEY_ID="$(AWS_ACCESS_KEY_ID)" \
-		-e AWS_SECRET_ACCESS_KEY="$(AWS_SECRET_ACCESS_KEY)" \
-		-e AWS_REGION="$(AWS_REGION)" \
-		"$(SPARK_IMAGE)" \
-		-lc '/opt/spark/bin/spark-sql \
-			--packages "$(SPARK_PACKAGES)" \
-			--conf "spark.sql.extensions=org.apache.iceberg.spark.extensions.IcebergSparkSessionExtensions" \
-			--conf "spark.sql.defaultCatalog=iceberg" \
-			--conf "spark.sql.catalog.iceberg=org.apache.iceberg.spark.SparkCatalog" \
-			--conf "spark.sql.catalog.iceberg.type=rest" \
-			--conf "spark.sql.catalog.iceberg.uri=$(CATALOG_ENDPOINT_DOCKER)" \
-			--conf "spark.sql.catalog.iceberg.warehouse=$(WAREHOUSE)" \
-			--conf "spark.sql.catalog.iceberg.prefix=$(TABLE_BUCKET)" \
-			--conf "spark.sql.catalog.iceberg.io-impl=org.apache.iceberg.aws.s3.S3FileIO" \
-			--conf "spark.sql.catalog.iceberg.s3.endpoint=$(S3_ENDPOINT_DOCKER)" \
-			--conf "spark.sql.catalog.iceberg.s3.path-style-access=true" \
-			--conf "spark.sql.catalog.iceberg.s3.access-key-id=$(AWS_ACCESS_KEY_ID)" \
-			--conf "spark.sql.catalog.iceberg.s3.secret-access-key=$(AWS_SECRET_ACCESS_KEY)" \
-			--conf "spark.sql.catalog.iceberg.s3.region=$(AWS_REGION)" \
-			--conf "spark.sql.catalog.iceberg.rest.sigv4-enabled=true" \
-			--conf "spark.sql.catalog.iceberg.rest.signing-name=s3tables" \
-			--conf "spark.sql.catalog.spark_catalog=org.apache.iceberg.spark.SparkCatalog" \
-			--conf "spark.sql.catalog.spark_catalog.type=rest" \
-			--conf "spark.sql.catalog.spark_catalog.uri=$(CATALOG_ENDPOINT_DOCKER)" \
-			--conf "spark.sql.catalog.spark_catalog.warehouse=$(WAREHOUSE)" \
-			--conf "spark.sql.catalog.spark_catalog.prefix=$(TABLE_BUCKET)" \
-			--conf "spark.sql.catalog.spark_catalog.io-impl=org.apache.iceberg.aws.s3.S3FileIO" \
-			--conf "spark.sql.catalog.spark_catalog.s3.endpoint=$(S3_ENDPOINT_DOCKER)" \
-			--conf "spark.sql.catalog.spark_catalog.s3.path-style-access=true" \
-			--conf "spark.sql.catalog.spark_catalog.s3.access-key-id=$(AWS_ACCESS_KEY_ID)" \
-			--conf "spark.sql.catalog.spark_catalog.s3.secret-access-key=$(AWS_SECRET_ACCESS_KEY)" \
-			--conf "spark.sql.catalog.spark_catalog.s3.region=$(AWS_REGION)" \
-			--conf "spark.sql.catalog.spark_catalog.rest.sigv4-enabled=true" \
-			--conf "spark.sql.catalog.spark_catalog.rest.signing-name=s3tables" \
-			-f /work/spark_seed.sql'
-
-populate: populate-trino populate-spark ## Populate sample data through Trino and Spark
-
-clean: ## Remove generated temporary files
-	@rm -rf "$(WORK_DIR)"

test/s3tables/README.txt

@@ -1,11 +0,0 @@
-Populate data run:
-
-  - make -C test/s3tables help
-  - make -C test/s3tables populate-trino
-  - make -C test/s3tables populate-spark
-
-  Run:
-
-  - make -C test/s3tables populate
-  - If your account id differs, override: make -C test/s3tables populate
-    TABLE_ACCOUNT_ID=000000000000

test/s3tables/catalog/Dockerfile.pyiceberg

@@ -1,13 +0,0 @@
-# PyIceberg test container for Iceberg REST Catalog compatibility testing
-FROM python:3.11-slim
-
-WORKDIR /app
-
-# Install PyIceberg with S3 support and dependencies
-RUN pip install --no-cache-dir "pyiceberg[s3fs]" pyarrow pandas
-
-# Copy the test script
-COPY test_rest_catalog.py /app/
-
-# Default command
-CMD ["python3", "/app/test_rest_catalog.py", "--help"]

test/s3tables/catalog/Makefile

@@ -1,37 +0,0 @@
-# Makefile for Iceberg REST Catalog Integration Tests
-#
-# This Makefile provides easy-to-use targets for running integration tests
-# and starting a local development environment.
-
-.PHONY: build mini test test-pyiceberg clean
-
-# Root directory of the SeaweedFS project
-PROJECT_ROOT = ../../..
-WEED_BIN = $(PROJECT_ROOT)/weed/weed
-
-# Build the weed binary
-build:
-	@echo "Building SeaweedFS binary..."
-	cd $(PROJECT_ROOT)/weed && go build -v
-
-# Start SeaweedFS mini cluster for manual testing
-# Uses default ports: S3=8333, Iceberg=8182
-mini: build
-	@echo "Starting SeaweedFS mini cluster..."
-	$(WEED_BIN) mini -s3.port.iceberg=8182 & echo $$! > weed-mini.pid; wait
-
-# Run all integration tests in this directory
-test: build
-	@echo "Running all Iceberg catalog integration tests..."
-	go test -v .
-
-# Run only the PyIceberg compatibility tests (requires Docker)
-test-pyiceberg: build
-	@echo "Running PyIceberg compatibility tests..."
-	go test -v -run TestPyIcebergRestCatalog .
-
-# Clean up temporary data and stop weed mini if running
-clean:
-	@echo "Cleaning up..."
-	@test -f weed-mini.pid && kill $$(cat weed-mini.pid) && rm weed-mini.pid || true
-	@rm -rf /tmp/seaweed-iceberg-test-*

test/s3tables/catalog/docker-compose.test.yaml

@@ -1,33 +0,0 @@
-# Iceberg REST Catalog Compatibility Test Docker Compose
-#
-# This compose file sets up a test environment for validating
-# the SeaweedFS Iceberg REST Catalog implementation.
-#
-# Usage:
-#   docker compose -f docker-compose.test.yaml up --build
-#
-# Note: SeaweedFS must be running on the host with the Iceberg REST port exposed.
-# Set ICEBERG_CATALOG_URL environment variable to point to your catalog.
-
-services:
-  # PyIceberg-based REST catalog test
-  pyiceberg-test:
-    build:
-      context: .
-      dockerfile: Dockerfile.pyiceberg
-    environment:
-      - CATALOG_URL=${CATALOG_URL:-http://host.docker.internal:8182}
-      - WAREHOUSE=${WAREHOUSE:-s3://test-bucket/}
-      - PREFIX=${PREFIX:-pyiceberg-test}
-      - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID:-test}
-      - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY:-test}
-      - AWS_REGION=${AWS_REGION:-us-east-1}
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    volumes:
-      - ./test_rest_catalog.py:/app/test_rest_catalog.py:ro
-    command: >
-      python3 /app/test_rest_catalog.py
-      --catalog-url ${CATALOG_URL:-http://host.docker.internal:8182}
-      --warehouse ${WAREHOUSE:-s3://test-bucket/}
-      --prefix ${PREFIX:-pyiceberg-test}

test/s3tables/catalog/iceberg_catalog_test.go

@@ -1,583 +0,0 @@
-// Package catalog provides integration tests for the Iceberg REST Catalog API.
-// These tests use DuckDB running in Docker to verify catalog operations.
-package catalog
-
-import (
-	"bytes"
-	"context"
-	"encoding/json"
-	"fmt"
-	"io"
-	"net"
-	"net/http"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strings"
-	"testing"
-	"time"
-)
-
-// TestEnvironment contains the test environment configuration
-type TestEnvironment struct {
-	seaweedDir      string
-	weedBinary      string
-	dataDir         string
-	s3Port          int
-	s3GrpcPort      int
-	icebergPort     int
-	masterPort      int
-	masterGrpcPort  int
-	filerPort       int
-	filerGrpcPort   int
-	volumePort      int
-	volumeGrpcPort  int
-	weedProcess     *exec.Cmd
-	weedCancel      context.CancelFunc
-	dockerAvailable bool
-}
-
-// hasDocker checks if Docker is available
-func hasDocker() bool {
-	cmd := exec.Command("docker", "version")
-	return cmd.Run() == nil
-}
-
-// getFreePort returns an available ephemeral port and its listener
-func getFreePort() (int, net.Listener, error) {
-	listener, err := net.Listen("tcp", "127.0.0.1:0")
-	if err != nil {
-		return 0, nil, err
-	}
-
-	addr := listener.Addr().(*net.TCPAddr)
-	return addr.Port, listener, nil
-}
-
-// NewTestEnvironment creates a new test environment
-func NewTestEnvironment(t *testing.T) *TestEnvironment {
-	t.Helper()
-
-	// Find the SeaweedFS root directory
-	wd, err := os.Getwd()
-	if err != nil {
-		t.Fatalf("Failed to get working directory: %v", err)
-	}
-
-	// Navigate up to find the SeaweedFS root (contains go.mod)
-	seaweedDir := wd
-	for i := 0; i < 5; i++ {
-		if _, err := os.Stat(filepath.Join(seaweedDir, "go.mod")); err == nil {
-			break
-		}
-		seaweedDir = filepath.Dir(seaweedDir)
-	}
-
-	// Check for weed binary
-	weedBinary := filepath.Join(seaweedDir, "weed", "weed")
-	if _, err := os.Stat(weedBinary); os.IsNotExist(err) {
-		// Try system PATH
-		weedBinary = "weed"
-		if _, err := exec.LookPath(weedBinary); err != nil {
-			t.Skip("weed binary not found, skipping integration test")
-		}
-	}
-
-	// Create temporary data directory
-	dataDir, err := os.MkdirTemp("", "seaweed-iceberg-test-*")
-	if err != nil {
-		t.Fatalf("Failed to create temp dir: %v", err)
-	}
-
-	// Allocate free ephemeral ports for each service
-	var listeners []net.Listener
-	defer func() {
-		for _, l := range listeners {
-			l.Close()
-		}
-	}()
-
-	var l net.Listener
-	s3Port, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for S3: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	icebergPort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for Iceberg: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	s3GrpcPort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for S3 gRPC: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	masterPort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for Master: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	masterGrpcPort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for Master gRPC: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	filerPort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for Filer: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	filerGrpcPort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for Filer gRPC: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	volumePort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for Volume: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	volumeGrpcPort, l, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for Volume gRPC: %v", err)
-	}
-	listeners = append(listeners, l)
-
-	return &TestEnvironment{
-		seaweedDir:      seaweedDir,
-		weedBinary:      weedBinary,
-		dataDir:         dataDir,
-		s3Port:          s3Port,
-		s3GrpcPort:      s3GrpcPort,
-		icebergPort:     icebergPort,
-		masterPort:      masterPort,
-		masterGrpcPort:  masterGrpcPort,
-		filerPort:       filerPort,
-		filerGrpcPort:   filerGrpcPort,
-		volumePort:      volumePort,
-		volumeGrpcPort:  volumeGrpcPort,
-		dockerAvailable: hasDocker(),
-	}
-}
-
-// StartSeaweedFS starts a SeaweedFS mini cluster
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	ctx, cancel := context.WithCancel(context.Background())
-	env.weedCancel = cancel
-
-	masterDir := filepath.Join(env.dataDir, "master")
-	filerDir := filepath.Join(env.dataDir, "filer")
-	volumeDir := filepath.Join(env.dataDir, "volume")
-
-	for _, dir := range []string{masterDir, filerDir, volumeDir} {
-		if err := os.MkdirAll(dir, 0755); err != nil {
-			t.Fatalf("Failed to create directory %s: %v", dir, err)
-		}
-	}
-
-	cmd := exec.CommandContext(ctx, env.weedBinary, "mini",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-master.port.grpc", fmt.Sprintf("%d", env.masterGrpcPort),
-		"-volume.port", fmt.Sprintf("%d", env.volumePort),
-		"-volume.port.grpc", fmt.Sprintf("%d", env.volumeGrpcPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-filer.port.grpc", fmt.Sprintf("%d", env.filerGrpcPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.port.grpc", fmt.Sprintf("%d", env.s3GrpcPort),
-		"-s3.port.iceberg", fmt.Sprintf("%d", env.icebergPort),
-		"-ip.bind", "0.0.0.0",
-		"-dir", env.dataDir,
-	)
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-
-	if err := cmd.Start(); err != nil {
-		t.Fatalf("Failed to start SeaweedFS: %v", err)
-	}
-	env.weedProcess = cmd
-
-	// Wait for services to be ready
-	if !env.waitForService(fmt.Sprintf("http://127.0.0.1:%d/v1/config", env.icebergPort), 30*time.Second) {
-		t.Fatalf("Iceberg REST API did not become ready")
-	}
-}
-
-// waitForService waits for a service to become available
-func (env *TestEnvironment) waitForService(url string, timeout time.Duration) bool {
-	client := &http.Client{Timeout: 2 * time.Second}
-	deadline := time.Now().Add(timeout)
-	for time.Now().Before(deadline) {
-		resp, err := client.Get(url)
-		if err == nil {
-			resp.Body.Close()
-			if resp.StatusCode == http.StatusOK {
-				return true
-			}
-		}
-		time.Sleep(500 * time.Millisecond)
-	}
-	return false
-}
-
-// Cleanup stops SeaweedFS and cleans up resources
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	t.Helper()
-
-	if env.weedCancel != nil {
-		env.weedCancel()
-	}
-
-	if env.weedProcess != nil {
-		// Give process time to shut down gracefully
-		time.Sleep(2 * time.Second)
-		env.weedProcess.Wait()
-	}
-
-	if env.dataDir != "" {
-		os.RemoveAll(env.dataDir)
-	}
-}
-
-// IcebergURL returns the Iceberg REST Catalog URL
-func (env *TestEnvironment) IcebergURL() string {
-	return fmt.Sprintf("http://127.0.0.1:%d", env.icebergPort)
-}
-
-// TestIcebergConfig tests the /v1/config endpoint
-func TestIcebergConfig(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	env.StartSeaweedFS(t)
-
-	// Test GET /v1/config
-	resp, err := http.Get(env.IcebergURL() + "/v1/config")
-	if err != nil {
-		t.Fatalf("Failed to get config: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		t.Errorf("Expected status 200, got %d", resp.StatusCode)
-	}
-
-	body, err := io.ReadAll(resp.Body)
-	if err != nil {
-		t.Fatalf("Failed to read response body: %v", err)
-	}
-
-	// Verify response contains required fields
-	bodyStr := string(body)
-	if !strings.Contains(bodyStr, "defaults") || !strings.Contains(bodyStr, "overrides") {
-		t.Errorf("Config response missing required fields: %s", bodyStr)
-	}
-}
-
-// TestIcebergNamespaces tests namespace operations
-func TestIcebergNamespaces(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	env.StartSeaweedFS(t)
-
-	// Create the default table bucket first via S3
-	createTableBucket(t, env, "warehouse")
-
-	// Test GET /v1/namespaces (should return empty list initially)
-	resp, err := http.Get(env.IcebergURL() + "/v1/namespaces")
-	if err != nil {
-		t.Fatalf("Failed to list namespaces: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		body, _ := io.ReadAll(resp.Body)
-		t.Fatalf("Expected status 200, got %d: %s", resp.StatusCode, body)
-	}
-}
-
-// TestStageCreateAndFinalizeFlow verifies staged create remains invisible until assert-create commit finalizes table creation.
-func TestStageCreateAndFinalizeFlow(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	env.StartSeaweedFS(t)
-	createTableBucket(t, env, "warehouse")
-
-	namespace := "stage_ns"
-	tableName := "orders"
-
-	status, _, err := doIcebergJSONRequest(env, http.MethodPost, "/v1/namespaces", map[string]any{
-		"namespace": []string{namespace},
-	})
-	if err != nil {
-		t.Fatalf("Create namespace request failed: %v", err)
-	}
-	if status != http.StatusOK && status != http.StatusConflict {
-		t.Fatalf("Create namespace status = %d, want 200 or 409", status)
-	}
-
-	status, badReqResp, err := doIcebergJSONRequest(env, http.MethodPost, fmt.Sprintf("/v1/namespaces/%s/tables", namespace), map[string]any{
-		"stage-create": true,
-	})
-	if err != nil {
-		t.Fatalf("Stage create missing-name request failed: %v", err)
-	}
-	if status != http.StatusBadRequest {
-		t.Fatalf("Stage create missing-name status = %d, want 400", status)
-	}
-	errorObj, _ := badReqResp["error"].(map[string]any)
-	if got := errorObj["type"]; got != "BadRequestException" {
-		t.Fatalf("error.type = %v, want BadRequestException", got)
-	}
-	msg, _ := errorObj["message"].(string)
-	if !strings.Contains(strings.ToLower(msg), "table name is required") {
-		t.Fatalf("error.message = %v, want it to include %q", errorObj["message"], "table name is required")
-	}
-
-	status, stageResp, err := doIcebergJSONRequest(env, http.MethodPost, fmt.Sprintf("/v1/namespaces/%s/tables", namespace), map[string]any{
-		"name":         tableName,
-		"stage-create": true,
-	})
-	if err != nil {
-		t.Fatalf("Stage create request failed: %v", err)
-	}
-	if status != http.StatusOK {
-		t.Fatalf("Stage create status = %d, want 200", status)
-	}
-	stageLocation, _ := stageResp["metadata-location"].(string)
-	if !strings.HasSuffix(stageLocation, "/metadata/v1.metadata.json") {
-		t.Fatalf("stage metadata-location = %q, want suffix /metadata/v1.metadata.json", stageLocation)
-	}
-
-	status, _, err = doIcebergJSONRequest(env, http.MethodGet, fmt.Sprintf("/v1/namespaces/%s/tables/%s", namespace, tableName), nil)
-	if err != nil {
-		t.Fatalf("Load staged table request failed: %v", err)
-	}
-	if status != http.StatusNotFound {
-		t.Fatalf("Load staged table status = %d, want 404", status)
-	}
-
-	status, commitResp, err := doIcebergJSONRequest(env, http.MethodPost, fmt.Sprintf("/v1/namespaces/%s/tables/%s", namespace, tableName), map[string]any{
-		"requirements": []map[string]any{
-			{"type": "assert-create"},
-		},
-		"updates": []any{},
-	})
-	if err != nil {
-		t.Fatalf("Finalize commit request failed: %v", err)
-	}
-	if status != http.StatusOK {
-		t.Fatalf("Finalize commit status = %d, want 200", status)
-	}
-	commitLocation, _ := commitResp["metadata-location"].(string)
-	if !strings.HasSuffix(commitLocation, "/metadata/v1.metadata.json") {
-		t.Fatalf("final metadata-location = %q, want suffix /metadata/v1.metadata.json", commitLocation)
-	}
-
-	status, loadResp, err := doIcebergJSONRequest(env, http.MethodGet, fmt.Sprintf("/v1/namespaces/%s/tables/%s", namespace, tableName), nil)
-	if err != nil {
-		t.Fatalf("Load finalized table request failed: %v", err)
-	}
-	if status != http.StatusOK {
-		t.Fatalf("Load finalized table status = %d, want 200", status)
-	}
-	loadLocation, _ := loadResp["metadata-location"].(string)
-	if loadLocation != commitLocation {
-		t.Fatalf("loaded metadata-location = %q, want %q", loadLocation, commitLocation)
-	}
-}
-
-// TestCommitMissingTableWithoutAssertCreate ensures missing-table commits still require assert-create for creation.
-func TestCommitMissingTableWithoutAssertCreate(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	env.StartSeaweedFS(t)
-	createTableBucket(t, env, "warehouse")
-
-	namespace := "stage_missing_assert_ns"
-	tableName := "missing_table"
-
-	status, _, err := doIcebergJSONRequest(env, http.MethodPost, "/v1/namespaces", map[string]any{
-		"namespace": []string{namespace},
-	})
-	if err != nil {
-		t.Fatalf("Create namespace request failed: %v", err)
-	}
-	if status != http.StatusOK && status != http.StatusConflict {
-		t.Fatalf("Create namespace status = %d, want 200 or 409", status)
-	}
-
-	status, _, err = doIcebergJSONRequest(env, http.MethodPost, fmt.Sprintf("/v1/namespaces/%s/tables/%s", namespace, tableName), map[string]any{
-		"requirements": []any{},
-		"updates":      []any{},
-	})
-	if err != nil {
-		t.Fatalf("Commit missing table request failed: %v", err)
-	}
-	if status != http.StatusNotFound {
-		t.Fatalf("Commit missing table status = %d, want 404", status)
-	}
-}
-
-// doIcebergJSONRequest decodes JSON object responses used by catalog tests.
-func doIcebergJSONRequest(env *TestEnvironment, method, path string, payload any) (int, map[string]any, error) {
-	url := env.IcebergURL() + path
-
-	var bodyReader io.Reader
-	if payload != nil {
-		data, err := json.Marshal(payload)
-		if err != nil {
-			return 0, nil, err
-		}
-		bodyReader = bytes.NewReader(data)
-	}
-
-	req, err := http.NewRequest(method, url, bodyReader)
-	if err != nil {
-		return 0, nil, err
-	}
-	if payload != nil {
-		req.Header.Set("Content-Type", "application/json")
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		return 0, nil, err
-	}
-	defer resp.Body.Close()
-
-	data, err := io.ReadAll(resp.Body)
-	if err != nil {
-		return resp.StatusCode, nil, err
-	}
-
-	if len(data) == 0 {
-		return resp.StatusCode, nil, nil
-	}
-
-	var decoded map[string]any
-	if err := json.Unmarshal(data, &decoded); err != nil {
-		return resp.StatusCode, nil, fmt.Errorf("failed to decode %s %s response: %w body=%s", method, path, err, string(data))
-	}
-	return resp.StatusCode, decoded, nil
-}
-
-// createTableBucket creates a table bucket via the S3Tables REST API
-func createTableBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	// Use S3Tables REST API to create the bucket
-	endpoint := fmt.Sprintf("http://localhost:%d/buckets", env.s3Port)
-
-	reqBody := fmt.Sprintf(`{"name":"%s"}`, bucketName)
-	req, err := http.NewRequest(http.MethodPut, endpoint, strings.NewReader(reqBody))
-	if err != nil {
-		t.Fatalf("Failed to create request: %v", err)
-	}
-	req.Header.Set("Content-Type", "application/x-amz-json-1.1")
-
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		t.Fatalf("Failed to create table bucket %s: %v", bucketName, err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK && resp.StatusCode != http.StatusConflict {
-		body, _ := io.ReadAll(resp.Body)
-		t.Fatalf("Failed to create table bucket %s, status %d: %s", bucketName, resp.StatusCode, body)
-	}
-	t.Logf("Created table bucket %s", bucketName)
-}
-
-// TestDuckDBIntegration tests Iceberg catalog operations using DuckDB
-// This test requires Docker to be available
-func TestDuckDBIntegration(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping DuckDB integration test")
-	}
-
-	env.StartSeaweedFS(t)
-
-	// Create a temporary SQL file for DuckDB to execute
-	sqlFile := filepath.Join(env.dataDir, "test.sql")
-	sqlContent := fmt.Sprintf(`
--- Install and load Iceberg extension
-INSTALL iceberg;
-LOAD iceberg;
-
--- List namespaces via Iceberg REST catalog (basic connectivity test)
--- Note: Full operations require setting up S3 credentials which is beyond this test
-SELECT 'Iceberg extension loaded successfully' as result;
-`)
-
-	if err := os.WriteFile(sqlFile, []byte(sqlContent), 0644); err != nil {
-		t.Fatalf("Failed to write SQL file: %v", err)
-	}
-
-	// Run DuckDB in Docker to test Iceberg connectivity
-	// Use host.docker.internal to connect to the host's Iceberg port
-	cmd := exec.Command("docker", "run", "--rm",
-		"-v", fmt.Sprintf("%s:/test", env.dataDir),
-		"--add-host", "host.docker.internal:host-gateway",
-		"--entrypoint", "duckdb",
-		"duckdb/duckdb:latest",
-		"-init", "/test/test.sql",
-		"-c", "SELECT 1",
-	)
-
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		t.Logf("DuckDB output: %s", output)
-		// Check for expected errors in certain CI environments
-		outputStr := string(output)
-		if strings.Contains(outputStr, "iceberg extension is not available") ||
-			strings.Contains(outputStr, "Failed to load") {
-			t.Skip("Skipping DuckDB test: Iceberg extension not available in Docker image")
-		}
-		// Any other error is unexpected
-		t.Fatalf("DuckDB command failed unexpectedly. Output: %s\nError: %v", output, err)
-	}
-
-	// Verify the test completed successfully
-	outputStr := string(output)
-	t.Logf("DuckDB output: %s", outputStr)
-	if !strings.Contains(outputStr, "Iceberg extension loaded successfully") {
-		t.Errorf("Expected success message in output, got: %s", outputStr)
-	}
-}

test/s3tables/catalog/pyiceberg_test.go

@@ -1,80 +0,0 @@
-// Package catalog provides integration tests for the Iceberg REST Catalog API.
-// This file adds PyIceberg-based compatibility tests using Docker.
-package catalog
-
-import (
-	"fmt"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"testing"
-)
-
-// TestPyIcebergRestCatalog tests the Iceberg REST Catalog using PyIceberg client in Docker.
-// This provides a more comprehensive test than DuckDB as PyIceberg fully exercises the REST API.
-//
-// Prerequisites:
-//   - Docker must be available
-//   - SeaweedFS must be running with Iceberg REST enabled
-//
-// To run manually:
-//
-//	cd test/s3tables/catalog
-//	docker compose -f docker-compose.test.yaml up --build
-func TestPyIcebergRestCatalog(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping PyIceberg integration test")
-	}
-
-	env.StartSeaweedFS(t)
-
-	// Create the test bucket first
-	bucketName := "pyiceberg-compat-test"
-	createTableBucket(t, env, bucketName)
-
-	// Build the test working directory path
-	testDir := filepath.Join(env.seaweedDir, "test", "s3tables", "catalog")
-
-	// Run PyIceberg test using Docker
-	catalogURL := fmt.Sprintf("http://host.docker.internal:%d", env.icebergPort)
-	s3Endpoint := fmt.Sprintf("http://host.docker.internal:%d", env.s3Port)
-	warehouse := fmt.Sprintf("s3://%s/", bucketName)
-
-	// Build the test image first for faster repeated runs
-	buildCmd := exec.Command("docker", "build", "-t", "iceberg-rest-test", "-f", "Dockerfile.pyiceberg", ".")
-	buildCmd.Dir = testDir
-	if out, err := buildCmd.CombinedOutput(); err != nil {
-		t.Fatalf("Failed to build test image: %v\n%s", err, string(out))
-	}
-
-	cmd := exec.Command("docker", "run", "--rm",
-		"--add-host", "host.docker.internal:host-gateway",
-		"-e", fmt.Sprintf("AWS_ACCESS_KEY_ID=%s", "test"),
-		"-e", fmt.Sprintf("AWS_SECRET_ACCESS_KEY=%s", "test"),
-		"-e", fmt.Sprintf("AWS_ENDPOINT_URL=%s", s3Endpoint),
-		"-v", fmt.Sprintf("%s:/app:ro", testDir),
-		"iceberg-rest-test",
-		"python3", "/app/test_rest_catalog.py",
-		"--catalog-url", catalogURL,
-		"--warehouse", warehouse,
-		"--prefix", bucketName,
-	)
-	cmd.Dir = testDir
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-
-	t.Logf("Running PyIceberg REST catalog test...")
-	t.Logf("  Catalog URL: %s", catalogURL)
-	t.Logf("  Warehouse: %s", warehouse)
-
-	if err := cmd.Run(); err != nil {
-		t.Errorf("PyIceberg test failed: %v", err)
-	}
-}

test/s3tables/catalog/test_rest_catalog.py

@@ -1,250 +0,0 @@
-#!/usr/bin/env python3
-"""
-Iceberg REST Catalog Compatibility Test for SeaweedFS
-
-This script tests the Iceberg REST Catalog API compatibility of the
-SeaweedFS Iceberg REST Catalog implementation.
-
-Usage:
-    python3 test_rest_catalog.py --catalog-url http://localhost:8182
-
-Requirements:
-    pip install pyiceberg[s3fs]
-"""
-
-import argparse
-import sys
-from pyiceberg.catalog import load_catalog
-from pyiceberg.schema import Schema
-from pyiceberg.types import (
-    IntegerType,
-    LongType,
-    StringType,
-    NestedField,
-)
-from pyiceberg.exceptions import (
-    NamespaceAlreadyExistsError,
-    NoSuchNamespaceError,
-    TableAlreadyExistsError,
-    NoSuchTableError,
-)
-
-
-def test_config_endpoint(catalog):
-    """Test that the catalog config endpoint returns valid configuration."""
-    print("Testing /v1/config endpoint...")
-    # The catalog is already loaded which means config endpoint worked
-    print("  /v1/config endpoint working")
-    return True
-
-
-def test_namespace_operations(catalog, prefix):
-    """Test namespace CRUD operations."""
-    print("Testing namespace operations...")
-    namespace = (f"{prefix.replace('-', '_')}_test_ns",)
-    
-    # List initial namespaces
-    namespaces = catalog.list_namespaces()
-    print(f"  Initial namespaces: {namespaces}")
-    
-    # Create namespace
-    try:
-        catalog.create_namespace(namespace)
-        print(f"  Created namespace: {namespace}")
-    except NamespaceAlreadyExistsError:
-        print(f"  ! Namespace already exists: {namespace}")
-    
-    # List namespaces (should include our new one)
-    namespaces = catalog.list_namespaces()
-    if namespace in namespaces:
-        print("  Namespace appears in list")
-    else:
-        print(f"  Namespace not found in list: {namespaces}")
-        return False
-    
-    # Get namespace properties
-    try:
-        props = catalog.load_namespace_properties(namespace)
-        print(f"  Loaded namespace properties: {props}")
-    except NoSuchNamespaceError:
-        print(f"  Failed to load namespace properties")
-        return False
-    
-    return True
-
-
-def test_table_operations(catalog, prefix):
-    """Test table CRUD operations."""
-    print("Testing table operations...")
-    namespace = (f"{prefix.replace('-', '_')}_test_ns",)
-    table_name = "test_table"
-    table_id = namespace + (table_name,)
-    
-    # Define a simple schema
-    schema = Schema(
-        NestedField(field_id=1, name="id", field_type=LongType(), required=True),
-        NestedField(field_id=2, name="name", field_type=StringType(), required=False),
-        NestedField(field_id=3, name="age", field_type=IntegerType(), required=False),
-    )
-    
-    # Create table
-    try:
-        table = catalog.create_table(
-            identifier=table_id,
-            schema=schema,
-        )
-        print(f"  Created table: {table_id}")
-    except TableAlreadyExistsError:
-        print(f"  ! Table already exists: {table_id}")
-        _ = catalog.load_table(table_id)
-    
-    # List tables
-    tables = catalog.list_tables(namespace)
-    if table_name in [t[1] for t in tables]:
-        print("  Table appears in list")
-    else:
-        print(f"  Table not found in list: {tables}")
-        return False
-    
-    # Load table
-    try:
-        loaded_table = catalog.load_table(table_id)
-        print(f"  Loaded table: {loaded_table.name()}")
-        print(f"    Schema: {loaded_table.schema()}")
-        print(f"    Location: {loaded_table.location()}")
-    except NoSuchTableError:
-        print(f"  Failed to load table")
-        return False
-    
-    return True
-
-
-def test_table_update(catalog, prefix):
-    """Test table update/commit operations."""
-    print("Testing table update operations...")
-    namespace = (f"{prefix.replace('-', '_')}_test_ns",)
-    table_name = "test_table"
-    table_id = namespace + (table_name,)
-    
-    try:
-        table = catalog.load_table(table_id)
-        
-        # Update table properties
-        with table.transaction() as transaction:
-            transaction.set_properties({"test.property": "test.value"})
-        
-        print("  Updated table properties")
-        
-        # Reload and verify
-        table = catalog.load_table(table_id)
-        if table.properties.get("test.property") == "test.value":
-            print("  Property update verified")
-        else:
-            print("  ! Property update failed or not persisted")
-            return False
-        
-    except Exception as e:
-        print(f"  Table update failed: {e}")
-        return False
-    
-    return True
-
-
-def test_cleanup(catalog, prefix):
-    """Test table and namespace deletion."""
-    print("Testing cleanup operations...")
-    namespace = (f"{prefix.replace('-', '_')}_test_ns",)
-    table_id = namespace + ("test_table",)
-    
-    # Drop table
-    try:
-        catalog.drop_table(table_id)
-        print(f"  Dropped table: {table_id}")
-    except NoSuchTableError:
-        print(f"  ! Table already deleted: {table_id}")
-    
-    # Drop namespace
-    try:
-        catalog.drop_namespace(namespace)
-        print(f"  Dropped namespace: {namespace}")
-    except NoSuchNamespaceError:
-        print(f"  ! Namespace already deleted: {namespace}")
-    except Exception as e:
-        print(f"  ? Namespace drop error (may be expected): {e}")
-    
-    return True
-
-
-def main():
-    parser = argparse.ArgumentParser(description="Test Iceberg REST Catalog compatibility")
-    parser.add_argument("--catalog-url", required=True, help="Iceberg REST Catalog URL (e.g., http://localhost:8182)")
-    parser.add_argument("--warehouse", default="s3://iceberg-test/", help="Warehouse location")
-    parser.add_argument("--prefix", required=True, help="Table bucket prefix")
-    parser.add_argument("--skip-cleanup", action="store_true", help="Skip cleanup at the end")
-    args = parser.parse_args()
-    
-    print(f"Connecting to Iceberg REST Catalog at: {args.catalog_url}")
-    print(f"Warehouse: {args.warehouse}")
-    print(f"Prefix: {args.prefix}")
-    print()
-    
-    # Load the REST catalog with retries to handle possible delay in catalog server readiness
-    import time
-    max_retries = 10
-    catalog = None
-    for attempt in range(max_retries):
-        try:
-            catalog = load_catalog(
-                "rest",
-                **{
-                    "type": "rest",
-                    "uri": args.catalog_url,
-                    "warehouse": args.warehouse,
-                    "prefix": args.prefix,
-                }
-            )
-            print(f"Successfully connected to catalog on attempt {attempt + 1}")
-            break
-        except Exception as e:
-            if attempt < max_retries - 1:
-                print(f"  Attempt {attempt + 1} failed, retrying in 2s... ({e})")
-                time.sleep(2)
-            else:
-                print(f"  All {max_retries} attempts failed.")
-                raise e
-    
-    # Run tests
-    tests = [
-        ("Config Endpoint", lambda: test_config_endpoint(catalog)),
-        ("Namespace Operations", lambda: test_namespace_operations(catalog, args.prefix)),
-        ("Table Operations", lambda: test_table_operations(catalog, args.prefix)),
-        ("Table Update", lambda: test_table_update(catalog, args.prefix)),
-    ]
-    
-    if not args.skip_cleanup:
-        tests.append(("Cleanup", lambda: test_cleanup(catalog, args.prefix)))
-    
-    passed = 0
-    failed = 0
-    
-    for name, test_fn in tests:
-        print(f"\n{'='*50}")
-        try:
-            if test_fn():
-                passed += 1
-                print(f"PASSED: {name}")
-            else:
-                failed += 1
-                print(f"FAILED: {name}")
-        except Exception as e:
-            failed += 1
-            print(f"ERROR in {name}: {e}")
-    
-    print(f"\n{'='*50}")
-    print(f"Results: {passed} passed, {failed} failed")
-    
-    return 0 if failed == 0 else 1
-
-
-if __name__ == "__main__":
-    sys.exit(main())

test/s3tables/catalog_risingwave/risingwave_catalog_test.go

@@ -1,79 +0,0 @@
-package catalog_risingwave
-
-import (
-	"fmt"
-	"strings"
-	"testing"
-)
-
-func TestRisingWaveIcebergCatalog(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping RisingWave integration test")
-	}
-
-	t.Log(">>> Starting SeaweedFS...")
-	env.StartSeaweedFS(t)
-	t.Log(">>> SeaweedFS started.")
-
-	tableBucket := "iceberg-tables"
-	t.Logf(">>> Creating table bucket: %s", tableBucket)
-	createTableBucket(t, env, tableBucket)
-
-	t.Log(">>> Starting RisingWave...")
-	env.StartRisingWave(t)
-	t.Log(">>> RisingWave started.")
-
-	// Create Iceberg namespace
-	createIcebergNamespace(t, env, "default")
-
-	// Create a catalog in RisingWave that points to SeaweedFS Iceberg REST API
-	icebergUri := env.dockerIcebergEndpoint()
-	s3Endpoint := env.dockerS3Endpoint()
-
-	tableName := "test_table_" + randomString(6)
-	createIcebergTable(t, env, tableBucket, "default", tableName)
-
-	sourceName := "test_source_" + randomString(6)
-	createSourceSql := fmt.Sprintf(`
-CREATE SOURCE %s WITH (
-    connector = 'iceberg',
-    catalog.type = 'rest',
-    catalog.uri = '%s',
-    catalog.name = 'default',
-    database.name = 'default',
-    table.name = '%s',
-    warehouse.path = 's3://%s',
-    s3.endpoint = '%s',
-    s3.region = 'us-east-1',
-    s3.access.key = '%s',
-    s3.secret.key = '%s',
-    s3.path.style.access = 'true',
-    catalog.rest.sigv4_enabled = 'true',
-    catalog.rest.signing_region = 'us-east-1',
-    catalog.rest.signing_name = 's3'
-);`, sourceName, icebergUri, tableName, tableBucket, s3Endpoint, env.accessKey, env.secretKey)
-
-	t.Logf(">>> Creating source %s...", sourceName)
-	runRisingWaveSQL(t, env.postgresSidecar, createSourceSql)
-
-	showSourcesOutput := runRisingWaveSQL(t, env.postgresSidecar, "SHOW SOURCES;")
-	if !strings.Contains(showSourcesOutput, sourceName) {
-		t.Fatalf("Expected source %s in SHOW SOURCES output:\n%s", sourceName, showSourcesOutput)
-	}
-
-	describeOutput := runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("DESCRIBE %s;", sourceName))
-	if !strings.Contains(describeOutput, "id") || !strings.Contains(describeOutput, "name") {
-		t.Fatalf("Expected id/name columns in DESCRIBE output:\n%s", describeOutput)
-	}
-
-	runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("SELECT * FROM %s LIMIT 0;", sourceName))
-
-	t.Log(">>> RisingWave Iceberg Catalog test passed!")
-}

test/s3tables/catalog_risingwave/risingwave_dml_test.go

@@ -1,219 +0,0 @@
-package catalog_risingwave
-
-import (
-	"fmt"
-	"strings"
-	"testing"
-	"time"
-)
-
-func TestRisingWaveIcebergDML(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping RisingWave integration test")
-	}
-
-	t.Log(">>> Starting SeaweedFS...")
-	env.StartSeaweedFS(t)
-	t.Log(">>> SeaweedFS started.")
-
-	tableBucket := "iceberg-tables"
-	t.Logf(">>> Creating table bucket: %s", tableBucket)
-	createTableBucket(t, env, tableBucket)
-
-	t.Log(">>> Starting RisingWave...")
-	env.StartRisingWave(t)
-	t.Log(">>> RisingWave started.")
-
-	// Create Iceberg namespace
-	createIcebergNamespace(t, env, "default")
-
-	icebergUri := env.dockerIcebergEndpoint()
-	s3Endpoint := env.dockerS3Endpoint()
-
-	// 1. Test INSERT (Append-only)
-	t.Run("TestInsert", func(t *testing.T) {
-		tableName := "test_insert_" + randomString(6)
-		createIcebergTable(t, env, tableBucket, "default", tableName)
-
-		rwTableName := "rw_insert_" + randomString(6)
-		runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("CREATE TABLE %s (id int, name varchar);", rwTableName))
-
-		sinkName := "test_sink_insert_" + randomString(6)
-		createSinkSql := fmt.Sprintf(`
-CREATE SINK %s FROM %s
-WITH (
-    connector = 'iceberg',
-    catalog.type = 'rest',
-    catalog.uri = '%s',
-    catalog.name = 'default',
-    database.name = 'default',
-    table.name = '%s',
-    warehouse.path = 's3://%s',
-    s3.endpoint = '%s',
-    s3.region = 'us-east-1',
-    s3.access.key = '%s',
-    s3.secret.key = '%s',
-    s3.path.style.access = 'true',
-    catalog.rest.sigv4_enabled = 'true',
-    catalog.rest.signing_region = 'us-east-1',
-    catalog.rest.signing_name = 's3',
-    type = 'append-only',
-    force_append_only = 'true'
-);`, sinkName, rwTableName, icebergUri, tableName, tableBucket, s3Endpoint, env.accessKey, env.secretKey)
-
-		t.Logf(">>> Creating sink %s...", sinkName)
-		runRisingWaveSQL(t, env.postgresSidecar, createSinkSql)
-
-		t.Log(">>> Inserting into RisingWave table...")
-		runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("INSERT INTO %s VALUES (1, 'Alice'), (2, 'Bob');", rwTableName))
-		runRisingWaveSQL(t, env.postgresSidecar, "FLUSH;")
-
-		// Verify with Source
-		sourceName := "test_source_insert_" + randomString(6)
-		createSourceSql := fmt.Sprintf(`
-CREATE SOURCE %s WITH (
-    connector = 'iceberg',
-    catalog.type = 'rest',
-    catalog.uri = '%s',
-    catalog.name = 'default',
-    database.name = 'default',
-    table.name = '%s',
-    warehouse.path = 's3://%s',
-    s3.endpoint = '%s',
-    s3.region = 'us-east-1',
-    s3.access.key = '%s',
-    s3.secret.key = '%s',
-    s3.path.style.access = 'true',
-    catalog.rest.sigv4_enabled = 'true',
-    catalog.rest.signing_region = 'us-east-1',
-    catalog.rest.signing_name = 's3'
-);`, sourceName, icebergUri, tableName, tableBucket, s3Endpoint, env.accessKey, env.secretKey)
-
-		runRisingWaveSQL(t, env.postgresSidecar, createSourceSql)
-
-		t.Log(">>> Selecting from source to verify INSERT...")
-		verifyQuery(t, env, sourceName, "1 | Alice", "2 | Bob")
-	})
-
-	// 2. Test UPSERT (Update/Delete)
-	t.Run("TestUpsert", func(t *testing.T) {
-		tableName := "test_upsert_" + randomString(6)
-		// We need a table with PK for upsert to work effectively in RW logic,
-		// effectively maps to Iceberg v2 table.
-		createIcebergTable(t, env, tableBucket, "default", tableName)
-
-		rwTableName := "rw_upsert_" + randomString(6)
-		runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("CREATE TABLE %s (id int PRIMARY KEY, name varchar);", rwTableName))
-
-		sinkName := "test_sink_upsert_" + randomString(6)
-		createSinkSql := fmt.Sprintf(`
-CREATE SINK %s FROM %s
-WITH (
-    connector = 'iceberg',
-    catalog.type = 'rest',
-    catalog.uri = '%s',
-    catalog.name = 'default',
-    database.name = 'default',
-    table.name = '%s',
-    warehouse.path = 's3://%s',
-    s3.endpoint = '%s',
-    s3.region = 'us-east-1',
-    s3.access.key = '%s',
-    s3.secret.key = '%s',
-    s3.path.style.access = 'true',
-    catalog.rest.sigv4_enabled = 'true',
-    catalog.rest.signing_region = 'us-east-1',
-    catalog.rest.signing_name = 's3',
-    type = 'upsert', -- Upsert mode
-    primary_key = 'id'
-);`, sinkName, rwTableName, icebergUri, tableName, tableBucket, s3Endpoint, env.accessKey, env.secretKey)
-
-		t.Logf(">>> Creating upsert sink %s...", sinkName)
-		runRisingWaveSQL(t, env.postgresSidecar, createSinkSql)
-
-		t.Log(">>> Inserting initial data...")
-		runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("INSERT INTO %s VALUES (1, 'Charlie'), (2, 'Dave');", rwTableName))
-		runRisingWaveSQL(t, env.postgresSidecar, "FLUSH;")
-
-		// Update 1, Delete 2
-		t.Log(">>> Updating and Deleting data...")
-		runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("UPDATE %s SET name = 'Charles' WHERE id = 1;", rwTableName))
-		runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("DELETE FROM %s WHERE id = 2;", rwTableName))
-		runRisingWaveSQL(t, env.postgresSidecar, "FLUSH;")
-
-		// Verify with Source
-		sourceName := "test_source_upsert_" + randomString(6)
-		createSourceSql := fmt.Sprintf(`
-CREATE SOURCE %s WITH (
-    connector = 'iceberg',
-    catalog.type = 'rest',
-    catalog.uri = '%s',
-    catalog.name = 'default',
-    database.name = 'default',
-    table.name = '%s',
-    warehouse.path = 's3://%s',
-    s3.endpoint = '%s',
-    s3.region = 'us-east-1',
-    s3.access.key = '%s',
-    s3.secret.key = '%s',
-    s3.path.style.access = 'true',
-    catalog.rest.sigv4_enabled = 'true',
-    catalog.rest.signing_region = 'us-east-1',
-    catalog.rest.signing_name = 's3'
-);`, sourceName, icebergUri, tableName, tableBucket, s3Endpoint, env.accessKey, env.secretKey)
-
-		runRisingWaveSQL(t, env.postgresSidecar, createSourceSql)
-
-		t.Log(">>> Selecting from source to verify UPSERT...")
-		// Should see (1, 'Charles') and NOT (2, 'Dave')
-		verifyQuery(t, env, sourceName, "1 | Charles")
-		verifyQueryAbsence(t, env, sourceName, "2 | Dave")
-	})
-}
-
-func verifyQuery(t *testing.T, env *TestEnvironment, sourceName string, expectedSubstrings ...string) {
-	t.Helper()
-	var output string
-	for i := 0; i < 15; i++ {
-		output = runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("SELECT * FROM %s ORDER BY id;", sourceName))
-		allFound := true
-		for _, s := range expectedSubstrings {
-			if !strings.Contains(output, s) {
-				allFound = false
-				break
-			}
-		}
-		if allFound {
-			return
-		}
-		time.Sleep(2 * time.Second)
-	}
-	t.Fatalf("Failed to find expected data %v in output:\n%s", expectedSubstrings, output)
-}
-
-func verifyQueryAbsence(t *testing.T, env *TestEnvironment, sourceName string, unexpectedSubstrings ...string) {
-	t.Helper()
-	var output string
-	for i := 0; i < 15; i++ {
-		output = runRisingWaveSQL(t, env.postgresSidecar, fmt.Sprintf("SELECT * FROM %s ORDER BY id;", sourceName))
-		noneFound := true
-		for _, s := range unexpectedSubstrings {
-			if strings.Contains(output, s) {
-				noneFound = false
-				break
-			}
-		}
-		if noneFound {
-			return
-		}
-		time.Sleep(2 * time.Second)
-	}
-	t.Fatalf("Found unexpected data %v in output:\n%s", unexpectedSubstrings, output)
-}

test/s3tables/catalog_risingwave/setup_test.go

@@ -1,481 +0,0 @@
-package catalog_risingwave
-
-import (
-	"bytes"
-	"context"
-	"encoding/json"
-	"fmt"
-	"io"
-	"math/rand"
-	"net"
-	"net/http"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strings"
-	"sync"
-	"testing"
-	"time"
-
-	v4 "github.com/aws/aws-sdk-go-v2/aws/signer/v4"
-	"github.com/aws/aws-sdk-go-v2/credentials"
-	"github.com/seaweedfs/seaweedfs/test/s3tables/testutil"
-)
-
-var (
-	miniProcessMu   sync.Mutex
-	lastMiniProcess *exec.Cmd
-)
-
-func stopPreviousMini() {
-	miniProcessMu.Lock()
-	defer miniProcessMu.Unlock()
-
-	if lastMiniProcess != nil && lastMiniProcess.Process != nil {
-		_ = lastMiniProcess.Process.Kill()
-		_ = lastMiniProcess.Wait()
-	}
-	lastMiniProcess = nil
-}
-
-func registerMiniProcess(cmd *exec.Cmd) {
-	miniProcessMu.Lock()
-	lastMiniProcess = cmd
-	miniProcessMu.Unlock()
-}
-
-func clearMiniProcess(cmd *exec.Cmd) {
-	miniProcessMu.Lock()
-	if lastMiniProcess == cmd {
-		lastMiniProcess = nil
-	}
-	miniProcessMu.Unlock()
-}
-
-type TestEnvironment struct {
-	t                   *testing.T
-	dockerAvailable     bool
-	seaweedfsDataDir    string
-	masterPort          int
-	filerPort           int
-	s3Port              int
-	icebergRestPort     int
-	risingwavePort      int
-	bindIP              string
-	accessKey           string
-	secretKey           string
-	risingwaveContainer string
-	postgresSidecar     string
-	masterProcess       *exec.Cmd
-	logFile             *os.File
-}
-
-func NewTestEnvironment(t *testing.T) *TestEnvironment {
-	env := &TestEnvironment{
-		t:         t,
-		accessKey: "AKIAIOSFODNN7EXAMPLE",
-		secretKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
-	}
-
-	// Check if Docker is available
-	cmd := exec.Command("docker", "version")
-	env.dockerAvailable = cmd.Run() == nil
-
-	return env
-}
-
-func (env *TestEnvironment) hostMasterAddress() string {
-	return fmt.Sprintf("127.0.0.1:%d", env.masterPort)
-}
-
-func (env *TestEnvironment) hostS3Endpoint() string {
-	return fmt.Sprintf("http://127.0.0.1:%d", env.s3Port)
-}
-
-func (env *TestEnvironment) hostIcebergEndpoint() string {
-	return fmt.Sprintf("http://127.0.0.1:%d", env.icebergRestPort)
-}
-
-func (env *TestEnvironment) dockerS3Endpoint() string {
-	return fmt.Sprintf("http://host.docker.internal:%d", env.s3Port)
-}
-
-func (env *TestEnvironment) dockerIcebergEndpoint() string {
-	return fmt.Sprintf("http://host.docker.internal:%d", env.icebergRestPort)
-}
-
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	stopPreviousMini()
-
-	var err error
-	env.seaweedfsDataDir, err = os.MkdirTemp("", "seaweed-risingwave-test-")
-	if err != nil {
-		t.Fatalf("failed to create temp directory: %v", err)
-	}
-
-	env.masterPort = mustFreePort(t, "Master")
-	env.filerPort = mustFreePort(t, "Filer")
-	env.s3Port = mustFreePort(t, "S3")
-	env.icebergRestPort = mustFreePort(t, "Iceberg")
-	env.risingwavePort = mustFreePort(t, "RisingWave")
-
-	env.bindIP = testutil.FindBindIP()
-
-	iamConfigPath, err := testutil.WriteIAMConfig(env.seaweedfsDataDir, env.accessKey, env.secretKey)
-	if err != nil {
-		t.Fatalf("failed to create IAM config: %v", err)
-	}
-
-	// Create log file for SeaweedFS
-	logFile, err := os.Create(filepath.Join(env.seaweedfsDataDir, "seaweedfs.log"))
-	if err != nil {
-		t.Fatalf("failed to create log file: %v", err)
-	}
-	env.logFile = logFile
-
-	// Start SeaweedFS using weed mini (all-in-one including Iceberg REST)
-	env.masterProcess = exec.Command(
-		"weed", "mini",
-		"-ip", env.bindIP,
-		"-ip.bind", "0.0.0.0",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.port.iceberg", fmt.Sprintf("%d", env.icebergRestPort),
-		"-s3.config", iamConfigPath,
-		"-dir", env.seaweedfsDataDir,
-	)
-	env.masterProcess.Stdout = logFile
-	env.masterProcess.Stderr = logFile
-	env.masterProcess.Env = append(os.Environ(),
-		"AWS_ACCESS_KEY_ID="+env.accessKey,
-		"AWS_SECRET_ACCESS_KEY="+env.secretKey,
-		"ICEBERG_WAREHOUSE=s3://iceberg-tables",
-		"S3TABLES_DEFAULT_BUCKET=iceberg-tables",
-	)
-	if err := env.masterProcess.Start(); err != nil {
-		t.Fatalf("failed to start weed mini: %v", err)
-	}
-	registerMiniProcess(env.masterProcess)
-
-	// Wait for all services to be ready
-	if !waitForPort(env.masterPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - master port %d not listening", env.masterPort)
-	}
-	if !waitForPort(env.filerPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - filer port %d not listening", env.filerPort)
-	}
-	if !waitForPort(env.s3Port, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - s3 port %d not listening", env.s3Port)
-	}
-	if !waitForPort(env.icebergRestPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - iceberg rest port %d not listening", env.icebergRestPort)
-	}
-}
-
-func mustFreePort(t *testing.T, name string) int {
-	t.Helper()
-	minPort := 10000
-	maxPort := 55000 // Ensure port+10000 < 65535
-	r := rand.New(rand.NewSource(time.Now().UnixNano()))
-
-	for i := 0; i < 1000; i++ {
-		port := minPort + r.Intn(maxPort-minPort)
-
-		// Check http port
-		ln, err := net.Listen("tcp", fmt.Sprintf("127.0.0.1:%d", port))
-		if err != nil {
-			continue
-		}
-		ln.Close()
-
-		// Check grpc port (weed mini uses port+10000)
-		ln2, err := net.Listen("tcp", fmt.Sprintf("127.0.0.1:%d", port+10000))
-		if err != nil {
-			continue
-		}
-		ln2.Close()
-
-		return port
-	}
-	t.Fatalf("failed to find a free port < %d for %s after 1000 attempts", maxPort, name)
-	return 0
-}
-
-func waitForPort(port int, timeout time.Duration) bool {
-	deadline := time.Now().Add(timeout)
-	for time.Now().Before(deadline) {
-		conn, err := net.DialTimeout("tcp", fmt.Sprintf("localhost:%d", port), 500*time.Millisecond)
-		if err == nil {
-			conn.Close()
-			return true
-		}
-		time.Sleep(100 * time.Millisecond)
-	}
-	return false
-}
-
-func (env *TestEnvironment) StartRisingWave(t *testing.T) {
-	t.Helper()
-
-	containerName := "seaweed-risingwave-" + randomString(8)
-	env.risingwaveContainer = containerName
-
-	cmd := exec.Command("docker", "run", "-d",
-		"--name", containerName,
-		"-p", fmt.Sprintf("%d:4566", env.risingwavePort),
-		"--add-host", "host.docker.internal:host-gateway",
-		"-e", "AWS_ACCESS_KEY_ID="+env.accessKey,
-		"-e", "AWS_SECRET_ACCESS_KEY="+env.secretKey,
-		"-e", "AWS_REGION=us-east-1",
-		"-e", "AWS_S3_PATH_STYLE_ACCESS=true",
-		"-e", "AWS_S3_FORCE_PATH_STYLE=true",
-		"risingwavelabs/risingwave:v2.5.0",
-		"playground",
-	)
-	if output, err := cmd.CombinedOutput(); err != nil {
-		t.Fatalf("failed to start RisingWave container: %v\n%s", err, string(output))
-	}
-
-	// Start a sidecar postgres container for running psql commands
-	sidecarName := "seaweed-risingwave-sidecar-" + randomString(8)
-	env.postgresSidecar = sidecarName
-	sidecarCmd := exec.Command("docker", "run", "-d", "--rm",
-		"--name", sidecarName,
-		"--network", fmt.Sprintf("container:%s", containerName),
-		"postgres:16-alpine",
-		"sleep", "infinity",
-	)
-	if output, err := sidecarCmd.CombinedOutput(); err != nil {
-		t.Fatalf("failed to start postgres sidecar: %v\n%s", err, string(output))
-	}
-
-	// Wait for RisingWave port to be open on host
-	if !waitForPort(env.risingwavePort, 120*time.Second) {
-		t.Fatalf("timed out waiting for RisingWave port %d to be open", env.risingwavePort)
-	}
-
-	// Wait for RisingWave to be truly ready via psql in the sidecar.
-	if !env.waitForRisingWave(120 * time.Second) {
-		t.Fatalf("timed out waiting for RisingWave to be ready via psql")
-	}
-}
-
-func (env *TestEnvironment) waitForRisingWave(timeout time.Duration) bool {
-	deadline := time.Now().Add(timeout)
-	env.t.Logf(">>> Waiting for RisingWave to be ready (timeout %v)...\n", timeout)
-	for time.Now().Before(deadline) {
-		if output, err := runPostgresClientSQL(env.postgresSidecar, "SELECT 1;"); err == nil {
-			env.t.Logf(">>> RisingWave is ready.\n")
-			return true
-		} else {
-			env.t.Logf(">>> RisingWave not ready yet: %v (Output: %s)\n", err, string(output))
-		}
-		time.Sleep(5 * time.Second)
-	}
-	return false
-}
-
-func runPostgresClientSQL(containerName, sql string) ([]byte, error) {
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	cmd := exec.CommandContext(ctx, "docker", "exec",
-		containerName,
-		"psql",
-		"-h", "127.0.0.1",
-		"-p", "4566",
-		"-U", "root",
-		"-d", "dev",
-		"-v", "ON_ERROR_STOP=1",
-		"-c", sql,
-	)
-	return cmd.CombinedOutput()
-}
-
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	t.Helper()
-
-	if env.risingwaveContainer != "" {
-		if t.Failed() {
-			logs, err := exec.Command("docker", "logs", env.risingwaveContainer).CombinedOutput()
-			if err == nil {
-				env.t.Logf(">>> RisingWave Logs:\n%s\n", string(logs))
-			} else {
-				env.t.Logf(">>> Failed to get RisingWave logs: %v\n", err)
-			}
-		}
-		_ = exec.Command("docker", "rm", "-f", env.risingwaveContainer).Run()
-	}
-
-	if env.postgresSidecar != "" {
-		_ = exec.Command("docker", "rm", "-f", env.postgresSidecar).Run()
-	}
-
-	if env.seaweedfsDataDir != "" && t.Failed() {
-		logPath := filepath.Join(env.seaweedfsDataDir, "seaweedfs.log")
-		if content, err := os.ReadFile(logPath); err == nil {
-			env.t.Logf(">>> SeaweedFS Logs:\n%s\n", string(content))
-		}
-		env.t.Logf(">>> Filer Contents:\n")
-		listFilerContents(t, env, "/")
-	}
-
-	if env.masterProcess != nil && env.masterProcess.Process != nil {
-		_ = env.masterProcess.Process.Kill()
-		_ = env.masterProcess.Wait()
-	}
-	clearMiniProcess(env.masterProcess)
-
-	if env.seaweedfsDataDir != "" {
-		if env.logFile != nil {
-			env.logFile.Close()
-		}
-		_ = os.RemoveAll(env.seaweedfsDataDir)
-	}
-}
-
-func runRisingWaveSQL(t *testing.T, containerName, sql string) string {
-	t.Helper()
-
-	output, err := runPostgresClientSQL(containerName, sql)
-	if err != nil {
-		t.Fatalf("RisingWave command failed: %v\nSQL: %s\nOutput:\n%s", err, sql, string(output))
-	}
-	return string(output)
-}
-
-func createTableBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	cmd := exec.CommandContext(ctx, "weed", "shell",
-		fmt.Sprintf("-master=%s", env.hostMasterAddress()),
-	)
-	cmd.Stdin = strings.NewReader(fmt.Sprintf("s3tables.bucket -create -name %s -account 000000000000\nexit\n", bucketName))
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		t.Fatalf("failed to create table bucket %s via weed shell: %v\nOutput: %s", bucketName, err, string(output))
-	}
-}
-
-func doIcebergSignedJSONRequest(env *TestEnvironment, method, path string, payload any) (int, string, error) {
-	url := env.hostIcebergEndpoint() + path
-
-	var body io.Reader
-	var payloadHash string
-
-	if payload != nil {
-		data, err := json.Marshal(payload)
-		if err != nil {
-			return 0, "", err
-		}
-		body = bytes.NewReader(data)
-		// hash := sha256.Sum256(data)
-		// payloadHash = hex.EncodeToString(hash[:])
-		payloadHash = "UNSIGNED-PAYLOAD"
-	} else {
-		payloadHash = "UNSIGNED-PAYLOAD"
-	}
-
-	req, err := http.NewRequest(method, url, body)
-	if err != nil {
-		return 0, "", fmt.Errorf("failed to create request: %w", err)
-	}
-
-	if payload != nil {
-		req.Header.Set("Content-Type", "application/json")
-	}
-	req.Header.Set("X-Amz-Content-Sha256", payloadHash)
-
-	// Sign the request
-	credsProvider := credentials.NewStaticCredentialsProvider(env.accessKey, env.secretKey, "")
-	creds, err := credsProvider.Retrieve(context.Background())
-	if err != nil {
-		return 0, "", fmt.Errorf("failed to retrieve credentials: %w", err)
-	}
-	signer := v4.NewSigner()
-
-	if err := signer.SignHTTP(context.Background(), creds, req, payloadHash, "s3", "us-east-1", time.Now()); err != nil {
-		return 0, "", fmt.Errorf("failed to sign request: %w", err)
-	}
-
-	client := &http.Client{}
-	resp, err := client.Do(req)
-	if err != nil {
-		return 0, "", fmt.Errorf("request failed: %w", err)
-	}
-	defer resp.Body.Close()
-
-	respBody, err := io.ReadAll(resp.Body)
-	if err != nil {
-		return 0, "", fmt.Errorf("failed to read response body: %w", err)
-	}
-
-	return resp.StatusCode, string(respBody), nil
-}
-
-func createIcebergNamespace(t *testing.T, env *TestEnvironment, namespace string) {
-	t.Helper()
-
-	status, raw, err := doIcebergSignedJSONRequest(env, "POST", "/v1/namespaces", map[string]any{
-		"namespace": []string{namespace},
-	})
-	if err != nil {
-		t.Fatalf("failed to create Iceberg namespace %s: %v", namespace, err)
-	}
-	if status != 200 && status != 409 {
-		t.Fatalf("failed to create Iceberg namespace %s: status %d body: %s", namespace, status, raw)
-	}
-}
-
-func createIcebergTable(t *testing.T, env *TestEnvironment, bucketName, namespace, tableName string) {
-	t.Helper()
-
-	createPath := fmt.Sprintf("/v1/namespaces/%s/tables", namespace)
-	status, raw, err := doIcebergSignedJSONRequest(env, "POST", createPath, map[string]any{
-		"name":     tableName,
-		"location": fmt.Sprintf("s3://%s/%s/%s", bucketName, namespace, tableName),
-		"schema": map[string]any{
-			"type": "struct",
-			"fields": []map[string]any{
-				{"id": 1, "name": "id", "required": false, "type": "int"},
-				{"id": 2, "name": "name", "required": false, "type": "string"},
-			},
-		},
-	})
-	if err != nil {
-		t.Fatalf("failed to create Iceberg table %s.%s in bucket %s: %v", namespace, tableName, bucketName, err)
-	}
-	if status != 200 && status != 409 {
-		t.Fatalf("failed to create Iceberg table %s.%s in bucket %s: status %d body: %s", namespace, tableName, bucketName, status, raw)
-	}
-}
-
-func listFilerContents(t *testing.T, env *TestEnvironment, path string) {
-	t.Helper()
-
-	cmd := exec.Command("weed", "shell",
-		fmt.Sprintf("-master=%s", env.hostMasterAddress()),
-	)
-	cmd.Stdin = strings.NewReader(fmt.Sprintf("fs.ls -R %s\nexit\n", path))
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		env.t.Logf(">>> Warning: failed to list filer contents: %v\nOutput: %s\n", err, string(output))
-	} else {
-		env.t.Logf("%s\n", string(output))
-	}
-}
-
-func randomString(n int) string {
-	const letters = "abcdefghijklmnopqrstuvwxyz0123456789"
-	b := make([]byte, n)
-	for i := range b {
-		b[i] = letters[rand.Intn(len(letters))]
-	}
-	return string(b)
-}

test/s3tables/catalog_spark/setup_test.go

@@ -1,394 +0,0 @@
-package catalog_spark
-
-import (
-	"context"
-	"fmt"
-	"io"
-	"math/rand"
-	"net"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strings"
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/aws/aws-sdk-go-v2/aws"
-	"github.com/aws/aws-sdk-go-v2/credentials"
-	"github.com/aws/aws-sdk-go-v2/service/s3"
-	"github.com/seaweedfs/seaweedfs/test/s3tables/testutil"
-	"github.com/testcontainers/testcontainers-go"
-)
-
-var (
-	miniProcessMu   sync.Mutex
-	lastMiniProcess *exec.Cmd
-)
-
-func stopPreviousMini() {
-	miniProcessMu.Lock()
-	defer miniProcessMu.Unlock()
-
-	if lastMiniProcess != nil && lastMiniProcess.Process != nil {
-		_ = lastMiniProcess.Process.Kill()
-		_ = lastMiniProcess.Wait()
-	}
-	lastMiniProcess = nil
-}
-
-func registerMiniProcess(cmd *exec.Cmd) {
-	miniProcessMu.Lock()
-	lastMiniProcess = cmd
-	miniProcessMu.Unlock()
-}
-
-func clearMiniProcess(cmd *exec.Cmd) {
-	miniProcessMu.Lock()
-	if lastMiniProcess == cmd {
-		lastMiniProcess = nil
-	}
-	miniProcessMu.Unlock()
-}
-
-type TestEnvironment struct {
-	t                *testing.T
-	dockerAvailable  bool
-	seaweedfsDataDir string
-	sparkConfigDir   string
-	masterPort       int
-	filerPort        int
-	s3Port           int
-	icebergRestPort  int
-	accessKey        string
-	secretKey        string
-	sparkContainer   testcontainers.Container
-	masterProcess    *exec.Cmd
-}
-
-func NewTestEnvironment(t *testing.T) *TestEnvironment {
-	env := &TestEnvironment{
-		t:         t,
-		accessKey: "test",
-		secretKey: "test",
-	}
-
-	// Check if Docker is available
-	cmd := exec.Command("docker", "version")
-	env.dockerAvailable = cmd.Run() == nil
-
-	return env
-}
-
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	stopPreviousMini()
-
-	var err error
-	env.seaweedfsDataDir, err = os.MkdirTemp("", "seaweed-spark-test-")
-	if err != nil {
-		t.Fatalf("failed to create temp directory: %v", err)
-	}
-
-	env.masterPort = mustFreePort(t, "Master")
-	env.filerPort = mustFreePort(t, "Filer")
-	env.s3Port = mustFreePort(t, "S3")
-	env.icebergRestPort = mustFreePort(t, "Iceberg")
-
-	bindIP := testutil.FindBindIP()
-
-	iamConfigPath, err := testutil.WriteIAMConfig(env.seaweedfsDataDir, env.accessKey, env.secretKey)
-	if err != nil {
-		t.Fatalf("failed to create IAM config: %v", err)
-	}
-
-	// Start SeaweedFS using weed mini (all-in-one including Iceberg REST)
-	env.masterProcess = exec.Command(
-		"weed", "mini",
-		"-ip", bindIP,
-		"-ip.bind", "0.0.0.0",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.port.iceberg", fmt.Sprintf("%d", env.icebergRestPort),
-		"-s3.config", iamConfigPath,
-		"-dir", env.seaweedfsDataDir,
-	)
-	env.masterProcess.Env = append(os.Environ(),
-		"AWS_ACCESS_KEY_ID="+env.accessKey,
-		"AWS_SECRET_ACCESS_KEY="+env.secretKey,
-		"ICEBERG_WAREHOUSE=s3://iceberg-tables",
-		"S3TABLES_DEFAULT_BUCKET=iceberg-tables",
-	)
-	if err := env.masterProcess.Start(); err != nil {
-		t.Fatalf("failed to start weed mini: %v", err)
-	}
-	registerMiniProcess(env.masterProcess)
-
-	// Wait for all services to be ready
-	if !waitForPort(env.masterPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - master port %d not listening", env.masterPort)
-	}
-	if !waitForPort(env.filerPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - filer port %d not listening", env.filerPort)
-	}
-	if !waitForPort(env.s3Port, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - s3 port %d not listening", env.s3Port)
-	}
-	if !waitForPort(env.icebergRestPort, 15*time.Second) {
-		t.Fatalf("weed mini failed to start - iceberg rest port %d not listening", env.icebergRestPort)
-	}
-}
-
-func mustFreePort(t *testing.T, name string) int {
-	t.Helper()
-
-	for i := 0; i < 200; i++ {
-		port := 20000 + rand.Intn(30000)
-		listener, err := net.Listen("tcp", fmt.Sprintf("0.0.0.0:%d", port))
-		if err != nil {
-			continue
-		}
-		listener.Close()
-		grpcPort := port + 10000
-		if grpcPort > 65535 {
-			continue
-		}
-		grpcListener, err := net.Listen("tcp", fmt.Sprintf("0.0.0.0:%d", grpcPort))
-		if err != nil {
-			continue
-		}
-		grpcListener.Close()
-		return port
-	}
-	t.Fatalf("failed to get free port for %s", name)
-	return 0
-}
-
-func waitForPort(port int, timeout time.Duration) bool {
-	deadline := time.Now().Add(timeout)
-	for time.Now().Before(deadline) {
-		conn, err := net.DialTimeout("tcp", fmt.Sprintf("localhost:%d", port), 500*time.Millisecond)
-		if err == nil {
-			conn.Close()
-			return true
-		}
-		time.Sleep(100 * time.Millisecond)
-	}
-	return false
-}
-
-func (env *TestEnvironment) writeSparkConfig(t *testing.T, catalogBucket string) string {
-	t.Helper()
-
-	configDir, err := os.MkdirTemp("", "spark-config-")
-	if err != nil {
-		t.Fatalf("failed to create config directory: %v", err)
-	}
-
-	// Store for cleanup
-	env.sparkConfigDir = configDir
-
-	s3Endpoint := fmt.Sprintf("http://host.docker.internal:%d", env.s3Port)
-	catalogEndpoint := fmt.Sprintf("http://host.docker.internal:%d", env.icebergRestPort)
-
-	sparkConfig := fmt.Sprintf(`
-[spark]
-master = "local"
-app.name = "SeaweedFS Iceberg Test"
-
-[storage]
-s3.endpoint = "%s"
-s3.access-key = "test"
-s3.secret-key = "test"
-s3.path-style-access = "true"
-s3.bucket = "%s"
-
-[iceberg]
-catalog.type = "rest"
-catalog.uri = "%s"
-catalog.s3.endpoint = "%s"
-catalog.s3.access-key = "test"
-catalog.s3.secret-key = "test"
-catalog.s3.path-style-access = "true"
-`, s3Endpoint, catalogBucket, catalogEndpoint, s3Endpoint)
-
-	configPath := filepath.Join(configDir, "spark-config.ini")
-	if err := os.WriteFile(configPath, []byte(sparkConfig), 0644); err != nil {
-		t.Fatalf("failed to write spark config: %v", err)
-	}
-
-	return configDir
-}
-
-func (env *TestEnvironment) startSparkContainer(t *testing.T, configDir string) {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
-	defer cancel()
-
-	req := testcontainers.ContainerRequest{
-		Image:        "apache/spark:3.5.1",
-		ExposedPorts: []string{"4040/tcp"},
-		Mounts: testcontainers.Mounts(
-			testcontainers.BindMount(configDir, "/config"),
-		),
-		Env: map[string]string{
-			"SPARK_LOCAL_IP": "localhost",
-		},
-		ExtraHosts: []string{"host.docker.internal:host-gateway"},
-		Cmd:        []string{"/bin/sh", "-c", "sleep 3600"},
-	}
-
-	container, err := testcontainers.GenericContainer(ctx, testcontainers.GenericContainerRequest{
-		ContainerRequest: req,
-		Started:          true,
-	})
-	if err != nil {
-		t.Fatalf("failed to start spark container: %v", err)
-	}
-
-	env.sparkContainer = container
-}
-
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	t.Helper()
-
-	// Kill weed mini process
-	if env.masterProcess != nil && env.masterProcess.Process != nil {
-		env.masterProcess.Process.Kill()
-		env.masterProcess.Wait()
-	}
-	clearMiniProcess(env.masterProcess)
-
-	// Stop Spark container
-	if env.sparkContainer != nil {
-		ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-		defer cancel()
-		env.sparkContainer.Terminate(ctx)
-	}
-
-	// Remove temporary directories after processes are stopped
-	if env.seaweedfsDataDir != "" {
-		os.RemoveAll(env.seaweedfsDataDir)
-	}
-	if env.sparkConfigDir != "" {
-		os.RemoveAll(env.sparkConfigDir)
-	}
-}
-
-func randomString(n int) string {
-	const letters = "abcdefghijklmnopqrstuvwxyz0123456789"
-	b := make([]byte, n)
-	for i := range b {
-		b[i] = letters[rand.Intn(len(letters))]
-	}
-	return string(b)
-}
-
-func runSparkPySQL(t *testing.T, container testcontainers.Container, sql string, icebergPort int, s3Port int) string {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 3*time.Minute)
-	defer cancel()
-
-	pythonScript := fmt.Sprintf(`
-import glob
-import os
-import sys
-
-spark_home = os.environ.get("SPARK_HOME", "/opt/spark")
-python_path = os.path.join(spark_home, "python")
-py4j_glob = glob.glob(os.path.join(python_path, "lib", "py4j-*.zip"))
-ivy_dir = "/tmp/ivy"
-os.makedirs(ivy_dir, exist_ok=True)
-os.environ["AWS_REGION"] = "us-west-2"
-os.environ["AWS_DEFAULT_REGION"] = "us-west-2"
-os.environ["AWS_ACCESS_KEY_ID"] = "test"
-os.environ["AWS_SECRET_ACCESS_KEY"] = "test"
-if python_path not in sys.path:
-    sys.path.insert(0, python_path)
-if py4j_glob and py4j_glob[0] not in sys.path:
-    sys.path.insert(0, py4j_glob[0])
-
-from pyspark.sql import SparkSession
-
-spark = (SparkSession.builder
-    .appName("SeaweedFS Iceberg Test")
-    .config("spark.jars.ivy", ivy_dir)
-    .config("spark.jars.packages", "org.apache.iceberg:iceberg-spark-runtime-3.5_2.12:1.5.2,org.apache.iceberg:iceberg-aws-bundle:1.5.2")
-    .config("spark.sql.extensions", "org.apache.iceberg.spark.extensions.IcebergSparkSessionExtensions")
-    .config("spark.sql.catalog.iceberg", "org.apache.iceberg.spark.SparkCatalog")
-    .config("spark.sql.catalog.iceberg.type", "rest")
-    .config("spark.sql.catalog.iceberg.metrics-reporter-impl", "org.apache.iceberg.metrics.LoggingMetricsReporter")
-    .config("spark.sql.catalog.iceberg.uri", "http://host.docker.internal:%d")
-    .config("spark.sql.catalog.iceberg.rest.auth.type", "sigv4")
-    .config("spark.sql.catalog.iceberg.rest.auth.sigv4.delegate-auth-type", "none")
-    .config("spark.sql.catalog.iceberg.rest.sigv4-enabled", "true")
-    .config("spark.sql.catalog.iceberg.rest.signing-name", "s3")
-    .config("spark.sql.catalog.iceberg.rest.access-key-id", "test")
-    .config("spark.sql.catalog.iceberg.rest.secret-access-key", "test")
-    .config("spark.sql.catalog.iceberg.s3.endpoint", "http://host.docker.internal:%d")
-    .config("spark.sql.catalog.iceberg.s3.region", "us-west-2")
-    .config("spark.sql.catalog.iceberg.s3.access-key", "test")
-    .config("spark.sql.catalog.iceberg.s3.secret-key", "test")
-    .config("spark.sql.catalog.iceberg.s3.path-style-access", "true")
-    .config("spark.sql.catalog.iceberg.io-impl", "org.apache.iceberg.aws.s3.S3FileIO")
-    .getOrCreate())
-
-%s
-`, icebergPort, s3Port, sql)
-
-	code, out, err := container.Exec(ctx, []string{"python3", "-c", pythonScript})
-	var output string
-	if out != nil {
-		outputBytes, readErr := io.ReadAll(out)
-		if readErr != nil {
-			t.Logf("failed to read output: %v", readErr)
-		} else {
-			output = string(outputBytes)
-		}
-	}
-	if code != 0 {
-		t.Logf("Spark Python execution failed with code %d: %v, output: %s", code, err, output)
-		return output
-	}
-
-	return output
-}
-
-func createTableBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	masterGrpcPort := env.masterPort + 10000
-	cmd := exec.Command("weed", "shell",
-		fmt.Sprintf("-master=localhost:%d.%d", env.masterPort, masterGrpcPort),
-	)
-	cmd.Stdin = strings.NewReader(fmt.Sprintf("s3tables.bucket -create -name %s -account 000000000000\nexit\n", bucketName))
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		t.Fatalf("failed to create table bucket %s via weed shell: %v\nOutput: %s", bucketName, err, string(output))
-	}
-}
-
-func createObjectBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	cfg := aws.Config{
-		Region:       "us-east-1",
-		Credentials:  aws.NewCredentialsCache(credentials.NewStaticCredentialsProvider(env.accessKey, env.secretKey, "")),
-		BaseEndpoint: aws.String(fmt.Sprintf("http://localhost:%d", env.s3Port)),
-	}
-
-	client := s3.NewFromConfig(cfg, func(o *s3.Options) {
-		o.UsePathStyle = true
-	})
-
-	_, err := client.CreateBucket(context.Background(), &s3.CreateBucketInput{
-		Bucket: aws.String(bucketName),
-	})
-	if err != nil {
-		t.Fatalf("failed to create object bucket %s: %v", bucketName, err)
-	}
-}

test/s3tables/catalog_spark/spark_operations_test.go

@@ -1,279 +0,0 @@
-package catalog_spark
-
-import (
-	"fmt"
-	"regexp"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/testcontainers/testcontainers-go"
-)
-
-// waitForSparkReady polls Spark to verify it's ready by executing a simple query
-func waitForSparkReady(t *testing.T, container testcontainers.Container, icebergPort int, s3Port int, timeout time.Duration) {
-	t.Helper()
-
-	deadline := time.Now().Add(timeout)
-	for time.Now().Before(deadline) {
-		output := runSparkPySQL(t, container, `
-spark.sql("SELECT 1 as test")
-print("Spark ready")
-`, icebergPort, s3Port)
-		if strings.Contains(output, "Spark ready") {
-			return
-		}
-		time.Sleep(5 * time.Second)
-	}
-	t.Fatalf("Spark did not become ready within %v", timeout)
-}
-
-// setupSparkTestEnv initializes a test environment with SeaweedFS and Spark containers
-func setupSparkTestEnv(t *testing.T) (*TestEnvironment, string, string) {
-	t.Helper()
-
-	env := NewTestEnvironment(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping Spark integration test")
-	}
-
-	t.Logf(">>> Starting SeaweedFS...")
-	env.StartSeaweedFS(t)
-	t.Cleanup(func() { env.Cleanup(t) })
-
-	tableBucket := "iceberg-tables"
-	catalogBucket := tableBucket
-	createTableBucket(t, env, tableBucket)
-
-	configDir := env.writeSparkConfig(t, catalogBucket)
-	env.startSparkContainer(t, configDir)
-
-	// Poll for Spark readiness instead of fixed sleep
-	waitForSparkReady(t, env.sparkContainer, env.icebergRestPort, env.s3Port, 10*time.Minute)
-
-	return env, catalogBucket, tableBucket
-}
-
-// TestSparkCatalogBasicOperations tests basic Spark Iceberg catalog operations
-func TestSparkCatalogBasicOperations(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env, _, _ := setupSparkTestEnv(t)
-
-	// Test 1: Create a namespace (database)
-	t.Logf(">>> Test 1: Creating namespace")
-	namespace := "spark_test_" + randomString(6)
-	sparkSQL := fmt.Sprintf(`
-spark.sql("CREATE NAMESPACE iceberg.%s")
-print("Namespace created")
-`, namespace)
-	output := runSparkPySQL(t, env.sparkContainer, sparkSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Namespace created") {
-		t.Fatalf("namespace creation failed, output: %s", output)
-	}
-
-	// Test 2: Create a table
-	t.Logf(">>> Test 2: Creating table")
-	tableName := "test_table_" + randomString(6)
-	createTableSQL := fmt.Sprintf(`
-spark.sql("""
-CREATE TABLE iceberg.%s.%s (
-    id INT,
-    name STRING,
-    age INT
-)
-USING iceberg
-""")
-print("Table created")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, createTableSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Table created") {
-		t.Fatalf("table creation failed, output: %s", output)
-	}
-
-	// Test 3: Insert data
-	t.Logf(">>> Test 3: Inserting data")
-	insertDataSQL := fmt.Sprintf(`
-spark.sql("""
-INSERT INTO iceberg.%s.%s VALUES
-    (1, 'Alice', 30),
-    (2, 'Bob', 25),
-    (3, 'Charlie', 35)
-""")
-print("Data inserted")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, insertDataSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Data inserted") {
-		t.Fatalf("data insertion failed, output: %s", output)
-	}
-
-	// Test 4: Query data
-	t.Logf(">>> Test 4: Querying data")
-	querySQL := fmt.Sprintf(`
-result = spark.sql("SELECT COUNT(*) as count FROM iceberg.%s.%s")
-result.show()
-count = result.collect()[0]['count']
-print(f"Row count: {count}")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, querySQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Row count: 3") {
-		t.Errorf("expected row count 3, got output: %s", output)
-	}
-
-	// Test 5: Update data
-	t.Logf(">>> Test 5: Updating data")
-	updateSQL := fmt.Sprintf(`
-spark.sql("""
-UPDATE iceberg.%s.%s SET age = 31 WHERE id = 1
-""")
-print("Data updated")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, updateSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Data updated") {
-		t.Errorf("data update failed, output: %s", output)
-	}
-
-	// Test 6: Delete data
-	t.Logf(">>> Test 6: Deleting data")
-	deleteSQL := fmt.Sprintf(`
-spark.sql("""
-DELETE FROM iceberg.%s.%s WHERE id = 3
-""")
-print("Data deleted")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, deleteSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Data deleted") {
-		t.Errorf("data delete failed, output: %s", output)
-	}
-
-	// Verify final count
-	t.Logf(">>> Verifying final data")
-	finalCountSQL := fmt.Sprintf(`
-result = spark.sql("SELECT COUNT(*) as count FROM iceberg.%s.%s")
-result.show()
-count = result.collect()[0]['count']
-print(f"Final row count: {count}")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, finalCountSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Final row count: 2") {
-		t.Errorf("expected final row count 2, got output: %s", output)
-	}
-
-	t.Logf(">>> All tests passed")
-}
-
-// TestSparkTimeTravel tests Spark Iceberg time travel capabilities
-func TestSparkTimeTravel(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env, _, _ := setupSparkTestEnv(t)
-
-	namespace := "time_travel_test_" + randomString(6)
-	tableName := "tt_table_" + randomString(6)
-
-	// Create namespace and table
-	setupSQL := fmt.Sprintf(`
-spark.sql("CREATE NAMESPACE iceberg.%s")
-spark.sql("""
-CREATE TABLE iceberg.%s.%s (
-    id INT,
-    value INT
-)
-USING iceberg
-""")
-print("Setup complete")
-`, namespace, namespace, tableName)
-	output := runSparkPySQL(t, env.sparkContainer, setupSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Setup complete") {
-		t.Fatalf("setup failed for namespace %s and table %s, output: %s", namespace, tableName, output)
-	}
-
-	// Insert initial data
-	t.Logf(">>> Inserting initial data")
-	insertSQL := fmt.Sprintf(`
-import time
-from datetime import timedelta
-spark.sql("""
-INSERT INTO iceberg.%s.%s VALUES (1, 10)
-""")
-ts = None
-for _ in range(10):
-    try:
-        ts = spark.sql("SELECT committed_at FROM iceberg.%s.%s.snapshots ORDER BY committed_at DESC LIMIT 1").collect()[0]["committed_at"]
-        if ts is not None:
-            break
-    except Exception as e:
-        print(f"Snapshot query failed: {e}")
-    time.sleep(1)
-if ts is None:
-    raise RuntimeError("Failed to read snapshot committed_at")
-ts_for_time_travel = ts + timedelta(seconds=1)
-print(f"Snapshot timestamp: {ts_for_time_travel.strftime('%%Y-%%m-%%d %%H:%%M:%%S')}")
-`, namespace, tableName, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, insertSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Snapshot timestamp:") {
-		t.Fatalf("failed to get snapshot timestamp: %s", output)
-	}
-
-	// Extract snapshot timestamp from output - look specifically for the "Snapshot timestamp:" line
-	var snapshotTS string
-	tsRe := regexp.MustCompile(`Snapshot timestamp:\s*(\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2})`)
-	matches := tsRe.FindStringSubmatch(output)
-	if len(matches) > 1 {
-		snapshotTS = matches[1]
-	}
-
-	if snapshotTS == "" {
-		t.Fatalf("could not extract snapshot timestamp from output: %s", output)
-	}
-
-	// Wait to ensure the next insert gets a distinct snapshot timestamp
-	time.Sleep(2 * time.Second)
-
-	// Insert more data
-	t.Logf(">>> Inserting more data")
-	insertMoreSQL := fmt.Sprintf(`
-spark.sql("""
-INSERT INTO iceberg.%s.%s VALUES (2, 20)
-""")
-print("More data inserted")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, insertMoreSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "More data inserted") {
-		t.Fatalf("failed to insert more data, output: %s", output)
-	}
-
-	// Verify count increased to 2
-	t.Logf(">>> Verifying row count after second insert")
-	verifySQL := fmt.Sprintf(`
-result = spark.sql("SELECT COUNT(*) as count FROM iceberg.%s.%s")
-count = result.collect()[0]['count']
-print(f"Current row count: {count}")
-`, namespace, tableName)
-	output = runSparkPySQL(t, env.sparkContainer, verifySQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Current row count: 2") {
-		t.Fatalf("expected current row count 2 after second insert, got output: %s", output)
-	}
-
-	// Time travel to first snapshot
-	t.Logf(">>> Time traveling to first snapshot")
-	timeTravelSQL := fmt.Sprintf(`
-result = spark.sql("""
-SELECT COUNT(*) as count FROM iceberg.%s.%s TIMESTAMP AS OF '%s'
-""")
-result.show()
-count = result.collect()[0]['count']
-print(f"Count at snapshot: {count}")
-`, namespace, tableName, snapshotTS)
-	output = runSparkPySQL(t, env.sparkContainer, timeTravelSQL, env.icebergRestPort, env.s3Port)
-	if !strings.Contains(output, "Count at snapshot: 1") {
-		t.Errorf("expected count 1 at first snapshot, got: %s", output)
-	}
-
-	t.Logf(">>> Time travel test passed")
-}

test/s3tables/catalog_trino/trino_blog_operations_test.go

@@ -1,248 +0,0 @@
-package catalog_trino
-
-import (
-	"fmt"
-	"os/exec"
-	"strconv"
-	"strings"
-	"testing"
-	"time"
-)
-
-func TestTrinoBlogOperations(t *testing.T) {
-	env := setupTrinoTest(t)
-	defer env.Cleanup(t)
-
-	schemaName := "blog_ns_" + randomString(6)
-	customersTable := "customers_" + randomString(6)
-	trinoCustomersTable := "trino_customers_" + randomString(6)
-	warehouseBucket := "iceberg-tables"
-	customersLocation := fmt.Sprintf("s3://%s/%s/%s_%s", warehouseBucket, schemaName, customersTable, randomString(6))
-	trinoCustomersLocation := fmt.Sprintf("s3://%s/%s/%s_%s", warehouseBucket, schemaName, trinoCustomersTable, randomString(6))
-
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("CREATE SCHEMA IF NOT EXISTS iceberg.%s", schemaName))
-	defer runTrinoSQLAllowNamespaceNotEmpty(t, env.trinoContainer, fmt.Sprintf("DROP SCHEMA IF EXISTS iceberg.%s CASCADE", schemaName))
-	defer runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("DROP TABLE IF EXISTS iceberg.%s.%s", schemaName, trinoCustomersTable))
-	defer runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("DROP TABLE IF EXISTS iceberg.%s.%s", schemaName, customersTable))
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("DROP TABLE IF EXISTS iceberg.%s.%s", schemaName, trinoCustomersTable))
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("DROP TABLE IF EXISTS iceberg.%s.%s", schemaName, customersTable))
-
-	createCustomersSQL := fmt.Sprintf(`CREATE TABLE IF NOT EXISTS iceberg.%s.%s (
-    customer_sk INT,
-    customer_id VARCHAR,
-    salutation VARCHAR,
-    first_name VARCHAR,
-    last_name VARCHAR,
-    preferred_cust_flag VARCHAR,
-    birth_day INT,
-    birth_month INT,
-    birth_year INT,
-    birth_country VARCHAR,
-    login VARCHAR
-) WITH (
-    format = 'PARQUET',
-    sorted_by = ARRAY['customer_id'],
-    location = '%s'
-)`, schemaName, customersTable, customersLocation)
-	runTrinoSQLAllowExists(t, env.trinoContainer, createCustomersSQL)
-
-	insertCustomersSQL := fmt.Sprintf(`INSERT INTO iceberg.%s.%s VALUES
-    (1, 'AAAAA', 'Mrs', 'Amanda', 'Olson', 'Y', 8, 4, 1984, 'US', 'aolson'),
-    (2, 'AAAAB', 'Mr',  'Leonard', 'Eads',  'N', 22, 6, 2001, 'US', 'leads'),
-    (3, 'BAAAA', 'Mr',  'David',   'White', 'Y', 16, 2, 1999, 'US', 'dwhite'),
-    (4, 'BBAAA', 'Mr',  'Melvin',  'Lee',   'N', 30, 3, 1973, 'US', 'mlee'),
-    (5, 'AACAA', 'Mr',  'Donald',  'Holt',  'N', 2,  6, 1982, 'CA', 'dholt'),
-    (6, 'ABAAA', 'Mrs', 'Jacqueline', 'Harvey', 'N', 5, 12, 1988, 'US', 'jharvey'),
-    (7, 'BBAAA', 'Ms',  'Debbie',  'Ward',  'N', 6,  1, 2006, 'MX', 'dward'),
-    (8, 'ACAAA', 'Mr',  'Tim',     'Strong', 'N', 15, 7, 1976, 'US', 'tstrong')
-`, schemaName, customersTable)
-	runTrinoSQL(t, env.trinoContainer, insertCustomersSQL)
-
-	countOutput := runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SELECT count(*) FROM iceberg.%s.%s", schemaName, customersTable))
-	rowCount := mustParseCSVInt64(t, countOutput)
-	if rowCount != 8 {
-		t.Fatalf("expected 8 rows in customers table, got %d", rowCount)
-	}
-
-	output := runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SELECT first_name FROM iceberg.%s.%s WHERE customer_sk = 1", schemaName, customersTable))
-	if !strings.Contains(output, "Amanda") {
-		t.Fatalf("expected sample query to include Amanda, got: %s", output)
-	}
-
-	ctasSQL := fmt.Sprintf(`CREATE TABLE iceberg.%s.%s
-WITH (
-    format = 'PARQUET',
-    location = '%s'
-)
-AS SELECT * FROM iceberg.%s.%s`, schemaName, trinoCustomersTable, trinoCustomersLocation, schemaName, customersTable)
-	ctasInsertSQL := fmt.Sprintf("INSERT INTO iceberg.%s.%s SELECT * FROM iceberg.%s.%s", schemaName, trinoCustomersTable, schemaName, customersTable)
-	ctasDeleteSQL := fmt.Sprintf("DELETE FROM iceberg.%s.%s", schemaName, trinoCustomersTable)
-	runTrinoCTAS(t, env.trinoContainer, ctasSQL, ctasDeleteSQL, ctasInsertSQL)
-
-	countOutput = runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SELECT count(*) FROM iceberg.%s.%s", schemaName, trinoCustomersTable))
-	rowCount = mustParseCSVInt64(t, countOutput)
-	if rowCount != 8 {
-		t.Fatalf("expected 8 rows in CTAS table, got %d", rowCount)
-	}
-
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("ALTER TABLE iceberg.%s.%s ADD COLUMN updated_at TIMESTAMP", schemaName, trinoCustomersTable))
-	output = runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("DESCRIBE iceberg.%s.%s", schemaName, trinoCustomersTable))
-	if !strings.Contains(output, "updated_at") {
-		t.Fatalf("expected updated_at column in describe output, got: %s", output)
-	}
-
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("UPDATE iceberg.%s.%s SET updated_at = current_timestamp", schemaName, trinoCustomersTable))
-
-	// Sleep to ensure timestamps are in the past for time travel queries
-	time.Sleep(1 * time.Second)
-
-	snapshotOutput := runTrinoSQL(t, env.trinoContainer, fmt.Sprintf(`SELECT snapshot_id FROM iceberg.%s."%s$snapshots" ORDER BY committed_at DESC LIMIT 1`, schemaName, trinoCustomersTable))
-	snapshotID := mustParseCSVInt64(t, snapshotOutput)
-	if snapshotID == 0 {
-		t.Fatalf("expected snapshot ID from snapshots table, got 0")
-	}
-
-	filesOutput := runTrinoSQL(t, env.trinoContainer, fmt.Sprintf(`SELECT file_path FROM iceberg.%s."%s$files" LIMIT 1`, schemaName, trinoCustomersTable))
-	if !hasCSVDataRow(filesOutput) {
-		t.Fatalf("expected files metadata rows, got: %s", filesOutput)
-	}
-
-	historyOutput := runTrinoSQL(t, env.trinoContainer, fmt.Sprintf(`SELECT made_current_at FROM iceberg.%s."%s$history" LIMIT 1`, schemaName, trinoCustomersTable))
-	if !hasCSVDataRow(historyOutput) {
-		t.Fatalf("expected history metadata rows, got: %s", historyOutput)
-	}
-
-	countOutput = runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SELECT count(*) FROM iceberg.%s.%s FOR VERSION AS OF %d", schemaName, trinoCustomersTable, snapshotID))
-	versionCount := mustParseCSVInt64(t, countOutput)
-	if versionCount != 8 {
-		t.Fatalf("expected 8 rows for version time travel, got %d", versionCount)
-	}
-
-	// Use current_timestamp - interval '1 second' to ensure it's in the past (Iceberg requirement)
-	countOutput = runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SELECT count(*) FROM iceberg.%s.%s FOR TIMESTAMP AS OF (current_timestamp - interval '1' second)", schemaName, trinoCustomersTable))
-	timestampCount := mustParseCSVInt64(t, countOutput)
-	if timestampCount != 8 {
-		t.Fatalf("expected 8 rows for timestamp time travel, got %d", timestampCount)
-	}
-
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("DELETE FROM iceberg.%s.%s WHERE customer_sk = 8", schemaName, trinoCustomersTable))
-	countOutput = runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SELECT count(*) FROM iceberg.%s.%s", schemaName, trinoCustomersTable))
-	rowCount = mustParseCSVInt64(t, countOutput)
-	if rowCount != 7 {
-		t.Fatalf("expected 7 rows after delete, got %d", rowCount)
-	}
-
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("ALTER TABLE iceberg.%s.%s EXECUTE rollback_to_snapshot(%d)", schemaName, trinoCustomersTable, snapshotID))
-	countOutput = runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SELECT count(*) FROM iceberg.%s.%s", schemaName, trinoCustomersTable))
-	rowCount = mustParseCSVInt64(t, countOutput)
-	if rowCount != 8 {
-		t.Fatalf("expected 8 rows after rollback, got %d", rowCount)
-	}
-}
-
-func runTrinoSQLAllowExists(t *testing.T, containerName, sql string) string {
-	t.Helper()
-
-	cmd := exec.Command("docker", "exec", containerName,
-		"trino", "--catalog", "iceberg",
-		"--output-format", "CSV",
-		"--execute", sql,
-	)
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		outputStr := string(output)
-		if strings.Contains(outputStr, "already exists") {
-			return sanitizeTrinoOutput(outputStr)
-		}
-		t.Fatalf("Trino command failed: %v\nSQL: %s\nOutput:\n%s", err, sql, outputStr)
-	}
-	return sanitizeTrinoOutput(string(output))
-}
-
-func runTrinoSQLAllowNamespaceNotEmpty(t *testing.T, containerName, sql string) string {
-	t.Helper()
-
-	var output []byte
-	var err error
-	for attempt := 0; attempt < 3; attempt++ {
-		cmd := exec.Command("docker", "exec", containerName,
-			"trino", "--catalog", "iceberg",
-			"--output-format", "CSV",
-			"--execute", sql,
-		)
-		output, err = cmd.CombinedOutput()
-		if err == nil {
-			return sanitizeTrinoOutput(string(output))
-		}
-		outputStr := string(output)
-		if !strings.Contains(outputStr, "Namespace is not empty") {
-			t.Fatalf("Trino command failed: %v\nSQL: %s\nOutput:\n%s", err, sql, outputStr)
-		}
-		time.Sleep(500 * time.Millisecond)
-	}
-	t.Logf("Ignoring cleanup error for SQL %s: %s", sql, sanitizeTrinoOutput(string(output)))
-	return sanitizeTrinoOutput(string(output))
-}
-
-func runTrinoCTAS(t *testing.T, containerName, createSQL, deleteSQL, insertSQL string) {
-	t.Helper()
-
-	cmd := exec.Command("docker", "exec", containerName,
-		"trino", "--catalog", "iceberg",
-		"--output-format", "CSV",
-		"--execute", createSQL,
-	)
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		outputStr := string(output)
-		if strings.Contains(outputStr, "already exists") {
-			if deleteSQL != "" {
-				runTrinoSQL(t, containerName, deleteSQL)
-			}
-			runTrinoSQL(t, containerName, insertSQL)
-			return
-		}
-		t.Fatalf("Trino command failed: %v\nSQL: %s\nOutput:\n%s", err, createSQL, outputStr)
-	}
-}
-
-func hasCSVDataRow(output string) bool {
-	lines := strings.Split(strings.TrimSpace(output), "\n")
-	if len(lines) == 0 {
-		return false
-	}
-	for _, line := range lines {
-		if strings.TrimSpace(line) != "" {
-			return true
-		}
-	}
-	return false
-}
-
-func mustParseCSVInt64(t *testing.T, output string) int64 {
-	t.Helper()
-	value := mustFirstCSVValue(t, output)
-	parsed, err := strconv.ParseInt(value, 10, 64)
-	if err != nil {
-		t.Fatalf("failed to parse int from output %q: %v", output, err)
-	}
-	return parsed
-}
-
-func mustFirstCSVValue(t *testing.T, output string) string {
-	t.Helper()
-	lines := strings.Split(strings.TrimSpace(output), "\n")
-	if len(lines) == 0 {
-		t.Fatalf("expected CSV output with data row, got: %q", output)
-	}
-	for _, line := range lines {
-		line = strings.TrimSpace(line)
-		if line == "" {
-			continue
-		}
-		parts := strings.Split(line, ",")
-		return strings.Trim(parts[0], "\"")
-	}
-	t.Fatalf("no CSV data rows found in output: %q", output)
-	return ""
-}

test/s3tables/catalog_trino/trino_catalog_test.go

@@ -1,527 +0,0 @@
-package catalog_trino
-
-import (
-	"context"
-	"crypto/rand"
-	"fmt"
-	"io"
-	"net"
-	"net/http"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/aws/aws-sdk-go-v2/aws"
-	"github.com/aws/aws-sdk-go-v2/credentials"
-	"github.com/aws/aws-sdk-go-v2/service/s3"
-	"github.com/seaweedfs/seaweedfs/test/s3tables/testutil"
-)
-
-type TestEnvironment struct {
-	seaweedDir      string
-	weedBinary      string
-	dataDir         string
-	bindIP          string
-	s3Port          int
-	s3GrpcPort      int
-	icebergPort     int
-	masterPort      int
-	masterGrpcPort  int
-	filerPort       int
-	filerGrpcPort   int
-	volumePort      int
-	volumeGrpcPort  int
-	weedProcess     *exec.Cmd
-	weedCancel      context.CancelFunc
-	trinoContainer  string
-	dockerAvailable bool
-	accessKey       string
-	secretKey       string
-}
-
-func TestTrinoIcebergCatalog(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping Trino integration test")
-	}
-
-	fmt.Printf(">>> Starting SeaweedFS...\n")
-	env.StartSeaweedFS(t)
-	fmt.Printf(">>> SeaweedFS started.\n")
-
-	tableBucket := "iceberg-tables"
-	catalogBucket := tableBucket
-	fmt.Printf(">>> Creating table bucket: %s\n", tableBucket)
-	createTableBucket(t, env, tableBucket)
-	fmt.Printf(">>> All buckets created.\n")
-
-	// Test Iceberg REST API directly
-	testIcebergRestAPI(t, env)
-
-	configDir := env.writeTrinoConfig(t, catalogBucket)
-	env.startTrinoContainer(t, configDir)
-	waitForTrino(t, env.trinoContainer, 60*time.Second)
-
-	schemaName := "trino_" + randomString(6)
-
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("CREATE SCHEMA IF NOT EXISTS iceberg.%s", schemaName))
-	output := runTrinoSQL(t, env.trinoContainer, "SHOW SCHEMAS FROM iceberg")
-	if !strings.Contains(output, schemaName) {
-		t.Fatalf("Expected schema %s in output:\n%s", schemaName, output)
-	}
-	runTrinoSQL(t, env.trinoContainer, fmt.Sprintf("SHOW TABLES FROM iceberg.%s", schemaName))
-}
-
-func NewTestEnvironment(t *testing.T) *TestEnvironment {
-	t.Helper()
-
-	wd, err := os.Getwd()
-	if err != nil {
-		t.Fatalf("Failed to get working directory: %v", err)
-	}
-
-	seaweedDir := wd
-	for i := 0; i < 6; i++ {
-		if _, err := os.Stat(filepath.Join(seaweedDir, "go.mod")); err == nil {
-			break
-		}
-		seaweedDir = filepath.Dir(seaweedDir)
-	}
-
-	weedBinary := filepath.Join(seaweedDir, "weed", "weed")
-	info, err := os.Stat(weedBinary)
-	if err != nil || info.IsDir() {
-		// Try looking for weed/weed/weed
-		weedBinary = filepath.Join(seaweedDir, "weed", "weed", "weed")
-		info, err = os.Stat(weedBinary)
-		if err != nil || info.IsDir() {
-			weedBinary = "weed"
-			if _, err := exec.LookPath(weedBinary); err != nil {
-				t.Skip("weed binary not found, skipping integration test")
-			}
-		}
-	}
-
-	dataDir, err := os.MkdirTemp("", "seaweed-trino-test-*")
-	if err != nil {
-		t.Fatalf("Failed to create temp dir: %v", err)
-	}
-
-	bindIP := testutil.FindBindIP()
-
-	masterPort, masterGrpcPort := mustFreePortPair(t, "Master")
-	volumePort, volumeGrpcPort := mustFreePortPair(t, "Volume")
-	filerPort, filerGrpcPort := mustFreePortPair(t, "Filer")
-	s3Port, s3GrpcPort := mustFreePortPair(t, "S3")
-	icebergPort := mustFreePort(t, "Iceberg")
-
-	return &TestEnvironment{
-		seaweedDir:      seaweedDir,
-		weedBinary:      weedBinary,
-		dataDir:         dataDir,
-		bindIP:          bindIP,
-		s3Port:          s3Port,
-		s3GrpcPort:      s3GrpcPort,
-		icebergPort:     icebergPort,
-		masterPort:      masterPort,
-		masterGrpcPort:  masterGrpcPort,
-		filerPort:       filerPort,
-		filerGrpcPort:   filerGrpcPort,
-		volumePort:      volumePort,
-		volumeGrpcPort:  volumeGrpcPort,
-		dockerAvailable: hasDocker(),
-		accessKey:       "AKIAIOSFODNN7EXAMPLE",
-		secretKey:       "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
-	}
-}
-
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	// Create IAM config file
-	iamConfigPath, err := testutil.WriteIAMConfig(env.dataDir, env.accessKey, env.secretKey)
-	if err != nil {
-		t.Fatalf("Failed to create IAM config: %v", err)
-	}
-
-	securityToml := filepath.Join(env.dataDir, "security.toml")
-	if err := os.WriteFile(securityToml, []byte("# Empty security config for testing\n"), 0644); err != nil {
-		t.Fatalf("Failed to create security.toml: %v", err)
-	}
-
-	ctx, cancel := context.WithCancel(context.Background())
-	env.weedCancel = cancel
-
-	cmd := exec.CommandContext(ctx, env.weedBinary, "mini",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-master.port.grpc", fmt.Sprintf("%d", env.masterGrpcPort),
-		"-volume.port", fmt.Sprintf("%d", env.volumePort),
-		"-volume.port.grpc", fmt.Sprintf("%d", env.volumeGrpcPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-filer.port.grpc", fmt.Sprintf("%d", env.filerGrpcPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.port.grpc", fmt.Sprintf("%d", env.s3GrpcPort),
-		"-s3.port.iceberg", fmt.Sprintf("%d", env.icebergPort),
-		"-s3.config", iamConfigPath,
-		"-ip", env.bindIP,
-		"-ip.bind", "0.0.0.0",
-		"-dir", env.dataDir,
-	)
-	cmd.Dir = env.dataDir
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-
-	// Set AWS credentials in environment (for compatibility)
-	cmd.Env = append(os.Environ(),
-		"AWS_ACCESS_KEY_ID="+env.accessKey,
-		"AWS_SECRET_ACCESS_KEY="+env.secretKey,
-		"ICEBERG_WAREHOUSE=s3://iceberg-tables",
-		"S3TABLES_DEFAULT_BUCKET=iceberg-tables",
-	)
-
-	if err := cmd.Start(); err != nil {
-		t.Fatalf("Failed to start SeaweedFS: %v", err)
-	}
-	env.weedProcess = cmd
-
-	// Try to check if Iceberg API is ready
-	// First try checking the /v1/config endpoint (requires auth, so will return 401 if server is up)
-	icebergURL := fmt.Sprintf("http://%s:%d/v1/config", env.bindIP, env.icebergPort)
-	if !env.waitForService(icebergURL, 30*time.Second) {
-		// Try to get more info about why it failed
-		client := &http.Client{Timeout: 2 * time.Second}
-		resp, err := client.Get(icebergURL)
-		if err != nil {
-			t.Logf("WARNING: Could not connect to Iceberg service at %s: %v", icebergURL, err)
-		} else {
-			t.Logf("WARNING: Iceberg service returned status %d at %s", resp.StatusCode, icebergURL)
-			resp.Body.Close()
-		}
-		t.Fatalf("Iceberg REST API did not become ready")
-	}
-}
-
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	t.Helper()
-
-	if env.trinoContainer != "" {
-		_ = exec.Command("docker", "rm", "-f", env.trinoContainer).Run()
-	}
-
-	if env.weedCancel != nil {
-		env.weedCancel()
-	}
-
-	if env.weedProcess != nil {
-		time.Sleep(2 * time.Second)
-		_ = env.weedProcess.Wait()
-	}
-
-	if env.dataDir != "" {
-		_ = os.RemoveAll(env.dataDir)
-	}
-}
-
-func (env *TestEnvironment) waitForService(url string, timeout time.Duration) bool {
-	client := &http.Client{Timeout: 2 * time.Second}
-	deadline := time.Now().Add(timeout)
-	for time.Now().Before(deadline) {
-		resp, err := client.Get(url)
-		if err != nil {
-			// Service not responding yet
-			time.Sleep(500 * time.Millisecond)
-			continue
-		}
-		statusCode := resp.StatusCode
-		resp.Body.Close()
-		// Accept 2xx status codes (successful responses)
-		if statusCode >= 200 && statusCode < 300 {
-			return true
-		}
-		// Also accept 401/403 (auth errors mean service is up, just needs credentials)
-		if statusCode == http.StatusUnauthorized || statusCode == http.StatusForbidden {
-			return true
-		}
-		// For other status codes, keep trying
-		time.Sleep(500 * time.Millisecond)
-	}
-	return false
-}
-
-func testIcebergRestAPI(t *testing.T, env *TestEnvironment) {
-	t.Helper()
-	fmt.Printf(">>> Testing Iceberg REST API directly...\n")
-
-	// First, verify the service is listening
-	addr := net.JoinHostPort(env.bindIP, fmt.Sprintf("%d", env.icebergPort))
-	conn, err := net.Dial("tcp", addr)
-	if err != nil {
-		t.Fatalf("Cannot connect to Iceberg service at %s: %v", addr, err)
-	}
-	conn.Close()
-	t.Logf("Successfully connected to Iceberg service at %s", addr)
-
-	// Test /v1/config endpoint
-	url := fmt.Sprintf("http://%s:%d/v1/config", env.bindIP, env.icebergPort)
-	t.Logf("Testing Iceberg REST API at %s", url)
-
-	resp, err := http.Get(url)
-	if err != nil {
-		t.Fatalf("Failed to connect to Iceberg REST API at %s: %v", url, err)
-	}
-	defer resp.Body.Close()
-
-	t.Logf("Iceberg REST API response status: %d", resp.StatusCode)
-	body, _ := io.ReadAll(resp.Body)
-	t.Logf("Iceberg REST API response body: %s", string(body))
-
-	if resp.StatusCode != http.StatusOK {
-		t.Fatalf("Expected 200 OK from /v1/config, got %d", resp.StatusCode)
-	}
-}
-
-func (env *TestEnvironment) writeTrinoConfig(t *testing.T, warehouseBucket string) string {
-	t.Helper()
-
-	configDir := filepath.Join(env.dataDir, "trino")
-	if err := os.MkdirAll(configDir, 0755); err != nil {
-		t.Fatalf("Failed to create Trino config dir: %v", err)
-	}
-
-	config := fmt.Sprintf(`connector.name=iceberg
-iceberg.catalog.type=rest
-iceberg.rest-catalog.uri=http://host.docker.internal:%d
-iceberg.rest-catalog.warehouse=s3://%s
-iceberg.file-format=PARQUET
-iceberg.unique-table-location=true
-
-# S3 storage config
-fs.native-s3.enabled=true
-s3.endpoint=http://host.docker.internal:%d
-s3.path-style-access=true
-s3.signer-type=AwsS3V4Signer
-s3.aws-access-key=%s
-s3.aws-secret-key=%s
-s3.region=us-west-2
-
-# REST catalog authentication
-iceberg.rest-catalog.security=SIGV4
-`, env.icebergPort, warehouseBucket, env.s3Port, env.accessKey, env.secretKey)
-
-	if err := os.WriteFile(filepath.Join(configDir, "iceberg.properties"), []byte(config), 0644); err != nil {
-		t.Fatalf("Failed to write Trino config: %v", err)
-	}
-
-	return configDir
-}
-
-func (env *TestEnvironment) startTrinoContainer(t *testing.T, configDir string) {
-	t.Helper()
-
-	containerName := "seaweed-trino-" + randomString(8)
-	env.trinoContainer = containerName
-
-	cmd := exec.Command("docker", "run", "-d",
-		"--name", containerName,
-		"--add-host", "host.docker.internal:host-gateway",
-		"-v", fmt.Sprintf("%s:/etc/trino/catalog", configDir),
-		"-v", fmt.Sprintf("%s:/test", env.dataDir),
-		"-e", "AWS_ACCESS_KEY_ID="+env.accessKey,
-		"-e", "AWS_SECRET_ACCESS_KEY="+env.secretKey,
-		"-e", "AWS_REGION=us-west-2",
-		"trinodb/trino:479",
-	)
-	if output, err := cmd.CombinedOutput(); err != nil {
-		t.Fatalf("Failed to start Trino container: %v\n%s", err, string(output))
-	}
-}
-
-func waitForTrino(t *testing.T, containerName string, timeout time.Duration) {
-	t.Helper()
-
-	deadline := time.Now().Add(timeout)
-	var lastOutput []byte
-	retryCount := 0
-	for time.Now().Before(deadline) {
-		// Try system catalog query as a readiness check
-		cmd := exec.Command("docker", "exec", containerName,
-			"trino", "--catalog", "system", "--schema", "runtime",
-			"--execute", "SELECT 1",
-		)
-		if output, err := cmd.CombinedOutput(); err == nil {
-			return
-		} else {
-			lastOutput = output
-			outputStr := string(output)
-			if strings.Contains(outputStr, "No such container") ||
-				strings.Contains(outputStr, "is not running") {
-				break
-			}
-			retryCount++
-		}
-		time.Sleep(1 * time.Second)
-	}
-
-	// If we can't connect to system catalog, try to at least connect to Trino server
-	cmd := exec.Command("docker", "exec", containerName, "trino", "--version")
-	if err := cmd.Run(); err == nil {
-		// Trino process is running, even if catalog isn't ready yet
-		// Give it a bit more time
-		time.Sleep(5 * time.Second)
-		return
-	}
-
-	t.Fatalf("Timed out waiting for Trino to be ready\nLast output:\n%s", string(lastOutput))
-}
-
-func runTrinoSQL(t *testing.T, containerName, sql string) string {
-	t.Helper()
-
-	cmd := exec.Command("docker", "exec", containerName,
-		"trino", "--catalog", "iceberg",
-		"--output-format", "CSV",
-		"--execute", sql,
-	)
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		t.Fatalf("Trino command failed: %v\nSQL: %s\nOutput:\n%s", err, sql, string(output))
-	}
-	return sanitizeTrinoOutput(string(output))
-}
-
-func createTableBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	// Use weed shell to create the table bucket
-	// Create with "000000000000" account ID (matches AccountAdmin.Id from auth_credentials.go)
-	// This ensures bucket owner matches authenticated identity's Account.Id
-	cmd := exec.Command(env.weedBinary, "shell",
-		fmt.Sprintf("-master=%s:%d.%d", env.bindIP, env.masterPort, env.masterGrpcPort),
-	)
-	cmd.Stdin = strings.NewReader(fmt.Sprintf("s3tables.bucket -create -name %s -account 000000000000\nexit\n", bucketName))
-	fmt.Printf(">>> EXECUTING: %v\n", cmd.Args)
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		fmt.Printf(">>> ERROR Output: %s\n", string(output))
-		t.Fatalf("Failed to create table bucket %s via weed shell: %v\nOutput: %s", bucketName, err, string(output))
-	}
-	fmt.Printf(">>> SUCCESS: Created table bucket %s\n", bucketName)
-
-	t.Logf("Created table bucket: %s", bucketName)
-}
-
-func sanitizeTrinoOutput(output string) string {
-	lines := strings.Split(strings.TrimSpace(output), "\n")
-	filtered := make([]string, 0, len(lines))
-	for _, line := range lines {
-		if strings.Contains(line, "org.jline.utils.Log") {
-			continue
-		}
-		if strings.Contains(line, "Unable to create a system terminal") {
-			continue
-		}
-		if strings.HasPrefix(line, "WARNING:") {
-			continue
-		}
-		if strings.TrimSpace(line) == "" {
-			continue
-		}
-		filtered = append(filtered, line)
-	}
-	if len(filtered) == 0 {
-		return ""
-	}
-	return strings.Join(filtered, "\n") + "\n"
-}
-
-func createObjectBucket(t *testing.T, env *TestEnvironment, bucketName string) {
-	t.Helper()
-
-	// Create an AWS S3 client with the test credentials pointing to our local server
-	cfg := aws.Config{
-		Region:       "us-east-1",
-		Credentials:  aws.NewCredentialsCache(credentials.NewStaticCredentialsProvider(env.accessKey, env.secretKey, "")),
-		BaseEndpoint: aws.String(fmt.Sprintf("http://%s:%d", env.bindIP, env.s3Port)),
-	}
-
-	client := s3.NewFromConfig(cfg, func(o *s3.Options) {
-		o.UsePathStyle = true
-	})
-
-	// Create the bucket using standard S3 API
-	_, err := client.CreateBucket(context.Background(), &s3.CreateBucketInput{
-		Bucket: aws.String(bucketName),
-	})
-	if err != nil {
-		t.Fatalf("Failed to create object bucket %s: %v", bucketName, err)
-	}
-}
-
-func hasDocker() bool {
-	cmd := exec.Command("docker", "version")
-	return cmd.Run() == nil
-}
-
-func mustFreePort(t *testing.T, name string) int {
-	t.Helper()
-
-	port, err := getFreePort()
-	if err != nil {
-		t.Fatalf("Failed to get free port for %s: %v", name, err)
-	}
-	return port
-}
-
-func mustFreePortPair(t *testing.T, name string) (int, int) {
-	t.Helper()
-
-	httpPort, grpcPort, err := findAvailablePortPair()
-	if err != nil {
-		t.Fatalf("Failed to get free port pair for %s: %v", name, err)
-	}
-	return httpPort, grpcPort
-}
-
-func findAvailablePortPair() (int, int, error) {
-	httpPort, err := getFreePort()
-	if err != nil {
-		return 0, 0, err
-	}
-	grpcPort, err := getFreePort()
-	if err != nil {
-		return 0, 0, err
-	}
-	return httpPort, grpcPort, nil
-}
-
-func getFreePort() (int, error) {
-	listener, err := net.Listen("tcp", "0.0.0.0:0")
-	if err != nil {
-		return 0, err
-	}
-	defer listener.Close()
-
-	addr := listener.Addr().(*net.TCPAddr)
-	return addr.Port, nil
-}
-
-func randomString(length int) string {
-	const charset = "abcdefghijklmnopqrstuvwxyz0123456789"
-	b := make([]byte, length)
-	if _, err := rand.Read(b); err != nil {
-		panic("failed to generate random string: " + err.Error())
-	}
-	for i := range b {
-		b[i] = charset[int(b[i])%len(charset)]
-	}
-	return string(b)
-}

test/s3tables/catalog_trino/trino_crud_operations_test.go

@@ -1,208 +0,0 @@
-package catalog_trino
-
-import (
-	"fmt"
-	"strings"
-	"testing"
-	"time"
-)
-
-// setupTrinoTest is a helper function that sets up the common test environment for all Trino CRUD tests
-func setupTrinoTest(t *testing.T) *TestEnvironment {
-	t.Helper()
-
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping Trino integration test")
-	}
-
-	t.Logf(">>> Starting SeaweedFS...")
-	env.StartSeaweedFS(t)
-
-	tableBucket := "iceberg-tables"
-	catalogBucket := tableBucket
-	createTableBucket(t, env, tableBucket)
-
-	configDir := env.writeTrinoConfig(t, catalogBucket)
-	env.startTrinoContainer(t, configDir)
-	waitForTrino(t, env.trinoContainer, 60*time.Second)
-
-	return env
-}
-
-// TestNamespaceCRUD tests namespace (schema) CRUD operations via Trino SQL
-// Namespaces are the key container for tables in Iceberg, and this test
-// verifies the full CRUD lifecycle: Create, Read (List), Update, and Delete
-func TestNamespaceCRUD(t *testing.T) {
-	env := setupTrinoTest(t)
-	defer env.Cleanup(t)
-
-	// CREATE: Create a namespace
-	namespace1 := "crud_test_ns1_" + randomString(6)
-	t.Logf(">>> CREATE: Creating namespace %s", namespace1)
-	runTrinoSQL(t, env.trinoContainer, "CREATE SCHEMA IF NOT EXISTS iceberg."+namespace1)
-	t.Logf(">>> Namespace %s created", namespace1)
-
-	namespace2 := "crud_test_ns2_" + randomString(6)
-	t.Logf(">>> CREATE: Creating second namespace %s", namespace2)
-	runTrinoSQL(t, env.trinoContainer, "CREATE SCHEMA IF NOT EXISTS iceberg."+namespace2)
-	t.Logf(">>> Namespace %s created", namespace2)
-
-	// READ: List all namespaces
-	t.Logf(">>> READ: Listing all namespaces")
-	output := runTrinoSQL(t, env.trinoContainer, "SHOW SCHEMAS FROM iceberg")
-	if !strings.Contains(output, namespace1) {
-		t.Fatalf("Expected namespace %s in listing output:\n%s", namespace1, output)
-	}
-	if !strings.Contains(output, namespace2) {
-		t.Fatalf("Expected namespace %s in listing output:\n%s", namespace2, output)
-	}
-	t.Logf(">>> Both namespaces found in listing")
-
-	// UPDATE: Namespaces typically don't have "update" semantics in SQL,
-	// but we can verify properties via metadata queries
-	t.Logf(">>> UPDATE: Simulating namespace properties (via SQL properties check)")
-	// Iceberg REST API supports namespace properties, but Trino SQL doesn't expose them directly
-	// This test verifies the namespace still exists and is accessible
-	output = runTrinoSQL(t, env.trinoContainer, "SHOW TABLES FROM iceberg."+namespace1)
-
-	// DELETE: Drop namespaces
-	t.Logf(">>> DELETE: Dropping namespace %s", namespace1)
-	runTrinoSQL(t, env.trinoContainer, "DROP SCHEMA iceberg."+namespace1)
-	t.Logf(">>> Namespace %s dropped", namespace1)
-
-	t.Logf(">>> DELETE: Dropping namespace %s", namespace2)
-	runTrinoSQL(t, env.trinoContainer, "DROP SCHEMA iceberg."+namespace2)
-	t.Logf(">>> Namespace %s dropped", namespace2)
-
-	// Verify deletion: Namespaces should no longer exist
-	t.Logf(">>> VERIFY: Checking that namespaces are deleted")
-	output = runTrinoSQL(t, env.trinoContainer, "SHOW SCHEMAS FROM iceberg")
-	if strings.Contains(output, namespace1) {
-		t.Errorf("Namespace %s still appears in listing after deletion", namespace1)
-	} else {
-		t.Logf(">>> Namespace %s correctly deleted", namespace1)
-	}
-	if strings.Contains(output, namespace2) {
-		t.Errorf("Namespace %s still appears in listing after deletion", namespace2)
-	} else {
-		t.Logf(">>> Namespace %s correctly deleted", namespace2)
-	}
-
-	t.Logf(">>> TestNamespaceCRUD PASSED")
-}
-
-// TestNamespaceListingPagination tests that namespace listing works correctly
-// This verifies the LIST operation with multiple namespaces
-func TestNamespaceListingPagination(t *testing.T) {
-	env := setupTrinoTest(t)
-	defer env.Cleanup(t)
-
-	// Create multiple namespaces
-	numNamespaces := 5
-	namespaces := make([]string, numNamespaces)
-	t.Logf(">>> Creating %d namespaces for listing test", numNamespaces)
-	for i := 0; i < numNamespaces; i++ {
-		namespaces[i] = "list_test_ns" + fmt.Sprintf("%d", i+1) + "_" + randomString(4)
-		runTrinoSQL(t, env.trinoContainer, "CREATE SCHEMA IF NOT EXISTS iceberg."+namespaces[i])
-		t.Logf(">>> Created namespace %d: %s", i+1, namespaces[i])
-	}
-
-	// List all namespaces
-	t.Logf(">>> Listing all namespaces")
-	output := runTrinoSQL(t, env.trinoContainer, "SHOW SCHEMAS FROM iceberg")
-
-	// Verify all namespaces are in the listing
-	t.Logf(">>> Verifying all namespaces are in listing")
-	for i, ns := range namespaces {
-		if !strings.Contains(output, ns) {
-			t.Fatalf("Expected namespace %d (%s) in listing output", i+1, ns)
-		}
-		t.Logf(">>> Namespace %d (%s) found in listing", i+1, ns)
-	}
-
-	// Clean up
-	t.Logf(">>> Cleaning up namespaces")
-	for _, ns := range namespaces {
-		runTrinoSQL(t, env.trinoContainer, "DROP SCHEMA iceberg."+ns)
-	}
-	t.Logf(">>> Cleanup complete")
-
-	t.Logf(">>> TestNamespaceListingPagination PASSED")
-}
-
-// TestNamespaceErrorHandling tests error handling for namespace operations
-// Tests both idempotent operations and actual error cases
-func TestNamespaceErrorHandling(t *testing.T) {
-	env := setupTrinoTest(t)
-	defer env.Cleanup(t)
-
-	// Test 1: Create and drop same namespace
-	ns := "error_test_ns_" + randomString(6)
-	t.Logf(">>> Test 1: Creating and dropping namespace %s", ns)
-	runTrinoSQL(t, env.trinoContainer, "CREATE SCHEMA IF NOT EXISTS iceberg."+ns)
-	runTrinoSQL(t, env.trinoContainer, "DROP SCHEMA iceberg."+ns)
-	t.Logf(">>> Namespace created and dropped successfully")
-
-	// Test 2: Try to drop non-existent namespace with IF EXISTS (should succeed gracefully)
-	nonExistent := "nonexistent_" + randomString(6)
-	t.Logf(">>> Test 2: Attempting to drop non-existent namespace %s with IF EXISTS", nonExistent)
-	runTrinoSQL(t, env.trinoContainer, "DROP SCHEMA IF EXISTS iceberg."+nonExistent)
-	t.Logf(">>> Drop non-existent namespace handled gracefully (IF EXISTS clause)")
-
-	// Test 3: Creating duplicate namespace (with IF NOT EXISTS - should succeed gracefully)
-	ns2 := "dup_test_ns_" + randomString(6)
-	t.Logf(">>> Test 3: Creating namespace %s twice (using IF NOT EXISTS)", ns2)
-	runTrinoSQL(t, env.trinoContainer, "CREATE SCHEMA IF NOT EXISTS iceberg."+ns2)
-	runTrinoSQL(t, env.trinoContainer, "CREATE SCHEMA IF NOT EXISTS iceberg."+ns2)
-	t.Logf(">>> Duplicate creation handled gracefully")
-
-	// Test 4: Verify schema properties persist after creation
-	t.Logf(">>> Test 4: Verifying namespace still exists after duplicate creation attempt")
-	output := runTrinoSQL(t, env.trinoContainer, "SHOW SCHEMAS FROM iceberg")
-	if !strings.Contains(output, ns2) {
-		t.Errorf("Expected namespace %s to exist in listing after duplicate creation attempt", ns2)
-	} else {
-		t.Logf(">>> Namespace %s correctly persists", ns2)
-	}
-
-	// Cleanup
-	runTrinoSQL(t, env.trinoContainer, "DROP SCHEMA iceberg."+ns2)
-
-	t.Logf(">>> TestNamespaceErrorHandling PASSED")
-}
-
-// TestSchemaIntegrationWithCatalog tests that schemas are properly integrated with the catalog
-// This verifies that schema operations through Trino are visible through Iceberg REST API concepts
-func TestSchemaIntegrationWithCatalog(t *testing.T) {
-	env := setupTrinoTest(t)
-	defer env.Cleanup(t)
-
-	// Create a schema through Trino
-	schemaName := "catalog_integration_" + randomString(6)
-	t.Logf(">>> Creating schema through Trino SQL: %s", schemaName)
-	runTrinoSQL(t, env.trinoContainer, "CREATE SCHEMA IF NOT EXISTS iceberg."+schemaName)
-
-	// Verify it's accessible through catalog (list schemas)
-	t.Logf(">>> Verifying schema is visible through catalog (SHOW SCHEMAS)")
-	output := runTrinoSQL(t, env.trinoContainer, "SHOW SCHEMAS FROM iceberg")
-	if !strings.Contains(output, schemaName) {
-		t.Fatalf("Created schema %s not visible in catalog listing", schemaName)
-	}
-	t.Logf(">>> Schema successfully verified in catalog")
-
-	// Verify empty schema
-	t.Logf(">>> Verifying schema is empty (no tables)")
-	output = runTrinoSQL(t, env.trinoContainer, "SHOW TABLES FROM iceberg."+schemaName)
-
-	// Clean up
-	t.Logf(">>> Cleaning up schema")
-	runTrinoSQL(t, env.trinoContainer, "DROP SCHEMA iceberg."+schemaName)
-
-	t.Logf(">>> TestSchemaIntegrationWithCatalog PASSED")
-}

test/s3tables/lakekeeper/lakekeeper_test.go

@@ -1,341 +0,0 @@
-package lakekeeper
-
-import (
-	"context"
-	"fmt"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/s3tables/testutil"
-)
-
-type TestEnvironment struct {
-	seaweedDir     string
-	weedBinary     string
-	dataDir        string
-	bindIP         string
-	s3Port         int
-	s3GrpcPort     int
-	masterPort     int
-	masterGrpcPort int
-	filerPort      int
-	filerGrpcPort  int
-	volumePort     int
-	volumeGrpcPort int
-	weedProcess    *exec.Cmd
-	weedCancel     context.CancelFunc
-	accessKey      string
-	secretKey      string
-}
-
-func TestLakekeeperIntegration(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	if !testutil.HasDocker() {
-		t.Skip("Docker not available, skipping Lakekeeper integration test")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	fmt.Printf(">>> Starting SeaweedFS with Lakekeeper configuration...\n")
-	env.StartSeaweedFS(t)
-	fmt.Printf(">>> SeaweedFS started.\n")
-
-	// Run python script in docker to test STS and S3 operations
-	runLakekeeperRepro(t, env)
-}
-
-func NewTestEnvironment(t *testing.T) *TestEnvironment {
-	t.Helper()
-
-	wd, err := os.Getwd()
-	if err != nil {
-		t.Fatalf("Failed to get working directory: %v", err)
-	}
-
-	seaweedDir := wd
-	for i := 0; i < 6; i++ {
-		if _, err := os.Stat(filepath.Join(seaweedDir, "go.mod")); err == nil {
-			break
-		}
-		seaweedDir = filepath.Dir(seaweedDir)
-	}
-
-	weedBinary := filepath.Join(seaweedDir, "weed", "weed")
-	if _, err := os.Stat(weedBinary); err != nil {
-		weedBinary = "weed"
-		if _, err := exec.LookPath(weedBinary); err != nil {
-			t.Skip("weed binary not found, skipping integration test")
-		}
-	}
-
-	dataDir, err := os.MkdirTemp("", "seaweed-lakekeeper-test-*")
-	if err != nil {
-		t.Fatalf("Failed to create temp dir: %v", err)
-	}
-
-	bindIP := testutil.FindBindIP()
-
-	masterPort, masterGrpcPort := testutil.MustFreePortPair(t, "Master")
-	volumePort, volumeGrpcPort := testutil.MustFreePortPair(t, "Volume")
-	filerPort, filerGrpcPort := testutil.MustFreePortPair(t, "Filer")
-	s3Port, s3GrpcPort := testutil.MustFreePortPair(t, "S3")
-
-	return &TestEnvironment{
-		seaweedDir:     seaweedDir,
-		weedBinary:     weedBinary,
-		dataDir:        dataDir,
-		bindIP:         bindIP,
-		s3Port:         s3Port,
-		s3GrpcPort:     s3GrpcPort,
-		masterPort:     masterPort,
-		masterGrpcPort: masterGrpcPort,
-		filerPort:      filerPort,
-		filerGrpcPort:  filerGrpcPort,
-		volumePort:     volumePort,
-		volumeGrpcPort: volumeGrpcPort,
-		accessKey:      "admin",
-		secretKey:      "admin",
-	}
-}
-
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	iamConfigPath := filepath.Join(env.dataDir, "iam.json")
-	// Note: signingKey must be base64 encoded for []byte JSON unmarshaling
-	iamConfig := fmt.Sprintf(`{
-  "identities": [
-    {
-      "name": "admin",
-      "credentials": [
-        {
-          "accessKey": "%s",
-          "secretKey": "%s"
-        }
-      ],
-      "actions": ["Admin", "Read", "List", "Tagging", "Write"]
-    }
-  ],
-  "sts": {
-    "tokenDuration": "12h",
-    "maxSessionLength": "24h",
-    "issuer": "seaweedfs-sts",
-    "signingKey": "dGVzdC1zaWduaW5nLWtleS1mb3Itc3RzLWludGVncmF0aW9uLXRlc3Rz"
-  },
-  "roles": [
-    {
-      "roleName": "LakekeeperVendedRole",
-      "roleArn": "arn:aws:iam::000000000000:role/LakekeeperVendedRole",
-      "trustPolicy": {
-        "Version": "2012-10-17",
-        "Statement": [
-          {
-            "Effect": "Allow",
-            "Principal": "*",
-            "Action": "sts:AssumeRole"
-          }
-        ]
-      },
-      "attachedPolicies": ["FullAccess"]
-    }
-  ],
-  "policies": [
-    {
-      "name": "FullAccess",
-      "document": {
-        "Version": "2012-10-17",
-        "Statement": [
-          {
-            "Effect": "Allow",
-            "Action": "*",
-            "Resource": "*"
-          }
-        ]
-      }
-    }
-  ]
-}`, env.accessKey, env.secretKey)
-
-	if err := os.WriteFile(iamConfigPath, []byte(iamConfig), 0644); err != nil {
-		t.Fatalf("Failed to create IAM config: %v", err)
-	}
-
-	ctx, cancel := context.WithCancel(context.Background())
-	env.weedCancel = cancel
-
-	// Start weed mini with both S3 config (standard IAM) and IAM config (advanced IAM/STS)
-	cmd := exec.CommandContext(ctx, env.weedBinary, "-v", "4", "mini",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-master.port.grpc", fmt.Sprintf("%d", env.masterGrpcPort),
-		"-volume.port", fmt.Sprintf("%d", env.volumePort),
-		"-volume.port.grpc", fmt.Sprintf("%d", env.volumeGrpcPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-filer.port.grpc", fmt.Sprintf("%d", env.filerGrpcPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.port.grpc", fmt.Sprintf("%d", env.s3GrpcPort),
-		"-s3.config", iamConfigPath,
-		"-s3.iam.config", iamConfigPath,
-		"-s3.iam.readOnly=false",
-		"-ip", env.bindIP,
-		"-ip.bind", "0.0.0.0",
-		"-dir", env.dataDir,
-	)
-	cmd.Dir = env.dataDir
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-
-	if err := cmd.Start(); err != nil {
-		t.Fatalf("Failed to start SeaweedFS: %v", err)
-	}
-	env.weedProcess = cmd
-
-	if !testutil.WaitForService(fmt.Sprintf("http://localhost:%d/status", env.s3Port), 30*time.Second) {
-		t.Fatalf("S3 API failed to become ready")
-	}
-}
-
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	t.Helper()
-	if env.weedCancel != nil {
-		env.weedCancel()
-	}
-	if env.weedProcess != nil {
-		time.Sleep(1 * time.Second)
-		_ = env.weedProcess.Wait()
-	}
-	if env.dataDir != "" {
-		_ = os.RemoveAll(env.dataDir)
-	}
-}
-
-func runLakekeeperRepro(t *testing.T, env *TestEnvironment) {
-	t.Helper()
-
-	scriptContent := fmt.Sprintf(`
-import boto3
-import botocore.config
-import botocore
-from botocore.exceptions import ClientError
-import os
-import sys
-import time
-import logging
-
-# Enable botocore debug logging to see signature calculation
-logging.basicConfig(level=logging.DEBUG)
-botocore.session.get_session().set_debug_logger()
-
-print("Starting Lakekeeper repro test...")
-
-endpoint_url = "http://host.docker.internal:%d"
-access_key = "%s"
-secret_key = "%s"
-region = "us-east-1"
-
-print(f"Connecting to {endpoint_url}")
-
-try:
-    config = botocore.config.Config(
-        retries={'max_attempts': 3}
-    )
-    sts = boto3.client(
-        'sts',
-        endpoint_url=endpoint_url,
-        aws_access_key_id=access_key,
-        aws_secret_access_key=secret_key,
-        region_name=region,
-        config=config
-    )
-
-    role_arn = "arn:aws:iam::000000000000:role/LakekeeperVendedRole"
-    session_name = "lakekeeper-session"
-
-    print(f"Calling AssumeRole on {role_arn} with POST body...")
-    
-    # Standard boto3 call sends parameters in POST body
-    response = sts.assume_role(
-        RoleArn=role_arn,
-        RoleSessionName=session_name
-    )
-
-    creds = response['Credentials']
-    access_key_id = creds['AccessKeyId']
-    secret_access_key = creds['SecretAccessKey']
-    session_token = creds['SessionToken']
-
-    print(f"Success! Got credentials with prefix: {access_key_id[:4]}")
-    
-    if not access_key_id.startswith("ASIA"):
-        print(f"FAILED: Expected ASIA prefix, got {access_key_id}")
-        sys.exit(1)
-
-    print("Verifying S3 operations with vended credentials...")
-    s3 = boto3.client(
-        's3',
-        endpoint_url=endpoint_url,
-        aws_access_key_id=access_key_id,
-        aws_secret_access_key=secret_access_key,
-        aws_session_token=session_token,
-        region_name=region,
-        config=config
-    )
-
-    bucket = "lakekeeper-vended-bucket"
-    print(f"Creating bucket {bucket}...")
-    s3.create_bucket(Bucket=bucket)
-
-    print("Listing buckets...")
-    response = s3.list_buckets()
-    buckets = [b['Name'] for b in response['Buckets']]
-    print(f"Found buckets: {buckets}")
-
-    if bucket not in buckets:
-        print(f"FAILED: Bucket {bucket} not found in list")
-        sys.exit(1)
-
-    print("SUCCESS: Lakekeeper flow verified!")
-    sys.exit(0)
-    
-except Exception as e:
-    print(f"FAILED: {e}")
-    # Print more details if it is a ClientError
-    if hasattr(e, 'response'):
-        print(f"Response: {e.response}")
-    sys.exit(1)
-`, env.s3Port, env.accessKey, env.secretKey)
-
-	scriptPath := filepath.Join(env.dataDir, "lakekeeper_repro.py")
-	if err := os.WriteFile(scriptPath, []byte(scriptContent), 0644); err != nil {
-		t.Fatalf("Failed to write python script: %v", err)
-	}
-
-	containerName := "seaweed-lakekeeper-client-" + fmt.Sprintf("%d", time.Now().UnixNano())
-
-	// Create a context with timeout for the docker run command
-	dockerCtx, dockerCancel := context.WithTimeout(context.Background(), 5*time.Minute)
-	defer dockerCancel()
-
-	cmd := exec.CommandContext(dockerCtx, "docker", "run", "--rm",
-		"--name", containerName,
-		"--add-host", "host.docker.internal:host-gateway",
-		"-v", fmt.Sprintf("%s:/work", env.dataDir),
-		"python:3",
-		"/bin/bash", "-c", "pip install boto3 && python /work/lakekeeper_repro.py",
-	)
-
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		if dockerCtx.Err() == context.DeadlineExceeded {
-			t.Fatalf("Lakekeeper repro client timed out after 5 minutes\nOutput:\n%s", string(output))
-		}
-		t.Fatalf("Lakekeeper repro client failed: %v\nOutput:\n%s", err, string(output))
-	}
-	t.Logf("Lakekeeper repro client output:\n%s", string(output))
-}

test/s3tables/sts_integration/sts_integration_test.go

@@ -1,409 +0,0 @@
-package sts_integration
-
-import (
-	"context"
-	"fmt"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/s3tables/testutil"
-)
-
-// TestEnvironment mirrors the one in trino_catalog_test.go but simplified
-type TestEnvironment struct {
-	seaweedDir      string
-	weedBinary      string
-	dataDir         string
-	bindIP          string
-	s3Port          int
-	s3GrpcPort      int
-	masterPort      int
-	masterGrpcPort  int
-	filerPort       int
-	filerGrpcPort   int
-	volumePort      int
-	volumeGrpcPort  int
-	weedProcess     *exec.Cmd
-	weedCancel      context.CancelFunc
-	dockerAvailable bool
-	accessKey       string
-	secretKey       string
-}
-
-const testSTSIntegrationSigningKey = "dGVzdC1zaWduaW5nLWtleS1mb3Itc3RzLWludGVncmF0aW9uLXRlc3Rz" // gitleaks:allow - test-signing-key-for-sts-integration-tests
-
-func TestSTSIntegration(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	env := NewTestEnvironment(t)
-	defer env.Cleanup(t)
-
-	if !env.dockerAvailable {
-		t.Skip("Docker not available, skipping STS integration test")
-	}
-
-	fmt.Printf(">>> Starting SeaweedFS...\n")
-	env.StartSeaweedFS(t)
-	fmt.Printf(">>> SeaweedFS started.\n")
-
-	// Run python script in docker to test STS
-	runPythonSTSClient(t, env)
-}
-
-func NewTestEnvironment(t *testing.T) *TestEnvironment {
-	t.Helper()
-
-	wd, err := os.Getwd()
-	if err != nil {
-		t.Fatalf("Failed to get working directory: %v", err)
-	}
-
-	seaweedDir := wd
-	for i := 0; i < 6; i++ {
-		if _, err := os.Stat(filepath.Join(seaweedDir, "go.mod")); err == nil {
-			break
-		}
-		seaweedDir = filepath.Dir(seaweedDir)
-	}
-
-	weedBinary := filepath.Join(seaweedDir, "weed", "weed")
-	info, err := os.Stat(weedBinary)
-	if err != nil || info.IsDir() {
-		weedBinary = "weed"
-		if _, err := exec.LookPath(weedBinary); err != nil {
-			t.Skip("weed binary not found, skipping integration test")
-		}
-	}
-
-	if !testutil.HasDocker() {
-		t.Skip("Docker not available, skipping integration test")
-	}
-
-	// Create a unique temporary directory for this test run
-	dataDir, err := os.MkdirTemp("", "seaweed-sts-test-*")
-	if err != nil {
-		t.Fatalf("Failed to create temp dir: %v", err)
-	}
-	// The Cleanup method will remove this directory, so no need for defer here.
-
-	bindIP := testutil.FindBindIP()
-
-	masterPort, masterGrpcPort := testutil.MustFreePortPair(t, "Master")
-	volumePort, volumeGrpcPort := testutil.MustFreePortPair(t, "Volume")
-	filerPort, filerGrpcPort := testutil.MustFreePortPair(t, "Filer")
-	s3Port, s3GrpcPort := testutil.MustFreePortPair(t, "S3") // Changed to use testutil.MustFreePortPair
-
-	return &TestEnvironment{
-		seaweedDir:      seaweedDir,
-		weedBinary:      weedBinary,
-		dataDir:         dataDir,
-		bindIP:          bindIP,
-		s3Port:          s3Port,
-		s3GrpcPort:      s3GrpcPort,
-		masterPort:      masterPort,
-		masterGrpcPort:  masterGrpcPort,
-		filerPort:       filerPort,
-		filerGrpcPort:   filerGrpcPort,
-		volumePort:      volumePort,
-		volumeGrpcPort:  volumeGrpcPort,
-		dockerAvailable: testutil.HasDocker(),
-		accessKey:       "admin",
-		secretKey:       "adminadmin",
-	}
-}
-
-func (env *TestEnvironment) StartSeaweedFS(t *testing.T) {
-	t.Helper()
-
-	iamConfigPath := filepath.Join(env.dataDir, "iam.json")
-	// Note: signingKey must be base64 encoded for []byte JSON unmarshaling
-	iamConfig := fmt.Sprintf(`{
-  "identities": [
-    {
-      "name": "admin",
-      "credentials": [
-        { "accessKey": "%s", "secretKey": "%s" }
-      ],
-      "actions": ["Admin", "Read", "Write", "List", "Tagging"]
-    }
-  ],
-  "sts": {
-    "tokenDuration": "1h",
-    "maxSessionLength": "12h",
-    "issuer": "seaweedfs-sts",
-    "signingKey": "%s"
-  },
-  "policy": {
-    "defaultEffect": "Deny",
-    "storeType": "memory"
-  },
-  "policies": [
-    {
-      "name": "S3FullAccessPolicy",
-      "document": {
-        "Version": "2012-10-17",
-        "Statement": [
-          {
-            "Effect": "Allow",
-            "Action": ["s3:*"],
-            "Resource": ["*"]
-          }
-        ]
-      }
-    }
-  ],
-  "roles": [
-    {
-      "roleName": "TestRole",
-      "roleArn": "arn:aws:iam::role/TestRole",
-      "attachedPolicies": ["S3FullAccessPolicy"],
-      "trustPolicy": {
-        "Version": "2012-10-17",
-        "Statement": [
-          {
-            "Effect": "Allow",
-            "Principal": "*",
-            "Action": ["sts:AssumeRole"]
-          }
-        ]
-      }
-    }
-  ]
-}`, env.accessKey, env.secretKey, testSTSIntegrationSigningKey)
-	if err := os.WriteFile(iamConfigPath, []byte(iamConfig), 0644); err != nil {
-		t.Fatalf("Failed to create IAM config: %v", err)
-	}
-
-	// Create empty security.toml
-	securityToml := filepath.Join(env.dataDir, "security.toml")
-	if err := os.WriteFile(securityToml, []byte("# Empty security config for testing\n"), 0644); err != nil {
-		t.Fatalf("Failed to create security.toml: %v", err)
-	}
-
-	ctx, cancel := context.WithCancel(context.Background())
-	env.weedCancel = cancel
-
-	cmd := exec.CommandContext(ctx, env.weedBinary, "mini",
-		"-master.port", fmt.Sprintf("%d", env.masterPort),
-		"-master.port.grpc", fmt.Sprintf("%d", env.masterGrpcPort),
-		"-volume.port", fmt.Sprintf("%d", env.volumePort),
-		"-volume.port.grpc", fmt.Sprintf("%d", env.volumeGrpcPort),
-		"-filer.port", fmt.Sprintf("%d", env.filerPort),
-		"-filer.port.grpc", fmt.Sprintf("%d", env.filerGrpcPort),
-		"-s3.port", fmt.Sprintf("%d", env.s3Port),
-		"-s3.port.grpc", fmt.Sprintf("%d", env.s3GrpcPort),
-		"-s3.config", iamConfigPath,
-		"-s3.iam.config", iamConfigPath,
-		"-s3.iam.readOnly", "false",
-		"-ip", env.bindIP,
-		"-ip.bind", "0.0.0.0",
-		"-dir", env.dataDir,
-	)
-	cmd.Dir = env.dataDir
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-
-	if err := cmd.Start(); err != nil {
-		t.Fatalf("Failed to start SeaweedFS: %v", err)
-	}
-	env.weedProcess = cmd
-
-	// Wait for S3 API to be ready
-	if !testutil.WaitForService(fmt.Sprintf("http://localhost:%d/status", env.s3Port), 30*time.Second) {
-		t.Fatalf("S3 API failed to become ready")
-	}
-}
-
-func (env *TestEnvironment) Start(t *testing.T) {
-	if !testutil.HasDocker() {
-		t.Skip("Docker not available")
-	}
-}
-
-func (env *TestEnvironment) Cleanup(t *testing.T) {
-	t.Helper()
-	if env.weedCancel != nil {
-		env.weedCancel()
-	}
-	if env.weedProcess != nil {
-		time.Sleep(1 * time.Second)
-		_ = env.weedProcess.Wait()
-	}
-	if env.dataDir != "" {
-		_ = os.RemoveAll(env.dataDir)
-	}
-}
-
-func runPythonSTSClient(t *testing.T, env *TestEnvironment) {
-	t.Helper()
-
-	// Write python script to temp dir
-	scriptContent := fmt.Sprintf(`
-import boto3
-import botocore.config
-from botocore.exceptions import ClientError
-import json
-import sys
-import time
-import urllib.error
-import urllib.request
-
-print("Starting STS inline session policy test...")
-
-primary_endpoint = "http://host.docker.internal:%d"
-fallback_endpoint = "http://%s:%d"
-access_key = "%s"
-secret_key = "%s"
-region = "us-east-1"
-
-try:
-    def wait_for_endpoint(url, timeout=30):
-        deadline = time.time() + timeout
-        while time.time() < deadline:
-            try:
-                with urllib.request.urlopen(url, timeout=2):
-                    return True
-            except urllib.error.HTTPError:
-                return True
-            except Exception:
-                time.sleep(1)
-        return False
-
-    def select_endpoint(urls):
-        for url in urls:
-            if wait_for_endpoint(url):
-                return url
-        raise Exception("No reachable S3 endpoint from container")
-
-    endpoint_url = select_endpoint([primary_endpoint, fallback_endpoint])
-    print(f"Using endpoint {endpoint_url}")
-
-    config = botocore.config.Config(
-        retries={'max_attempts': 0},
-        s3={'addressing_style': 'path'}
-    )
-    admin_s3 = boto3.client(
-        's3',
-        endpoint_url=endpoint_url,
-        aws_access_key_id=access_key,
-        aws_secret_access_key=secret_key,
-        region_name=region,
-        config=config
-    )
-
-    bucket = f"sts-inline-policy-{int(time.time() * 1000)}"
-    key = "allowed.txt"
-
-    print(f"Creating bucket {bucket} with admin credentials")
-    admin_s3.create_bucket(Bucket=bucket)
-    admin_s3.put_object(Bucket=bucket, Key=key, Body=b"ok")
-
-    sts = boto3.client(
-        'sts',
-        endpoint_url=endpoint_url,
-        aws_access_key_id=access_key,
-        aws_secret_access_key=secret_key,
-        region_name=region,
-        config=config
-    )
-
-    role_arn = "arn:aws:iam::role/TestRole"
-    session_name = "test-session"
-    session_policy = json.dumps({
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": ["s3:ListBucket"],
-                "Resource": [f"arn:aws:s3:::{bucket}"]
-            },
-            {
-                "Effect": "Allow",
-                "Action": ["s3:GetObject"],
-                "Resource": [f"arn:aws:s3:::{bucket}/*"]
-            }
-        ]
-    })
-
-    print(f"Calling AssumeRole on {role_arn} with inline session policy")
-    response = sts.assume_role(
-        RoleArn=role_arn,
-        RoleSessionName=session_name,
-        Policy=session_policy
-    )
-
-    creds = response['Credentials']
-    vended_s3 = boto3.client(
-        's3',
-        endpoint_url=endpoint_url,
-        aws_access_key_id=creds['AccessKeyId'],
-        aws_secret_access_key=creds['SecretAccessKey'],
-        aws_session_token=creds['SessionToken'],
-        region_name=region,
-        config=config
-    )
-
-    print("Listing objects (allowed)")
-    list_resp = vended_s3.list_objects_v2(Bucket=bucket)
-    keys = [obj.get('Key') for obj in list_resp.get('Contents', [])]
-    if key not in keys:
-        print(f"FAILED: Expected to see {key} in list_objects_v2 results")
-        sys.exit(1)
-
-    print("Getting object (allowed)")
-    body = vended_s3.get_object(Bucket=bucket, Key=key)['Body'].read()
-    if body != b"ok":
-        print("FAILED: Unexpected object content")
-        sys.exit(1)
-
-    print("Putting object (expected to be denied)")
-    try:
-        vended_s3.put_object(Bucket=bucket, Key="denied.txt", Body=b"no")
-        print("FAILED: PutObject unexpectedly succeeded")
-        sys.exit(1)
-    except ClientError as e:
-        error_code = e.response.get('Error', {}).get('Code', '')
-        if error_code != 'AccessDenied':
-            print(f"FAILED: Expected AccessDenied, got {error_code}")
-            sys.exit(1)
-        print("PutObject correctly denied by inline session policy")
-
-    print("SUCCESS: Inline session policy downscoping verified")
-    sys.exit(0)
-except Exception as e:
-    print(f"FAILED: {e}")
-    if hasattr(e, 'response'):
-        print(f"Response: {e.response}")
-    import traceback
-    traceback.print_exc()
-    sys.exit(1)
-`, env.s3Port, env.bindIP, env.s3Port, env.accessKey, env.secretKey)
-
-	scriptPath := filepath.Join(env.dataDir, "sts_test.py")
-	if err := os.WriteFile(scriptPath, []byte(scriptContent), 0644); err != nil {
-		t.Fatalf("Failed to write python script: %v", err)
-	}
-
-	containerName := "seaweed-sts-client-" + fmt.Sprintf("%d", time.Now().UnixNano())
-
-	cmd := exec.Command("docker", "run", "--rm",
-		"--name", containerName,
-		"--add-host", "host.docker.internal:host-gateway",
-		"-v", fmt.Sprintf("%s:/work", env.dataDir),
-		"python:3",
-		"/bin/bash", "-c", "pip install boto3 && python /work/sts_test.py",
-	)
-
-	output, err := cmd.CombinedOutput()
-	if err != nil {
-		t.Fatalf("Python STS client failed: %v\nOutput:\n%s", err, string(output))
-	}
-	t.Logf("Python STS client output:\n%s", string(output))
-}
-
-// Helpers copied from trino_catalog_test.go

test/s3tables/table-buckets/client.go

@@ -1,431 +0,0 @@
-package s3tables
-
-import (
-	"bytes"
-	"context"
-	"crypto/sha256"
-	"encoding/hex"
-	"encoding/json"
-	"fmt"
-	"io"
-	"net/http"
-	"net/url"
-	"strconv"
-	"time"
-
-	"github.com/aws/aws-sdk-go-v2/aws"
-	v4 "github.com/aws/aws-sdk-go-v2/aws/signer/v4"
-
-	"github.com/seaweedfs/seaweedfs/weed/s3api/s3tables"
-)
-
-func getFirstNamespace(namespace []string) (string, error) {
-	if len(namespace) == 0 {
-		return "", fmt.Errorf("namespace must not be empty")
-	}
-	return namespace[0], nil
-}
-
-func (c *S3TablesClient) doRestRequest(method, path string, body interface{}) (*http.Response, error) {
-	var bodyBytes []byte
-	var err error
-
-	if body != nil {
-		bodyBytes, err = json.Marshal(body)
-		if err != nil {
-			return nil, fmt.Errorf("failed to marshal request body: %w", err)
-		}
-	}
-
-	req, err := http.NewRequest(method, c.endpoint+path, bytes.NewReader(bodyBytes))
-	if err != nil {
-		return nil, fmt.Errorf("failed to create request: %w", err)
-	}
-
-	if body != nil {
-		req.Header.Set("Content-Type", "application/x-amz-json-1.1")
-	}
-
-	if err := c.signRequest(req, bodyBytes); err != nil {
-		return nil, err
-	}
-
-	return c.client.Do(req)
-}
-
-func (c *S3TablesClient) doTargetRequest(operation string, body interface{}) (*http.Response, error) {
-	var bodyBytes []byte
-	var err error
-
-	if body != nil {
-		bodyBytes, err = json.Marshal(body)
-		if err != nil {
-			return nil, fmt.Errorf("failed to marshal request body: %w", err)
-		}
-	}
-
-	req, err := http.NewRequest(http.MethodPost, c.endpoint+"/", bytes.NewReader(bodyBytes))
-	if err != nil {
-		return nil, fmt.Errorf("failed to create request: %w", err)
-	}
-
-	req.URL.RawPath = "/"
-	req.Header.Set("Content-Type", "application/x-amz-json-1.1")
-	req.Header.Set("X-Amz-Target", "S3Tables."+operation)
-
-	if err := c.signRequest(req, bodyBytes); err != nil {
-		return nil, err
-	}
-
-	return c.client.Do(req)
-}
-
-func (c *S3TablesClient) doTargetRequestAndDecode(operation string, reqBody interface{}, respBody interface{}) error {
-	resp, err := c.doTargetRequest(operation, reqBody)
-	if err != nil {
-		return err
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		bodyBytes, readErr := io.ReadAll(resp.Body)
-		if readErr != nil {
-			return fmt.Errorf("%s failed with status %d and could not read error response body: %v", operation, resp.StatusCode, readErr)
-		}
-		var errResp s3tables.S3TablesError
-		if err := json.Unmarshal(bodyBytes, &errResp); err != nil {
-			return fmt.Errorf("%s failed with status %d, could not decode error response: %v. Body: %s", operation, resp.StatusCode, err, string(bodyBytes))
-		}
-		return fmt.Errorf("%s failed: %s - %s", operation, errResp.Type, errResp.Message)
-	}
-
-	if respBody != nil {
-		if err := json.NewDecoder(resp.Body).Decode(respBody); err != nil {
-			return fmt.Errorf("failed to decode %s response: %w", operation, err)
-		}
-	}
-
-	return nil
-}
-
-func (c *S3TablesClient) signRequest(req *http.Request, body []byte) error {
-	creds := aws.Credentials{
-		AccessKeyID:     c.accessKey,
-		SecretAccessKey: c.secretKey,
-	}
-	if req.Host == "" {
-		req.Host = req.URL.Host
-	}
-	req.Header.Set("Host", req.URL.Host)
-	payloadHash := sha256.Sum256(body)
-	return v4.NewSigner().SignHTTP(context.Background(), creds, req, hex.EncodeToString(payloadHash[:]), "s3tables", c.region, time.Now())
-}
-
-func (c *S3TablesClient) doRestRequestAndDecode(operation, method, path string, reqBody interface{}, respBody interface{}) error {
-	resp, err := c.doRestRequest(method, path, reqBody)
-	if err != nil {
-		return err
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		bodyBytes, readErr := io.ReadAll(resp.Body)
-		if readErr != nil {
-			return fmt.Errorf("%s failed with status %d and could not read error response body: %v", operation, resp.StatusCode, readErr)
-		}
-		var errResp s3tables.S3TablesError
-		if err := json.Unmarshal(bodyBytes, &errResp); err != nil {
-			return fmt.Errorf("%s failed with status %d, could not decode error response: %v. Body: %s", operation, resp.StatusCode, err, string(bodyBytes))
-		}
-		return fmt.Errorf("%s failed: %s - %s", operation, errResp.Type, errResp.Message)
-	}
-
-	if respBody != nil {
-		if err := json.NewDecoder(resp.Body).Decode(respBody); err != nil {
-			return fmt.Errorf("failed to decode %s response: %w", operation, err)
-		}
-	}
-
-	return nil
-}
-
-// Table Bucket operations
-
-func (c *S3TablesClient) CreateTableBucket(name string, tags map[string]string) (*s3tables.CreateTableBucketResponse, error) {
-	req := &s3tables.CreateTableBucketRequest{
-		Name: name,
-		Tags: tags,
-	}
-	var result s3tables.CreateTableBucketResponse
-	if err := c.doRestRequestAndDecode("CreateTableBucket", http.MethodPut, "/buckets", req, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) GetTableBucket(arn string) (*s3tables.GetTableBucketResponse, error) {
-	path := "/buckets/" + url.PathEscape(arn)
-	var result s3tables.GetTableBucketResponse
-	if err := c.doRestRequestAndDecode("GetTableBucket", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) ListTableBuckets(prefix, continuationToken string, maxBuckets int) (*s3tables.ListTableBucketsResponse, error) {
-	query := url.Values{}
-	if prefix != "" {
-		query.Set("prefix", prefix)
-	}
-	if continuationToken != "" {
-		query.Set("continuationToken", continuationToken)
-	}
-	if maxBuckets > 0 {
-		query.Set("maxBuckets", strconv.Itoa(maxBuckets))
-	}
-	path := "/buckets"
-	if encoded := query.Encode(); encoded != "" {
-		path = path + "?" + encoded
-	}
-	var result s3tables.ListTableBucketsResponse
-	if err := c.doRestRequestAndDecode("ListTableBuckets", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) DeleteTableBucket(arn string) error {
-	path := "/buckets/" + url.PathEscape(arn)
-	return c.doRestRequestAndDecode("DeleteTableBucket", http.MethodDelete, path, nil, nil)
-}
-
-// Namespace operations
-
-func (c *S3TablesClient) CreateNamespace(bucketARN string, namespace []string) (*s3tables.CreateNamespaceResponse, error) {
-	if len(namespace) == 0 {
-		return nil, fmt.Errorf("CreateNamespace requires namespace")
-	}
-	req := &s3tables.CreateNamespaceRequest{
-		Namespace: namespace,
-	}
-	path := "/namespaces/" + url.PathEscape(bucketARN)
-	var result s3tables.CreateNamespaceResponse
-	if err := c.doRestRequestAndDecode("CreateNamespace", http.MethodPut, path, req, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) GetNamespace(bucketARN string, namespace []string) (*s3tables.GetNamespaceResponse, error) {
-	name, err := getFirstNamespace(namespace)
-	if err != nil {
-		return nil, fmt.Errorf("GetNamespace requires namespace: %w", err)
-	}
-	path := "/namespaces/" + url.PathEscape(bucketARN) + "/" + url.PathEscape(name)
-	var result s3tables.GetNamespaceResponse
-	if err := c.doRestRequestAndDecode("GetNamespace", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) ListNamespaces(bucketARN, prefix, continuationToken string, maxNamespaces int) (*s3tables.ListNamespacesResponse, error) {
-	query := url.Values{}
-	if prefix != "" {
-		query.Set("prefix", prefix)
-	}
-	if continuationToken != "" {
-		query.Set("continuationToken", continuationToken)
-	}
-	if maxNamespaces > 0 {
-		query.Set("maxNamespaces", strconv.Itoa(maxNamespaces))
-	}
-	path := "/namespaces/" + url.PathEscape(bucketARN)
-	if encoded := query.Encode(); encoded != "" {
-		path = path + "?" + encoded
-	}
-	var result s3tables.ListNamespacesResponse
-	if err := c.doRestRequestAndDecode("ListNamespaces", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) DeleteNamespace(bucketARN string, namespace []string) error {
-	name, err := getFirstNamespace(namespace)
-	if err != nil {
-		return fmt.Errorf("DeleteNamespace requires namespace: %w", err)
-	}
-	path := "/namespaces/" + url.PathEscape(bucketARN) + "/" + url.PathEscape(name)
-	return c.doRestRequestAndDecode("DeleteNamespace", http.MethodDelete, path, nil, nil)
-}
-
-// Table operations
-
-func (c *S3TablesClient) CreateTable(bucketARN string, namespace []string, name, format string, metadata *s3tables.TableMetadata, tags map[string]string) (*s3tables.CreateTableResponse, error) {
-	nameSpace, err := getFirstNamespace(namespace)
-	if err != nil {
-		return nil, fmt.Errorf("CreateTable requires namespace: %w", err)
-	}
-	req := &s3tables.CreateTableRequest{
-		Name:     name,
-		Format:   format,
-		Metadata: metadata,
-		Tags:     tags,
-	}
-	path := "/tables/" + url.PathEscape(bucketARN) + "/" + url.PathEscape(nameSpace)
-	var result s3tables.CreateTableResponse
-	if err := c.doRestRequestAndDecode("CreateTable", http.MethodPut, path, req, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) GetTable(bucketARN string, namespace []string, name string) (*s3tables.GetTableResponse, error) {
-	nameSpace, err := getFirstNamespace(namespace)
-	if err != nil {
-		return nil, fmt.Errorf("GetTable requires namespace: %w", err)
-	}
-	query := url.Values{}
-	query.Set("tableBucketARN", bucketARN)
-	query.Set("namespace", nameSpace)
-	query.Set("name", name)
-	path := "/get-table?" + query.Encode()
-	var result s3tables.GetTableResponse
-	if err := c.doRestRequestAndDecode("GetTable", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) ListTables(bucketARN string, namespace []string, prefix, continuationToken string, maxTables int) (*s3tables.ListTablesResponse, error) {
-	query := url.Values{}
-	if len(namespace) > 0 {
-		nameSpace, err := getFirstNamespace(namespace)
-		if err != nil {
-			return nil, fmt.Errorf("ListTables requires namespace: %w", err)
-		}
-		query.Set("namespace", nameSpace)
-	}
-	if prefix != "" {
-		query.Set("prefix", prefix)
-	}
-	if continuationToken != "" {
-		query.Set("continuationToken", continuationToken)
-	}
-	if maxTables > 0 {
-		query.Set("maxTables", strconv.Itoa(maxTables))
-	}
-	path := "/tables/" + url.PathEscape(bucketARN)
-	if encoded := query.Encode(); encoded != "" {
-		path = path + "?" + encoded
-	}
-	var result s3tables.ListTablesResponse
-	if err := c.doRestRequestAndDecode("ListTables", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) DeleteTable(bucketARN string, namespace []string, name string) error {
-	nameSpace, err := getFirstNamespace(namespace)
-	if err != nil {
-		return fmt.Errorf("DeleteTable requires namespace: %w", err)
-	}
-	path := "/tables/" + url.PathEscape(bucketARN) + "/" + url.PathEscape(nameSpace) + "/" + url.PathEscape(name)
-	return c.doRestRequestAndDecode("DeleteTable", http.MethodDelete, path, nil, nil)
-}
-
-// Policy operations
-
-func (c *S3TablesClient) PutTableBucketPolicy(bucketARN, policy string) error {
-	req := &s3tables.PutTableBucketPolicyRequest{
-		ResourcePolicy: policy,
-	}
-	path := "/buckets/" + url.PathEscape(bucketARN) + "/policy"
-	return c.doRestRequestAndDecode("PutTableBucketPolicy", http.MethodPut, path, req, nil)
-}
-
-func (c *S3TablesClient) GetTableBucketPolicy(bucketARN string) (*s3tables.GetTableBucketPolicyResponse, error) {
-	path := "/buckets/" + url.PathEscape(bucketARN) + "/policy"
-	var result s3tables.GetTableBucketPolicyResponse
-	if err := c.doRestRequestAndDecode("GetTableBucketPolicy", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) DeleteTableBucketPolicy(bucketARN string) error {
-	path := "/buckets/" + url.PathEscape(bucketARN) + "/policy"
-	return c.doRestRequestAndDecode("DeleteTableBucketPolicy", http.MethodDelete, path, nil, nil)
-}
-
-// Table Policy operations
-
-func (c *S3TablesClient) PutTablePolicy(bucketARN string, namespace []string, name, policy string) error {
-	nameSpace, err := getFirstNamespace(namespace)
-	if err != nil {
-		return fmt.Errorf("PutTablePolicy requires namespace: %w", err)
-	}
-	req := &s3tables.PutTablePolicyRequest{
-		ResourcePolicy: policy,
-	}
-	path := "/tables/" + url.PathEscape(bucketARN) + "/" + url.PathEscape(nameSpace) + "/" + url.PathEscape(name) + "/policy"
-	return c.doRestRequestAndDecode("PutTablePolicy", http.MethodPut, path, req, nil)
-}
-
-func (c *S3TablesClient) GetTablePolicy(bucketARN string, namespace []string, name string) (*s3tables.GetTablePolicyResponse, error) {
-	nameSpace, err := getFirstNamespace(namespace)
-	if err != nil {
-		return nil, fmt.Errorf("GetTablePolicy requires namespace: %w", err)
-	}
-	path := "/tables/" + url.PathEscape(bucketARN) + "/" + url.PathEscape(nameSpace) + "/" + url.PathEscape(name) + "/policy"
-	var result s3tables.GetTablePolicyResponse
-	if err := c.doRestRequestAndDecode("GetTablePolicy", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) DeleteTablePolicy(bucketARN string, namespace []string, name string) error {
-	nameSpace, err := getFirstNamespace(namespace)
-	if err != nil {
-		return fmt.Errorf("DeleteTablePolicy requires namespace: %w", err)
-	}
-	path := "/tables/" + url.PathEscape(bucketARN) + "/" + url.PathEscape(nameSpace) + "/" + url.PathEscape(name) + "/policy"
-	return c.doRestRequestAndDecode("DeleteTablePolicy", http.MethodDelete, path, nil, nil)
-}
-
-// Tagging operations
-
-func (c *S3TablesClient) TagResource(resourceARN string, tags map[string]string) error {
-	req := &s3tables.TagResourceRequest{
-		Tags: tags,
-	}
-	path := "/tag/" + url.PathEscape(resourceARN)
-	return c.doRestRequestAndDecode("TagResource", http.MethodPost, path, req, nil)
-}
-
-func (c *S3TablesClient) ListTagsForResource(resourceARN string) (*s3tables.ListTagsForResourceResponse, error) {
-	path := "/tag/" + url.PathEscape(resourceARN)
-	var result s3tables.ListTagsForResourceResponse
-	if err := c.doRestRequestAndDecode("ListTagsForResource", http.MethodGet, path, nil, &result); err != nil {
-		return nil, err
-	}
-	return &result, nil
-}
-
-func (c *S3TablesClient) UntagResource(resourceARN string, tagKeys []string) error {
-	if len(tagKeys) == 0 {
-		return fmt.Errorf("tagKeys cannot be empty")
-	}
-	query := url.Values{}
-	for _, key := range tagKeys {
-		query.Add("tagKeys", key)
-	}
-	path := "/tag/" + url.PathEscape(resourceARN)
-	if encoded := query.Encode(); encoded != "" {
-		path = path + "?" + encoded
-	}
-	return c.doRestRequestAndDecode("UntagResource", http.MethodDelete, path, nil, nil)
-}

test/s3tables/table-buckets/s3tables_integration_test.go

@@ -1,697 +0,0 @@
-package s3tables
-
-import (
-	"context"
-	"fmt"
-	"net"
-	"net/http"
-	"os"
-	"path/filepath"
-	"strconv"
-	"testing"
-	"time"
-
-	cryptorand "crypto/rand"
-	"sync"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-
-	"github.com/seaweedfs/seaweedfs/weed/command"
-	"github.com/seaweedfs/seaweedfs/weed/glog"
-	"github.com/seaweedfs/seaweedfs/weed/s3api/s3tables"
-	flag "github.com/seaweedfs/seaweedfs/weed/util/fla9"
-)
-
-var (
-	miniClusterMutex sync.Mutex
-)
-
-func TestS3TablesIntegration(t *testing.T) {
-	if testing.Short() {
-		t.Skip("Skipping integration test in short mode")
-	}
-
-	// Create and start test cluster
-	cluster, err := startMiniCluster(t)
-	require.NoError(t, err)
-	defer cluster.Stop()
-
-	// Create S3 Tables client
-	client := NewS3TablesClient(cluster.s3Endpoint, testRegion, testAccessKey, testSecretKey)
-
-	// Run test suite
-	t.Run("TableBucketLifecycle", func(t *testing.T) {
-		testTableBucketLifecycle(t, client)
-	})
-
-	t.Run("NamespaceLifecycle", func(t *testing.T) {
-		testNamespaceLifecycle(t, client)
-	})
-
-	t.Run("TableLifecycle", func(t *testing.T) {
-		testTableLifecycle(t, client)
-	})
-
-	t.Run("TableBucketPolicy", func(t *testing.T) {
-		testTableBucketPolicy(t, client)
-	})
-
-	t.Run("TablePolicy", func(t *testing.T) {
-		testTablePolicy(t, client)
-	})
-
-	t.Run("Tagging", func(t *testing.T) {
-		testTagging(t, client)
-	})
-
-	t.Run("TargetOperations", func(t *testing.T) {
-		testTargetOperations(t, client)
-	})
-}
-
-func testTableBucketLifecycle(t *testing.T, client *S3TablesClient) {
-	bucketName := "test-bucket-" + randomString(8)
-
-	// Create table bucket
-	createResp, err := client.CreateTableBucket(bucketName, nil)
-	require.NoError(t, err, "Failed to create table bucket")
-	assert.Contains(t, createResp.ARN, bucketName)
-	t.Logf("Created table bucket: %s", createResp.ARN)
-
-	// Get table bucket
-	getResp, err := client.GetTableBucket(createResp.ARN)
-	require.NoError(t, err, "Failed to get table bucket")
-	assert.Equal(t, bucketName, getResp.Name)
-	t.Logf("Got table bucket: %s", getResp.Name)
-
-	// List table buckets
-	listResp, err := client.ListTableBuckets("", "", 0)
-	require.NoError(t, err, "Failed to list table buckets")
-	found := false
-	for _, b := range listResp.TableBuckets {
-		if b.Name == bucketName {
-			found = true
-			break
-		}
-	}
-	assert.True(t, found, "Created bucket should appear in list")
-	t.Logf("Listed table buckets, found %d buckets", len(listResp.TableBuckets))
-
-	// Delete table bucket
-	err = client.DeleteTableBucket(createResp.ARN)
-	require.NoError(t, err, "Failed to delete table bucket")
-	t.Logf("Deleted table bucket: %s", bucketName)
-
-	// Verify bucket is deleted
-	_, err = client.GetTableBucket(createResp.ARN)
-	assert.Error(t, err, "Bucket should not exist after deletion")
-}
-
-func testNamespaceLifecycle(t *testing.T, client *S3TablesClient) {
-	bucketName := "test-ns-bucket-" + randomString(8)
-	namespaceName := "test_namespace"
-
-	// Create table bucket first
-	createBucketResp, err := client.CreateTableBucket(bucketName, nil)
-	require.NoError(t, err, "Failed to create table bucket")
-	defer client.DeleteTableBucket(createBucketResp.ARN)
-
-	bucketARN := createBucketResp.ARN
-
-	// Create namespace
-	createNsResp, err := client.CreateNamespace(bucketARN, []string{namespaceName})
-	require.NoError(t, err, "Failed to create namespace")
-	assert.Equal(t, []string{namespaceName}, createNsResp.Namespace)
-	t.Logf("Created namespace: %s", namespaceName)
-
-	// Get namespace
-	getNsResp, err := client.GetNamespace(bucketARN, []string{namespaceName})
-	require.NoError(t, err, "Failed to get namespace")
-	assert.Equal(t, []string{namespaceName}, getNsResp.Namespace)
-	t.Logf("Got namespace: %v", getNsResp.Namespace)
-
-	// List namespaces
-	listNsResp, err := client.ListNamespaces(bucketARN, "", "", 0)
-	require.NoError(t, err, "Failed to list namespaces")
-	found := false
-	for _, ns := range listNsResp.Namespaces {
-		if len(ns.Namespace) > 0 && ns.Namespace[0] == namespaceName {
-			found = true
-			break
-		}
-	}
-	assert.True(t, found, "Created namespace should appear in list")
-	t.Logf("Listed namespaces, found %d namespaces", len(listNsResp.Namespaces))
-
-	// Delete namespace
-	err = client.DeleteNamespace(bucketARN, []string{namespaceName})
-	require.NoError(t, err, "Failed to delete namespace")
-	t.Logf("Deleted namespace: %s", namespaceName)
-
-	// Verify namespace is deleted
-	_, err = client.GetNamespace(bucketARN, []string{namespaceName})
-	assert.Error(t, err, "Namespace should not exist after deletion")
-}
-
-func testTableLifecycle(t *testing.T, client *S3TablesClient) {
-	bucketName := "test-table-bucket-" + randomString(8)
-	namespaceName := "test_ns"
-	tableName := "test_table"
-
-	// Create table bucket
-	createBucketResp, err := client.CreateTableBucket(bucketName, nil)
-	require.NoError(t, err, "Failed to create table bucket")
-	defer client.DeleteTableBucket(createBucketResp.ARN)
-
-	bucketARN := createBucketResp.ARN
-
-	// Create namespace
-	_, err = client.CreateNamespace(bucketARN, []string{namespaceName})
-	require.NoError(t, err, "Failed to create namespace")
-	defer client.DeleteNamespace(bucketARN, []string{namespaceName})
-
-	// Create table with Iceberg schema
-	icebergMetadata := &s3tables.TableMetadata{
-		Iceberg: &s3tables.IcebergMetadata{
-			Schema: s3tables.IcebergSchema{
-				Fields: []s3tables.IcebergSchemaField{
-					{Name: "id", Type: "int", Required: true},
-					{Name: "name", Type: "string"},
-					{Name: "value", Type: "int"},
-				},
-			},
-		},
-	}
-
-	createTableResp, err := client.CreateTable(bucketARN, []string{namespaceName}, tableName, "ICEBERG", icebergMetadata, nil)
-	require.NoError(t, err, "Failed to create table")
-	assert.NotEmpty(t, createTableResp.TableARN)
-	assert.NotEmpty(t, createTableResp.VersionToken)
-	t.Logf("Created table: %s (version: %s)", createTableResp.TableARN, createTableResp.VersionToken)
-
-	// Get table
-	getTableResp, err := client.GetTable(bucketARN, []string{namespaceName}, tableName)
-	require.NoError(t, err, "Failed to get table")
-	assert.Equal(t, tableName, getTableResp.Name)
-	assert.Equal(t, "ICEBERG", getTableResp.Format)
-	t.Logf("Got table: %s (format: %s)", getTableResp.Name, getTableResp.Format)
-
-	// List tables
-	listTablesResp, err := client.ListTables(bucketARN, []string{namespaceName}, "", "", 0)
-	require.NoError(t, err, "Failed to list tables")
-	found := false
-	for _, tbl := range listTablesResp.Tables {
-		if tbl.Name == tableName {
-			found = true
-			break
-		}
-	}
-	assert.True(t, found, "Created table should appear in list")
-	t.Logf("Listed tables, found %d tables", len(listTablesResp.Tables))
-
-	// Delete table
-	err = client.DeleteTable(bucketARN, []string{namespaceName}, tableName)
-	require.NoError(t, err, "Failed to delete table")
-	t.Logf("Deleted table: %s", tableName)
-
-	// Verify table is deleted
-	_, err = client.GetTable(bucketARN, []string{namespaceName}, tableName)
-	assert.Error(t, err, "Table should not exist after deletion")
-}
-
-func testTableBucketPolicy(t *testing.T, client *S3TablesClient) {
-	bucketName := "test-policy-bucket-" + randomString(8)
-
-	// Create table bucket
-	createBucketResp, err := client.CreateTableBucket(bucketName, nil)
-	require.NoError(t, err, "Failed to create table bucket")
-	defer client.DeleteTableBucket(createBucketResp.ARN)
-
-	bucketARN := createBucketResp.ARN
-
-	// Put bucket policy
-	policy := `{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":"*","Action":"s3tables:*","Resource":"*"}]}`
-	err = client.PutTableBucketPolicy(bucketARN, policy)
-	require.NoError(t, err, "Failed to put table bucket policy")
-	t.Logf("Put table bucket policy")
-
-	// Get bucket policy
-	getPolicyResp, err := client.GetTableBucketPolicy(bucketARN)
-	require.NoError(t, err, "Failed to get table bucket policy")
-	assert.Equal(t, policy, getPolicyResp.ResourcePolicy)
-	t.Logf("Got table bucket policy")
-
-	// Delete bucket policy
-	err = client.DeleteTableBucketPolicy(bucketARN)
-	require.NoError(t, err, "Failed to delete table bucket policy")
-	t.Logf("Deleted table bucket policy")
-
-	// Verify policy is deleted
-	_, err = client.GetTableBucketPolicy(bucketARN)
-	assert.Error(t, err, "Policy should not exist after deletion")
-}
-
-func testTablePolicy(t *testing.T, client *S3TablesClient) {
-	bucketName := "test-table-policy-bucket-" + randomString(8)
-	namespaceName := "test_ns"
-	tableName := "test_table"
-
-	// Create table bucket
-	createBucketResp, err := client.CreateTableBucket(bucketName, nil)
-	require.NoError(t, err, "Failed to create table bucket")
-	defer client.DeleteTableBucket(createBucketResp.ARN)
-
-	bucketARN := createBucketResp.ARN
-
-	// Create namespace
-	_, err = client.CreateNamespace(bucketARN, []string{namespaceName})
-	require.NoError(t, err, "Failed to create namespace")
-	defer client.DeleteNamespace(bucketARN, []string{namespaceName})
-
-	// Create table
-	icebergMetadata := &s3tables.TableMetadata{
-		Iceberg: &s3tables.IcebergMetadata{
-			Schema: s3tables.IcebergSchema{
-				Fields: []s3tables.IcebergSchemaField{
-					{Name: "id", Type: "int", Required: true},
-					{Name: "name", Type: "string"},
-				},
-			},
-		},
-	}
-
-	createTableResp, err := client.CreateTable(bucketARN, []string{namespaceName}, tableName, "ICEBERG", icebergMetadata, nil)
-	require.NoError(t, err, "Failed to create table")
-	defer client.DeleteTable(bucketARN, []string{namespaceName}, tableName)
-
-	t.Logf("Created table: %s", createTableResp.TableARN)
-
-	// Verify no policy exists initially
-	_, err = client.GetTablePolicy(bucketARN, []string{namespaceName}, tableName)
-	assert.Error(t, err, "Policy should not exist initially")
-	t.Logf("Verified no policy exists initially")
-
-	// Put table policy
-	policy := `{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":"*","Action":"s3tables:*","Resource":"*"}]}`
-	err = client.PutTablePolicy(bucketARN, []string{namespaceName}, tableName, policy)
-	require.NoError(t, err, "Failed to put table policy")
-	t.Logf("Put table policy")
-
-	// Get table policy
-	getPolicyResp, err := client.GetTablePolicy(bucketARN, []string{namespaceName}, tableName)
-	require.NoError(t, err, "Failed to get table policy")
-	assert.Equal(t, policy, getPolicyResp.ResourcePolicy)
-	t.Logf("Got table policy")
-
-	// Delete table policy
-	err = client.DeleteTablePolicy(bucketARN, []string{namespaceName}, tableName)
-	require.NoError(t, err, "Failed to delete table policy")
-	t.Logf("Deleted table policy")
-
-	// Verify policy is deleted
-	_, err = client.GetTablePolicy(bucketARN, []string{namespaceName}, tableName)
-	assert.Error(t, err, "Policy should not exist after deletion")
-	t.Logf("Verified policy deletion")
-}
-
-func testTagging(t *testing.T, client *S3TablesClient) {
-	bucketName := "test-tag-bucket-" + randomString(8)
-
-	// Create table bucket with tags
-	initialTags := map[string]string{"Environment": "test"}
-	createBucketResp, err := client.CreateTableBucket(bucketName, initialTags)
-	require.NoError(t, err, "Failed to create table bucket")
-	defer client.DeleteTableBucket(createBucketResp.ARN)
-
-	bucketARN := createBucketResp.ARN
-
-	// List tags
-	listTagsResp, err := client.ListTagsForResource(bucketARN)
-	require.NoError(t, err, "Failed to list tags")
-	assert.Equal(t, "test", listTagsResp.Tags["Environment"])
-	t.Logf("Listed tags: %v", listTagsResp.Tags)
-
-	// Add more tags
-	newTags := map[string]string{"Department": "Engineering"}
-	err = client.TagResource(bucketARN, newTags)
-	require.NoError(t, err, "Failed to tag resource")
-	t.Logf("Added tags")
-
-	// Verify tags
-	listTagsResp, err = client.ListTagsForResource(bucketARN)
-	require.NoError(t, err, "Failed to list tags")
-	assert.Equal(t, "test", listTagsResp.Tags["Environment"])
-	assert.Equal(t, "Engineering", listTagsResp.Tags["Department"])
-	t.Logf("Verified tags: %v", listTagsResp.Tags)
-
-	// Remove a tag
-	err = client.UntagResource(bucketARN, []string{"Environment"})
-	require.NoError(t, err, "Failed to untag resource")
-	t.Logf("Removed tag")
-
-	// Verify tag is removed
-	listTagsResp, err = client.ListTagsForResource(bucketARN)
-	require.NoError(t, err, "Failed to list tags")
-	_, hasEnvironment := listTagsResp.Tags["Environment"]
-	assert.False(t, hasEnvironment, "Environment tag should be removed")
-	assert.Equal(t, "Engineering", listTagsResp.Tags["Department"])
-	t.Logf("Verified tag removal")
-}
-
-func testTargetOperations(t *testing.T, client *S3TablesClient) {
-	bucketName := "test-target-bucket-" + randomString(8)
-
-	var createResp s3tables.CreateTableBucketResponse
-	err := client.doTargetRequestAndDecode("CreateTableBucket", &s3tables.CreateTableBucketRequest{
-		Name: bucketName,
-	}, &createResp)
-	require.NoError(t, err, "Failed to create table bucket via target")
-	defer client.doTargetRequestAndDecode("DeleteTableBucket", &s3tables.DeleteTableBucketRequest{
-		TableBucketARN: createResp.ARN,
-	}, nil)
-
-	var listResp s3tables.ListTableBucketsResponse
-	err = client.doTargetRequestAndDecode("ListTableBuckets", &s3tables.ListTableBucketsRequest{}, &listResp)
-	require.NoError(t, err, "Failed to list table buckets via target")
-	found := false
-	for _, b := range listResp.TableBuckets {
-		if b.Name == bucketName {
-			found = true
-			break
-		}
-	}
-	assert.True(t, found, "Created bucket should appear in target list")
-
-	var getResp s3tables.GetTableBucketResponse
-	err = client.doTargetRequestAndDecode("GetTableBucket", &s3tables.GetTableBucketRequest{
-		TableBucketARN: createResp.ARN,
-	}, &getResp)
-	require.NoError(t, err, "Failed to get table bucket via target")
-	assert.Equal(t, bucketName, getResp.Name)
-
-	namespaceName := "target_ns"
-	var createNsResp s3tables.CreateNamespaceResponse
-	err = client.doTargetRequestAndDecode("CreateNamespace", &s3tables.CreateNamespaceRequest{
-		TableBucketARN: createResp.ARN,
-		Namespace:      []string{namespaceName},
-	}, &createNsResp)
-	require.NoError(t, err, "Failed to create namespace via target")
-	defer client.doTargetRequestAndDecode("DeleteNamespace", &s3tables.DeleteNamespaceRequest{
-		TableBucketARN: createResp.ARN,
-		Namespace:      []string{namespaceName},
-	}, nil)
-
-	var listNsResp s3tables.ListNamespacesResponse
-	err = client.doTargetRequestAndDecode("ListNamespaces", &s3tables.ListNamespacesRequest{
-		TableBucketARN: createResp.ARN,
-	}, &listNsResp)
-	require.NoError(t, err, "Failed to list namespaces via target")
-
-	tableName := "target_table"
-	var createTableResp s3tables.CreateTableResponse
-	err = client.doTargetRequestAndDecode("CreateTable", &s3tables.CreateTableRequest{
-		TableBucketARN: createResp.ARN,
-		Namespace:      []string{namespaceName},
-		Name:           tableName,
-		Format:         "ICEBERG",
-	}, &createTableResp)
-	require.NoError(t, err, "Failed to create table via target")
-	defer client.doTargetRequestAndDecode("DeleteTable", &s3tables.DeleteTableRequest{
-		TableBucketARN: createResp.ARN,
-		Namespace:      []string{namespaceName},
-		Name:           tableName,
-	}, nil)
-
-	var listTablesResp s3tables.ListTablesResponse
-	err = client.doTargetRequestAndDecode("ListTables", &s3tables.ListTablesRequest{
-		TableBucketARN: createResp.ARN,
-		Namespace:      []string{namespaceName},
-	}, &listTablesResp)
-	require.NoError(t, err, "Failed to list tables via target")
-
-	var getTableResp s3tables.GetTableResponse
-	err = client.doTargetRequestAndDecode("GetTable", &s3tables.GetTableRequest{
-		TableBucketARN: createResp.ARN,
-		Namespace:      []string{namespaceName},
-		Name:           tableName,
-	}, &getTableResp)
-	require.NoError(t, err, "Failed to get table via target")
-	assert.Equal(t, tableName, getTableResp.Name)
-
-	policy := `{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":"*","Action":"s3tables:*","Resource":"*"}]}`
-	err = client.doTargetRequestAndDecode("PutTableBucketPolicy", &s3tables.PutTableBucketPolicyRequest{
-		TableBucketARN: createResp.ARN,
-		ResourcePolicy: policy,
-	}, nil)
-	require.NoError(t, err, "Failed to put bucket policy via target")
-
-	var getPolicyResp s3tables.GetTableBucketPolicyResponse
-	err = client.doTargetRequestAndDecode("GetTableBucketPolicy", &s3tables.GetTableBucketPolicyRequest{
-		TableBucketARN: createResp.ARN,
-	}, &getPolicyResp)
-	require.NoError(t, err, "Failed to get bucket policy via target")
-	assert.Equal(t, policy, getPolicyResp.ResourcePolicy)
-
-	err = client.doTargetRequestAndDecode("DeleteTableBucketPolicy", &s3tables.DeleteTableBucketPolicyRequest{
-		TableBucketARN: createResp.ARN,
-	}, nil)
-	require.NoError(t, err, "Failed to delete bucket policy via target")
-
-	err = client.doTargetRequestAndDecode("TagResource", &s3tables.TagResourceRequest{
-		ResourceARN: createResp.ARN,
-		Tags:        map[string]string{"Environment": "test"},
-	}, nil)
-	require.NoError(t, err, "Failed to tag resource via target")
-
-	var listTagsResp s3tables.ListTagsForResourceResponse
-	err = client.doTargetRequestAndDecode("ListTagsForResource", &s3tables.ListTagsForResourceRequest{
-		ResourceARN: createResp.ARN,
-	}, &listTagsResp)
-	require.NoError(t, err, "Failed to list tags via target")
-	assert.Equal(t, "test", listTagsResp.Tags["Environment"])
-
-	err = client.doTargetRequestAndDecode("UntagResource", &s3tables.UntagResourceRequest{
-		ResourceARN: createResp.ARN,
-		TagKeys:     []string{"Environment"},
-	}, nil)
-	require.NoError(t, err, "Failed to untag resource via target")
-}
-
-// Helper functions
-
-// findAvailablePorts finds n available ports by binding to port 0 multiple times
-// It keeps the listeners open until all ports are found to ensure uniqueness
-func findAvailablePorts(n int) ([]int, error) {
-	listeners := make([]*net.TCPListener, n)
-	ports := make([]int, n)
-
-	// Open all listeners to ensure we get unique ports
-	for i := 0; i < n; i++ {
-		listener, err := net.Listen("tcp", "127.0.0.1:0")
-		if err != nil {
-			// Close valid listeners before returning error
-			for j := 0; j < i; j++ {
-				listeners[j].Close()
-			}
-			return nil, err
-		}
-		listeners[i] = listener.(*net.TCPListener)
-		ports[i] = listeners[i].Addr().(*net.TCPAddr).Port
-	}
-
-	// Close all listeners
-	for _, l := range listeners {
-		l.Close()
-	}
-
-	return ports, nil
-}
-
-// startMiniCluster starts a weed mini instance directly without exec
-func startMiniCluster(t *testing.T) (*TestCluster, error) {
-	// Find available ports
-	// We need 8 unique ports: Master(2), Volume(2), Filer(2), S3(2)
-	ports, err := findAvailablePorts(8)
-	if err != nil {
-		return nil, fmt.Errorf("failed to find available ports: %v", err)
-	}
-
-	masterPort := ports[0]
-	masterGrpcPort := ports[1]
-	volumePort := ports[2]
-	volumeGrpcPort := ports[3]
-	filerPort := ports[4]
-	filerGrpcPort := ports[5]
-	s3Port := ports[6]
-	s3GrpcPort := ports[7]
-	// Create temporary directory for test data
-	testDir := t.TempDir()
-
-	// Ensure no configuration file from previous runs
-	configFile := filepath.Join(testDir, "mini.options")
-	_ = os.Remove(configFile)
-
-	// Create context with timeout
-	ctx, cancel := context.WithCancel(context.Background())
-
-	s3Endpoint := fmt.Sprintf("http://127.0.0.1:%d", s3Port)
-	cluster := &TestCluster{
-		t:          t,
-		dataDir:    testDir,
-		ctx:        ctx,
-		cancel:     cancel,
-		masterPort: masterPort,
-		volumePort: volumePort,
-		filerPort:  filerPort,
-		s3Port:     s3Port,
-		s3Endpoint: s3Endpoint,
-	}
-
-	// Create empty security.toml to disable JWT authentication in tests
-	securityToml := filepath.Join(testDir, "security.toml")
-	err = os.WriteFile(securityToml, []byte("# Empty security config for testing\n"), 0644)
-	if err != nil {
-		cancel()
-		return nil, fmt.Errorf("failed to create security.toml: %v", err)
-	}
-
-	// Start weed mini in a goroutine by calling the command directly
-	cluster.wg.Add(1)
-	go func() {
-		defer cluster.wg.Done()
-
-		// Protect global state mutation with a mutex
-		miniClusterMutex.Lock()
-		defer miniClusterMutex.Unlock()
-
-		// Save current directory and args
-		oldDir, _ := os.Getwd()
-		oldArgs := os.Args
-		defer func() {
-			os.Chdir(oldDir)
-			os.Args = oldArgs
-		}()
-
-		// Change to test directory so mini picks up security.toml
-		os.Chdir(testDir)
-
-		// Configure args for mini command
-		os.Args = []string{
-			"weed",
-			"-dir=" + testDir,
-			"-master.port=" + strconv.Itoa(masterPort),
-			"-master.port.grpc=" + strconv.Itoa(masterGrpcPort),
-			"-volume.port=" + strconv.Itoa(volumePort),
-			"-volume.port.grpc=" + strconv.Itoa(volumeGrpcPort),
-			"-filer.port=" + strconv.Itoa(filerPort),
-			"-filer.port.grpc=" + strconv.Itoa(filerGrpcPort),
-			"-s3.port=" + strconv.Itoa(s3Port),
-			"-s3.port.grpc=" + strconv.Itoa(s3GrpcPort),
-			"-webdav.port=0",               // Disable WebDAV
-			"-admin.ui=false",              // Disable admin UI
-			"-master.volumeSizeLimitMB=32", // Small volumes for testing
-			"-ip=127.0.0.1",
-			"-master.peers=none",     // Faster startup
-			"-s3.iam.readOnly=false", // Enable IAM write operations for tests
-		}
-
-		// Suppress most logging during tests
-		glog.MaxSize = 1024 * 1024
-
-		// Find and run the mini command
-		for _, cmd := range command.Commands {
-			if cmd.Name() == "mini" && cmd.Run != nil {
-				cmd.Flag.Parse(os.Args[1:])
-				args := cmd.Flag.Args()
-				command.MiniClusterCtx = ctx
-				cmd.Run(cmd, args)
-				command.MiniClusterCtx = nil
-				return
-			}
-		}
-	}()
-
-	// Wait for S3 service to be ready
-	err = waitForS3Ready(cluster.s3Endpoint, 30*time.Second)
-	if err != nil {
-		cancel()
-		return nil, fmt.Errorf("S3 service failed to start: %v", err)
-	}
-
-	cluster.isRunning = true
-
-	t.Logf("Test cluster started successfully at %s", cluster.s3Endpoint)
-	return cluster, nil
-}
-
-// Stop stops the test cluster
-func (c *TestCluster) Stop() {
-	if c.cancel != nil {
-		c.cancel()
-	}
-	// Give services time to shut down gracefully
-	if c.isRunning {
-		time.Sleep(500 * time.Millisecond)
-	}
-	// Wait for the mini goroutine to finish
-	done := make(chan struct{})
-	go func() {
-		c.wg.Wait()
-		close(done)
-	}()
-	timer := time.NewTimer(2 * time.Second)
-	defer timer.Stop()
-	select {
-	case <-done:
-		// Goroutine finished
-	case <-timer.C:
-		// Timeout - goroutine doesn't respond to context cancel
-		// This may indicate the mini cluster didn't shut down cleanly
-		c.t.Log("Warning: Test cluster shutdown timed out after 2 seconds")
-	}
-
-	// Reset the global cmdMini flags to prevent state leakage to other tests
-	for _, cmd := range command.Commands {
-		if cmd.Name() == "mini" {
-			// Reset flags to defaults
-			cmd.Flag.VisitAll(func(f *flag.Flag) {
-				// Reset to default value
-				f.Value.Set(f.DefValue)
-			})
-			break
-		}
-	}
-}
-
-// waitForS3Ready waits for the S3 service to be ready
-func waitForS3Ready(endpoint string, timeout time.Duration) error {
-	client := &http.Client{Timeout: 1 * time.Second}
-	deadline := time.Now().Add(timeout)
-
-	for time.Now().Before(deadline) {
-		resp, err := client.Get(endpoint)
-		if err == nil {
-			resp.Body.Close()
-			// Wait a bit more to ensure service is fully ready
-			time.Sleep(500 * time.Millisecond)
-			return nil
-		}
-		time.Sleep(200 * time.Millisecond)
-	}
-
-	return fmt.Errorf("timeout waiting for S3 service at %s", endpoint)
-}
-
-// randomString generates a random string for unique naming
-func randomString(length int) string {
-	const charset = "abcdefghijklmnopqrstuvwxyz0123456789"
-	b := make([]byte, length)
-	if _, err := cryptorand.Read(b); err != nil {
-		panic("failed to generate random string: " + err.Error())
-	}
-	for i := range b {
-		b[i] = charset[int(b[i])%len(charset)]
-	}
-	return string(b)
-}

test/s3tables/table-buckets/setup.go

@@ -1,53 +0,0 @@
-package s3tables
-
-import (
-	"context"
-	"net/http"
-	"sync"
-	"testing"
-	"time"
-)
-
-// TestCluster manages the weed mini instance for integration testing
-type TestCluster struct {
-	t          *testing.T
-	dataDir    string
-	ctx        context.Context
-	cancel     context.CancelFunc
-	isRunning  bool
-	startOnce  sync.Once
-	wg         sync.WaitGroup
-	masterPort int
-	volumePort int
-	filerPort  int
-	s3Port     int
-	s3Endpoint string
-}
-
-// S3TablesClient is a simple client for S3 Tables API
-type S3TablesClient struct {
-	endpoint  string
-	region    string
-	accessKey string
-	secretKey string
-	client    *http.Client
-}
-
-// NewS3TablesClient creates a new S3 Tables client
-func NewS3TablesClient(endpoint, region, accessKey, secretKey string) *S3TablesClient {
-	return &S3TablesClient{
-		endpoint:  endpoint,
-		region:    region,
-		accessKey: accessKey,
-		secretKey: secretKey,
-		client:    &http.Client{Timeout: 30 * time.Second},
-	}
-}
-
-// Test configuration constants
-const (
-	testRegion    = "us-west-2"
-	testAccessKey = "admin"
-	testSecretKey = "admin"
-	testAccountID = "111122223333"
-)

test/s3tables/testutil/docker.go

@@ -1,66 +0,0 @@
-package testutil
-
-import (
-	"context"
-	"net"
-	"net/http"
-	"os/exec"
-	"testing"
-	"time"
-)
-
-func HasDocker() bool {
-	cmd := exec.Command("docker", "version")
-	return cmd.Run() == nil
-}
-
-func MustFreePortPair(t *testing.T, name string) (int, int) {
-	httpPort, grpcPort, err := findAvailablePortPair()
-	if err != nil {
-		t.Fatalf("Failed to get free port pair for %s: %v", name, err)
-	}
-	return httpPort, grpcPort
-}
-
-func findAvailablePortPair() (int, int, error) {
-	httpPort, err := GetFreePort()
-	if err != nil {
-		return 0, 0, err
-	}
-	grpcPort, err := GetFreePort()
-	if err != nil {
-		return 0, 0, err
-	}
-	return httpPort, grpcPort, nil
-}
-
-func GetFreePort() (int, error) {
-	listener, err := net.Listen("tcp", "0.0.0.0:0")
-	if err != nil {
-		return 0, err
-	}
-	defer listener.Close()
-	return listener.Addr().(*net.TCPAddr).Port, nil
-}
-
-func WaitForService(url string, timeout time.Duration) bool {
-	client := &http.Client{Timeout: 2 * time.Second}
-	ctx, cancel := context.WithTimeout(context.Background(), timeout)
-	defer cancel()
-
-	ticker := time.NewTicker(500 * time.Millisecond)
-	defer ticker.Stop()
-
-	for {
-		select {
-		case <-ctx.Done():
-			return false
-		case <-ticker.C:
-			resp, err := client.Get(url)
-			if err == nil {
-				resp.Body.Close()
-				return true
-			}
-		}
-	}
-}

test/s3tables/testutil/weed_mini.go

@@ -1,56 +0,0 @@
-package testutil
-
-import (
-	"fmt"
-	"net"
-	"os"
-	"path/filepath"
-)
-
-func FindBindIP() string {
-	addrs, err := net.InterfaceAddrs()
-	if err != nil {
-		return "127.0.0.1"
-	}
-	for _, addr := range addrs {
-		ipNet, ok := addr.(*net.IPNet)
-		if !ok || ipNet.IP == nil {
-			continue
-		}
-		ip := ipNet.IP.To4()
-		if ip == nil || ip.IsLoopback() || ip.IsLinkLocalUnicast() {
-			continue
-		}
-		return ip.String()
-	}
-	return "127.0.0.1"
-}
-
-func WriteIAMConfig(dir, accessKey, secretKey string) (string, error) {
-	iamConfigPath := filepath.Join(dir, "iam_config.json")
-	iamConfig := fmt.Sprintf(`{
-  "identities": [
-    {
-      "name": "admin",
-      "credentials": [
-        {
-          "accessKey": "%s",
-          "secretKey": "%s"
-        }
-      ],
-      "actions": [
-        "Admin",
-        "Read",
-        "List",
-        "Tagging",
-        "Write"
-      ]
-    }
-  ]
-}`, accessKey, secretKey)
-
-	if err := os.WriteFile(iamConfigPath, []byte(iamConfig), 0644); err != nil {
-		return "", err
-	}
-	return iamConfigPath, nil
-}

test/volume_server/Makefile

@@ -1,10 +0,0 @@
-.PHONY: test-volume-server test-volume-server-short test-volume-server-rust-smoke
-
-test-volume-server:
-	go test ./test/volume_server/... -v
-
-test-volume-server-short:
-	go test ./test/volume_server/... -short -v
-
-test-volume-server-rust-smoke:
-	VOLUME_SERVER_IMPL=rust go test ./test/volume_server/http ./test/volume_server/grpc -run 'TestAdminStatusAndHealthz|TestUploadReadRangeHeadDeleteRoundTrip|TestStateAndStatusRPCs|TestVolumeSyncStatusAndReadVolumeFileStatus' -v

test/volume_server/README.md

@@ -1,31 +0,0 @@
-# Volume Server Integration Tests
-
-This package contains integration tests for SeaweedFS volume server HTTP and gRPC APIs.
-
-## Run Tests
-
-Run tests from repo root:
-
-```bash
-go test ./test/volume_server/... -v
-```
-
-If a `weed` binary is not found, the harness will build one automatically.
-
-## Optional environment variables
-
-- `WEED_BINARY`: explicit path to the `weed` executable (disables auto-build).
-- `VOLUME_SERVER_IMPL`: select volume-server implementation (`go` default, `rust` for Rust launcher mode).
-- `VOLUME_SERVER_BINARY`: explicit path to the volume-server executable (overrides `VOLUME_SERVER_IMPL`).
-- `VOLUME_SERVER_RUST_MODE`: Rust launcher mode (`native` default, `exec` for direct Go delegation, `proxy` for Rust front proxy + Go backend).
-- `VOLUME_SERVER_RUST_REBUILD=1`: force rebuild of Rust volume-server binary in Rust mode.
-- `VOLUME_SERVER_IT_KEEP_LOGS=1`: keep temporary test directories and process logs.
-
-## Current scope (Phase 0)
-
-- Shared cluster/framework utilities
-- Matrix profile definitions
-- Initial HTTP admin endpoint checks
-- Initial gRPC state/status checks
-
-More API coverage is tracked in `test/volume_server/DEV_PLAN.md`.

test/volume_server/framework/cluster.go

@@ -1,553 +0,0 @@
-package framework
-
-import (
-	"bufio"
-	"bytes"
-	"errors"
-	"fmt"
-	"io"
-	"net"
-	"net/http"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"runtime"
-	"strconv"
-	"strings"
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-)
-
-const (
-	defaultWaitTimeout    = 30 * time.Second
-	defaultWaitTick       = 200 * time.Millisecond
-	testVolumeSizeLimitMB = 32
-)
-
-// Cluster is a lightweight SeaweedFS master + one volume server test harness.
-type Cluster struct {
-	testingTB testing.TB
-	profile   matrix.Profile
-
-	weedBinary   string
-	volumeBinary string
-	baseDir      string
-	configDir    string
-	logsDir      string
-	keepLogs     bool
-
-	masterPort     int
-	masterGrpcPort int
-	volumePort     int
-	volumeGrpcPort int
-	volumePubPort  int
-
-	masterCmd *exec.Cmd
-	volumeCmd *exec.Cmd
-
-	cleanupOnce sync.Once
-}
-
-// StartSingleVolumeCluster boots one master and one volume server.
-func StartSingleVolumeCluster(t testing.TB, profile matrix.Profile) *Cluster {
-	t.Helper()
-
-	weedBinary, volumeBinary, err := FindOrBuildServerBinaries()
-	if err != nil {
-		t.Fatalf("resolve server binaries: %v", err)
-	}
-
-	baseDir, keepLogs, err := newWorkDir()
-	if err != nil {
-		t.Fatalf("create temp test directory: %v", err)
-	}
-
-	configDir := filepath.Join(baseDir, "config")
-	logsDir := filepath.Join(baseDir, "logs")
-	masterDataDir := filepath.Join(baseDir, "master")
-	volumeDataDir := filepath.Join(baseDir, "volume")
-	for _, dir := range []string{configDir, logsDir, masterDataDir, volumeDataDir} {
-		if mkErr := os.MkdirAll(dir, 0o755); mkErr != nil {
-			t.Fatalf("create %s: %v", dir, mkErr)
-		}
-	}
-
-	if err = writeSecurityConfig(configDir, profile); err != nil {
-		t.Fatalf("write security config: %v", err)
-	}
-
-	masterPort, masterGrpcPort, err := allocateMasterPortPair()
-	if err != nil {
-		t.Fatalf("allocate master port pair: %v", err)
-	}
-
-	ports, err := allocatePorts(3)
-	if err != nil {
-		t.Fatalf("allocate ports: %v", err)
-	}
-
-	c := &Cluster{
-		testingTB:      t,
-		profile:        profile,
-		weedBinary:     weedBinary,
-		volumeBinary:   volumeBinary,
-		baseDir:        baseDir,
-		configDir:      configDir,
-		logsDir:        logsDir,
-		keepLogs:       keepLogs,
-		masterPort:     masterPort,
-		masterGrpcPort: masterGrpcPort,
-		volumePort:     ports[0],
-		volumeGrpcPort: ports[1],
-		volumePubPort:  ports[0],
-	}
-	if profile.SplitPublicPort {
-		c.volumePubPort = ports[2]
-	}
-
-	if err = c.startMaster(masterDataDir); err != nil {
-		c.Stop()
-		t.Fatalf("start master: %v", err)
-	}
-	if err = c.waitForHTTP(c.MasterURL() + "/dir/status"); err != nil {
-		masterLog := c.tailLog("master.log")
-		c.Stop()
-		t.Fatalf("wait for master readiness: %v\nmaster log tail:\n%s", err, masterLog)
-	}
-
-	if err = c.startVolume(volumeDataDir); err != nil {
-		masterLog := c.tailLog("master.log")
-		c.Stop()
-		t.Fatalf("start volume: %v\nmaster log tail:\n%s", err, masterLog)
-	}
-	if err = c.waitForHTTP(c.VolumeAdminURL() + "/status"); err != nil {
-		volumeLog := c.tailLog("volume.log")
-		c.Stop()
-		t.Fatalf("wait for volume readiness: %v\nvolume log tail:\n%s", err, volumeLog)
-	}
-	if err = c.waitForTCP(c.VolumeGRPCAddress()); err != nil {
-		volumeLog := c.tailLog("volume.log")
-		c.Stop()
-		t.Fatalf("wait for volume grpc readiness: %v\nvolume log tail:\n%s", err, volumeLog)
-	}
-
-	t.Cleanup(func() {
-		c.Stop()
-	})
-
-	return c
-}
-
-// Stop terminates all processes and cleans temporary files.
-func (c *Cluster) Stop() {
-	if c == nil {
-		return
-	}
-	c.cleanupOnce.Do(func() {
-		stopProcess(c.volumeCmd)
-		stopProcess(c.masterCmd)
-		if !c.keepLogs && !c.testingTB.Failed() {
-			_ = os.RemoveAll(c.baseDir)
-		} else if c.baseDir != "" {
-			c.testingTB.Logf("volume server integration logs kept at %s", c.baseDir)
-		}
-	})
-}
-
-func (c *Cluster) startMaster(dataDir string) error {
-	logFile, err := os.Create(filepath.Join(c.logsDir, "master.log"))
-	if err != nil {
-		return err
-	}
-
-	args := []string{
-		"-config_dir=" + c.configDir,
-		"master",
-		"-ip=127.0.0.1",
-		"-port=" + strconv.Itoa(c.masterPort),
-		"-port.grpc=" + strconv.Itoa(c.masterGrpcPort),
-		"-mdir=" + dataDir,
-		"-peers=none",
-		"-volumeSizeLimitMB=" + strconv.Itoa(testVolumeSizeLimitMB),
-		"-defaultReplication=000",
-	}
-
-	c.masterCmd = exec.Command(c.weedBinary, args...)
-	c.masterCmd.Dir = c.baseDir
-	c.masterCmd.Stdout = logFile
-	c.masterCmd.Stderr = logFile
-	return c.masterCmd.Start()
-}
-
-func (c *Cluster) startVolume(dataDir string) error {
-	logFile, err := os.Create(filepath.Join(c.logsDir, "volume.log"))
-	if err != nil {
-		return err
-	}
-
-	args := []string{
-		"-config_dir=" + c.configDir,
-		"volume",
-		"-ip=127.0.0.1",
-		"-port=" + strconv.Itoa(c.volumePort),
-		"-port.grpc=" + strconv.Itoa(c.volumeGrpcPort),
-		"-port.public=" + strconv.Itoa(c.volumePubPort),
-		"-dir=" + dataDir,
-		"-max=16",
-		"-master=127.0.0.1:" + strconv.Itoa(c.masterPort),
-		"-readMode=" + c.profile.ReadMode,
-		"-concurrentUploadLimitMB=" + strconv.Itoa(c.profile.ConcurrentUploadLimitMB),
-		"-concurrentDownloadLimitMB=" + strconv.Itoa(c.profile.ConcurrentDownloadLimitMB),
-	}
-	if c.profile.InflightUploadTimeout > 0 {
-		args = append(args, "-inflightUploadDataTimeout="+c.profile.InflightUploadTimeout.String())
-	}
-	if c.profile.InflightDownloadTimeout > 0 {
-		args = append(args, "-inflightDownloadDataTimeout="+c.profile.InflightDownloadTimeout.String())
-	}
-	if c.profile.FileSizeLimitMB > 0 {
-		args = append(args, "-fileSizeLimitMB="+strconv.Itoa(c.profile.FileSizeLimitMB))
-	}
-
-	c.volumeCmd = exec.Command(c.volumeBinary, args...)
-	c.volumeCmd.Dir = c.baseDir
-	c.volumeCmd.Stdout = logFile
-	c.volumeCmd.Stderr = logFile
-	return c.volumeCmd.Start()
-}
-
-func (c *Cluster) waitForHTTP(url string) error {
-	client := &http.Client{Timeout: 1 * time.Second}
-	deadline := time.Now().Add(defaultWaitTimeout)
-	for time.Now().Before(deadline) {
-		resp, err := client.Get(url)
-		if err == nil {
-			_, _ = io.Copy(io.Discard, resp.Body)
-			resp.Body.Close()
-			if resp.StatusCode < 500 {
-				return nil
-			}
-		}
-		time.Sleep(defaultWaitTick)
-	}
-	return fmt.Errorf("timed out waiting for %s", url)
-}
-
-func (c *Cluster) waitForTCP(addr string) error {
-	deadline := time.Now().Add(defaultWaitTimeout)
-	for time.Now().Before(deadline) {
-		conn, err := net.DialTimeout("tcp", addr, time.Second)
-		if err == nil {
-			_ = conn.Close()
-			return nil
-		}
-		time.Sleep(defaultWaitTick)
-	}
-	return fmt.Errorf("timed out waiting for tcp %s", addr)
-}
-
-func stopProcess(cmd *exec.Cmd) {
-	if cmd == nil || cmd.Process == nil {
-		return
-	}
-
-	_ = cmd.Process.Signal(os.Interrupt)
-	done := make(chan error, 1)
-	go func() {
-		done <- cmd.Wait()
-	}()
-
-	select {
-	case <-time.After(10 * time.Second):
-		_ = cmd.Process.Kill()
-		<-done
-	case <-done:
-	}
-}
-
-func allocatePorts(count int) ([]int, error) {
-	const minPort = 10000
-	const maxPort = 55535
-	const host = "127.0.0.1"
-	rangeSize := maxPort - minPort + 1
-
-	listeners := make([]net.Listener, 0, count)
-	ports := make([]int, 0, count)
-	seen := make(map[int]struct{}, count)
-
-	closeAll := func() {
-		for _, ll := range listeners {
-			_ = ll.Close()
-		}
-	}
-
-	startOffset := int(time.Now().UnixNano() % int64(rangeSize))
-	for i := 0; i < count; i++ {
-		found := false
-		for offset := 0; offset < rangeSize; offset++ {
-			port := minPort + (startOffset+offset)%rangeSize
-			if _, exists := seen[port]; exists {
-				continue
-			}
-
-			l, err := net.Listen("tcp", net.JoinHostPort(host, strconv.Itoa(port)))
-			if err != nil {
-				continue
-			}
-
-			seen[port] = struct{}{}
-			listeners = append(listeners, l)
-			ports = append(ports, port)
-			found = true
-			startOffset = (startOffset + offset + 1) % rangeSize
-			break
-		}
-		if !found {
-			closeAll()
-			return nil, fmt.Errorf("unable to allocate %d ports within range [%d,%d]", count, minPort, maxPort)
-		}
-	}
-	for _, l := range listeners {
-		_ = l.Close()
-	}
-	return ports, nil
-}
-
-func allocateMasterPortPair() (int, int, error) {
-	for masterPort := 10000; masterPort <= 55535; masterPort++ {
-		masterGrpcPort := masterPort + 10000
-		l1, err := net.Listen("tcp", net.JoinHostPort("127.0.0.1", strconv.Itoa(masterPort)))
-		if err != nil {
-			continue
-		}
-		l2, err := net.Listen("tcp", net.JoinHostPort("127.0.0.1", strconv.Itoa(masterGrpcPort)))
-		if err != nil {
-			_ = l1.Close()
-			continue
-		}
-		_ = l2.Close()
-		_ = l1.Close()
-		return masterPort, masterGrpcPort, nil
-	}
-	return 0, 0, errors.New("unable to find available master port pair")
-}
-
-func newWorkDir() (dir string, keepLogs bool, err error) {
-	keepLogs = os.Getenv("VOLUME_SERVER_IT_KEEP_LOGS") == "1"
-	dir, err = os.MkdirTemp("", "seaweedfs_volume_server_it_")
-	return dir, keepLogs, err
-}
-
-func writeSecurityConfig(configDir string, profile matrix.Profile) error {
-	var b strings.Builder
-	if profile.EnableJWT {
-		if profile.JWTSigningKey == "" || profile.JWTReadKey == "" {
-			return errors.New("jwt profile requires both write and read keys")
-		}
-		b.WriteString("[jwt.signing]\n")
-		b.WriteString("key = \"")
-		b.WriteString(profile.JWTSigningKey)
-		b.WriteString("\"\n")
-		b.WriteString("expires_after_seconds = 60\n\n")
-
-		b.WriteString("[jwt.signing.read]\n")
-		b.WriteString("key = \"")
-		b.WriteString(profile.JWTReadKey)
-		b.WriteString("\"\n")
-		b.WriteString("expires_after_seconds = 60\n")
-	}
-	if profile.AccessUI {
-		if b.Len() > 0 {
-			b.WriteString("\n")
-		}
-		b.WriteString("[access]\n")
-		b.WriteString("ui = true\n")
-	}
-	if b.Len() == 0 {
-		b.WriteString("# optional security config generated for integration tests\n")
-	}
-	return os.WriteFile(filepath.Join(configDir, "security.toml"), []byte(b.String()), 0o644)
-}
-
-// FindOrBuildWeedBinary returns an executable weed binary, building one when needed.
-func FindOrBuildWeedBinary() (string, error) {
-	if fromEnv := os.Getenv("WEED_BINARY"); fromEnv != "" {
-		if isExecutableFile(fromEnv) {
-			return fromEnv, nil
-		}
-		return "", fmt.Errorf("WEED_BINARY is set but not executable: %s", fromEnv)
-	}
-
-	repoRoot, err := detectRepoRoot()
-	if err != nil {
-		return "", err
-	}
-	if candidate := filepath.Join(repoRoot, "weed", "weed"); isExecutableFile(candidate) {
-		return candidate, nil
-	}
-
-	binDir := filepath.Join(os.TempDir(), "seaweedfs_volume_server_it_bin")
-	if err := os.MkdirAll(binDir, 0o755); err != nil {
-		return "", fmt.Errorf("create binary directory %s: %w", binDir, err)
-	}
-	binPath := filepath.Join(binDir, "weed")
-	if isExecutableFile(binPath) {
-		return binPath, nil
-	}
-
-	cmd := exec.Command("go", "build", "-o", binPath, ".")
-	cmd.Dir = filepath.Join(repoRoot, "weed")
-	var out bytes.Buffer
-	cmd.Stdout = &out
-	cmd.Stderr = &out
-	if err := cmd.Run(); err != nil {
-		return "", fmt.Errorf("build weed binary: %w\n%s", err, out.String())
-	}
-	if !isExecutableFile(binPath) {
-		return "", fmt.Errorf("built weed binary is not executable: %s", binPath)
-	}
-	return binPath, nil
-}
-
-// FindOrBuildServerBinaries returns master and volume executables.
-// Master always runs from the Go weed binary; volume can be switched via env.
-func FindOrBuildServerBinaries() (masterBinary string, volumeBinary string, err error) {
-	masterBinary, err = FindOrBuildWeedBinary()
-	if err != nil {
-		return "", "", err
-	}
-	volumeBinary, err = FindOrBuildVolumeServerBinary(masterBinary)
-	if err != nil {
-		return "", "", err
-	}
-	return masterBinary, volumeBinary, nil
-}
-
-// FindOrBuildVolumeServerBinary resolves the executable used for volume-server processes.
-//
-// Behavior:
-//   - `VOLUME_SERVER_BINARY=/path/to/bin`: use explicit executable path.
-//   - `VOLUME_SERVER_IMPL=rust`: build/use Rust volume server launcher.
-//   - default: use the same Go `weed` binary.
-func FindOrBuildVolumeServerBinary(defaultBinary string) (string, error) {
-	if fromEnv := os.Getenv("VOLUME_SERVER_BINARY"); fromEnv != "" {
-		if isExecutableFile(fromEnv) {
-			return fromEnv, nil
-		}
-		return "", fmt.Errorf("VOLUME_SERVER_BINARY is set but not executable: %s", fromEnv)
-	}
-
-	impl := strings.ToLower(strings.TrimSpace(os.Getenv("VOLUME_SERVER_IMPL")))
-	if impl == "" || impl == "go" {
-		return defaultBinary, nil
-	}
-	if impl != "rust" {
-		return "", fmt.Errorf("unsupported VOLUME_SERVER_IMPL %q (supported: go, rust)", impl)
-	}
-
-	repoRoot, err := detectRepoRoot()
-	if err != nil {
-		return "", err
-	}
-	return FindOrBuildRustVolumeServerBinary(repoRoot)
-}
-
-// FindOrBuildRustVolumeServerBinary builds the Rust volume server launcher when needed.
-func FindOrBuildRustVolumeServerBinary(repoRoot string) (string, error) {
-	manifestPath := filepath.Join(repoRoot, "rust", "volume_server", "Cargo.toml")
-	if _, err := os.Stat(manifestPath); err != nil {
-		return "", fmt.Errorf("rust volume server manifest not found at %s: %w", manifestPath, err)
-	}
-
-	targetDir := filepath.Join(os.TempDir(), "seaweedfs_volume_server_it_rust_target")
-	binPath := filepath.Join(targetDir, "release", "weed-volume-rs")
-	if isExecutableFile(binPath) && os.Getenv("VOLUME_SERVER_RUST_REBUILD") != "1" {
-		return binPath, nil
-	}
-
-	cmd := exec.Command("cargo", "build", "--release", "--manifest-path", manifestPath, "--target-dir", targetDir)
-	var out bytes.Buffer
-	cmd.Stdout = &out
-	cmd.Stderr = &out
-	if err := cmd.Run(); err != nil {
-		return "", fmt.Errorf("build rust volume server binary: %w\n%s", err, out.String())
-	}
-	if !isExecutableFile(binPath) {
-		return "", fmt.Errorf("built rust volume server binary is not executable: %s", binPath)
-	}
-	return binPath, nil
-}
-
-func detectRepoRoot() (string, error) {
-	if _, file, _, ok := runtime.Caller(0); ok {
-		return filepath.Clean(filepath.Join(filepath.Dir(file), "..", "..", "..")), nil
-	}
-	return "", errors.New("unable to detect repository root")
-}
-
-func isExecutableFile(path string) bool {
-	info, err := os.Stat(path)
-	if err != nil || info.IsDir() {
-		return false
-	}
-	mode := info.Mode().Perm()
-	return mode&0o111 != 0
-}
-
-func (c *Cluster) tailLog(logName string) string {
-	f, err := os.Open(filepath.Join(c.logsDir, logName))
-	if err != nil {
-		return ""
-	}
-	defer f.Close()
-
-	scanner := bufio.NewScanner(f)
-	lines := make([]string, 0, 40)
-	for scanner.Scan() {
-		lines = append(lines, scanner.Text())
-		if len(lines) > 40 {
-			lines = lines[1:]
-		}
-	}
-	return strings.Join(lines, "\n")
-}
-
-func (c *Cluster) MasterAddress() string {
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.masterPort))
-}
-
-func (c *Cluster) VolumeAdminAddress() string {
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumePort))
-}
-
-func (c *Cluster) VolumePublicAddress() string {
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumePubPort))
-}
-
-func (c *Cluster) VolumeGRPCAddress() string {
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumeGrpcPort))
-}
-
-// VolumeServerAddress returns SeaweedFS server address format: ip:httpPort.grpcPort
-func (c *Cluster) VolumeServerAddress() string {
-	return fmt.Sprintf("%s.%d", c.VolumeAdminAddress(), c.volumeGrpcPort)
-}
-
-func (c *Cluster) MasterURL() string {
-	return "http://" + c.MasterAddress()
-}
-
-func (c *Cluster) VolumeAdminURL() string {
-	return "http://" + c.VolumeAdminAddress()
-}
-
-func (c *Cluster) VolumePublicURL() string {
-	return "http://" + c.VolumePublicAddress()
-}
-
-func (c *Cluster) BaseDir() string {
-	return c.baseDir
-}

test/volume_server/framework/cluster_dual.go

@@ -1,295 +0,0 @@
-package framework
-
-import (
-	"fmt"
-	"net"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strconv"
-	"sync"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-)
-
-type DualVolumeCluster struct {
-	testingTB testing.TB
-	profile   matrix.Profile
-
-	weedBinary   string
-	volumeBinary string
-	baseDir      string
-	configDir    string
-	logsDir      string
-	keepLogs     bool
-
-	masterPort     int
-	masterGrpcPort int
-
-	volumePort0     int
-	volumeGrpcPort0 int
-	volumePubPort0  int
-	volumePort1     int
-	volumeGrpcPort1 int
-	volumePubPort1  int
-
-	masterCmd  *exec.Cmd
-	volumeCmd0 *exec.Cmd
-	volumeCmd1 *exec.Cmd
-
-	cleanupOnce sync.Once
-}
-
-func StartDualVolumeCluster(t testing.TB, profile matrix.Profile) *DualVolumeCluster {
-	t.Helper()
-
-	weedBinary, volumeBinary, err := FindOrBuildServerBinaries()
-	if err != nil {
-		t.Fatalf("resolve server binaries: %v", err)
-	}
-
-	baseDir, keepLogs, err := newWorkDir()
-	if err != nil {
-		t.Fatalf("create temp test directory: %v", err)
-	}
-
-	configDir := filepath.Join(baseDir, "config")
-	logsDir := filepath.Join(baseDir, "logs")
-	masterDataDir := filepath.Join(baseDir, "master")
-	volumeDataDir0 := filepath.Join(baseDir, "volume0")
-	volumeDataDir1 := filepath.Join(baseDir, "volume1")
-	for _, dir := range []string{configDir, logsDir, masterDataDir, volumeDataDir0, volumeDataDir1} {
-		if mkErr := os.MkdirAll(dir, 0o755); mkErr != nil {
-			t.Fatalf("create %s: %v", dir, mkErr)
-		}
-	}
-
-	if err = writeSecurityConfig(configDir, profile); err != nil {
-		t.Fatalf("write security config: %v", err)
-	}
-
-	masterPort, masterGrpcPort, err := allocateMasterPortPair()
-	if err != nil {
-		t.Fatalf("allocate master port pair: %v", err)
-	}
-
-	ports, err := allocatePorts(6)
-	if err != nil {
-		t.Fatalf("allocate volume ports: %v", err)
-	}
-
-	c := &DualVolumeCluster{
-		testingTB:       t,
-		profile:         profile,
-		weedBinary:      weedBinary,
-		volumeBinary:    volumeBinary,
-		baseDir:         baseDir,
-		configDir:       configDir,
-		logsDir:         logsDir,
-		keepLogs:        keepLogs,
-		masterPort:      masterPort,
-		masterGrpcPort:  masterGrpcPort,
-		volumePort0:     ports[0],
-		volumeGrpcPort0: ports[1],
-		volumePubPort0:  ports[0],
-		volumePort1:     ports[2],
-		volumeGrpcPort1: ports[3],
-		volumePubPort1:  ports[2],
-	}
-	if profile.SplitPublicPort {
-		c.volumePubPort0 = ports[4]
-		c.volumePubPort1 = ports[5]
-	}
-
-	if err = c.startMaster(masterDataDir); err != nil {
-		c.Stop()
-		t.Fatalf("start master: %v", err)
-	}
-	if err = c.waitForHTTP(c.MasterURL() + "/dir/status"); err != nil {
-		masterLog := c.tailLog("master.log")
-		c.Stop()
-		t.Fatalf("wait for master readiness: %v\nmaster log tail:\n%s", err, masterLog)
-	}
-
-	if err = c.startVolume(0, volumeDataDir0); err != nil {
-		masterLog := c.tailLog("master.log")
-		c.Stop()
-		t.Fatalf("start first volume server: %v\nmaster log tail:\n%s", err, masterLog)
-	}
-	if err = c.waitForHTTP(c.VolumeAdminURL(0) + "/status"); err != nil {
-		volumeLog := c.tailLog("volume0.log")
-		c.Stop()
-		t.Fatalf("wait for first volume readiness: %v\nvolume log tail:\n%s", err, volumeLog)
-	}
-	if err = c.waitForTCP(c.VolumeGRPCAddress(0)); err != nil {
-		volumeLog := c.tailLog("volume0.log")
-		c.Stop()
-		t.Fatalf("wait for first volume grpc readiness: %v\nvolume log tail:\n%s", err, volumeLog)
-	}
-
-	if err = c.startVolume(1, volumeDataDir1); err != nil {
-		volumeLog := c.tailLog("volume0.log")
-		c.Stop()
-		t.Fatalf("start second volume server: %v\nfirst volume log tail:\n%s", err, volumeLog)
-	}
-	if err = c.waitForHTTP(c.VolumeAdminURL(1) + "/status"); err != nil {
-		volumeLog := c.tailLog("volume1.log")
-		c.Stop()
-		t.Fatalf("wait for second volume readiness: %v\nvolume log tail:\n%s", err, volumeLog)
-	}
-	if err = c.waitForTCP(c.VolumeGRPCAddress(1)); err != nil {
-		volumeLog := c.tailLog("volume1.log")
-		c.Stop()
-		t.Fatalf("wait for second volume grpc readiness: %v\nvolume log tail:\n%s", err, volumeLog)
-	}
-
-	t.Cleanup(func() {
-		c.Stop()
-	})
-
-	return c
-}
-
-func (c *DualVolumeCluster) Stop() {
-	if c == nil {
-		return
-	}
-	c.cleanupOnce.Do(func() {
-		stopProcess(c.volumeCmd1)
-		stopProcess(c.volumeCmd0)
-		stopProcess(c.masterCmd)
-		if !c.keepLogs && !c.testingTB.Failed() {
-			_ = os.RemoveAll(c.baseDir)
-		} else if c.baseDir != "" {
-			c.testingTB.Logf("volume server integration logs kept at %s", c.baseDir)
-		}
-	})
-}
-
-func (c *DualVolumeCluster) startMaster(dataDir string) error {
-	logFile, err := os.Create(filepath.Join(c.logsDir, "master.log"))
-	if err != nil {
-		return err
-	}
-
-	args := []string{
-		"-config_dir=" + c.configDir,
-		"master",
-		"-ip=127.0.0.1",
-		"-port=" + strconv.Itoa(c.masterPort),
-		"-port.grpc=" + strconv.Itoa(c.masterGrpcPort),
-		"-mdir=" + dataDir,
-		"-peers=none",
-		"-volumeSizeLimitMB=" + strconv.Itoa(testVolumeSizeLimitMB),
-		"-defaultReplication=000",
-	}
-
-	c.masterCmd = exec.Command(c.weedBinary, args...)
-	c.masterCmd.Dir = c.baseDir
-	c.masterCmd.Stdout = logFile
-	c.masterCmd.Stderr = logFile
-	return c.masterCmd.Start()
-}
-
-func (c *DualVolumeCluster) startVolume(index int, dataDir string) error {
-	logName := fmt.Sprintf("volume%d.log", index)
-	logFile, err := os.Create(filepath.Join(c.logsDir, logName))
-	if err != nil {
-		return err
-	}
-
-	volumePort := c.volumePort0
-	volumeGrpcPort := c.volumeGrpcPort0
-	volumePubPort := c.volumePubPort0
-	if index == 1 {
-		volumePort = c.volumePort1
-		volumeGrpcPort = c.volumeGrpcPort1
-		volumePubPort = c.volumePubPort1
-	}
-
-	args := []string{
-		"-config_dir=" + c.configDir,
-		"volume",
-		"-ip=127.0.0.1",
-		"-port=" + strconv.Itoa(volumePort),
-		"-port.grpc=" + strconv.Itoa(volumeGrpcPort),
-		"-port.public=" + strconv.Itoa(volumePubPort),
-		"-dir=" + dataDir,
-		"-max=16",
-		"-master=127.0.0.1:" + strconv.Itoa(c.masterPort),
-		"-readMode=" + c.profile.ReadMode,
-		"-concurrentUploadLimitMB=" + strconv.Itoa(c.profile.ConcurrentUploadLimitMB),
-		"-concurrentDownloadLimitMB=" + strconv.Itoa(c.profile.ConcurrentDownloadLimitMB),
-	}
-	if c.profile.InflightUploadTimeout > 0 {
-		args = append(args, "-inflightUploadDataTimeout="+c.profile.InflightUploadTimeout.String())
-	}
-	if c.profile.InflightDownloadTimeout > 0 {
-		args = append(args, "-inflightDownloadDataTimeout="+c.profile.InflightDownloadTimeout.String())
-	}
-
-	cmd := exec.Command(c.volumeBinary, args...)
-	cmd.Dir = c.baseDir
-	cmd.Stdout = logFile
-	cmd.Stderr = logFile
-
-	if err = cmd.Start(); err != nil {
-		return err
-	}
-	if index == 1 {
-		c.volumeCmd1 = cmd
-	} else {
-		c.volumeCmd0 = cmd
-	}
-	return nil
-}
-
-func (c *DualVolumeCluster) waitForHTTP(url string) error {
-	return (&Cluster{}).waitForHTTP(url)
-}
-
-func (c *DualVolumeCluster) waitForTCP(addr string) error {
-	return (&Cluster{}).waitForTCP(addr)
-}
-
-func (c *DualVolumeCluster) tailLog(logName string) string {
-	return (&Cluster{logsDir: c.logsDir}).tailLog(logName)
-}
-
-func (c *DualVolumeCluster) MasterAddress() string {
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.masterPort))
-}
-
-func (c *DualVolumeCluster) MasterURL() string {
-	return "http://" + c.MasterAddress()
-}
-
-func (c *DualVolumeCluster) VolumeAdminAddress(index int) string {
-	if index == 1 {
-		return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumePort1))
-	}
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumePort0))
-}
-
-func (c *DualVolumeCluster) VolumePublicAddress(index int) string {
-	if index == 1 {
-		return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumePubPort1))
-	}
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumePubPort0))
-}
-
-func (c *DualVolumeCluster) VolumeGRPCAddress(index int) string {
-	if index == 1 {
-		return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumeGrpcPort1))
-	}
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.volumeGrpcPort0))
-}
-
-func (c *DualVolumeCluster) VolumeAdminURL(index int) string {
-	return "http://" + c.VolumeAdminAddress(index)
-}
-
-func (c *DualVolumeCluster) VolumePublicURL(index int) string {
-	return "http://" + c.VolumePublicAddress(index)
-}

test/volume_server/framework/cluster_with_filer.go

@@ -1,91 +0,0 @@
-package framework
-
-import (
-	"fmt"
-	"net"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strconv"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-)
-
-type ClusterWithFiler struct {
-	*Cluster
-
-	filerCmd      *exec.Cmd
-	filerPort     int
-	filerGrpcPort int
-}
-
-func StartSingleVolumeClusterWithFiler(t testing.TB, profile matrix.Profile) *ClusterWithFiler {
-	t.Helper()
-
-	baseCluster := StartSingleVolumeCluster(t, profile)
-
-	ports, err := allocatePorts(2)
-	if err != nil {
-		t.Fatalf("allocate filer ports: %v", err)
-	}
-
-	filerDataDir := filepath.Join(baseCluster.baseDir, "filer")
-	if mkErr := os.MkdirAll(filerDataDir, 0o755); mkErr != nil {
-		t.Fatalf("create filer data dir: %v", mkErr)
-	}
-
-	logFile, err := os.Create(filepath.Join(baseCluster.logsDir, "filer.log"))
-	if err != nil {
-		t.Fatalf("create filer log file: %v", err)
-	}
-
-	filerPort := ports[0]
-	filerGrpcPort := ports[1]
-	args := []string{
-		"-config_dir=" + baseCluster.configDir,
-		"filer",
-		"-master=127.0.0.1:" + strconv.Itoa(baseCluster.masterPort),
-		"-ip=127.0.0.1",
-		"-port=" + strconv.Itoa(filerPort),
-		"-port.grpc=" + strconv.Itoa(filerGrpcPort),
-		"-defaultStoreDir=" + filerDataDir,
-	}
-
-	filerCmd := exec.Command(baseCluster.weedBinary, args...)
-	filerCmd.Dir = baseCluster.baseDir
-	filerCmd.Stdout = logFile
-	filerCmd.Stderr = logFile
-	if err = filerCmd.Start(); err != nil {
-		t.Fatalf("start filer: %v", err)
-	}
-
-	if err = baseCluster.waitForTCP(net.JoinHostPort("127.0.0.1", strconv.Itoa(filerGrpcPort))); err != nil {
-		filerLogTail := baseCluster.tailLog("filer.log")
-		stopProcess(filerCmd)
-		t.Fatalf("wait for filer grpc readiness: %v\nfiler log tail:\n%s", err, filerLogTail)
-	}
-
-	t.Cleanup(func() {
-		stopProcess(filerCmd)
-	})
-
-	return &ClusterWithFiler{
-		Cluster:       baseCluster,
-		filerCmd:      filerCmd,
-		filerPort:     filerPort,
-		filerGrpcPort: filerGrpcPort,
-	}
-}
-
-func (c *ClusterWithFiler) FilerAddress() string {
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.filerPort))
-}
-
-func (c *ClusterWithFiler) FilerGRPCAddress() string {
-	return net.JoinHostPort("127.0.0.1", strconv.Itoa(c.filerGrpcPort))
-}
-
-func (c *ClusterWithFiler) FilerServerAddress() string {
-	return fmt.Sprintf("%s.%d", c.FilerAddress(), c.filerGrpcPort)
-}

test/volume_server/framework/fault_injection.go

@@ -1,8 +0,0 @@
-package framework
-
-// Phase 0 placeholder for future fault injection utilities.
-//
-// Planned extensions:
-// - restart/kill selected processes
-// - temporary network isolation hooks
-// - master or peer outage helpers for proxy/replication branch coverage

test/volume_server/framework/grpc_client.go

@@ -1,28 +0,0 @@
-package framework
-
-import (
-	"context"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-	"google.golang.org/grpc"
-	"google.golang.org/grpc/credentials/insecure"
-)
-
-func DialVolumeServer(t testing.TB, address string) (*grpc.ClientConn, volume_server_pb.VolumeServerClient) {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	conn, err := grpc.DialContext(ctx, address,
-		grpc.WithTransportCredentials(insecure.NewCredentials()),
-		grpc.WithBlock(),
-	)
-	if err != nil {
-		t.Fatalf("dial volume grpc %s: %v", address, err)
-	}
-
-	return conn, volume_server_pb.NewVolumeServerClient(conn)
-}

test/volume_server/framework/http_client.go

@@ -1,34 +0,0 @@
-package framework
-
-import (
-	"io"
-	"net/http"
-	"testing"
-	"time"
-)
-
-func NewHTTPClient() *http.Client {
-	return &http.Client{Timeout: 10 * time.Second}
-}
-
-func DoRequest(t testing.TB, client *http.Client, req *http.Request) *http.Response {
-	t.Helper()
-	resp, err := client.Do(req)
-	if err != nil {
-		t.Fatalf("http request %s %s: %v", req.Method, req.URL.String(), err)
-	}
-	return resp
-}
-
-func ReadAllAndClose(t testing.TB, resp *http.Response) []byte {
-	t.Helper()
-	if resp == nil {
-		return nil
-	}
-	defer resp.Body.Close()
-	body, err := io.ReadAll(resp.Body)
-	if err != nil {
-		t.Fatalf("read response body: %v", err)
-	}
-	return body
-}

test/volume_server/framework/volume_fixture.go

@@ -1,64 +0,0 @@
-package framework
-
-import (
-	"bytes"
-	"context"
-	"fmt"
-	"net/http"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-	"github.com/seaweedfs/seaweedfs/weed/storage/needle"
-)
-
-func AllocateVolume(t testing.TB, client volume_server_pb.VolumeServerClient, volumeID uint32, collection string) {
-	t.Helper()
-	AllocateVolumeWithReplication(t, client, volumeID, collection, "000")
-}
-
-func AllocateVolumeWithReplication(t testing.TB, client volume_server_pb.VolumeServerClient, volumeID uint32, collection, replication string) {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-	if replication == "" {
-		replication = "000"
-	}
-
-	_, err := client.AllocateVolume(ctx, &volume_server_pb.AllocateVolumeRequest{
-		VolumeId:    volumeID,
-		Collection:  collection,
-		Replication: replication,
-		Version:     uint32(needle.GetCurrentVersion()),
-	})
-	if err != nil {
-		t.Fatalf("allocate volume %d (replication=%s): %v", volumeID, replication, err)
-	}
-}
-
-func NewFileID(volumeID uint32, key uint64, cookie uint32) string {
-	return needle.NewFileId(needle.VolumeId(volumeID), key, cookie).String()
-}
-
-func UploadBytes(t testing.TB, client *http.Client, volumeURL, fid string, data []byte) *http.Response {
-	t.Helper()
-
-	req, err := http.NewRequest(http.MethodPost, fmt.Sprintf("%s/%s", volumeURL, fid), bytes.NewReader(data))
-	if err != nil {
-		t.Fatalf("build upload request: %v", err)
-	}
-	req.Header.Set("Content-Type", "application/octet-stream")
-	req.Header.Set("Content-Length", fmt.Sprintf("%d", len(data)))
-	return DoRequest(t, client, req)
-}
-
-func ReadBytes(t testing.TB, client *http.Client, volumeURL, fid string) *http.Response {
-	t.Helper()
-
-	req, err := http.NewRequest(http.MethodGet, fmt.Sprintf("%s/%s", volumeURL, fid), nil)
-	if err != nil {
-		t.Fatalf("build read request: %v", err)
-	}
-	return DoRequest(t, client, req)
-}

test/volume_server/grpc/admin_extra_test.go

@@ -1,456 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/cluster"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestVolumeNeedleStatusForUploadedFile(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(21)
-	const needleID = uint64(778899)
-	const cookie = uint32(0xA1B2C3D4)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	client := framework.NewHTTPClient()
-	payload := []byte("needle-status-payload")
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, payload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload status: expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	statusResp, err := grpcClient.VolumeNeedleStatus(ctx, &volume_server_pb.VolumeNeedleStatusRequest{
-		VolumeId: volumeID,
-		NeedleId: needleID,
-	})
-	if err != nil {
-		t.Fatalf("VolumeNeedleStatus failed: %v", err)
-	}
-	if statusResp.GetNeedleId() != needleID {
-		t.Fatalf("needle id mismatch: got %d want %d", statusResp.GetNeedleId(), needleID)
-	}
-	if statusResp.GetCookie() != cookie {
-		t.Fatalf("cookie mismatch: got %d want %d", statusResp.GetCookie(), cookie)
-	}
-	if statusResp.GetSize() == 0 {
-		t.Fatalf("expected non-zero needle size")
-	}
-}
-
-func TestVolumeNeedleStatusViaEcShardsWhenNormalVolumeUnmounted(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(26)
-	const needleID = uint64(778900)
-	const cookie = uint32(0xA1B2C3D5)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	payload := []byte("needle-status-ec-path-payload")
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, payload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload status: expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0, 1, 2, 3, 4, 5, 6, 7, 8, 9},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsMount data shards failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeUnmount(ctx, &volume_server_pb.VolumeUnmountRequest{
-		VolumeId: volumeID,
-	})
-	if err != nil {
-		t.Fatalf("VolumeUnmount failed: %v", err)
-	}
-
-	statusResp, err := grpcClient.VolumeNeedleStatus(ctx, &volume_server_pb.VolumeNeedleStatusRequest{
-		VolumeId: volumeID,
-		NeedleId: needleID,
-	})
-	if err != nil {
-		t.Fatalf("VolumeNeedleStatus via EC shards failed: %v", err)
-	}
-	if statusResp.GetNeedleId() != needleID {
-		t.Fatalf("needle id mismatch: got %d want %d", statusResp.GetNeedleId(), needleID)
-	}
-	if statusResp.GetCookie() != cookie {
-		t.Fatalf("cookie mismatch: got %d want %d", statusResp.GetCookie(), cookie)
-	}
-	if statusResp.GetSize() == 0 {
-		t.Fatalf("expected non-zero needle size from EC-backed needle status")
-	}
-
-	_, err = grpcClient.VolumeNeedleStatus(ctx, &volume_server_pb.VolumeNeedleStatusRequest{
-		VolumeId: volumeID,
-		NeedleId: needleID + 999999,
-	})
-	if err == nil || !strings.Contains(strings.ToLower(err.Error()), "not found") {
-		t.Fatalf("VolumeNeedleStatus via EC shards missing-needle error mismatch: %v", err)
-	}
-}
-
-func TestVolumeNeedleStatusMissingVolumeAndNeedle(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(25)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeNeedleStatus(ctx, &volume_server_pb.VolumeNeedleStatusRequest{
-		VolumeId: 99925,
-		NeedleId: 1,
-	})
-	if err == nil {
-		t.Fatalf("VolumeNeedleStatus should fail for missing volume")
-	}
-	if !strings.Contains(strings.ToLower(err.Error()), "volume not found") {
-		t.Fatalf("VolumeNeedleStatus missing-volume error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeNeedleStatus(ctx, &volume_server_pb.VolumeNeedleStatusRequest{
-		VolumeId: volumeID,
-		NeedleId: 123456789,
-	})
-	if err == nil {
-		t.Fatalf("VolumeNeedleStatus should fail for missing needle")
-	}
-	if !strings.Contains(strings.ToLower(err.Error()), "not found") {
-		t.Fatalf("VolumeNeedleStatus missing-needle error mismatch: %v", err)
-	}
-}
-
-func mustNewRequest(t testing.TB, method, url string) *http.Request {
-	t.Helper()
-	req, err := http.NewRequest(method, url, nil)
-	if err != nil {
-		t.Fatalf("create request %s %s: %v", method, url, err)
-	}
-	return req
-}
-
-func TestVolumeConfigureInvalidReplication(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(22)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	resp, err := grpcClient.VolumeConfigure(ctx, &volume_server_pb.VolumeConfigureRequest{
-		VolumeId:    volumeID,
-		Replication: "bad-replication",
-	})
-	if err != nil {
-		t.Fatalf("VolumeConfigure returned grpc error: %v", err)
-	}
-	if resp.GetError() == "" {
-		t.Fatalf("VolumeConfigure expected response error for invalid replication")
-	}
-	if !strings.Contains(strings.ToLower(resp.GetError()), "replication") {
-		t.Fatalf("VolumeConfigure error should mention replication, got: %q", resp.GetError())
-	}
-}
-
-func TestVolumeConfigureSuccessAndMissingRollbackPath(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(24)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	successResp, err := grpcClient.VolumeConfigure(ctx, &volume_server_pb.VolumeConfigureRequest{
-		VolumeId:    volumeID,
-		Replication: "000",
-	})
-	if err != nil {
-		t.Fatalf("VolumeConfigure success path returned grpc error: %v", err)
-	}
-	if successResp.GetError() != "" {
-		t.Fatalf("VolumeConfigure success path expected empty response error, got: %q", successResp.GetError())
-	}
-
-	statusResp, err := grpcClient.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeStatus after successful configure failed: %v", err)
-	}
-	if statusResp.GetIsReadOnly() {
-		t.Fatalf("VolumeStatus after configure expected writable volume")
-	}
-
-	missingResp, err := grpcClient.VolumeConfigure(ctx, &volume_server_pb.VolumeConfigureRequest{
-		VolumeId:    99024,
-		Replication: "000",
-	})
-	if err != nil {
-		t.Fatalf("VolumeConfigure missing-volume branch should return response error, got grpc error: %v", err)
-	}
-	if missingResp.GetError() == "" {
-		t.Fatalf("VolumeConfigure missing-volume expected non-empty response error")
-	}
-	lower := strings.ToLower(missingResp.GetError())
-	if !strings.Contains(lower, "not found on disk") {
-		t.Fatalf("VolumeConfigure missing-volume error should mention not found on disk, got: %q", missingResp.GetError())
-	}
-	if !strings.Contains(lower, "failed to restore mount") {
-		t.Fatalf("VolumeConfigure missing-volume error should include remount rollback failure, got: %q", missingResp.GetError())
-	}
-}
-
-func TestPingVolumeTargetAndLeaveAffectsHealthz(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	pingResp, err := grpcClient.Ping(ctx, &volume_server_pb.PingRequest{
-		TargetType: cluster.VolumeServerType,
-		Target:     clusterHarness.VolumeServerAddress(),
-	})
-	if err != nil {
-		t.Fatalf("Ping target volume server failed: %v", err)
-	}
-	if pingResp.GetRemoteTimeNs() == 0 {
-		t.Fatalf("expected remote timestamp from ping target volume server")
-	}
-
-	if _, err = grpcClient.VolumeServerLeave(ctx, &volume_server_pb.VolumeServerLeaveRequest{}); err != nil {
-		t.Fatalf("VolumeServerLeave failed: %v", err)
-	}
-
-	client := framework.NewHTTPClient()
-	healthURL := clusterHarness.VolumeAdminURL() + "/healthz"
-	deadline := time.Now().Add(5 * time.Second)
-	for {
-		resp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, healthURL))
-		_ = framework.ReadAllAndClose(t, resp)
-		if resp.StatusCode == http.StatusServiceUnavailable {
-			return
-		}
-		if time.Now().After(deadline) {
-			t.Fatalf("expected healthz to return 503 after leave, got %d", resp.StatusCode)
-		}
-		time.Sleep(100 * time.Millisecond)
-	}
-}
-
-func TestVolumeServerLeaveIsIdempotent(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	if _, err := grpcClient.VolumeServerLeave(ctx, &volume_server_pb.VolumeServerLeaveRequest{}); err != nil {
-		t.Fatalf("first VolumeServerLeave failed: %v", err)
-	}
-	if _, err := grpcClient.VolumeServerLeave(ctx, &volume_server_pb.VolumeServerLeaveRequest{}); err != nil {
-		t.Fatalf("second VolumeServerLeave should be idempotent success, got: %v", err)
-	}
-
-	client := framework.NewHTTPClient()
-	healthURL := clusterHarness.VolumeAdminURL() + "/healthz"
-	deadline := time.Now().Add(5 * time.Second)
-	for {
-		resp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, healthURL))
-		_ = framework.ReadAllAndClose(t, resp)
-		if resp.StatusCode == http.StatusServiceUnavailable {
-			return
-		}
-		if time.Now().After(deadline) {
-			t.Fatalf("expected healthz to stay 503 after repeated leave, got %d", resp.StatusCode)
-		}
-		time.Sleep(100 * time.Millisecond)
-	}
-}
-
-func TestPingUnknownAndUnreachableTargetPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	unknownResp, err := grpcClient.Ping(ctx, &volume_server_pb.PingRequest{
-		TargetType: "unknown-type",
-		Target:     "127.0.0.1:12345",
-	})
-	if err != nil {
-		t.Fatalf("Ping unknown target type should not return grpc error, got: %v", err)
-	}
-	if unknownResp.GetRemoteTimeNs() != 0 {
-		t.Fatalf("Ping unknown target type expected remote_time_ns=0, got %d", unknownResp.GetRemoteTimeNs())
-	}
-	if unknownResp.GetStopTimeNs() < unknownResp.GetStartTimeNs() {
-		t.Fatalf("Ping unknown target type expected stop_time_ns >= start_time_ns")
-	}
-
-	_, err = grpcClient.Ping(ctx, &volume_server_pb.PingRequest{
-		TargetType: cluster.MasterType,
-		Target:     "127.0.0.1:1",
-	})
-	if err == nil {
-		t.Fatalf("Ping master target should fail when target is unreachable")
-	}
-	if !strings.Contains(err.Error(), "ping master") {
-		t.Fatalf("Ping master unreachable error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.Ping(ctx, &volume_server_pb.PingRequest{
-		TargetType: cluster.FilerType,
-		Target:     "127.0.0.1:1",
-	})
-	if err == nil {
-		t.Fatalf("Ping filer target should fail when target is unreachable")
-	}
-	if !strings.Contains(err.Error(), "ping filer") {
-		t.Fatalf("Ping filer unreachable error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.Ping(ctx, &volume_server_pb.PingRequest{
-		TargetType: cluster.VolumeServerType,
-		Target:     "127.0.0.1:1.1",
-	})
-	if err == nil {
-		t.Fatalf("Ping volume server target should fail when target is unreachable")
-	}
-	if !strings.Contains(err.Error(), "ping volumeServer") {
-		t.Fatalf("Ping volume server unreachable error mismatch: %v", err)
-	}
-}
-
-func TestPingMasterTargetSuccess(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	resp, err := grpcClient.Ping(ctx, &volume_server_pb.PingRequest{
-		TargetType: cluster.MasterType,
-		Target:     clusterHarness.MasterAddress(),
-	})
-	if err != nil {
-		t.Fatalf("Ping master target success path failed: %v", err)
-	}
-	if resp.GetRemoteTimeNs() == 0 {
-		t.Fatalf("Ping master target expected non-zero remote time")
-	}
-	if resp.GetStopTimeNs() < resp.GetStartTimeNs() {
-		t.Fatalf("Ping master target expected stop >= start, got start=%d stop=%d", resp.GetStartTimeNs(), resp.GetStopTimeNs())
-	}
-}
-
-func TestPingFilerTargetSuccess(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeClusterWithFiler(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	resp, err := grpcClient.Ping(ctx, &volume_server_pb.PingRequest{
-		TargetType: cluster.FilerType,
-		Target:     clusterHarness.FilerServerAddress(),
-	})
-	if err != nil {
-		t.Fatalf("Ping filer target success path failed: %v", err)
-	}
-	if resp.GetRemoteTimeNs() == 0 {
-		t.Fatalf("Ping filer target expected non-zero remote time")
-	}
-	if resp.GetStopTimeNs() < resp.GetStartTimeNs() {
-		t.Fatalf("Ping filer target expected stop >= start, got start=%d stop=%d", resp.GetStartTimeNs(), resp.GetStopTimeNs())
-	}
-}

test/volume_server/grpc/admin_lifecycle_test.go

@@ -1,215 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-	"google.golang.org/grpc/codes"
-	"google.golang.org/grpc/status"
-)
-
-func TestVolumeAdminLifecycleRPCs(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	const volumeID = uint32(11)
-	framework.AllocateVolume(t, client, volumeID, "")
-
-	statusResp, err := client.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeStatus failed: %v", err)
-	}
-	if statusResp.GetFileCount() != 0 {
-		t.Fatalf("new volume should be empty, got file_count=%d", statusResp.GetFileCount())
-	}
-
-	if _, err = client.VolumeUnmount(ctx, &volume_server_pb.VolumeUnmountRequest{VolumeId: volumeID}); err != nil {
-		t.Fatalf("VolumeUnmount failed: %v", err)
-	}
-	if _, err = client.VolumeMount(ctx, &volume_server_pb.VolumeMountRequest{VolumeId: volumeID}); err != nil {
-		t.Fatalf("VolumeMount failed: %v", err)
-	}
-
-	if _, err = client.VolumeDelete(ctx, &volume_server_pb.VolumeDeleteRequest{VolumeId: volumeID, OnlyEmpty: true}); err != nil {
-		t.Fatalf("VolumeDelete failed: %v", err)
-	}
-
-	_, err = client.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err == nil {
-		t.Fatalf("VolumeStatus should fail after delete")
-	}
-	if st, ok := status.FromError(err); !ok || st.Code() == codes.OK {
-		t.Fatalf("VolumeStatus error should be a non-OK grpc status, got: %v", err)
-	}
-}
-
-func TestVolumeDeleteOnlyEmptyVariants(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(13)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 66001, 0x11223344)
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte("volume-delete-only-empty"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeDelete(ctx, &volume_server_pb.VolumeDeleteRequest{VolumeId: volumeID, OnlyEmpty: true})
-	if err == nil || !strings.Contains(err.Error(), "volume not empty") {
-		t.Fatalf("VolumeDelete only_empty=true expected volume-not-empty error, got: %v", err)
-	}
-
-	_, err = grpcClient.VolumeDelete(ctx, &volume_server_pb.VolumeDeleteRequest{VolumeId: volumeID, OnlyEmpty: false})
-	if err != nil {
-		t.Fatalf("VolumeDelete only_empty=false failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err == nil {
-		t.Fatalf("VolumeStatus should fail after non-empty delete with only_empty=false")
-	}
-}
-
-func TestMaintenanceModeRejectsAllocateVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stateResp, err := client.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = client.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{Maintenance: true, Version: stateResp.GetState().GetVersion()},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	_, err = client.AllocateVolume(ctx, &volume_server_pb.AllocateVolumeRequest{VolumeId: 12, Replication: "000"})
-	if err == nil {
-		t.Fatalf("AllocateVolume should fail when maintenance mode is enabled")
-	}
-	if !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("expected maintenance mode error, got: %v", err)
-	}
-}
-
-func TestAllocateDuplicateAndMountUnmountMissingVariants(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	const missingVolumeID = uint32(99331)
-	const volumeID = uint32(14)
-
-	if _, err := client.VolumeUnmount(ctx, &volume_server_pb.VolumeUnmountRequest{VolumeId: missingVolumeID}); err != nil {
-		t.Fatalf("VolumeUnmount missing volume should be idempotent success, got: %v", err)
-	}
-
-	_, err := client.VolumeMount(ctx, &volume_server_pb.VolumeMountRequest{VolumeId: missingVolumeID})
-	if err == nil {
-		t.Fatalf("VolumeMount missing volume should fail")
-	}
-	if !strings.Contains(err.Error(), "not found on disk") {
-		t.Fatalf("VolumeMount missing volume error mismatch: %v", err)
-	}
-
-	framework.AllocateVolume(t, client, volumeID, "")
-
-	_, err = client.AllocateVolume(ctx, &volume_server_pb.AllocateVolumeRequest{
-		VolumeId:    volumeID,
-		Replication: "000",
-	})
-	if err == nil {
-		t.Fatalf("AllocateVolume duplicate should fail")
-	}
-	if !strings.Contains(strings.ToLower(err.Error()), "already exists") {
-		t.Fatalf("AllocateVolume duplicate error mismatch: %v", err)
-	}
-
-	if _, err = client.VolumeUnmount(ctx, &volume_server_pb.VolumeUnmountRequest{VolumeId: volumeID}); err != nil {
-		t.Fatalf("VolumeUnmount existing volume failed: %v", err)
-	}
-	if _, err = client.VolumeUnmount(ctx, &volume_server_pb.VolumeUnmountRequest{VolumeId: volumeID}); err != nil {
-		t.Fatalf("VolumeUnmount already-unmounted volume should be idempotent success, got: %v", err)
-	}
-	if _, err = client.VolumeMount(ctx, &volume_server_pb.VolumeMountRequest{VolumeId: volumeID}); err != nil {
-		t.Fatalf("VolumeMount remount failed: %v", err)
-	}
-}
-
-func TestMaintenanceModeRejectsVolumeDelete(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(15)
-	framework.AllocateVolume(t, client, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stateResp, err := client.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = client.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{Maintenance: true, Version: stateResp.GetState().GetVersion()},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	_, err = client.VolumeDelete(ctx, &volume_server_pb.VolumeDeleteRequest{VolumeId: volumeID, OnlyEmpty: true})
-	if err == nil {
-		t.Fatalf("VolumeDelete should fail when maintenance mode is enabled")
-	}
-	if !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("expected maintenance mode error, got: %v", err)
-	}
-}

test/volume_server/grpc/admin_readonly_collection_test.go

@@ -1,177 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestVolumeMarkReadonlyAndWritableLifecycle(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(72)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeMarkReadonly(ctx, &volume_server_pb.VolumeMarkReadonlyRequest{
-		VolumeId: volumeID,
-		Persist:  false,
-	})
-	if err != nil {
-		t.Fatalf("VolumeMarkReadonly failed: %v", err)
-	}
-
-	readOnlyStatus, err := grpcClient.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeStatus after readonly failed: %v", err)
-	}
-	if !readOnlyStatus.GetIsReadOnly() {
-		t.Fatalf("VolumeStatus expected readonly=true after VolumeMarkReadonly")
-	}
-
-	_, err = grpcClient.VolumeMarkWritable(ctx, &volume_server_pb.VolumeMarkWritableRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeMarkWritable failed: %v", err)
-	}
-
-	writableStatus, err := grpcClient.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeStatus after writable failed: %v", err)
-	}
-	if writableStatus.GetIsReadOnly() {
-		t.Fatalf("VolumeStatus expected readonly=false after VolumeMarkWritable")
-	}
-}
-
-func TestVolumeMarkReadonlyPersistTrue(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(74)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeMarkReadonly(ctx, &volume_server_pb.VolumeMarkReadonlyRequest{
-		VolumeId: volumeID,
-		Persist:  true,
-	})
-	if err != nil {
-		t.Fatalf("VolumeMarkReadonly persist=true failed: %v", err)
-	}
-
-	statusResp, err := grpcClient.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeStatus after persist readonly failed: %v", err)
-	}
-	if !statusResp.GetIsReadOnly() {
-		t.Fatalf("VolumeStatus expected readonly=true after persist readonly")
-	}
-}
-
-func TestVolumeMarkReadonlyWritableErrorPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeMarkReadonly(ctx, &volume_server_pb.VolumeMarkReadonlyRequest{VolumeId: 98771, Persist: true})
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeMarkReadonly missing-volume error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeMarkWritable(ctx, &volume_server_pb.VolumeMarkWritableRequest{VolumeId: 98772})
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeMarkWritable missing-volume error mismatch: %v", err)
-	}
-
-	stateResp, err := grpcClient.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = grpcClient.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{
-			Maintenance: true,
-			Version:     stateResp.GetState().GetVersion(),
-		},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeMarkReadonly(ctx, &volume_server_pb.VolumeMarkReadonlyRequest{VolumeId: 1, Persist: true})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeMarkReadonly maintenance error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeMarkWritable(ctx, &volume_server_pb.VolumeMarkWritableRequest{VolumeId: 1})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeMarkWritable maintenance error mismatch: %v", err)
-	}
-}
-
-func TestDeleteCollectionRemovesVolumeAndIsIdempotent(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(73)
-	const collection = "it-delete-collection"
-
-	framework.AllocateVolume(t, grpcClient, volumeID, collection)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeStatus before DeleteCollection failed: %v", err)
-	}
-
-	_, err = grpcClient.DeleteCollection(ctx, &volume_server_pb.DeleteCollectionRequest{Collection: collection})
-	if err != nil {
-		t.Fatalf("DeleteCollection existing collection failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeStatus(ctx, &volume_server_pb.VolumeStatusRequest{VolumeId: volumeID})
-	if err == nil {
-		t.Fatalf("VolumeStatus should fail after collection delete")
-	}
-	if !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("VolumeStatus after DeleteCollection error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.DeleteCollection(ctx, &volume_server_pb.DeleteCollectionRequest{Collection: collection})
-	if err != nil {
-		t.Fatalf("DeleteCollection idempotent retry failed: %v", err)
-	}
-}

test/volume_server/grpc/batch_delete_test.go

@@ -1,405 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"bytes"
-	"context"
-	"io"
-	"net"
-	"net/http"
-	"strconv"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestBatchDeleteInvalidFidAndMaintenanceMode(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	resp, err := client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{FileIds: []string{"bad-fid"}})
-	if err != nil {
-		t.Fatalf("BatchDelete invalid fid should return response, got error: %v", err)
-	}
-	if len(resp.GetResults()) != 1 {
-		t.Fatalf("expected one batch delete result, got %d", len(resp.GetResults()))
-	}
-	if got := resp.GetResults()[0].GetStatus(); got != 400 {
-		t.Fatalf("invalid fid expected status 400, got %d", got)
-	}
-
-	stateResp, err := client.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = client.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{Maintenance: true, Version: stateResp.GetState().GetVersion()},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	_, err = client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{FileIds: []string{"1,1234567890ab"}})
-	if err == nil {
-		t.Fatalf("BatchDelete should fail when maintenance mode is enabled")
-	}
-	if !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("expected maintenance mode error, got: %v", err)
-	}
-}
-
-func TestBatchDeleteCookieMismatchAndSkipCheck(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(31)
-	const needleID = uint64(900001)
-	const correctCookie = uint32(0x1122AABB)
-	const wrongCookie = uint32(0x1122AABC)
-	framework.AllocateVolume(t, client, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, correctCookie)
-	uploadResp := framework.UploadBytes(t, httpClient, cluster.VolumeAdminURL(), fid, []byte("batch-delete-cookie-check"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	wrongCookieFid := framework.NewFileID(volumeID, needleID, wrongCookie)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	mismatchResp, err := client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{
-		FileIds:         []string{wrongCookieFid},
-		SkipCookieCheck: false,
-	})
-	if err != nil {
-		t.Fatalf("BatchDelete with cookie check failed: %v", err)
-	}
-	if len(mismatchResp.GetResults()) != 1 {
-		t.Fatalf("BatchDelete cookie mismatch expected 1 result, got %d", len(mismatchResp.GetResults()))
-	}
-	if mismatchResp.GetResults()[0].GetStatus() != http.StatusBadRequest {
-		t.Fatalf("BatchDelete cookie mismatch expected status 400, got %d", mismatchResp.GetResults()[0].GetStatus())
-	}
-
-	skipCheckResp, err := client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{
-		FileIds:         []string{wrongCookieFid},
-		SkipCookieCheck: true,
-	})
-	if err != nil {
-		t.Fatalf("BatchDelete skip cookie check failed: %v", err)
-	}
-	if len(skipCheckResp.GetResults()) != 1 {
-		t.Fatalf("BatchDelete skip check expected 1 result, got %d", len(skipCheckResp.GetResults()))
-	}
-	if skipCheckResp.GetResults()[0].GetStatus() != http.StatusAccepted {
-		t.Fatalf("BatchDelete skip check expected status 202, got %d", skipCheckResp.GetResults()[0].GetStatus())
-	}
-
-	readAfterDelete := framework.ReadBytes(t, httpClient, cluster.VolumeAdminURL(), fid)
-	_ = framework.ReadAllAndClose(t, readAfterDelete)
-	if readAfterDelete.StatusCode != http.StatusNotFound {
-		t.Fatalf("read after skip-check batch delete expected 404, got %d", readAfterDelete.StatusCode)
-	}
-}
-
-func TestBatchDeleteMixedStatusesAndMismatchStopsProcessing(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(32)
-	framework.AllocateVolume(t, client, volumeID, "")
-
-	const needleA = uint64(910001)
-	const needleB = uint64(910002)
-	const needleC = uint64(910003)
-	const cookieA = uint32(0x11111111)
-	const cookieB = uint32(0x22222222)
-	const cookieC = uint32(0x33333333)
-
-	httpClient := framework.NewHTTPClient()
-	fidA := framework.NewFileID(volumeID, needleA, cookieA)
-	fidB := framework.NewFileID(volumeID, needleB, cookieB)
-	fidC := framework.NewFileID(volumeID, needleC, cookieC)
-
-	for _, tc := range []struct {
-		fid  string
-		body string
-	}{
-		{fid: fidA, body: "batch-delete-mixed-a"},
-		{fid: fidB, body: "batch-delete-mixed-b"},
-		{fid: fidC, body: "batch-delete-mixed-c"},
-	} {
-		uploadResp := framework.UploadBytes(t, httpClient, cluster.VolumeAdminURL(), tc.fid, []byte(tc.body))
-		_ = framework.ReadAllAndClose(t, uploadResp)
-		if uploadResp.StatusCode != http.StatusCreated {
-			t.Fatalf("upload %s expected 201, got %d", tc.fid, uploadResp.StatusCode)
-		}
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	missingFid := framework.NewFileID(volumeID, 919999, 0x44444444)
-	mixedResp, err := client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{
-		FileIds: []string{"bad-fid", fidA, missingFid},
-	})
-	if err != nil {
-		t.Fatalf("BatchDelete mixed status request failed: %v", err)
-	}
-	if len(mixedResp.GetResults()) != 3 {
-		t.Fatalf("BatchDelete mixed status expected 3 results, got %d", len(mixedResp.GetResults()))
-	}
-	if mixedResp.GetResults()[0].GetStatus() != http.StatusBadRequest {
-		t.Fatalf("BatchDelete mixed result[0] expected 400, got %d", mixedResp.GetResults()[0].GetStatus())
-	}
-	if mixedResp.GetResults()[1].GetStatus() != http.StatusAccepted {
-		t.Fatalf("BatchDelete mixed result[1] expected 202, got %d", mixedResp.GetResults()[1].GetStatus())
-	}
-	if mixedResp.GetResults()[2].GetStatus() != http.StatusNotFound {
-		t.Fatalf("BatchDelete mixed result[2] expected 404, got %d", mixedResp.GetResults()[2].GetStatus())
-	}
-
-	readDeletedA := framework.ReadBytes(t, httpClient, cluster.VolumeAdminURL(), fidA)
-	_ = framework.ReadAllAndClose(t, readDeletedA)
-	if readDeletedA.StatusCode != http.StatusNotFound {
-		t.Fatalf("fidA should be deleted after batch delete, got status %d", readDeletedA.StatusCode)
-	}
-
-	wrongCookieB := framework.NewFileID(volumeID, needleB, cookieB+1)
-	stopResp, err := client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{
-		FileIds: []string{wrongCookieB, fidC},
-	})
-	if err != nil {
-		t.Fatalf("BatchDelete mismatch-stop request failed: %v", err)
-	}
-	if len(stopResp.GetResults()) != 1 {
-		t.Fatalf("BatchDelete mismatch-stop expected 1 result due early break, got %d", len(stopResp.GetResults()))
-	}
-	if stopResp.GetResults()[0].GetStatus() != http.StatusBadRequest {
-		t.Fatalf("BatchDelete mismatch-stop expected 400, got %d", stopResp.GetResults()[0].GetStatus())
-	}
-
-	readB := framework.ReadBytes(t, httpClient, cluster.VolumeAdminURL(), fidB)
-	_ = framework.ReadAllAndClose(t, readB)
-	if readB.StatusCode != http.StatusOK {
-		t.Fatalf("fidB should remain after cookie mismatch path, got %d", readB.StatusCode)
-	}
-
-	readC := framework.ReadBytes(t, httpClient, cluster.VolumeAdminURL(), fidC)
-	_ = framework.ReadAllAndClose(t, readC)
-	if readC.StatusCode != http.StatusOK {
-		t.Fatalf("fidC should remain when batch processing stops on mismatch, got %d", readC.StatusCode)
-	}
-}
-
-func TestBatchDeleteRejectsChunkManifestNeedles(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(33)
-	framework.AllocateVolume(t, client, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 920001, 0x5555AAAA)
-	req, err := http.NewRequest(http.MethodPost, cluster.VolumeAdminURL()+"/"+fid+"?cm=true", bytes.NewReader([]byte("manifest-placeholder-payload")))
-	if err != nil {
-		t.Fatalf("create chunk manifest upload request: %v", err)
-	}
-	req.Header.Set("Content-Type", "application/octet-stream")
-	uploadResp := framework.DoRequest(t, httpClient, req)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("chunk manifest upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	resp, err := client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{FileIds: []string{fid}})
-	if err != nil {
-		t.Fatalf("BatchDelete chunk manifest should return response, got grpc error: %v", err)
-	}
-	if len(resp.GetResults()) != 1 {
-		t.Fatalf("BatchDelete chunk manifest expected one result, got %d", len(resp.GetResults()))
-	}
-	if resp.GetResults()[0].GetStatus() != http.StatusNotAcceptable {
-		t.Fatalf("BatchDelete chunk manifest expected status 406, got %d", resp.GetResults()[0].GetStatus())
-	}
-	if !strings.Contains(resp.GetResults()[0].GetError(), "ChunkManifest") {
-		t.Fatalf("BatchDelete chunk manifest expected error mentioning ChunkManifest, got %q", resp.GetResults()[0].GetError())
-	}
-
-	readResp := framework.ReadBytes(t, httpClient, cluster.VolumeAdminURL(), fid)
-	_ = framework.ReadAllAndClose(t, readResp)
-	if readResp.StatusCode != http.StatusOK {
-		t.Fatalf("chunk manifest should not be deleted by BatchDelete reject path, got %d", readResp.StatusCode)
-	}
-}
-
-func TestBatchDeleteEcNeedleSuccess(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	if stopProxy := maybeStartGrpcOffsetProxy(t, cluster.VolumeAdminAddress(), cluster.VolumeGRPCAddress()); stopProxy != nil {
-		t.Cleanup(stopProxy)
-	}
-
-	const volumeID = uint32(34)
-	const needleID = uint64(930001)
-	const cookie = uint32(0x6677BBCC)
-	framework.AllocateVolume(t, client, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	uploadResp := framework.UploadBytes(t, httpClient, cluster.VolumeAdminURL(), fid, []byte("batch-delete-ec-success"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := client.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	_, err = client.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0, 1, 2, 3, 4, 5, 6, 7, 8, 9},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsMount failed: %v", err)
-	}
-
-	deleteResp, err := client.BatchDelete(ctx, &volume_server_pb.BatchDeleteRequest{FileIds: []string{fid}})
-	if err != nil {
-		t.Fatalf("BatchDelete EC needle should return response, got grpc error: %v", err)
-	}
-	if len(deleteResp.GetResults()) != 1 {
-		t.Fatalf("BatchDelete EC needle expected one result, got %d", len(deleteResp.GetResults()))
-	}
-	if deleteResp.GetResults()[0].GetStatus() != http.StatusAccepted {
-		t.Fatalf("BatchDelete EC needle expected status 202, got %d error=%q", deleteResp.GetResults()[0].GetStatus(), deleteResp.GetResults()[0].GetError())
-	}
-	if deleteResp.GetResults()[0].GetSize() == 0 {
-		t.Fatalf("BatchDelete EC needle expected non-zero deleted size")
-	}
-
-	deletedStream, err := client.VolumeEcShardRead(ctx, &volume_server_pb.VolumeEcShardReadRequest{
-		VolumeId: volumeID,
-		ShardId:  0,
-		FileKey:  needleID,
-		Offset:   0,
-		Size:     1,
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardRead deleted-check start failed: %v", err)
-	}
-	deletedMsg, err := deletedStream.Recv()
-	if err != nil {
-		t.Fatalf("VolumeEcShardRead deleted-check recv failed: %v", err)
-	}
-	if !deletedMsg.GetIsDeleted() {
-		t.Fatalf("VolumeEcShardRead expected IsDeleted=true after EC batch delete")
-	}
-}
-
-func maybeStartGrpcOffsetProxy(t testing.TB, adminAddr, actualGrpcAddr string) func() {
-	t.Helper()
-
-	host, portText, err := net.SplitHostPort(adminAddr)
-	if err != nil {
-		t.Fatalf("split admin address %q: %v", adminAddr, err)
-	}
-	port, err := strconv.Atoi(portText)
-	if err != nil {
-		t.Fatalf("parse admin port %q: %v", portText, err)
-	}
-
-	expectedGrpcAddr := net.JoinHostPort(host, strconv.Itoa(port+10000))
-	if expectedGrpcAddr == actualGrpcAddr {
-		return nil
-	}
-
-	listener, err := net.Listen("tcp", expectedGrpcAddr)
-	if err != nil {
-		t.Fatalf("listen grpc-offset proxy %s -> %s: %v", expectedGrpcAddr, actualGrpcAddr, err)
-	}
-
-	stopped := make(chan struct{})
-	go func() {
-		for {
-			conn, acceptErr := listener.Accept()
-			if acceptErr != nil {
-				select {
-				case <-stopped:
-					return
-				default:
-					continue
-				}
-			}
-			go proxyBidirectional(conn, actualGrpcAddr)
-		}
-	}()
-
-	return func() {
-		close(stopped)
-		_ = listener.Close()
-	}
-}
-
-func proxyBidirectional(inbound net.Conn, targetAddr string) {
-	outbound, err := net.Dial("tcp", targetAddr)
-	if err != nil {
-		_ = inbound.Close()
-		return
-	}
-
-	go func() {
-		_, _ = io.Copy(outbound, inbound)
-		_ = outbound.Close()
-	}()
-	_, _ = io.Copy(inbound, outbound)
-	_ = inbound.Close()
-}

test/volume_server/grpc/copy_receive_variants_test.go

@@ -1,431 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"io"
-	"math"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestVolumeIncrementalCopyDataAndNoDataPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(91)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 770001, 0x1122AABB)
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte("incremental-copy-content"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	dataStream, err := grpcClient.VolumeIncrementalCopy(ctx, &volume_server_pb.VolumeIncrementalCopyRequest{
-		VolumeId: volumeID,
-		SinceNs:  0,
-	})
-	if err != nil {
-		t.Fatalf("VolumeIncrementalCopy start failed: %v", err)
-	}
-
-	totalBytes := 0
-	for {
-		msg, recvErr := dataStream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("VolumeIncrementalCopy recv failed: %v", recvErr)
-		}
-		totalBytes += len(msg.GetFileContent())
-	}
-	if totalBytes == 0 {
-		t.Fatalf("VolumeIncrementalCopy expected streamed bytes for since_ns=0")
-	}
-
-	noDataStream, err := grpcClient.VolumeIncrementalCopy(ctx, &volume_server_pb.VolumeIncrementalCopyRequest{
-		VolumeId: volumeID,
-		SinceNs:  math.MaxUint64,
-	})
-	if err != nil {
-		t.Fatalf("VolumeIncrementalCopy no-data start failed: %v", err)
-	}
-	_, err = noDataStream.Recv()
-	if err != io.EOF {
-		t.Fatalf("VolumeIncrementalCopy no-data expected EOF, got: %v", err)
-	}
-}
-
-func TestCopyFileIgnoreNotFoundAndStopOffsetZeroPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(92)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	missingNoIgnore, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:                 volumeID,
-		Ext:                      ".definitely-missing",
-		CompactionRevision:       math.MaxUint32,
-		StopOffset:               1,
-		IgnoreSourceFileNotFound: false,
-	})
-	if err == nil {
-		_, err = missingNoIgnore.Recv()
-	}
-	if err == nil {
-		t.Fatalf("CopyFile should fail for missing source file when ignore_source_file_not_found=false")
-	}
-
-	missingIgnored, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:                 volumeID,
-		Ext:                      ".definitely-missing",
-		CompactionRevision:       math.MaxUint32,
-		StopOffset:               1,
-		IgnoreSourceFileNotFound: true,
-	})
-	if err != nil {
-		t.Fatalf("CopyFile ignore-not-found start failed: %v", err)
-	}
-	_, err = missingIgnored.Recv()
-	if err != io.EOF {
-		t.Fatalf("CopyFile ignore-not-found expected EOF, got: %v", err)
-	}
-
-	stopZeroStream, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:                 volumeID,
-		Ext:                      ".definitely-missing",
-		CompactionRevision:       math.MaxUint32,
-		StopOffset:               0,
-		IgnoreSourceFileNotFound: false,
-	})
-	if err != nil {
-		t.Fatalf("CopyFile stop_offset=0 start failed: %v", err)
-	}
-	_, err = stopZeroStream.Recv()
-	if err != io.EOF {
-		t.Fatalf("CopyFile stop_offset=0 expected EOF, got: %v", err)
-	}
-}
-
-func TestCopyFileCompactionRevisionMismatch(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(94)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:           volumeID,
-		Ext:                ".idx",
-		CompactionRevision: 1, // fresh volume starts at revision 0
-		StopOffset:         1,
-	})
-	if err == nil {
-		_, err = stream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "is compacted") {
-		t.Fatalf("CopyFile compaction mismatch error mismatch: %v", err)
-	}
-}
-
-func TestReceiveFileProtocolViolationResponses(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	contentFirstStream, err := grpcClient.ReceiveFile(ctx)
-	if err != nil {
-		t.Fatalf("ReceiveFile stream create failed: %v", err)
-	}
-	if err = contentFirstStream.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_FileContent{
-			FileContent: []byte("content-before-info"),
-		},
-	}); err != nil {
-		t.Fatalf("ReceiveFile send content-first failed: %v", err)
-	}
-	contentFirstResp, err := contentFirstStream.CloseAndRecv()
-	if err != nil {
-		t.Fatalf("ReceiveFile content-first close failed: %v", err)
-	}
-	if !strings.Contains(contentFirstResp.GetError(), "file info must be sent first") {
-		t.Fatalf("ReceiveFile content-first response mismatch: %+v", contentFirstResp)
-	}
-
-	unknownTypeStream, err := grpcClient.ReceiveFile(ctx)
-	if err != nil {
-		t.Fatalf("ReceiveFile stream create for unknown-type failed: %v", err)
-	}
-	if err = unknownTypeStream.Send(&volume_server_pb.ReceiveFileRequest{}); err != nil {
-		t.Fatalf("ReceiveFile send unknown-type request failed: %v", err)
-	}
-	unknownTypeResp, err := unknownTypeStream.CloseAndRecv()
-	if err != nil {
-		t.Fatalf("ReceiveFile unknown-type close failed: %v", err)
-	}
-	if !strings.Contains(unknownTypeResp.GetError(), "unknown message type") {
-		t.Fatalf("ReceiveFile unknown-type response mismatch: %+v", unknownTypeResp)
-	}
-}
-
-func TestReceiveFileSuccessForRegularVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(95)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	payloadA := []byte("receive-file-chunk-a:")
-	payloadB := []byte("receive-file-chunk-b")
-	expected := append(append([]byte{}, payloadA...), payloadB...)
-
-	receiveStream, err := grpcClient.ReceiveFile(ctx)
-	if err != nil {
-		t.Fatalf("ReceiveFile stream create failed: %v", err)
-	}
-
-	if err = receiveStream.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_Info{
-			Info: &volume_server_pb.ReceiveFileInfo{
-				VolumeId:   volumeID,
-				Ext:        ".tmprecv",
-				Collection: "",
-				IsEcVolume: false,
-				FileSize:   uint64(len(expected)),
-			},
-		},
-	}); err != nil {
-		t.Fatalf("ReceiveFile send info failed: %v", err)
-	}
-	if err = receiveStream.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_FileContent{FileContent: payloadA},
-	}); err != nil {
-		t.Fatalf("ReceiveFile send payloadA failed: %v", err)
-	}
-	if err = receiveStream.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_FileContent{FileContent: payloadB},
-	}); err != nil {
-		t.Fatalf("ReceiveFile send payloadB failed: %v", err)
-	}
-
-	resp, err := receiveStream.CloseAndRecv()
-	if err != nil {
-		t.Fatalf("ReceiveFile close failed: %v", err)
-	}
-	if resp.GetError() != "" {
-		t.Fatalf("ReceiveFile unexpected error response: %+v", resp)
-	}
-	if resp.GetBytesWritten() != uint64(len(expected)) {
-		t.Fatalf("ReceiveFile bytes_written mismatch: got %d want %d", resp.GetBytesWritten(), len(expected))
-	}
-
-	copyStream, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:           volumeID,
-		Ext:                ".tmprecv",
-		CompactionRevision: math.MaxUint32,
-		StopOffset:         uint64(len(expected)),
-	})
-	if err != nil {
-		t.Fatalf("CopyFile for received data start failed: %v", err)
-	}
-
-	var copied []byte
-	for {
-		msg, recvErr := copyStream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("CopyFile for received data recv failed: %v", recvErr)
-		}
-		copied = append(copied, msg.GetFileContent()...)
-	}
-
-	if string(copied) != string(expected) {
-		t.Fatalf("received file data mismatch: got %q want %q", string(copied), string(expected))
-	}
-}
-
-func TestReceiveFileSuccessForEcVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	const volumeID = uint32(96)
-	const collection = "ec-receive-success"
-	const ext = ".ec00"
-
-	payloadA := []byte("receive-ec-file-chunk-a:")
-	payloadB := []byte("receive-ec-file-chunk-b")
-	expected := append(append([]byte{}, payloadA...), payloadB...)
-
-	receiveStream, err := grpcClient.ReceiveFile(ctx)
-	if err != nil {
-		t.Fatalf("ReceiveFile stream create failed: %v", err)
-	}
-
-	if err = receiveStream.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_Info{
-			Info: &volume_server_pb.ReceiveFileInfo{
-				VolumeId:   volumeID,
-				Ext:        ext,
-				Collection: collection,
-				IsEcVolume: true,
-				ShardId:    0,
-				FileSize:   uint64(len(expected)),
-			},
-		},
-	}); err != nil {
-		t.Fatalf("ReceiveFile send EC info failed: %v", err)
-	}
-	if err = receiveStream.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_FileContent{FileContent: payloadA},
-	}); err != nil {
-		t.Fatalf("ReceiveFile send EC payloadA failed: %v", err)
-	}
-	if err = receiveStream.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_FileContent{FileContent: payloadB},
-	}); err != nil {
-		t.Fatalf("ReceiveFile send EC payloadB failed: %v", err)
-	}
-
-	resp, err := receiveStream.CloseAndRecv()
-	if err != nil {
-		t.Fatalf("ReceiveFile EC close failed: %v", err)
-	}
-	if resp.GetError() != "" {
-		t.Fatalf("ReceiveFile EC unexpected error response: %+v", resp)
-	}
-	if resp.GetBytesWritten() != uint64(len(expected)) {
-		t.Fatalf("ReceiveFile EC bytes_written mismatch: got %d want %d", resp.GetBytesWritten(), len(expected))
-	}
-
-	copyStream, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:           volumeID,
-		Collection:         collection,
-		IsEcVolume:         true,
-		Ext:                ext,
-		CompactionRevision: math.MaxUint32,
-		StopOffset:         uint64(len(expected)),
-	})
-	if err != nil {
-		t.Fatalf("CopyFile for received EC data start failed: %v", err)
-	}
-
-	var copied []byte
-	for {
-		msg, recvErr := copyStream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("CopyFile for received EC data recv failed: %v", recvErr)
-		}
-		copied = append(copied, msg.GetFileContent()...)
-	}
-
-	if string(copied) != string(expected) {
-		t.Fatalf("received EC file data mismatch: got %q want %q", string(copied), string(expected))
-	}
-}
-
-func TestCopyFileEcVolumeIgnoreMissingSourcePaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	streamNoIgnore, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:                 99601,
-		Collection:               "ec-copy-missing",
-		IsEcVolume:               true,
-		Ext:                      ".ec00",
-		CompactionRevision:       math.MaxUint32,
-		StopOffset:               1,
-		IgnoreSourceFileNotFound: false,
-	})
-	if err == nil {
-		_, err = streamNoIgnore.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found ec volume id") {
-		t.Fatalf("CopyFile EC missing source error mismatch: %v", err)
-	}
-
-	streamIgnore, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:                 99602,
-		Collection:               "ec-copy-missing",
-		IsEcVolume:               true,
-		Ext:                      ".ec00",
-		CompactionRevision:       math.MaxUint32,
-		StopOffset:               1,
-		IgnoreSourceFileNotFound: true,
-	})
-	if err != nil {
-		t.Fatalf("CopyFile EC ignore-missing start failed: %v", err)
-	}
-	_, err = streamIgnore.Recv()
-	if err != io.EOF {
-		t.Fatalf("CopyFile EC ignore-missing expected EOF, got: %v", err)
-	}
-}

test/volume_server/grpc/copy_sync_test.go

@@ -1,284 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"io"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestVolumeSyncStatusAndReadVolumeFileStatus(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(41)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	syncResp, err := grpcClient.VolumeSyncStatus(ctx, &volume_server_pb.VolumeSyncStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VolumeSyncStatus failed: %v", err)
-	}
-	if syncResp.GetVolumeId() != volumeID {
-		t.Fatalf("VolumeSyncStatus volume id mismatch: got %d want %d", syncResp.GetVolumeId(), volumeID)
-	}
-
-	statusResp, err := grpcClient.ReadVolumeFileStatus(ctx, &volume_server_pb.ReadVolumeFileStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("ReadVolumeFileStatus failed: %v", err)
-	}
-	if statusResp.GetVolumeId() != volumeID {
-		t.Fatalf("ReadVolumeFileStatus volume id mismatch: got %d want %d", statusResp.GetVolumeId(), volumeID)
-	}
-	if statusResp.GetVersion() == 0 {
-		t.Fatalf("ReadVolumeFileStatus expected non-zero version")
-	}
-}
-
-func TestCopyAndStreamMethodsMissingVolumePaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeSyncStatus(ctx, &volume_server_pb.VolumeSyncStatusRequest{VolumeId: 98761})
-	if err == nil {
-		t.Fatalf("VolumeSyncStatus should fail for missing volume")
-	}
-
-	incrementalStream, err := grpcClient.VolumeIncrementalCopy(ctx, &volume_server_pb.VolumeIncrementalCopyRequest{VolumeId: 98762, SinceNs: 0})
-	if err == nil {
-		_, err = incrementalStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("VolumeIncrementalCopy missing-volume error mismatch: %v", err)
-	}
-
-	readAllStream, err := grpcClient.ReadAllNeedles(ctx, &volume_server_pb.ReadAllNeedlesRequest{VolumeIds: []uint32{98763}})
-	if err == nil {
-		_, err = readAllStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("ReadAllNeedles missing-volume error mismatch: %v", err)
-	}
-
-	copyFileStream, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{VolumeId: 98764, Ext: ".dat", StopOffset: 1})
-	if err == nil {
-		_, err = copyFileStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("CopyFile missing-volume error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.ReadVolumeFileStatus(ctx, &volume_server_pb.ReadVolumeFileStatusRequest{VolumeId: 98765})
-	if err == nil || !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("ReadVolumeFileStatus missing-volume error mismatch: %v", err)
-	}
-}
-
-func TestVolumeCopyAndReceiveFileMaintenanceRejection(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stateResp, err := grpcClient.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = grpcClient.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{Maintenance: true, Version: stateResp.GetState().GetVersion()},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	copyStream, err := grpcClient.VolumeCopy(ctx, &volume_server_pb.VolumeCopyRequest{VolumeId: 1, SourceDataNode: "127.0.0.1:1234"})
-	if err == nil {
-		_, err = copyStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeCopy maintenance error mismatch: %v", err)
-	}
-
-	receiveClient, err := grpcClient.ReceiveFile(ctx)
-	if err != nil {
-		t.Fatalf("ReceiveFile client creation failed: %v", err)
-	}
-	_ = receiveClient.Send(&volume_server_pb.ReceiveFileRequest{
-		Data: &volume_server_pb.ReceiveFileRequest_Info{
-			Info: &volume_server_pb.ReceiveFileInfo{VolumeId: 1, Ext: ".dat"},
-		},
-	})
-	_, err = receiveClient.CloseAndRecv()
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("ReceiveFile maintenance error mismatch: %v", err)
-	}
-}
-
-func TestVolumeCopySuccessFromPeerAndMountsDestination(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartDualVolumeCluster(t, matrix.P1())
-	sourceConn, sourceClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(0))
-	defer sourceConn.Close()
-	destConn, destClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(1))
-	defer destConn.Close()
-
-	const volumeID = uint32(42)
-	framework.AllocateVolume(t, sourceClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 880001, 0x12345678)
-	payload := []byte("volume-copy-success-payload")
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(0), fid, payload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload to source expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	copyStream, err := destClient.VolumeCopy(ctx, &volume_server_pb.VolumeCopyRequest{
-		VolumeId:       volumeID,
-		Collection:     "",
-		SourceDataNode: clusterHarness.VolumeAdminAddress(0) + "." + strings.Split(clusterHarness.VolumeGRPCAddress(0), ":")[1],
-	})
-	if err != nil {
-		t.Fatalf("VolumeCopy start failed: %v", err)
-	}
-
-	sawFinalAppendTimestamp := false
-	for {
-		msg, recvErr := copyStream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("VolumeCopy recv failed: %v", recvErr)
-		}
-		if msg.GetLastAppendAtNs() > 0 {
-			sawFinalAppendTimestamp = true
-		}
-	}
-	if !sawFinalAppendTimestamp {
-		t.Fatalf("VolumeCopy expected final response with last_append_at_ns")
-	}
-
-	destReadResp := framework.ReadBytes(t, httpClient, clusterHarness.VolumeAdminURL(1), fid)
-	destReadBody := framework.ReadAllAndClose(t, destReadResp)
-	if destReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("read from copied destination expected 200, got %d", destReadResp.StatusCode)
-	}
-	if string(destReadBody) != string(payload) {
-		t.Fatalf("destination copied payload mismatch: got %q want %q", string(destReadBody), string(payload))
-	}
-}
-
-func TestVolumeCopyOverwritesExistingDestinationVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartDualVolumeCluster(t, matrix.P1())
-	sourceConn, sourceClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(0))
-	defer sourceConn.Close()
-	destConn, destClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(1))
-	defer destConn.Close()
-
-	const volumeID = uint32(43)
-	framework.AllocateVolume(t, sourceClient, volumeID, "")
-	framework.AllocateVolume(t, destClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 880002, 0x23456789)
-	sourcePayload := []byte("volume-copy-overwrite-source")
-	destPayload := []byte("volume-copy-overwrite-destination-old")
-
-	sourceUploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(0), fid, sourcePayload)
-	_ = framework.ReadAllAndClose(t, sourceUploadResp)
-	if sourceUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload to source expected 201, got %d", sourceUploadResp.StatusCode)
-	}
-
-	destUploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(1), fid, destPayload)
-	_ = framework.ReadAllAndClose(t, destUploadResp)
-	if destUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload to destination expected 201, got %d", destUploadResp.StatusCode)
-	}
-
-	destReadBeforeResp := framework.ReadBytes(t, httpClient, clusterHarness.VolumeAdminURL(1), fid)
-	destReadBeforeBody := framework.ReadAllAndClose(t, destReadBeforeResp)
-	if destReadBeforeResp.StatusCode != http.StatusOK {
-		t.Fatalf("destination pre-copy read expected 200, got %d", destReadBeforeResp.StatusCode)
-	}
-	if string(destReadBeforeBody) != string(destPayload) {
-		t.Fatalf("destination pre-copy payload mismatch: got %q want %q", string(destReadBeforeBody), string(destPayload))
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	copyStream, err := destClient.VolumeCopy(ctx, &volume_server_pb.VolumeCopyRequest{
-		VolumeId:       volumeID,
-		Collection:     "",
-		SourceDataNode: clusterHarness.VolumeAdminAddress(0) + "." + strings.Split(clusterHarness.VolumeGRPCAddress(0), ":")[1],
-	})
-	if err != nil {
-		t.Fatalf("VolumeCopy overwrite start failed: %v", err)
-	}
-
-	sawFinalAppendTimestamp := false
-	for {
-		msg, recvErr := copyStream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("VolumeCopy overwrite recv failed: %v", recvErr)
-		}
-		if msg.GetLastAppendAtNs() > 0 {
-			sawFinalAppendTimestamp = true
-		}
-	}
-	if !sawFinalAppendTimestamp {
-		t.Fatalf("VolumeCopy overwrite expected final response with last_append_at_ns")
-	}
-
-	destReadAfterResp := framework.ReadBytes(t, httpClient, clusterHarness.VolumeAdminURL(1), fid)
-	destReadAfterBody := framework.ReadAllAndClose(t, destReadAfterResp)
-	if destReadAfterResp.StatusCode != http.StatusOK {
-		t.Fatalf("destination post-copy read expected 200, got %d", destReadAfterResp.StatusCode)
-	}
-	if string(destReadAfterBody) != string(sourcePayload) {
-		t.Fatalf("destination post-copy payload mismatch: got %q want %q", string(destReadAfterBody), string(sourcePayload))
-	}
-}

test/volume_server/grpc/data_rw_test.go

@@ -1,210 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestReadNeedleBlobAndMetaMissingVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.ReadNeedleBlob(ctx, &volume_server_pb.ReadNeedleBlobRequest{
-		VolumeId: 99111,
-		Offset:   0,
-		Size:     16,
-	})
-	if err == nil {
-		t.Fatalf("ReadNeedleBlob should fail for missing volume")
-	}
-	if !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("ReadNeedleBlob missing volume error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.ReadNeedleMeta(ctx, &volume_server_pb.ReadNeedleMetaRequest{
-		VolumeId: 99112,
-		NeedleId: 1,
-		Offset:   0,
-		Size:     16,
-	})
-	if err == nil {
-		t.Fatalf("ReadNeedleMeta should fail for missing volume")
-	}
-	if !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("ReadNeedleMeta missing volume error mismatch: %v", err)
-	}
-}
-
-func TestWriteNeedleBlobMaintenanceAndMissingVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.WriteNeedleBlob(ctx, &volume_server_pb.WriteNeedleBlobRequest{
-		VolumeId:   99113,
-		NeedleId:   1,
-		NeedleBlob: []byte("abc"),
-		Size:       3,
-	})
-	if err == nil {
-		t.Fatalf("WriteNeedleBlob should fail for missing volume")
-	}
-	if !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("WriteNeedleBlob missing volume error mismatch: %v", err)
-	}
-
-	stateResp, err := grpcClient.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = grpcClient.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{Maintenance: true, Version: stateResp.GetState().GetVersion()},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	_, err = grpcClient.WriteNeedleBlob(ctx, &volume_server_pb.WriteNeedleBlobRequest{
-		VolumeId:   1,
-		NeedleId:   2,
-		NeedleBlob: []byte("def"),
-		Size:       3,
-	})
-	if err == nil {
-		t.Fatalf("WriteNeedleBlob should fail in maintenance mode")
-	}
-	if !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("WriteNeedleBlob maintenance mode error mismatch: %v", err)
-	}
-}
-
-func TestReadNeedleBlobAndMetaInvalidOffsets(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(92)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 880001, 0xCCDD1122)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("invalid-offset-check"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.ReadNeedleBlob(ctx, &volume_server_pb.ReadNeedleBlobRequest{
-		VolumeId: volumeID,
-		Offset:   1 << 40,
-		Size:     64,
-	})
-	if err == nil {
-		t.Fatalf("ReadNeedleBlob should fail for invalid offset")
-	}
-	if !strings.Contains(strings.ToLower(err.Error()), "read needle blob") {
-		t.Fatalf("ReadNeedleBlob invalid offset error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.ReadNeedleMeta(ctx, &volume_server_pb.ReadNeedleMetaRequest{
-		VolumeId: volumeID,
-		NeedleId: 880001,
-		Offset:   1 << 40,
-		Size:     64,
-	})
-	if err == nil {
-		t.Fatalf("ReadNeedleMeta should fail for invalid offset")
-	}
-}
-
-func TestReadNeedleMetaUnsupportedForEcMountedVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(93)
-	const needleID = uint64(880002)
-	const cookie = uint32(0x11AA22BB)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("ec-meta-unsupported"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0, 1, 2, 3, 4, 5, 6, 7, 8, 9},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsMount failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeUnmount(ctx, &volume_server_pb.VolumeUnmountRequest{
-		VolumeId: volumeID,
-	})
-	if err != nil {
-		t.Fatalf("VolumeUnmount failed: %v", err)
-	}
-
-	_, err = grpcClient.ReadNeedleMeta(ctx, &volume_server_pb.ReadNeedleMetaRequest{
-		VolumeId: volumeID,
-		NeedleId: needleID,
-		Offset:   0,
-		Size:     128,
-	})
-	if err == nil {
-		t.Fatalf("ReadNeedleMeta should fail when only EC shards are mounted")
-	}
-	if !strings.Contains(strings.ToLower(err.Error()), "ec shards is not supported") {
-		t.Fatalf("ReadNeedleMeta EC-only error mismatch: %v", err)
-	}
-}

test/volume_server/grpc/data_stream_success_test.go

@@ -1,339 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"io"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-	"github.com/seaweedfs/seaweedfs/weed/storage/idx"
-	"github.com/seaweedfs/seaweedfs/weed/storage/types"
-)
-
-func TestReadWriteNeedleBlobAndMetaRoundTrip(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(83)
-	const sourceNeedleID = uint64(333333)
-	const sourceCookie = uint32(0xABCD0102)
-	const clonedNeedleID = uint64(333334)
-
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	payload := []byte("blob-roundtrip-content")
-	fid := framework.NewFileID(volumeID, sourceNeedleID, sourceCookie)
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, payload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	fileStatus, err := grpcClient.ReadVolumeFileStatus(ctx, &volume_server_pb.ReadVolumeFileStatusRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("ReadVolumeFileStatus failed: %v", err)
-	}
-	if fileStatus.GetIdxFileSize() == 0 {
-		t.Fatalf("expected non-zero idx file size after upload")
-	}
-
-	idxBytes := copyFileBytes(t, grpcClient, &volume_server_pb.CopyFileRequest{
-		VolumeId:           volumeID,
-		Ext:                ".idx",
-		CompactionRevision: fileStatus.GetCompactionRevision(),
-		StopOffset:         fileStatus.GetIdxFileSize(),
-	})
-	offset, size := findNeedleOffsetAndSize(t, idxBytes, sourceNeedleID)
-
-	blobResp, err := grpcClient.ReadNeedleBlob(ctx, &volume_server_pb.ReadNeedleBlobRequest{
-		VolumeId: volumeID,
-		Offset:   offset,
-		Size:     size,
-	})
-	if err != nil {
-		t.Fatalf("ReadNeedleBlob failed: %v", err)
-	}
-	if len(blobResp.GetNeedleBlob()) == 0 {
-		t.Fatalf("ReadNeedleBlob returned empty blob")
-	}
-
-	metaResp, err := grpcClient.ReadNeedleMeta(ctx, &volume_server_pb.ReadNeedleMetaRequest{
-		VolumeId: volumeID,
-		NeedleId: sourceNeedleID,
-		Offset:   offset,
-		Size:     size,
-	})
-	if err != nil {
-		t.Fatalf("ReadNeedleMeta failed: %v", err)
-	}
-	if metaResp.GetCookie() != sourceCookie {
-		t.Fatalf("ReadNeedleMeta cookie mismatch: got %d want %d", metaResp.GetCookie(), sourceCookie)
-	}
-
-	_, err = grpcClient.WriteNeedleBlob(ctx, &volume_server_pb.WriteNeedleBlobRequest{
-		VolumeId:   volumeID,
-		NeedleId:   clonedNeedleID,
-		Size:       size,
-		NeedleBlob: blobResp.GetNeedleBlob(),
-	})
-	if err != nil {
-		t.Fatalf("WriteNeedleBlob failed: %v", err)
-	}
-
-	clonedStatus, err := grpcClient.VolumeNeedleStatus(ctx, &volume_server_pb.VolumeNeedleStatusRequest{
-		VolumeId: volumeID,
-		NeedleId: clonedNeedleID,
-	})
-	if err != nil {
-		t.Fatalf("VolumeNeedleStatus for cloned needle failed: %v", err)
-	}
-	if clonedStatus.GetNeedleId() != sourceNeedleID {
-		t.Fatalf("cloned needle status id mismatch: got %d want %d", clonedStatus.GetNeedleId(), sourceNeedleID)
-	}
-	if clonedStatus.GetCookie() != sourceCookie {
-		t.Fatalf("cloned needle cookie mismatch: got %d want %d", clonedStatus.GetCookie(), sourceCookie)
-	}
-
-	clonedReadResp := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), framework.NewFileID(volumeID, clonedNeedleID, sourceCookie))
-	clonedReadBody := framework.ReadAllAndClose(t, clonedReadResp)
-	if clonedReadResp.StatusCode != 200 {
-		t.Fatalf("cloned needle GET expected 200, got %d", clonedReadResp.StatusCode)
-	}
-	if string(clonedReadBody) != string(payload) {
-		t.Fatalf("cloned needle body mismatch: got %q want %q", string(clonedReadBody), string(payload))
-	}
-}
-
-func TestReadAllNeedlesStreamsUploadedRecords(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(84)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	expected := map[uint64]string{
-		444441: "read-all-needle-one",
-		444442: "read-all-needle-two",
-	}
-	for key, body := range expected {
-		resp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), framework.NewFileID(volumeID, key, 0xA0B0C0D0), []byte(body))
-		_ = framework.ReadAllAndClose(t, resp)
-		if resp.StatusCode != 201 {
-			t.Fatalf("upload for key %d expected 201, got %d", key, resp.StatusCode)
-		}
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.ReadAllNeedles(ctx, &volume_server_pb.ReadAllNeedlesRequest{VolumeIds: []uint32{volumeID}})
-	if err != nil {
-		t.Fatalf("ReadAllNeedles start failed: %v", err)
-	}
-
-	seen := map[uint64]string{}
-	for {
-		msg, recvErr := stream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("ReadAllNeedles recv failed: %v", recvErr)
-		}
-		if _, wanted := expected[msg.GetNeedleId()]; wanted {
-			seen[msg.GetNeedleId()] = string(msg.GetNeedleBlob())
-		}
-	}
-
-	for key, body := range expected {
-		got, found := seen[key]
-		if !found {
-			t.Fatalf("ReadAllNeedles missing key %d in stream", key)
-		}
-		if got != body {
-			t.Fatalf("ReadAllNeedles body mismatch for key %d: got %q want %q", key, got, body)
-		}
-	}
-}
-
-func TestReadAllNeedlesExistingThenMissingVolumeAbortsStream(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const existingVolumeID = uint32(85)
-	const missingVolumeID = uint32(98585)
-	const needleID = uint64(445551)
-	framework.AllocateVolume(t, grpcClient, existingVolumeID, "")
-
-	client := framework.NewHTTPClient()
-	fid := framework.NewFileID(existingVolumeID, needleID, 0xAA11BB22)
-	payload := "read-all-existing-then-missing"
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte(payload))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.ReadAllNeedles(ctx, &volume_server_pb.ReadAllNeedlesRequest{
-		VolumeIds: []uint32{existingVolumeID, missingVolumeID},
-	})
-	if err != nil {
-		t.Fatalf("ReadAllNeedles start failed: %v", err)
-	}
-
-	seenUploadedNeedle := false
-	for {
-		msg, recvErr := stream.Recv()
-		if recvErr == io.EOF {
-			t.Fatalf("ReadAllNeedles expected stream error for missing volume, got EOF")
-		}
-		if recvErr != nil {
-			if !strings.Contains(recvErr.Error(), "not found volume id") {
-				t.Fatalf("ReadAllNeedles missing-volume error mismatch: %v", recvErr)
-			}
-			break
-		}
-		if msg.GetNeedleId() == needleID && string(msg.GetNeedleBlob()) == payload {
-			seenUploadedNeedle = true
-		}
-	}
-
-	if !seenUploadedNeedle {
-		t.Fatalf("ReadAllNeedles should stream entries from existing volume before missing-volume abort")
-	}
-}
-
-func TestReadAllNeedlesStreamsAcrossMultipleVolumes(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeIDA = uint32(86)
-	const volumeIDB = uint32(87)
-	const needleIDA = uint64(445561)
-	const needleIDB = uint64(445562)
-	framework.AllocateVolume(t, grpcClient, volumeIDA, "")
-	framework.AllocateVolume(t, grpcClient, volumeIDB, "")
-
-	client := framework.NewHTTPClient()
-	fidA := framework.NewFileID(volumeIDA, needleIDA, 0xAA11CC22)
-	fidB := framework.NewFileID(volumeIDB, needleIDB, 0xBB22DD33)
-	payloadA := "read-all-multi-volume-a"
-	payloadB := "read-all-multi-volume-b"
-
-	uploadA := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fidA, []byte(payloadA))
-	_ = framework.ReadAllAndClose(t, uploadA)
-	if uploadA.StatusCode != http.StatusCreated {
-		t.Fatalf("upload A expected 201, got %d", uploadA.StatusCode)
-	}
-	uploadB := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fidB, []byte(payloadB))
-	_ = framework.ReadAllAndClose(t, uploadB)
-	if uploadB.StatusCode != http.StatusCreated {
-		t.Fatalf("upload B expected 201, got %d", uploadB.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.ReadAllNeedles(ctx, &volume_server_pb.ReadAllNeedlesRequest{
-		VolumeIds: []uint32{volumeIDA, volumeIDB},
-	})
-	if err != nil {
-		t.Fatalf("ReadAllNeedles start failed: %v", err)
-	}
-
-	seen := map[uint64]string{}
-	for {
-		msg, recvErr := stream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("ReadAllNeedles recv failed: %v", recvErr)
-		}
-		if msg.GetNeedleId() == needleIDA || msg.GetNeedleId() == needleIDB {
-			seen[msg.GetNeedleId()] = string(msg.GetNeedleBlob())
-		}
-	}
-
-	if got := seen[needleIDA]; got != payloadA {
-		t.Fatalf("ReadAllNeedles missing/mismatched payload for volume A needle: got %q want %q", got, payloadA)
-	}
-	if got := seen[needleIDB]; got != payloadB {
-		t.Fatalf("ReadAllNeedles missing/mismatched payload for volume B needle: got %q want %q", got, payloadB)
-	}
-}
-
-func copyFileBytes(t testing.TB, grpcClient volume_server_pb.VolumeServerClient, req *volume_server_pb.CopyFileRequest) []byte {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.CopyFile(ctx, req)
-	if err != nil {
-		t.Fatalf("CopyFile start failed: %v", err)
-	}
-
-	var out []byte
-	for {
-		msg, recvErr := stream.Recv()
-		if recvErr == io.EOF {
-			return out
-		}
-		if recvErr != nil {
-			t.Fatalf("CopyFile recv failed: %v", recvErr)
-		}
-		out = append(out, msg.GetFileContent()...)
-	}
-}
-
-func findNeedleOffsetAndSize(t testing.TB, idxBytes []byte, needleID uint64) (offset int64, size int32) {
-	t.Helper()
-
-	for i := 0; i+types.NeedleMapEntrySize <= len(idxBytes); i += types.NeedleMapEntrySize {
-		key, entryOffset, entrySize := idx.IdxFileEntry(idxBytes[i : i+types.NeedleMapEntrySize])
-		if uint64(key) != needleID {
-			continue
-		}
-		if entryOffset.IsZero() || entrySize <= 0 {
-			continue
-		}
-		return entryOffset.ToActualOffset(), int32(entrySize)
-	}
-
-	t.Fatalf("needle id %d not found in idx entries", needleID)
-	return 0, 0
-}

test/volume_server/grpc/erasure_coding_test.go

@@ -1,777 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"io"
-	"math"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-	"github.com/seaweedfs/seaweedfs/weed/storage/erasure_coding"
-	"github.com/seaweedfs/seaweedfs/weed/storage/needle"
-	"google.golang.org/grpc/codes"
-	"google.golang.org/grpc/status"
-)
-
-func TestEcMaintenanceModeRejections(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stateResp, err := grpcClient.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = grpcClient.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{
-			Maintenance: true,
-			Version:     stateResp.GetState().GetVersion(),
-		},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{VolumeId: 1, Collection: ""})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeEcShardsGenerate maintenance error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsCopy(ctx, &volume_server_pb.VolumeEcShardsCopyRequest{
-		VolumeId:       1,
-		Collection:     "",
-		SourceDataNode: "127.0.0.1:1",
-		ShardIds:       []uint32{0},
-	})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeEcShardsCopy maintenance error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsDelete(ctx, &volume_server_pb.VolumeEcShardsDeleteRequest{
-		VolumeId:   1,
-		Collection: "",
-		ShardIds:   []uint32{0},
-	})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeEcShardsDelete maintenance error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcBlobDelete(ctx, &volume_server_pb.VolumeEcBlobDeleteRequest{
-		VolumeId:   1,
-		Collection: "",
-		FileKey:    1,
-		Version:    3,
-	})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeEcBlobDelete maintenance error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsToVolume(ctx, &volume_server_pb.VolumeEcShardsToVolumeRequest{
-		VolumeId:   1,
-		Collection: "",
-	})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeEcShardsToVolume maintenance error mismatch: %v", err)
-	}
-}
-
-func TestEcMissingInvalidAndNoopPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   98791,
-		Collection: "",
-	})
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeEcShardsGenerate missing-volume error mismatch: %v", err)
-	}
-
-	rebuildResp, err := grpcClient.VolumeEcShardsRebuild(ctx, &volume_server_pb.VolumeEcShardsRebuildRequest{
-		VolumeId:   98792,
-		Collection: "ec-rebuild",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsRebuild missing-volume should return empty success, got: %v", err)
-	}
-	if len(rebuildResp.GetRebuiltShardIds()) != 0 {
-		t.Fatalf("VolumeEcShardsRebuild expected no rebuilt shards for missing volume, got %v", rebuildResp.GetRebuiltShardIds())
-	}
-
-	_, err = grpcClient.VolumeEcShardsCopy(ctx, &volume_server_pb.VolumeEcShardsCopyRequest{
-		VolumeId:       98793,
-		Collection:     "ec-copy",
-		SourceDataNode: "127.0.0.1:1",
-		ShardIds:       []uint32{0},
-		DiskId:         99,
-	})
-	if err == nil || !strings.Contains(err.Error(), "invalid disk_id") {
-		t.Fatalf("VolumeEcShardsCopy invalid-disk error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsDelete(ctx, &volume_server_pb.VolumeEcShardsDeleteRequest{
-		VolumeId:   98794,
-		Collection: "ec-delete",
-		ShardIds:   []uint32{0, 1},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsDelete missing-volume should be no-op success, got: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   98795,
-		Collection: "ec-mount",
-		ShardIds:   []uint32{0},
-	})
-	if err == nil {
-		t.Fatalf("VolumeEcShardsMount should fail for missing EC shards")
-	}
-
-	_, err = grpcClient.VolumeEcShardsUnmount(ctx, &volume_server_pb.VolumeEcShardsUnmountRequest{
-		VolumeId: 98796,
-		ShardIds: []uint32{0},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsUnmount missing shards should be no-op success, got: %v", err)
-	}
-
-	readStream, err := grpcClient.VolumeEcShardRead(ctx, &volume_server_pb.VolumeEcShardReadRequest{
-		VolumeId: 98797,
-		ShardId:  0,
-		Offset:   0,
-		Size:     1,
-	})
-	if err == nil {
-		_, err = readStream.Recv()
-	}
-	if err == nil || err == io.EOF {
-		t.Fatalf("VolumeEcShardRead should fail for missing EC volume")
-	}
-
-	_, err = grpcClient.VolumeEcBlobDelete(ctx, &volume_server_pb.VolumeEcBlobDeleteRequest{
-		VolumeId:   98798,
-		Collection: "ec-blob",
-		FileKey:    1,
-		Version:    3,
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcBlobDelete missing local EC volume should be no-op success, got: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsToVolume(ctx, &volume_server_pb.VolumeEcShardsToVolumeRequest{
-		VolumeId:   98799,
-		Collection: "ec-to-volume",
-	})
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeEcShardsToVolume missing-volume error mismatch: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsInfo(ctx, &volume_server_pb.VolumeEcShardsInfoRequest{
-		VolumeId: 98800,
-	})
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeEcShardsInfo missing-volume error mismatch: %v", err)
-	}
-}
-
-func TestEcGenerateMountInfoUnmountLifecycle(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(115)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 990001, 0x1234ABCD)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("ec-generate-lifecycle-content"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate success path failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsMount success path failed: %v", err)
-	}
-
-	infoResp, err := grpcClient.VolumeEcShardsInfo(ctx, &volume_server_pb.VolumeEcShardsInfoRequest{
-		VolumeId: volumeID,
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsInfo after mount failed: %v", err)
-	}
-	if len(infoResp.GetEcShardInfos()) == 0 {
-		t.Fatalf("VolumeEcShardsInfo expected non-empty shard infos after mount")
-	}
-	if infoResp.GetVolumeSize() == 0 {
-		t.Fatalf("VolumeEcShardsInfo expected non-zero volume size after mount")
-	}
-
-	_, err = grpcClient.VolumeEcShardsUnmount(ctx, &volume_server_pb.VolumeEcShardsUnmountRequest{
-		VolumeId: volumeID,
-		ShardIds: []uint32{0},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsUnmount success path failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsInfo(ctx, &volume_server_pb.VolumeEcShardsInfoRequest{
-		VolumeId: volumeID,
-	})
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeEcShardsInfo after unmount expected not-found error, got: %v", err)
-	}
-}
-
-func TestEcShardReadAndBlobDeleteLifecycle(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(116)
-	const fileKey = uint64(990002)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, fileKey, 0x2233CCDD)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("ec-shard-read-delete-content"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsMount failed: %v", err)
-	}
-
-	readStream, err := grpcClient.VolumeEcShardRead(ctx, &volume_server_pb.VolumeEcShardReadRequest{
-		VolumeId: volumeID,
-		ShardId:  0,
-		Offset:   0,
-		Size:     1,
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardRead start failed: %v", err)
-	}
-	firstChunk, err := readStream.Recv()
-	if err != nil {
-		t.Fatalf("VolumeEcShardRead recv failed: %v", err)
-	}
-	if len(firstChunk.GetData()) == 0 {
-		t.Fatalf("VolumeEcShardRead expected non-empty data chunk before deletion")
-	}
-
-	_, err = grpcClient.VolumeEcBlobDelete(ctx, &volume_server_pb.VolumeEcBlobDeleteRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		FileKey:    fileKey,
-		Version:    uint32(needle.GetCurrentVersion()),
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcBlobDelete first delete failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcBlobDelete(ctx, &volume_server_pb.VolumeEcBlobDeleteRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		FileKey:    fileKey,
-		Version:    uint32(needle.GetCurrentVersion()),
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcBlobDelete second delete should be idempotent success, got: %v", err)
-	}
-
-	deletedStream, err := grpcClient.VolumeEcShardRead(ctx, &volume_server_pb.VolumeEcShardReadRequest{
-		VolumeId: volumeID,
-		ShardId:  0,
-		FileKey:  fileKey,
-		Offset:   0,
-		Size:     1,
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardRead deleted-check start failed: %v", err)
-	}
-	deletedMsg, err := deletedStream.Recv()
-	if err != nil {
-		t.Fatalf("VolumeEcShardRead deleted-check recv failed: %v", err)
-	}
-	if !deletedMsg.GetIsDeleted() {
-		t.Fatalf("VolumeEcShardRead expected IsDeleted=true after blob delete")
-	}
-	_, err = deletedStream.Recv()
-	if err != io.EOF {
-		t.Fatalf("VolumeEcShardRead deleted-check expected EOF after deleted marker, got: %v", err)
-	}
-}
-
-func TestEcRebuildMissingShardLifecycle(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(117)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 990003, 0x3344DDEE)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("ec-rebuild-shard-content"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsDelete(ctx, &volume_server_pb.VolumeEcShardsDeleteRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsDelete shard 0 failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0},
-	})
-	if err == nil {
-		t.Fatalf("VolumeEcShardsMount should fail when shard 0 has been deleted")
-	}
-
-	rebuildResp, err := grpcClient.VolumeEcShardsRebuild(ctx, &volume_server_pb.VolumeEcShardsRebuildRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsRebuild failed: %v", err)
-	}
-	if len(rebuildResp.GetRebuiltShardIds()) == 0 {
-		t.Fatalf("VolumeEcShardsRebuild expected rebuilt shard ids")
-	}
-	foundShard0 := false
-	for _, shardID := range rebuildResp.GetRebuiltShardIds() {
-		if shardID == 0 {
-			foundShard0 = true
-			break
-		}
-	}
-	if !foundShard0 {
-		t.Fatalf("VolumeEcShardsRebuild expected shard 0 to be rebuilt, got %v", rebuildResp.GetRebuiltShardIds())
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsMount shard 0 after rebuild failed: %v", err)
-	}
-}
-
-func TestEcShardsToVolumeMissingShardAndNoLiveEntries(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	httpClient := framework.NewHTTPClient()
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	t.Run("missing shard returns error", func(t *testing.T) {
-		const volumeID = uint32(118)
-		framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-		fid := framework.NewFileID(volumeID, 990004, 0x4455EEFF)
-		uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("ec-to-volume-missing-shard-content"))
-		_ = framework.ReadAllAndClose(t, uploadResp)
-		if uploadResp.StatusCode != http.StatusCreated {
-			t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-		}
-
-		_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-			VolumeId:   volumeID,
-			Collection: "",
-		})
-		if err != nil {
-			t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-		}
-
-		_, err = grpcClient.VolumeEcShardsDelete(ctx, &volume_server_pb.VolumeEcShardsDeleteRequest{
-			VolumeId:   volumeID,
-			Collection: "",
-			ShardIds:   []uint32{0},
-		})
-		if err != nil {
-			t.Fatalf("VolumeEcShardsDelete shard 0 failed: %v", err)
-		}
-
-		_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-			VolumeId:   volumeID,
-			Collection: "",
-			ShardIds:   []uint32{1},
-		})
-		if err != nil {
-			t.Fatalf("VolumeEcShardsMount shard 1 failed: %v", err)
-		}
-
-		_, err = grpcClient.VolumeEcShardsToVolume(ctx, &volume_server_pb.VolumeEcShardsToVolumeRequest{
-			VolumeId:   volumeID,
-			Collection: "",
-		})
-		if err == nil || !strings.Contains(err.Error(), "missing shard 0") {
-			t.Fatalf("VolumeEcShardsToVolume missing-shard error mismatch: %v", err)
-		}
-	})
-
-	t.Run("no live entries returns failed precondition", func(t *testing.T) {
-		const volumeID = uint32(119)
-		const needleID = uint64(990005)
-		const cookie = uint32(0x5566FF11)
-		framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-		fid := framework.NewFileID(volumeID, needleID, cookie)
-		uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("ec-no-live-entries-content"))
-		_ = framework.ReadAllAndClose(t, uploadResp)
-		if uploadResp.StatusCode != http.StatusCreated {
-			t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-		}
-
-		deleteResp := framework.DoRequest(t, httpClient, mustNewRequest(t, http.MethodDelete, clusterHarness.VolumeAdminURL()+"/"+fid))
-		_ = framework.ReadAllAndClose(t, deleteResp)
-		if deleteResp.StatusCode != http.StatusAccepted {
-			t.Fatalf("delete expected 202, got %d", deleteResp.StatusCode)
-		}
-
-		_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-			VolumeId:   volumeID,
-			Collection: "",
-		})
-		if err != nil {
-			t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-		}
-
-		_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-			VolumeId:   volumeID,
-			Collection: "",
-			ShardIds:   []uint32{0, 1, 2, 3, 4, 5, 6, 7, 8, 9},
-		})
-		if err != nil {
-			t.Fatalf("VolumeEcShardsMount data shards failed: %v", err)
-		}
-
-		_, err = grpcClient.VolumeEcShardsToVolume(ctx, &volume_server_pb.VolumeEcShardsToVolumeRequest{
-			VolumeId:   volumeID,
-			Collection: "",
-		})
-		if err == nil {
-			t.Fatalf("VolumeEcShardsToVolume expected failed-precondition error when no live entries")
-		}
-		if status.Code(err) != codes.FailedPrecondition {
-			t.Fatalf("VolumeEcShardsToVolume no-live-entries expected FailedPrecondition, got %v (%v)", status.Code(err), err)
-		}
-		if !strings.Contains(err.Error(), erasure_coding.EcNoLiveEntriesSubstring) {
-			t.Fatalf("VolumeEcShardsToVolume no-live-entries error should mention %q, got %v", erasure_coding.EcNoLiveEntriesSubstring, err)
-		}
-	})
-}
-
-func TestEcShardsToVolumeSuccessRoundTrip(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(120)
-	const needleID = uint64(990006)
-	const cookie = uint32(0x66771122)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	payload := []byte("ec-shards-to-volume-success-roundtrip-content")
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, payload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsMount(ctx, &volume_server_pb.VolumeEcShardsMountRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0, 1, 2, 3, 4, 5, 6, 7, 8, 9},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsMount data shards failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsToVolume(ctx, &volume_server_pb.VolumeEcShardsToVolumeRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsToVolume success path failed: %v", err)
-	}
-
-	readResp := framework.ReadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid)
-	readBody := framework.ReadAllAndClose(t, readResp)
-	if readResp.StatusCode != http.StatusOK {
-		t.Fatalf("post-conversion read expected 200, got %d", readResp.StatusCode)
-	}
-	if string(readBody) != string(payload) {
-		t.Fatalf("post-conversion payload mismatch: got %q want %q", string(readBody), string(payload))
-	}
-}
-
-func TestEcShardsDeleteLastShardRemovesEcx(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(121)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 990007, 0x77882233)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, []byte("ec-delete-all-shards-content"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	// Verify .ecx is present before deleting all shards.
-	ecxBeforeDelete, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:           volumeID,
-		Collection:         "",
-		IsEcVolume:         true,
-		Ext:                ".ecx",
-		CompactionRevision: math.MaxUint32,
-		StopOffset:         1,
-	})
-	if err != nil {
-		t.Fatalf("CopyFile .ecx before shard deletion start failed: %v", err)
-	}
-	if _, err = ecxBeforeDelete.Recv(); err != nil {
-		t.Fatalf("CopyFile .ecx before shard deletion recv failed: %v", err)
-	}
-
-	_, err = grpcClient.VolumeEcShardsDelete(ctx, &volume_server_pb.VolumeEcShardsDeleteRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-		ShardIds:   []uint32{0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13},
-	})
-	if err != nil {
-		t.Fatalf("VolumeEcShardsDelete all shards failed: %v", err)
-	}
-
-	ecxAfterDelete, err := grpcClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-		VolumeId:           volumeID,
-		Collection:         "",
-		IsEcVolume:         true,
-		Ext:                ".ecx",
-		CompactionRevision: math.MaxUint32,
-		StopOffset:         1,
-	})
-	if err == nil {
-		_, err = ecxAfterDelete.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found ec volume id") {
-		t.Fatalf("CopyFile .ecx after deleting all shards should fail not-found, got: %v", err)
-	}
-}
-
-func TestEcShardsCopyFromPeerSuccess(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartDualVolumeCluster(t, matrix.P1())
-	sourceConn, sourceClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(0))
-	defer sourceConn.Close()
-	destConn, destClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(1))
-	defer destConn.Close()
-
-	const volumeID = uint32(122)
-	framework.AllocateVolume(t, sourceClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 990008, 0x88993344)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(0), fid, []byte("ec-copy-from-peer-content"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("source upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := sourceClient.VolumeEcShardsGenerate(ctx, &volume_server_pb.VolumeEcShardsGenerateRequest{
-		VolumeId:   volumeID,
-		Collection: "",
-	})
-	if err != nil {
-		t.Fatalf("source VolumeEcShardsGenerate failed: %v", err)
-	}
-
-	sourceDataNode := clusterHarness.VolumeAdminAddress(0) + "." + strings.Split(clusterHarness.VolumeGRPCAddress(0), ":")[1]
-	_, err = destClient.VolumeEcShardsCopy(ctx, &volume_server_pb.VolumeEcShardsCopyRequest{
-		VolumeId:       volumeID,
-		Collection:     "",
-		SourceDataNode: sourceDataNode,
-		ShardIds:       []uint32{0},
-		CopyEcxFile:    true,
-		CopyVifFile:    true,
-	})
-	if err != nil {
-		t.Fatalf("destination VolumeEcShardsCopy success path failed: %v", err)
-	}
-
-	for _, ext := range []string{".ec00", ".ecx", ".vif"} {
-		copyStream, copyErr := destClient.CopyFile(ctx, &volume_server_pb.CopyFileRequest{
-			VolumeId:           volumeID,
-			Collection:         "",
-			IsEcVolume:         true,
-			Ext:                ext,
-			CompactionRevision: math.MaxUint32,
-			StopOffset:         1,
-		})
-		if copyErr != nil {
-			t.Fatalf("destination CopyFile %s start failed: %v", ext, copyErr)
-		}
-		if _, copyErr = copyStream.Recv(); copyErr != nil {
-			t.Fatalf("destination CopyFile %s recv failed: %v", ext, copyErr)
-		}
-	}
-}
-
-func TestEcShardsCopyFailsWhenSourceUnavailable(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeEcShardsCopy(ctx, &volume_server_pb.VolumeEcShardsCopyRequest{
-		VolumeId:       12345,
-		Collection:     "",
-		SourceDataNode: "127.0.0.1:1.1",
-		ShardIds:       []uint32{0},
-		CopyEcxFile:    true,
-	})
-	if err == nil || !strings.Contains(err.Error(), "VolumeEcShardsCopy volume") {
-		t.Fatalf("VolumeEcShardsCopy source-unavailable error mismatch: %v", err)
-	}
-}

test/volume_server/grpc/health_state_test.go

@@ -1,139 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestStateAndStatusRPCs(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	initialState, err := client.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	if initialState.GetState() == nil {
-		t.Fatalf("GetState returned nil state")
-	}
-
-	setResp, err := client.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{
-			Maintenance: true,
-			Version:     initialState.GetState().GetVersion(),
-		},
-	})
-	if err != nil {
-		t.Fatalf("SetState(maintenance=true) failed: %v", err)
-	}
-	if !setResp.GetState().GetMaintenance() {
-		t.Fatalf("expected maintenance=true after SetState")
-	}
-
-	setResp, err = client.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{
-			Maintenance: false,
-			Version:     setResp.GetState().GetVersion(),
-		},
-	})
-	if err != nil {
-		t.Fatalf("SetState(maintenance=false) failed: %v", err)
-	}
-	if setResp.GetState().GetMaintenance() {
-		t.Fatalf("expected maintenance=false after SetState")
-	}
-
-	statusResp, err := client.VolumeServerStatus(ctx, &volume_server_pb.VolumeServerStatusRequest{})
-	if err != nil {
-		t.Fatalf("VolumeServerStatus failed: %v", err)
-	}
-	if statusResp.GetVersion() == "" {
-		t.Fatalf("VolumeServerStatus returned empty version")
-	}
-	if len(statusResp.GetDiskStatuses()) == 0 {
-		t.Fatalf("VolumeServerStatus returned no disk statuses")
-	}
-	if statusResp.GetState() == nil {
-		t.Fatalf("VolumeServerStatus returned nil state")
-	}
-	if statusResp.GetMemoryStatus() == nil {
-		t.Fatalf("VolumeServerStatus returned nil memory status")
-	}
-	if statusResp.GetMemoryStatus().GetGoroutines() <= 0 {
-		t.Fatalf("VolumeServerStatus memory status should report goroutines, got %d", statusResp.GetMemoryStatus().GetGoroutines())
-	}
-
-	pingResp, err := client.Ping(ctx, &volume_server_pb.PingRequest{})
-	if err != nil {
-		t.Fatalf("Ping failed: %v", err)
-	}
-	if pingResp.GetStartTimeNs() == 0 || pingResp.GetStopTimeNs() == 0 {
-		t.Fatalf("Ping timestamps should be non-zero: %+v", pingResp)
-	}
-	if pingResp.GetStopTimeNs() < pingResp.GetStartTimeNs() {
-		t.Fatalf("Ping stop time should be >= start time: %+v", pingResp)
-	}
-}
-
-func TestSetStateVersionMismatchAndNilStateNoop(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, client := framework.DialVolumeServer(t, cluster.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	initialState, err := client.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	initialVersion := initialState.GetState().GetVersion()
-
-	staleResp, err := client.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{
-			Maintenance: true,
-			Version:     initialVersion + 1,
-		},
-	})
-	if err == nil {
-		t.Fatalf("SetState with stale version should fail")
-	}
-	if !strings.Contains(err.Error(), "version mismatch") {
-		t.Fatalf("SetState stale version error mismatch: %v", err)
-	}
-	if staleResp.GetState().GetVersion() != initialVersion {
-		t.Fatalf("SetState stale version should not mutate server version: got %d want %d", staleResp.GetState().GetVersion(), initialVersion)
-	}
-	if staleResp.GetState().GetMaintenance() != initialState.GetState().GetMaintenance() {
-		t.Fatalf("SetState stale version should not mutate maintenance flag")
-	}
-
-	nilResp, err := client.SetState(ctx, &volume_server_pb.SetStateRequest{})
-	if err != nil {
-		t.Fatalf("SetState nil-state request should be no-op success: %v", err)
-	}
-	if nilResp.GetState().GetVersion() != initialVersion {
-		t.Fatalf("SetState nil-state should keep version unchanged: got %d want %d", nilResp.GetState().GetVersion(), initialVersion)
-	}
-	if nilResp.GetState().GetMaintenance() != initialState.GetState().GetMaintenance() {
-		t.Fatalf("SetState nil-state should keep maintenance unchanged")
-	}
-}

test/volume_server/grpc/scrub_query_test.go

@@ -1,435 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"io"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestScrubVolumeIndexAndUnsupportedMode(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(61)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	indexResp, err := grpcClient.ScrubVolume(ctx, &volume_server_pb.ScrubVolumeRequest{
-		VolumeIds: []uint32{volumeID},
-		Mode:      volume_server_pb.VolumeScrubMode_INDEX,
-	})
-	if err != nil {
-		t.Fatalf("ScrubVolume index mode failed: %v", err)
-	}
-	if indexResp.GetTotalVolumes() != 1 {
-		t.Fatalf("ScrubVolume expected total_volumes=1, got %d", indexResp.GetTotalVolumes())
-	}
-
-	_, err = grpcClient.ScrubVolume(ctx, &volume_server_pb.ScrubVolumeRequest{
-		VolumeIds: []uint32{volumeID},
-		Mode:      volume_server_pb.VolumeScrubMode(99),
-	})
-	if err == nil {
-		t.Fatalf("ScrubVolume should fail for unsupported mode")
-	}
-	if !strings.Contains(err.Error(), "unsupported volume scrub mode") {
-		t.Fatalf("ScrubVolume unsupported mode error mismatch: %v", err)
-	}
-}
-
-func TestScrubEcVolumeMissingVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.ScrubEcVolume(ctx, &volume_server_pb.ScrubEcVolumeRequest{
-		VolumeIds: []uint32{98765},
-		Mode:      volume_server_pb.VolumeScrubMode_INDEX,
-	})
-	if err == nil {
-		t.Fatalf("ScrubEcVolume should fail for missing EC volume")
-	}
-	if !strings.Contains(err.Error(), "EC volume id") {
-		t.Fatalf("ScrubEcVolume missing-volume error mismatch: %v", err)
-	}
-}
-
-func TestScrubEcVolumeAutoSelectNoEcVolumes(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	resp, err := grpcClient.ScrubEcVolume(ctx, &volume_server_pb.ScrubEcVolumeRequest{
-		Mode: volume_server_pb.VolumeScrubMode_INDEX,
-	})
-	if err != nil {
-		t.Fatalf("ScrubEcVolume auto-select failed: %v", err)
-	}
-	if resp.GetTotalVolumes() != 0 {
-		t.Fatalf("ScrubEcVolume auto-select expected total_volumes=0 without EC data, got %d", resp.GetTotalVolumes())
-	}
-	if len(resp.GetBrokenVolumeIds()) != 0 {
-		t.Fatalf("ScrubEcVolume auto-select expected no broken volumes, got %v", resp.GetBrokenVolumeIds())
-	}
-}
-
-func TestQueryInvalidAndMissingFileIDPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	invalidStream, err := grpcClient.Query(ctx, &volume_server_pb.QueryRequest{
-		FromFileIds: []string{"bad-fid"},
-		Selections:  []string{"name"},
-		Filter:      &volume_server_pb.QueryRequest_Filter{},
-		InputSerialization: &volume_server_pb.QueryRequest_InputSerialization{
-			JsonInput: &volume_server_pb.QueryRequest_InputSerialization_JSONInput{},
-		},
-	})
-	if err == nil {
-		_, err = invalidStream.Recv()
-	}
-	if err == nil {
-		t.Fatalf("Query should fail for invalid file id")
-	}
-
-	missingFid := framework.NewFileID(98766, 1, 1)
-	missingStream, err := grpcClient.Query(ctx, &volume_server_pb.QueryRequest{
-		FromFileIds: []string{missingFid},
-		Selections:  []string{"name"},
-		Filter:      &volume_server_pb.QueryRequest_Filter{},
-		InputSerialization: &volume_server_pb.QueryRequest_InputSerialization{
-			JsonInput: &volume_server_pb.QueryRequest_InputSerialization_JSONInput{},
-		},
-	})
-	if err == nil {
-		_, err = missingStream.Recv()
-	}
-	if err == nil {
-		t.Fatalf("Query should fail for missing file id volume")
-	}
-}
-
-func TestScrubVolumeAutoSelectAndAllModes(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeIDA = uint32(62)
-	const volumeIDB = uint32(63)
-	framework.AllocateVolume(t, grpcClient, volumeIDA, "")
-	framework.AllocateVolume(t, grpcClient, volumeIDB, "")
-
-	// upload some data so index files are not zero-sized
-	httpClient := framework.NewHTTPClient()
-	framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), framework.NewFileID(volumeIDA, 1, 1), []byte("test data A"))
-	framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), framework.NewFileID(volumeIDB, 2, 2), []byte("test data B"))
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	autoResp, err := grpcClient.ScrubVolume(ctx, &volume_server_pb.ScrubVolumeRequest{
-		Mode: volume_server_pb.VolumeScrubMode_INDEX,
-	})
-	if err != nil {
-		t.Fatalf("ScrubVolume auto-select failed: %v", err)
-	}
-	if autoResp.GetTotalVolumes() < 2 {
-		t.Fatalf("ScrubVolume auto-select expected at least 2 volumes, got %d", autoResp.GetTotalVolumes())
-	}
-
-	localResp, err := grpcClient.ScrubVolume(ctx, &volume_server_pb.ScrubVolumeRequest{
-		VolumeIds: []uint32{volumeIDA},
-		Mode:      volume_server_pb.VolumeScrubMode_LOCAL,
-	})
-	if err != nil {
-		t.Fatalf("ScrubVolume local mode failed: %v", err)
-	}
-	if localResp.GetTotalVolumes() != 1 {
-		t.Fatalf("ScrubVolume local mode expected total_volumes=1, got %d", localResp.GetTotalVolumes())
-	}
-	if len(localResp.GetBrokenVolumeIds()) != 0 {
-		t.Fatalf("ScrubVolume local mode expected no broken volumes, got %v: %v", localResp.GetBrokenVolumeIds(), localResp.GetDetails())
-	}
-
-	fullResp, err := grpcClient.ScrubVolume(ctx, &volume_server_pb.ScrubVolumeRequest{
-		VolumeIds: []uint32{volumeIDA},
-		Mode:      volume_server_pb.VolumeScrubMode_FULL,
-	})
-	if err != nil {
-		t.Fatalf("ScrubVolume full mode failed: %v", err)
-	}
-	if fullResp.GetTotalVolumes() != 1 {
-		t.Fatalf("ScrubVolume full mode expected total_volumes=1, got %d", fullResp.GetTotalVolumes())
-	}
-	if len(fullResp.GetBrokenVolumeIds()) != 0 {
-		t.Fatalf("ScrubVolume full mode expected no broken volumes, got %v: %v", fullResp.GetBrokenVolumeIds(), fullResp.GetDetails())
-	}
-}
-
-func TestQueryJsonSuccessAndCsvNoOutput(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(64)
-	const needleID = uint64(777001)
-	const cookie = uint32(0xAABBCCDD)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	jsonLines := []byte("{\"score\":3}\n{\"score\":12}\n{\"score\":18}\n")
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, jsonLines)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	queryStream, err := grpcClient.Query(ctx, &volume_server_pb.QueryRequest{
-		FromFileIds: []string{fid},
-		Selections:  []string{"score"},
-		Filter: &volume_server_pb.QueryRequest_Filter{
-			Field:   "score",
-			Operand: ">",
-			Value:   "10",
-		},
-		InputSerialization: &volume_server_pb.QueryRequest_InputSerialization{
-			JsonInput: &volume_server_pb.QueryRequest_InputSerialization_JSONInput{Type: "LINES"},
-		},
-	})
-	if err != nil {
-		t.Fatalf("Query json start failed: %v", err)
-	}
-
-	firstStripe, err := queryStream.Recv()
-	if err != nil {
-		t.Fatalf("Query json recv failed: %v", err)
-	}
-	records := string(firstStripe.GetRecords())
-	if !strings.Contains(records, "score:12") || !strings.Contains(records, "score:18") {
-		t.Fatalf("Query json records missing expected filtered scores: %q", records)
-	}
-	if strings.Contains(records, "score:3") {
-		t.Fatalf("Query json records should not include filtered-out score: %q", records)
-	}
-	_, err = queryStream.Recv()
-	if err != io.EOF {
-		t.Fatalf("Query json expected EOF after first stripe, got: %v", err)
-	}
-
-	csvStream, err := grpcClient.Query(ctx, &volume_server_pb.QueryRequest{
-		FromFileIds: []string{fid},
-		Selections:  []string{"score"},
-		Filter:      &volume_server_pb.QueryRequest_Filter{},
-		InputSerialization: &volume_server_pb.QueryRequest_InputSerialization{
-			CsvInput: &volume_server_pb.QueryRequest_InputSerialization_CSVInput{},
-		},
-	})
-	if err != nil {
-		t.Fatalf("Query csv start failed: %v", err)
-	}
-	_, err = csvStream.Recv()
-	if err != io.EOF {
-		t.Fatalf("Query csv expected EOF with no rows, got: %v", err)
-	}
-}
-
-func TestQueryCsvInputWithCsvPayloadStillReturnsNoRows(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(67)
-	const needleID = uint64(777004)
-	const cookie = uint32(0xDCDCADAD)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	csvPayload := []byte("name,score\nalice,12\nbob,3\n")
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, csvPayload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	csvStream, err := grpcClient.Query(ctx, &volume_server_pb.QueryRequest{
-		FromFileIds: []string{fid},
-		Selections:  []string{"score"},
-		Filter: &volume_server_pb.QueryRequest_Filter{
-			Field:   "score",
-			Operand: ">",
-			Value:   "10",
-		},
-		InputSerialization: &volume_server_pb.QueryRequest_InputSerialization{
-			CsvInput: &volume_server_pb.QueryRequest_InputSerialization_CSVInput{},
-		},
-	})
-	if err != nil {
-		t.Fatalf("Query csv start failed: %v", err)
-	}
-
-	_, err = csvStream.Recv()
-	if err != io.EOF {
-		t.Fatalf("Query csv with csv payload expected EOF with no rows, got: %v", err)
-	}
-}
-
-func TestQueryJsonNoMatchReturnsEmptyStripe(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(65)
-	const needleID = uint64(777002)
-	const cookie = uint32(0xABABCDCD)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	jsonLines := []byte("{\"score\":1}\n{\"score\":2}\n")
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, jsonLines)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	queryStream, err := grpcClient.Query(ctx, &volume_server_pb.QueryRequest{
-		FromFileIds: []string{fid},
-		Selections:  []string{"score"},
-		Filter: &volume_server_pb.QueryRequest_Filter{
-			Field:   "score",
-			Operand: ">",
-			Value:   "100",
-		},
-		InputSerialization: &volume_server_pb.QueryRequest_InputSerialization{
-			JsonInput: &volume_server_pb.QueryRequest_InputSerialization_JSONInput{Type: "LINES"},
-		},
-	})
-	if err != nil {
-		t.Fatalf("Query json no-match start failed: %v", err)
-	}
-
-	firstStripe, err := queryStream.Recv()
-	if err != nil {
-		t.Fatalf("Query json no-match recv failed: %v", err)
-	}
-	if len(firstStripe.GetRecords()) != 0 {
-		t.Fatalf("Query json no-match expected empty records stripe, got: %q", string(firstStripe.GetRecords()))
-	}
-
-	_, err = queryStream.Recv()
-	if err != io.EOF {
-		t.Fatalf("Query json no-match expected EOF after first empty stripe, got: %v", err)
-	}
-}
-
-func TestQueryCookieMismatchReturnsEOFNoResults(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(66)
-	const needleID = uint64(777003)
-	const cookie = uint32(0xCDCDABAB)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	jsonLines := []byte("{\"score\":7}\n{\"score\":8}\n")
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, jsonLines)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != 201 {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	wrongCookieFid := framework.NewFileID(volumeID, needleID, cookie+1)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.Query(ctx, &volume_server_pb.QueryRequest{
-		FromFileIds: []string{wrongCookieFid},
-		Selections:  []string{"score"},
-		Filter: &volume_server_pb.QueryRequest_Filter{
-			Field:   "score",
-			Operand: ">",
-			Value:   "0",
-		},
-		InputSerialization: &volume_server_pb.QueryRequest_InputSerialization{
-			JsonInput: &volume_server_pb.QueryRequest_InputSerialization_JSONInput{Type: "LINES"},
-		},
-	})
-	if err != nil {
-		t.Fatalf("Query start for cookie mismatch should not fail immediately, got: %v", err)
-	}
-
-	_, err = stream.Recv()
-	if err != io.EOF {
-		t.Fatalf("Query cookie mismatch expected EOF with no streamed records, got: %v", err)
-	}
-}

test/volume_server/grpc/tail_test.go

@@ -1,281 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"bytes"
-	"context"
-	"io"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-	"google.golang.org/grpc/codes"
-	"google.golang.org/grpc/status"
-)
-
-func TestVolumeTailSenderMissingVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.VolumeTailSender(ctx, &volume_server_pb.VolumeTailSenderRequest{VolumeId: 77777, SinceNs: 0, IdleTimeoutSeconds: 1})
-	if err == nil {
-		_, err = stream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found volume") {
-		t.Fatalf("VolumeTailSender missing-volume error mismatch: %v", err)
-	}
-}
-
-func TestVolumeTailSenderHeartbeatThenEOF(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(71)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.VolumeTailSender(ctx, &volume_server_pb.VolumeTailSenderRequest{
-		VolumeId:           volumeID,
-		SinceNs:            0,
-		IdleTimeoutSeconds: 1,
-	})
-	if err != nil {
-		t.Fatalf("VolumeTailSender start failed: %v", err)
-	}
-
-	msg, err := stream.Recv()
-	if err != nil {
-		t.Fatalf("VolumeTailSender first recv failed: %v", err)
-	}
-	if !msg.GetIsLastChunk() {
-		t.Fatalf("expected first tail message to be heartbeat IsLastChunk=true")
-	}
-
-	_, err = stream.Recv()
-	if err != io.EOF {
-		t.Fatalf("expected EOF after idle timeout drain, got: %v", err)
-	}
-}
-
-func TestVolumeTailReceiverMissingVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeTailReceiver(ctx, &volume_server_pb.VolumeTailReceiverRequest{VolumeId: 88888, SourceVolumeServer: clusterHarness.VolumeServerAddress(), SinceNs: 0, IdleTimeoutSeconds: 1})
-	if err == nil || !strings.Contains(err.Error(), "receiver not found volume") {
-		t.Fatalf("VolumeTailReceiver missing-volume error mismatch: %v", err)
-	}
-}
-
-func TestVolumeTailReceiverSourceUnavailable(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(89)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.VolumeTailReceiver(ctx, &volume_server_pb.VolumeTailReceiverRequest{
-		VolumeId:           volumeID,
-		SourceVolumeServer: "127.0.0.1:19999.29999",
-		SinceNs:            0,
-		IdleTimeoutSeconds: 1,
-	})
-	if err == nil {
-		t.Fatalf("VolumeTailReceiver should fail when source volume server is unavailable")
-	}
-	lowered := strings.ToLower(err.Error())
-	if !strings.Contains(lowered, "dial") && !strings.Contains(lowered, "unavailable") && !strings.Contains(lowered, "connection refused") {
-		t.Fatalf("VolumeTailReceiver source-unavailable error mismatch: %v", err)
-	}
-}
-
-func TestVolumeTailReceiverReplicatesSourceUpdates(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartDualVolumeCluster(t, matrix.P1())
-	sourceConn, sourceClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(0))
-	defer sourceConn.Close()
-	destConn, destClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress(1))
-	defer destConn.Close()
-
-	const volumeID = uint32(72)
-	framework.AllocateVolume(t, sourceClient, volumeID, "")
-	framework.AllocateVolume(t, destClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 880003, 0x3456789A)
-	payload := []byte("tail-receiver-replicates-source-updates")
-
-	sourceUploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(0), fid, payload)
-	_ = framework.ReadAllAndClose(t, sourceUploadResp)
-	if sourceUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("source upload expected 201, got %d", sourceUploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	_, err := destClient.VolumeTailReceiver(ctx, &volume_server_pb.VolumeTailReceiverRequest{
-		VolumeId:           volumeID,
-		SourceVolumeServer: clusterHarness.VolumeAdminAddress(0) + "." + strings.Split(clusterHarness.VolumeGRPCAddress(0), ":")[1],
-		SinceNs:            0,
-		IdleTimeoutSeconds: 1,
-	})
-	if err != nil {
-		t.Fatalf("VolumeTailReceiver success path failed: %v", err)
-	}
-
-	destReadResp := framework.ReadBytes(t, httpClient, clusterHarness.VolumeAdminURL(1), fid)
-	destReadBody := framework.ReadAllAndClose(t, destReadResp)
-	if destReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("destination read after tail receive expected 200, got %d", destReadResp.StatusCode)
-	}
-	if string(destReadBody) != string(payload) {
-		t.Fatalf("destination tail-received payload mismatch: got %q want %q", string(destReadBody), string(payload))
-	}
-}
-
-func TestVolumeTailSenderLargeNeedleChunking(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(73)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	httpClient := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 880004, 0x456789AB)
-	largePayload := bytes.Repeat([]byte("L"), 2*1024*1024+128*1024)
-	uploadResp := framework.UploadBytes(t, httpClient, clusterHarness.VolumeAdminURL(), fid, largePayload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("large upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.VolumeTailSender(ctx, &volume_server_pb.VolumeTailSenderRequest{
-		VolumeId:           volumeID,
-		SinceNs:            0,
-		IdleTimeoutSeconds: 1,
-	})
-	if err != nil {
-		t.Fatalf("VolumeTailSender start failed: %v", err)
-	}
-
-	dataChunkCount := 0
-	sawNonLastDataChunk := false
-	sawLastDataChunk := false
-	for {
-		msg, recvErr := stream.Recv()
-		if recvErr == io.EOF {
-			break
-		}
-		if recvErr != nil {
-			t.Fatalf("VolumeTailSender recv failed: %v", recvErr)
-		}
-		if len(msg.GetNeedleBody()) == 0 {
-			continue
-		}
-		dataChunkCount++
-		if msg.GetIsLastChunk() {
-			sawLastDataChunk = true
-		} else {
-			sawNonLastDataChunk = true
-		}
-	}
-
-	if dataChunkCount < 2 {
-		t.Fatalf("VolumeTailSender expected multiple chunks for large needle, got %d", dataChunkCount)
-	}
-	if !sawNonLastDataChunk {
-		t.Fatalf("VolumeTailSender expected at least one non-last data chunk")
-	}
-	if !sawLastDataChunk {
-		t.Fatalf("VolumeTailSender expected a final data chunk marked IsLastChunk=true")
-	}
-}
-
-func TestVolumeTailSenderStreamCancellation(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(74)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithCancel(context.Background())
-	stream, err := grpcClient.VolumeTailSender(ctx, &volume_server_pb.VolumeTailSenderRequest{
-		VolumeId:           volumeID,
-		SinceNs:            0,
-		IdleTimeoutSeconds: 30,
-	})
-	if err != nil {
-		cancel()
-		t.Fatalf("VolumeTailSender start failed: %v", err)
-	}
-
-	firstMsg, err := stream.Recv()
-	if err != nil {
-		cancel()
-		t.Fatalf("VolumeTailSender first recv failed: %v", err)
-	}
-	if !firstMsg.GetIsLastChunk() {
-		cancel()
-		t.Fatalf("expected heartbeat first message before cancellation")
-	}
-
-	cancel()
-	_, err = stream.Recv()
-	if err == nil {
-		t.Fatalf("VolumeTailSender recv after cancellation expected error")
-	}
-	if status.Code(err) != codes.Canceled {
-		t.Fatalf("VolumeTailSender cancellation expected grpc code Canceled, got %v (%v)", status.Code(err), err)
-	}
-}

test/volume_server/grpc/tiering_remote_test.go

@@ -1,236 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/remote_pb"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestFetchAndWriteNeedleMaintenanceAndMissingVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.FetchAndWriteNeedle(ctx, &volume_server_pb.FetchAndWriteNeedleRequest{
-		VolumeId: 98781,
-		NeedleId: 1,
-	})
-	if err == nil || !strings.Contains(err.Error(), "not found volume id") {
-		t.Fatalf("FetchAndWriteNeedle missing-volume error mismatch: %v", err)
-	}
-
-	stateResp, err := grpcClient.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = grpcClient.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{
-			Maintenance: true,
-			Version:     stateResp.GetState().GetVersion(),
-		},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	_, err = grpcClient.FetchAndWriteNeedle(ctx, &volume_server_pb.FetchAndWriteNeedleRequest{
-		VolumeId: 1,
-		NeedleId: 1,
-	})
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("FetchAndWriteNeedle maintenance error mismatch: %v", err)
-	}
-}
-
-func TestFetchAndWriteNeedleInvalidRemoteConfig(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(88)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	_, err := grpcClient.FetchAndWriteNeedle(ctx, &volume_server_pb.FetchAndWriteNeedleRequest{
-		VolumeId: volumeID,
-		NeedleId: 1,
-		Cookie:   1,
-		Size:     1,
-		RemoteConf: &remote_pb.RemoteConf{
-			Name: "it-invalid-remote",
-			Type: "does-not-exist",
-		},
-		RemoteLocation: &remote_pb.RemoteStorageLocation{
-			Name: "it-invalid-remote",
-			Path: "/test",
-		},
-	})
-	if err == nil || !strings.Contains(err.Error(), "get remote client") {
-		t.Fatalf("FetchAndWriteNeedle invalid-remote error mismatch: %v", err)
-	}
-}
-
-func TestVolumeTierMoveDatToRemoteErrorPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(85)
-	const collection = "tier-collection"
-	framework.AllocateVolume(t, grpcClient, volumeID, collection)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	missingStream, err := grpcClient.VolumeTierMoveDatToRemote(ctx, &volume_server_pb.VolumeTierMoveDatToRemoteRequest{
-		VolumeId:               98782,
-		Collection:             collection,
-		DestinationBackendName: "dummy",
-	})
-	if err == nil {
-		_, err = missingStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeTierMoveDatToRemote missing-volume error mismatch: %v", err)
-	}
-
-	mismatchStream, err := grpcClient.VolumeTierMoveDatToRemote(ctx, &volume_server_pb.VolumeTierMoveDatToRemoteRequest{
-		VolumeId:               volumeID,
-		Collection:             "wrong-collection",
-		DestinationBackendName: "dummy",
-	})
-	if err == nil {
-		_, err = mismatchStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "unexpected input") {
-		t.Fatalf("VolumeTierMoveDatToRemote collection mismatch error mismatch: %v", err)
-	}
-
-	stateResp, err := grpcClient.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = grpcClient.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{
-			Maintenance: true,
-			Version:     stateResp.GetState().GetVersion(),
-		},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	maintenanceStream, err := grpcClient.VolumeTierMoveDatToRemote(ctx, &volume_server_pb.VolumeTierMoveDatToRemoteRequest{
-		VolumeId:               volumeID,
-		Collection:             collection,
-		DestinationBackendName: "dummy",
-	})
-	if err == nil {
-		_, err = maintenanceStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "maintenance mode") {
-		t.Fatalf("VolumeTierMoveDatToRemote maintenance error mismatch: %v", err)
-	}
-}
-
-func TestVolumeTierMoveDatToRemoteMissingBackend(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(89)
-	const collection = "tier-missing-backend"
-	framework.AllocateVolume(t, grpcClient, volumeID, collection)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stream, err := grpcClient.VolumeTierMoveDatToRemote(ctx, &volume_server_pb.VolumeTierMoveDatToRemoteRequest{
-		VolumeId:               volumeID,
-		Collection:             collection,
-		DestinationBackendName: "definitely-missing-backend",
-	})
-	if err == nil {
-		_, err = stream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "destination definitely-missing-backend not found") {
-		t.Fatalf("VolumeTierMoveDatToRemote missing-backend error mismatch: %v", err)
-	}
-}
-
-func TestVolumeTierMoveDatFromRemoteErrorPaths(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(86)
-	const collection = "tier-download-collection"
-	framework.AllocateVolume(t, grpcClient, volumeID, collection)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	missingStream, err := grpcClient.VolumeTierMoveDatFromRemote(ctx, &volume_server_pb.VolumeTierMoveDatFromRemoteRequest{
-		VolumeId:   98783,
-		Collection: collection,
-	})
-	if err == nil {
-		_, err = missingStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "not found") {
-		t.Fatalf("VolumeTierMoveDatFromRemote missing-volume error mismatch: %v", err)
-	}
-
-	mismatchStream, err := grpcClient.VolumeTierMoveDatFromRemote(ctx, &volume_server_pb.VolumeTierMoveDatFromRemoteRequest{
-		VolumeId:   volumeID,
-		Collection: "wrong-collection",
-	})
-	if err == nil {
-		_, err = mismatchStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "unexpected input") {
-		t.Fatalf("VolumeTierMoveDatFromRemote collection mismatch error mismatch: %v", err)
-	}
-
-	localDiskStream, err := grpcClient.VolumeTierMoveDatFromRemote(ctx, &volume_server_pb.VolumeTierMoveDatFromRemoteRequest{
-		VolumeId:   volumeID,
-		Collection: collection,
-	})
-	if err == nil {
-		_, err = localDiskStream.Recv()
-	}
-	if err == nil || !strings.Contains(err.Error(), "already on local disk") {
-		t.Fatalf("VolumeTierMoveDatFromRemote local-disk error mismatch: %v", err)
-	}
-}

test/volume_server/grpc/vacuum_test.go

@@ -1,87 +0,0 @@
-package volume_server_grpc_test
-
-import (
-	"context"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/pb/volume_server_pb"
-)
-
-func TestVacuumVolumeCheckSuccessAndMissingVolume(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(31)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	resp, err := grpcClient.VacuumVolumeCheck(ctx, &volume_server_pb.VacuumVolumeCheckRequest{VolumeId: volumeID})
-	if err != nil {
-		t.Fatalf("VacuumVolumeCheck existing volume failed: %v", err)
-	}
-	if resp.GetGarbageRatio() < 0 || resp.GetGarbageRatio() > 1 {
-		t.Fatalf("unexpected garbage ratio: %f", resp.GetGarbageRatio())
-	}
-
-	_, err = grpcClient.VacuumVolumeCheck(ctx, &volume_server_pb.VacuumVolumeCheckRequest{VolumeId: 99999})
-	if err == nil {
-		t.Fatalf("VacuumVolumeCheck should fail for missing volume")
-	}
-}
-
-func TestVacuumMaintenanceModeRejections(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	stateResp, err := grpcClient.GetState(ctx, &volume_server_pb.GetStateRequest{})
-	if err != nil {
-		t.Fatalf("GetState failed: %v", err)
-	}
-	_, err = grpcClient.SetState(ctx, &volume_server_pb.SetStateRequest{
-		State: &volume_server_pb.VolumeServerState{Maintenance: true, Version: stateResp.GetState().GetVersion()},
-	})
-	if err != nil {
-		t.Fatalf("SetState maintenance=true failed: %v", err)
-	}
-
-	assertMaintenanceErr := func(name string, err error) {
-		t.Helper()
-		if err == nil {
-			t.Fatalf("%s should fail in maintenance mode", name)
-		}
-		if !strings.Contains(err.Error(), "maintenance mode") {
-			t.Fatalf("%s expected maintenance mode error, got: %v", name, err)
-		}
-	}
-
-	compactStream, err := grpcClient.VacuumVolumeCompact(ctx, &volume_server_pb.VacuumVolumeCompactRequest{VolumeId: 31})
-	if err == nil {
-		_, err = compactStream.Recv()
-	}
-	assertMaintenanceErr("VacuumVolumeCompact", err)
-
-	_, err = grpcClient.VacuumVolumeCommit(ctx, &volume_server_pb.VacuumVolumeCommitRequest{VolumeId: 31})
-	assertMaintenanceErr("VacuumVolumeCommit", err)
-
-	_, err = grpcClient.VacuumVolumeCleanup(ctx, &volume_server_pb.VacuumVolumeCleanupRequest{VolumeId: 31})
-	assertMaintenanceErr("VacuumVolumeCleanup", err)
-}

test/volume_server/http/admin_test.go

@@ -1,194 +0,0 @@
-package volume_server_http_test
-
-import (
-	"encoding/json"
-	"net/http"
-	"strings"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/util/request_id"
-)
-
-func TestAdminStatusAndHealthz(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P1())
-	client := framework.NewHTTPClient()
-
-	statusReq, err := http.NewRequest(http.MethodGet, cluster.VolumeAdminURL()+"/status", nil)
-	if err != nil {
-		t.Fatalf("create status request: %v", err)
-	}
-	statusReq.Header.Set(request_id.AmzRequestIDHeader, "test-request-id-1")
-
-	statusResp := framework.DoRequest(t, client, statusReq)
-	statusBody := framework.ReadAllAndClose(t, statusResp)
-
-	if statusResp.StatusCode != http.StatusOK {
-		t.Fatalf("expected /status code 200, got %d, body: %s", statusResp.StatusCode, string(statusBody))
-	}
-	if got := statusResp.Header.Get("Server"); !strings.Contains(got, "SeaweedFS Volume") {
-		t.Fatalf("expected /status Server header to contain SeaweedFS Volume, got %q", got)
-	}
-	if got := statusResp.Header.Get(request_id.AmzRequestIDHeader); got != "test-request-id-1" {
-		t.Fatalf("expected echoed request id, got %q", got)
-	}
-
-	var payload map[string]interface{}
-	if err := json.Unmarshal(statusBody, &payload); err != nil {
-		t.Fatalf("decode status response: %v", err)
-	}
-	for _, field := range []string{"Version", "DiskStatuses", "Volumes"} {
-		if _, found := payload[field]; !found {
-			t.Fatalf("status payload missing field %q", field)
-		}
-	}
-
-	healthReq := mustNewRequest(t, http.MethodGet, cluster.VolumeAdminURL()+"/healthz")
-	healthReq.Header.Set(request_id.AmzRequestIDHeader, "test-request-id-2")
-	healthResp := framework.DoRequest(t, client, healthReq)
-	_ = framework.ReadAllAndClose(t, healthResp)
-	if healthResp.StatusCode != http.StatusOK {
-		t.Fatalf("expected /healthz code 200, got %d", healthResp.StatusCode)
-	}
-	if got := healthResp.Header.Get("Server"); !strings.Contains(got, "SeaweedFS Volume") {
-		t.Fatalf("expected /healthz Server header to contain SeaweedFS Volume, got %q", got)
-	}
-	if got := healthResp.Header.Get(request_id.AmzRequestIDHeader); got != "test-request-id-2" {
-		t.Fatalf("expected /healthz echoed request id, got %q", got)
-	}
-
-	uiResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, cluster.VolumeAdminURL()+"/ui/index.html"))
-	uiBody := framework.ReadAllAndClose(t, uiResp)
-	if uiResp.StatusCode != http.StatusOK {
-		t.Fatalf("expected /ui/index.html code 200, got %d, body: %s", uiResp.StatusCode, string(uiBody))
-	}
-	if !strings.Contains(strings.ToLower(string(uiBody)), "volume") {
-		t.Fatalf("ui page does not look like volume status page")
-	}
-}
-
-func TestOptionsMethodsByPort(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P2())
-	client := framework.NewHTTPClient()
-
-	adminResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodOptions, cluster.VolumeAdminURL()+"/"))
-	_ = framework.ReadAllAndClose(t, adminResp)
-	if adminResp.StatusCode != http.StatusOK {
-		t.Fatalf("admin OPTIONS expected 200, got %d", adminResp.StatusCode)
-	}
-	adminAllowed := adminResp.Header.Get("Access-Control-Allow-Methods")
-	for _, expected := range []string{"PUT", "POST", "GET", "DELETE", "OPTIONS"} {
-		if !strings.Contains(adminAllowed, expected) {
-			t.Fatalf("admin allow methods missing %q, got %q", expected, adminAllowed)
-		}
-	}
-	if adminResp.Header.Get("Access-Control-Allow-Headers") != "*" {
-		t.Fatalf("admin allow headers expected '*', got %q", adminResp.Header.Get("Access-Control-Allow-Headers"))
-	}
-
-	publicResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodOptions, cluster.VolumePublicURL()+"/"))
-	_ = framework.ReadAllAndClose(t, publicResp)
-	if publicResp.StatusCode != http.StatusOK {
-		t.Fatalf("public OPTIONS expected 200, got %d", publicResp.StatusCode)
-	}
-	publicAllowed := publicResp.Header.Get("Access-Control-Allow-Methods")
-	if !strings.Contains(publicAllowed, "GET") || !strings.Contains(publicAllowed, "OPTIONS") {
-		t.Fatalf("public allow methods expected GET and OPTIONS, got %q", publicAllowed)
-	}
-	if strings.Contains(publicAllowed, "POST") {
-		t.Fatalf("public allow methods should not include POST, got %q", publicAllowed)
-	}
-	if publicResp.Header.Get("Access-Control-Allow-Headers") != "*" {
-		t.Fatalf("public allow headers expected '*', got %q", publicResp.Header.Get("Access-Control-Allow-Headers"))
-	}
-}
-
-func TestOptionsWithOriginIncludesCorsHeaders(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P2())
-	client := framework.NewHTTPClient()
-
-	adminReq := mustNewRequest(t, http.MethodOptions, cluster.VolumeAdminURL()+"/")
-	adminReq.Header.Set("Origin", "https://example.com")
-	adminResp := framework.DoRequest(t, client, adminReq)
-	_ = framework.ReadAllAndClose(t, adminResp)
-	if adminResp.StatusCode != http.StatusOK {
-		t.Fatalf("admin OPTIONS expected 200, got %d", adminResp.StatusCode)
-	}
-	if adminResp.Header.Get("Access-Control-Allow-Origin") != "*" {
-		t.Fatalf("admin OPTIONS expected Access-Control-Allow-Origin=*, got %q", adminResp.Header.Get("Access-Control-Allow-Origin"))
-	}
-	if adminResp.Header.Get("Access-Control-Allow-Credentials") != "true" {
-		t.Fatalf("admin OPTIONS expected Access-Control-Allow-Credentials=true, got %q", adminResp.Header.Get("Access-Control-Allow-Credentials"))
-	}
-
-	publicReq := mustNewRequest(t, http.MethodOptions, cluster.VolumePublicURL()+"/")
-	publicReq.Header.Set("Origin", "https://example.com")
-	publicResp := framework.DoRequest(t, client, publicReq)
-	_ = framework.ReadAllAndClose(t, publicResp)
-	if publicResp.StatusCode != http.StatusOK {
-		t.Fatalf("public OPTIONS expected 200, got %d", publicResp.StatusCode)
-	}
-	if publicResp.Header.Get("Access-Control-Allow-Origin") != "*" {
-		t.Fatalf("public OPTIONS expected Access-Control-Allow-Origin=*, got %q", publicResp.Header.Get("Access-Control-Allow-Origin"))
-	}
-	if publicResp.Header.Get("Access-Control-Allow-Credentials") != "true" {
-		t.Fatalf("public OPTIONS expected Access-Control-Allow-Credentials=true, got %q", publicResp.Header.Get("Access-Control-Allow-Credentials"))
-	}
-}
-
-func TestUiIndexNotExposedWhenJwtSigningEnabled(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	cluster := framework.StartSingleVolumeCluster(t, matrix.P3())
-	client := framework.NewHTTPClient()
-
-	resp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, cluster.VolumeAdminURL()+"/ui/index.html"))
-	body := framework.ReadAllAndClose(t, resp)
-	if resp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("expected /ui/index.html to be gated by auth under JWT profile (401), got %d body=%s", resp.StatusCode, string(body))
-	}
-}
-
-func TestUiIndexExposedWhenJwtSigningEnabledAndAccessUITrue(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	profile.AccessUI = true
-	cluster := framework.StartSingleVolumeCluster(t, profile)
-	client := framework.NewHTTPClient()
-
-	resp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, cluster.VolumeAdminURL()+"/ui/index.html"))
-	body := framework.ReadAllAndClose(t, resp)
-	if resp.StatusCode != http.StatusOK {
-		t.Fatalf("expected /ui/index.html to be exposed when access.ui=true under JWT profile, got %d body=%s", resp.StatusCode, string(body))
-	}
-	if !strings.Contains(strings.ToLower(string(body)), "volume") {
-		t.Fatalf("ui page does not look like volume status page")
-	}
-}
-
-func mustNewRequest(t testing.TB, method, url string) *http.Request {
-	t.Helper()
-	req, err := http.NewRequest(method, url, nil)
-	if err != nil {
-		t.Fatalf("create request %s %s: %v", method, url, err)
-	}
-	return req
-}

test/volume_server/http/auth_test.go

@@ -1,419 +0,0 @@
-package volume_server_http_test
-
-import (
-	"bytes"
-	"net/http"
-	"testing"
-	"time"
-
-	jwt "github.com/golang-jwt/jwt/v5"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/security"
-)
-
-func TestJWTAuthForWriteAndRead(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	clusterHarness := framework.StartSingleVolumeCluster(t, profile)
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(51)
-	const needleID = uint64(123456)
-	const cookie = uint32(0xABCDEF12)
-
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	payload := []byte("jwt-protected-content")
-	client := framework.NewHTTPClient()
-
-	unauthWrite := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	unauthWriteResp := framework.DoRequest(t, client, unauthWrite)
-	_ = framework.ReadAllAndClose(t, unauthWriteResp)
-	if unauthWriteResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("unauthorized write expected 401, got %d", unauthWriteResp.StatusCode)
-	}
-
-	invalidWrite := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	invalidWrite.Header.Set("Authorization", "Bearer invalid")
-	invalidWriteResp := framework.DoRequest(t, client, invalidWrite)
-	_ = framework.ReadAllAndClose(t, invalidWriteResp)
-	if invalidWriteResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("invalid write token expected 401, got %d", invalidWriteResp.StatusCode)
-	}
-
-	writeToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, fid)
-	authWrite := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	authWrite.Header.Set("Authorization", "Bearer "+string(writeToken))
-	authWriteResp := framework.DoRequest(t, client, authWrite)
-	_ = framework.ReadAllAndClose(t, authWriteResp)
-	if authWriteResp.StatusCode != http.StatusCreated {
-		t.Fatalf("authorized write expected 201, got %d", authWriteResp.StatusCode)
-	}
-
-	unauthReadReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	unauthReadResp := framework.DoRequest(t, client, unauthReadReq)
-	_ = framework.ReadAllAndClose(t, unauthReadResp)
-	if unauthReadResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("unauthorized read expected 401, got %d", unauthReadResp.StatusCode)
-	}
-
-	readToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, fid)
-	authReadReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	authReadReq.Header.Set("Authorization", "Bearer "+string(readToken))
-	authReadResp := framework.DoRequest(t, client, authReadReq)
-	authReadBody := framework.ReadAllAndClose(t, authReadResp)
-	if authReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("authorized read expected 200, got %d", authReadResp.StatusCode)
-	}
-	if string(authReadBody) != string(payload) {
-		t.Fatalf("authorized read content mismatch: got %q want %q", string(authReadBody), string(payload))
-	}
-}
-
-func TestJWTAuthRejectsFidMismatch(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	clusterHarness := framework.StartSingleVolumeCluster(t, profile)
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(52)
-	const needleID = uint64(223344)
-	const cookie = uint32(0x10203040)
-	const otherNeedleID = uint64(223345)
-	const otherCookie = uint32(0x50607080)
-	const wrongCookie = uint32(0x10203041)
-
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	otherFid := framework.NewFileID(volumeID, otherNeedleID, otherCookie)
-	payload := []byte("jwt-fid-mismatch-content")
-	client := framework.NewHTTPClient()
-
-	writeTokenForOtherFid := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, otherFid)
-	mismatchedWrite := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	mismatchedWrite.Header.Set("Authorization", "Bearer "+string(writeTokenForOtherFid))
-	mismatchedWriteResp := framework.DoRequest(t, client, mismatchedWrite)
-	_ = framework.ReadAllAndClose(t, mismatchedWriteResp)
-	if mismatchedWriteResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("write with mismatched fid token expected 401, got %d", mismatchedWriteResp.StatusCode)
-	}
-
-	wrongCookieFid := framework.NewFileID(volumeID, needleID, wrongCookie)
-	writeTokenWrongCookie := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, wrongCookieFid)
-	wrongCookieWrite := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	wrongCookieWrite.Header.Set("Authorization", "Bearer "+string(writeTokenWrongCookie))
-	wrongCookieWriteResp := framework.DoRequest(t, client, wrongCookieWrite)
-	_ = framework.ReadAllAndClose(t, wrongCookieWriteResp)
-	if wrongCookieWriteResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("write with wrong-cookie fid token expected 401, got %d", wrongCookieWriteResp.StatusCode)
-	}
-
-	writeTokenForFid := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, fid)
-	validWrite := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	validWrite.Header.Set("Authorization", "Bearer "+string(writeTokenForFid))
-	validWriteResp := framework.DoRequest(t, client, validWrite)
-	_ = framework.ReadAllAndClose(t, validWriteResp)
-	if validWriteResp.StatusCode != http.StatusCreated {
-		t.Fatalf("authorized write expected 201, got %d", validWriteResp.StatusCode)
-	}
-
-	readTokenForOtherFid := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, otherFid)
-	mismatchedReadReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	mismatchedReadReq.Header.Set("Authorization", "Bearer "+string(readTokenForOtherFid))
-	mismatchedReadResp := framework.DoRequest(t, client, mismatchedReadReq)
-	_ = framework.ReadAllAndClose(t, mismatchedReadResp)
-	if mismatchedReadResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("read with mismatched fid token expected 401, got %d", mismatchedReadResp.StatusCode)
-	}
-
-	readTokenWrongCookie := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, wrongCookieFid)
-	wrongCookieReadReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	wrongCookieReadReq.Header.Set("Authorization", "Bearer "+string(readTokenWrongCookie))
-	wrongCookieReadResp := framework.DoRequest(t, client, wrongCookieReadReq)
-	_ = framework.ReadAllAndClose(t, wrongCookieReadResp)
-	if wrongCookieReadResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("read with wrong-cookie fid token expected 401, got %d", wrongCookieReadResp.StatusCode)
-	}
-}
-
-func newUploadRequest(t testing.TB, url string, payload []byte) *http.Request {
-	t.Helper()
-	req, err := http.NewRequest(http.MethodPost, url, bytes.NewReader(payload))
-	if err != nil {
-		t.Fatalf("create upload request %s: %v", url, err)
-	}
-	req.Header.Set("Content-Type", "application/octet-stream")
-	return req
-}
-
-func TestJWTAuthRejectsExpiredTokens(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	clusterHarness := framework.StartSingleVolumeCluster(t, profile)
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(53)
-	const needleID = uint64(334455)
-	const cookie = uint32(0x22334455)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	payload := []byte("expired-token-content")
-	client := framework.NewHTTPClient()
-
-	expiredWriteToken := mustGenExpiredToken(t, []byte(profile.JWTSigningKey), fid)
-	writeReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	writeReq.Header.Set("Authorization", "Bearer "+expiredWriteToken)
-	writeResp := framework.DoRequest(t, client, writeReq)
-	_ = framework.ReadAllAndClose(t, writeResp)
-	if writeResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("expired write token expected 401, got %d", writeResp.StatusCode)
-	}
-
-	// Seed data with a valid token so read auth path can be exercised against existing content.
-	validWriteToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, fid)
-	validWriteReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	validWriteReq.Header.Set("Authorization", "Bearer "+string(validWriteToken))
-	validWriteResp := framework.DoRequest(t, client, validWriteReq)
-	_ = framework.ReadAllAndClose(t, validWriteResp)
-	if validWriteResp.StatusCode != http.StatusCreated {
-		t.Fatalf("valid write expected 201, got %d", validWriteResp.StatusCode)
-	}
-
-	expiredReadToken := mustGenExpiredToken(t, []byte(profile.JWTReadKey), fid)
-	readReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	readReq.Header.Set("Authorization", "Bearer "+expiredReadToken)
-	readResp := framework.DoRequest(t, client, readReq)
-	_ = framework.ReadAllAndClose(t, readResp)
-	if readResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("expired read token expected 401, got %d", readResp.StatusCode)
-	}
-}
-
-func TestJWTAuthViaQueryParamAndCookie(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	clusterHarness := framework.StartSingleVolumeCluster(t, profile)
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(54)
-	const needleID = uint64(445566)
-	const cookie = uint32(0x31415926)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	payload := []byte("jwt-query-cookie-content")
-	client := framework.NewHTTPClient()
-
-	writeToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, fid)
-	writeReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid+"?jwt="+string(writeToken), payload)
-	writeResp := framework.DoRequest(t, client, writeReq)
-	_ = framework.ReadAllAndClose(t, writeResp)
-	if writeResp.StatusCode != http.StatusCreated {
-		t.Fatalf("query-jwt write expected 201, got %d", writeResp.StatusCode)
-	}
-
-	readToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, fid)
-	readReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	readReq.AddCookie(&http.Cookie{Name: "AT", Value: string(readToken)})
-	readResp := framework.DoRequest(t, client, readReq)
-	readBody := framework.ReadAllAndClose(t, readResp)
-	if readResp.StatusCode != http.StatusOK {
-		t.Fatalf("cookie-jwt read expected 200, got %d", readResp.StatusCode)
-	}
-	if string(readBody) != string(payload) {
-		t.Fatalf("cookie-jwt read body mismatch: got %q want %q", string(readBody), string(payload))
-	}
-}
-
-func TestJWTTokenSourcePrecedenceQueryOverHeader(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	clusterHarness := framework.StartSingleVolumeCluster(t, profile)
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(55)
-	const needleID = uint64(556677)
-	const cookie = uint32(0x99887766)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	otherFID := framework.NewFileID(volumeID, needleID+1, cookie+1)
-	payload := []byte("jwt-precedence-content")
-	client := framework.NewHTTPClient()
-
-	validWriteToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, fid)
-	invalidWriteQueryToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, otherFID)
-	writeReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid+"?jwt="+string(invalidWriteQueryToken), payload)
-	writeReq.Header.Set("Authorization", "Bearer "+string(validWriteToken))
-	writeResp := framework.DoRequest(t, client, writeReq)
-	_ = framework.ReadAllAndClose(t, writeResp)
-	if writeResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("query token should take precedence over header token for write, expected 401 got %d", writeResp.StatusCode)
-	}
-
-	// Seed data with valid write token, then exercise read precedence.
-	seedWriteReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	seedWriteReq.Header.Set("Authorization", "Bearer "+string(validWriteToken))
-	seedWriteResp := framework.DoRequest(t, client, seedWriteReq)
-	_ = framework.ReadAllAndClose(t, seedWriteResp)
-	if seedWriteResp.StatusCode != http.StatusCreated {
-		t.Fatalf("seed write expected 201, got %d", seedWriteResp.StatusCode)
-	}
-
-	validReadToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, fid)
-	invalidReadQueryToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, otherFID)
-	readReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid+"?jwt="+string(invalidReadQueryToken))
-	readReq.Header.Set("Authorization", "Bearer "+string(validReadToken))
-	readResp := framework.DoRequest(t, client, readReq)
-	_ = framework.ReadAllAndClose(t, readResp)
-	if readResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("query token should take precedence over header token for read, expected 401 got %d", readResp.StatusCode)
-	}
-}
-
-func TestJWTTokenSourcePrecedenceHeaderOverCookie(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	clusterHarness := framework.StartSingleVolumeCluster(t, profile)
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(56)
-	const needleID = uint64(667788)
-	const cookie = uint32(0x11229988)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	otherFID := framework.NewFileID(volumeID, needleID+1, cookie+1)
-	payload := []byte("jwt-precedence-header-cookie")
-	client := framework.NewHTTPClient()
-
-	validWriteToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, fid)
-	invalidCookieWriteToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, otherFID)
-	writeReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	writeReq.Header.Set("Authorization", "Bearer "+string(validWriteToken))
-	writeReq.AddCookie(&http.Cookie{Name: "AT", Value: string(invalidCookieWriteToken)})
-	writeResp := framework.DoRequest(t, client, writeReq)
-	_ = framework.ReadAllAndClose(t, writeResp)
-	if writeResp.StatusCode != http.StatusCreated {
-		t.Fatalf("header token should take precedence over cookie token for write, expected 201 got %d", writeResp.StatusCode)
-	}
-
-	validReadToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, fid)
-	invalidCookieReadToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, otherFID)
-	readReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	readReq.Header.Set("Authorization", "Bearer "+string(validReadToken))
-	readReq.AddCookie(&http.Cookie{Name: "AT", Value: string(invalidCookieReadToken)})
-	readResp := framework.DoRequest(t, client, readReq)
-	readBody := framework.ReadAllAndClose(t, readResp)
-	if readResp.StatusCode != http.StatusOK {
-		t.Fatalf("header token should take precedence over cookie token for read, expected 200 got %d", readResp.StatusCode)
-	}
-	if string(readBody) != string(payload) {
-		t.Fatalf("header-over-cookie read body mismatch: got %q want %q", string(readBody), string(payload))
-	}
-}
-
-func TestJWTTokenSourcePrecedenceQueryOverCookie(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	profile := matrix.P3()
-	clusterHarness := framework.StartSingleVolumeCluster(t, profile)
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(57)
-	const needleID = uint64(778899)
-	const cookie = uint32(0x88776655)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, needleID, cookie)
-	otherFID := framework.NewFileID(volumeID, needleID+1, cookie+1)
-	payload := []byte("jwt-precedence-query-cookie")
-	client := framework.NewHTTPClient()
-
-	validWriteToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, fid)
-	invalidQueryWriteToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTSigningKey)), 60, otherFID)
-	writeReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid+"?jwt="+string(invalidQueryWriteToken), payload)
-	writeReq.AddCookie(&http.Cookie{Name: "AT", Value: string(validWriteToken)})
-	writeResp := framework.DoRequest(t, client, writeReq)
-	_ = framework.ReadAllAndClose(t, writeResp)
-	if writeResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("query token should take precedence over cookie token for write, expected 401 got %d", writeResp.StatusCode)
-	}
-
-	// Seed data with valid write token so read precedence can be exercised.
-	seedWriteReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fid, payload)
-	seedWriteReq.Header.Set("Authorization", "Bearer "+string(validWriteToken))
-	seedWriteResp := framework.DoRequest(t, client, seedWriteReq)
-	_ = framework.ReadAllAndClose(t, seedWriteResp)
-	if seedWriteResp.StatusCode != http.StatusCreated {
-		t.Fatalf("seed write expected 201, got %d", seedWriteResp.StatusCode)
-	}
-
-	validReadToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, fid)
-	invalidQueryReadToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, otherFID)
-	readReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid+"?jwt="+string(invalidQueryReadToken))
-	readReq.AddCookie(&http.Cookie{Name: "AT", Value: string(validReadToken)})
-	readResp := framework.DoRequest(t, client, readReq)
-	_ = framework.ReadAllAndClose(t, readResp)
-	if readResp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("query token should take precedence over cookie token for read, expected 401 got %d", readResp.StatusCode)
-	}
-
-	// Validate positive path: valid query token should succeed even if cookie token is invalid.
-	validQueryReadReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid+"?jwt="+string(validReadToken))
-	invalidCookieReadToken := security.GenJwtForVolumeServer(security.SigningKey([]byte(profile.JWTReadKey)), 60, otherFID)
-	validQueryReadReq.AddCookie(&http.Cookie{Name: "AT", Value: string(invalidCookieReadToken)})
-	validQueryReadResp := framework.DoRequest(t, client, validQueryReadReq)
-	validQueryReadBody := framework.ReadAllAndClose(t, validQueryReadResp)
-	if validQueryReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("valid query token should succeed over invalid cookie token, expected 200 got %d", validQueryReadResp.StatusCode)
-	}
-	if string(validQueryReadBody) != string(payload) {
-		t.Fatalf("query-over-cookie read body mismatch: got %q want %q", string(validQueryReadBody), string(payload))
-	}
-}
-
-func mustGenExpiredToken(t testing.TB, key []byte, fid string) string {
-	t.Helper()
-	claims := security.SeaweedFileIdClaims{
-		Fid: fid,
-		RegisteredClaims: jwt.RegisteredClaims{
-			ExpiresAt: jwt.NewNumericDate(time.Now().Add(-1 * time.Minute)),
-		},
-	}
-	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
-	signed, err := token.SignedString(key)
-	if err != nil {
-		t.Fatalf("sign expired token: %v", err)
-	}
-	return signed
-}

test/volume_server/http/chunk_manifest_test.go

@@ -1,232 +0,0 @@
-package volume_server_http_test
-
-import (
-	"bytes"
-	"encoding/json"
-	"net/http"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-	"github.com/seaweedfs/seaweedfs/weed/operation"
-)
-
-func TestChunkManifestExpansionAndBypass(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(102)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-
-	chunkFID := framework.NewFileID(volumeID, 772005, 0x5E6F7081)
-	chunkPayload := []byte("chunk-manifest-expanded-content")
-	chunkUploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), chunkFID, chunkPayload)
-	_ = framework.ReadAllAndClose(t, chunkUploadResp)
-	if chunkUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("chunk upload expected 201, got %d", chunkUploadResp.StatusCode)
-	}
-
-	manifest := &operation.ChunkManifest{
-		Name: "manifest.bin",
-		Mime: "application/octet-stream",
-		Size: int64(len(chunkPayload)),
-		Chunks: []*operation.ChunkInfo{
-			{
-				Fid:    chunkFID,
-				Offset: 0,
-				Size:   int64(len(chunkPayload)),
-			},
-		},
-	}
-	manifestBytes, err := json.Marshal(manifest)
-	if err != nil {
-		t.Fatalf("marshal chunk manifest: %v", err)
-	}
-
-	manifestFID := framework.NewFileID(volumeID, 772006, 0x6F708192)
-	manifestUploadReq, err := http.NewRequest(http.MethodPost, clusterHarness.VolumeAdminURL()+"/"+manifestFID+"?cm=true", bytes.NewReader(manifestBytes))
-	if err != nil {
-		t.Fatalf("create manifest upload request: %v", err)
-	}
-	manifestUploadReq.Header.Set("Content-Type", "application/json")
-	manifestUploadResp := framework.DoRequest(t, client, manifestUploadReq)
-	_ = framework.ReadAllAndClose(t, manifestUploadResp)
-	if manifestUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("manifest upload expected 201, got %d", manifestUploadResp.StatusCode)
-	}
-
-	expandedReadResp := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), manifestFID)
-	expandedReadBody := framework.ReadAllAndClose(t, expandedReadResp)
-	if expandedReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("manifest expanded read expected 200, got %d", expandedReadResp.StatusCode)
-	}
-	if string(expandedReadBody) != string(chunkPayload) {
-		t.Fatalf("manifest expanded read mismatch: got %q want %q", string(expandedReadBody), string(chunkPayload))
-	}
-	if expandedReadResp.Header.Get("X-File-Store") != "chunked" {
-		t.Fatalf("manifest expanded read expected X-File-Store=chunked, got %q", expandedReadResp.Header.Get("X-File-Store"))
-	}
-
-	bypassReadResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+manifestFID+"?cm=false"))
-	bypassReadBody := framework.ReadAllAndClose(t, bypassReadResp)
-	if bypassReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("manifest bypass read expected 200, got %d", bypassReadResp.StatusCode)
-	}
-	if bypassReadResp.Header.Get("X-File-Store") != "" {
-		t.Fatalf("manifest bypass read expected empty X-File-Store header, got %q", bypassReadResp.Header.Get("X-File-Store"))
-	}
-
-	var gotManifest operation.ChunkManifest
-	if err = json.Unmarshal(bypassReadBody, &gotManifest); err != nil {
-		t.Fatalf("manifest bypass read expected JSON payload, got decode error: %v body=%q", err, string(bypassReadBody))
-	}
-	if len(gotManifest.Chunks) != 1 || gotManifest.Chunks[0].Fid != chunkFID {
-		t.Fatalf("manifest bypass read payload mismatch: %+v", gotManifest)
-	}
-}
-
-func TestChunkManifestDeleteRemovesChildChunks(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(104)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-
-	chunkFID := framework.NewFileID(volumeID, 772008, 0x8192A3B4)
-	chunkPayload := []byte("chunk-manifest-delete-content")
-	chunkUploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), chunkFID, chunkPayload)
-	_ = framework.ReadAllAndClose(t, chunkUploadResp)
-	if chunkUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("chunk upload expected 201, got %d", chunkUploadResp.StatusCode)
-	}
-
-	manifest := &operation.ChunkManifest{
-		Name: "manifest-delete.bin",
-		Mime: "application/octet-stream",
-		Size: int64(len(chunkPayload)),
-		Chunks: []*operation.ChunkInfo{
-			{
-				Fid:    chunkFID,
-				Offset: 0,
-				Size:   int64(len(chunkPayload)),
-			},
-		},
-	}
-	manifestBytes, err := json.Marshal(manifest)
-	if err != nil {
-		t.Fatalf("marshal chunk manifest: %v", err)
-	}
-
-	manifestFID := framework.NewFileID(volumeID, 772009, 0x92A3B4C5)
-	manifestUploadReq, err := http.NewRequest(http.MethodPost, clusterHarness.VolumeAdminURL()+"/"+manifestFID+"?cm=true", bytes.NewReader(manifestBytes))
-	if err != nil {
-		t.Fatalf("create manifest upload request: %v", err)
-	}
-	manifestUploadReq.Header.Set("Content-Type", "application/json")
-	manifestUploadResp := framework.DoRequest(t, client, manifestUploadReq)
-	_ = framework.ReadAllAndClose(t, manifestUploadResp)
-	if manifestUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("manifest upload expected 201, got %d", manifestUploadResp.StatusCode)
-	}
-
-	deleteResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodDelete, clusterHarness.VolumeAdminURL()+"/"+manifestFID))
-	deleteBody := framework.ReadAllAndClose(t, deleteResp)
-	if deleteResp.StatusCode != http.StatusAccepted {
-		t.Fatalf("manifest delete expected 202, got %d", deleteResp.StatusCode)
-	}
-	var deleteResult map[string]int64
-	if err = json.Unmarshal(deleteBody, &deleteResult); err != nil {
-		t.Fatalf("decode manifest delete response: %v body=%q", err, string(deleteBody))
-	}
-	if deleteResult["size"] != int64(len(chunkPayload)) {
-		t.Fatalf("manifest delete expected size=%d, got %d", len(chunkPayload), deleteResult["size"])
-	}
-
-	manifestReadAfterDelete := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), manifestFID)
-	_ = framework.ReadAllAndClose(t, manifestReadAfterDelete)
-	if manifestReadAfterDelete.StatusCode != http.StatusNotFound {
-		t.Fatalf("manifest read after delete expected 404, got %d", manifestReadAfterDelete.StatusCode)
-	}
-
-	chunkReadAfterDelete := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), chunkFID)
-	_ = framework.ReadAllAndClose(t, chunkReadAfterDelete)
-	if chunkReadAfterDelete.StatusCode != http.StatusNotFound {
-		t.Fatalf("chunk read after manifest delete expected 404, got %d", chunkReadAfterDelete.StatusCode)
-	}
-}
-
-func TestChunkManifestDeleteFailsWhenChildDeletionFails(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(105)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	manifest := &operation.ChunkManifest{
-		Name: "manifest-delete-failure.bin",
-		Mime: "application/octet-stream",
-		Size: 1,
-		Chunks: []*operation.ChunkInfo{
-			{
-				Fid:    "not-a-valid-fid",
-				Offset: 0,
-				Size:   1,
-			},
-		},
-	}
-	manifestBytes, err := json.Marshal(manifest)
-	if err != nil {
-		t.Fatalf("marshal chunk manifest: %v", err)
-	}
-
-	manifestFID := framework.NewFileID(volumeID, 772010, 0xA3B4C5D6)
-	manifestUploadReq, err := http.NewRequest(http.MethodPost, clusterHarness.VolumeAdminURL()+"/"+manifestFID+"?cm=true", bytes.NewReader(manifestBytes))
-	if err != nil {
-		t.Fatalf("create manifest upload request: %v", err)
-	}
-	manifestUploadReq.Header.Set("Content-Type", "application/json")
-	manifestUploadResp := framework.DoRequest(t, client, manifestUploadReq)
-	_ = framework.ReadAllAndClose(t, manifestUploadResp)
-	if manifestUploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("manifest upload expected 201, got %d", manifestUploadResp.StatusCode)
-	}
-
-	deleteResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodDelete, clusterHarness.VolumeAdminURL()+"/"+manifestFID))
-	deleteBody := framework.ReadAllAndClose(t, deleteResp)
-	if deleteResp.StatusCode != http.StatusInternalServerError {
-		t.Fatalf("manifest delete with invalid child fid expected 500, got %d body=%q", deleteResp.StatusCode, string(deleteBody))
-	}
-
-	manifestBypassRead := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+manifestFID+"?cm=false"))
-	manifestBypassBody := framework.ReadAllAndClose(t, manifestBypassRead)
-	if manifestBypassRead.StatusCode != http.StatusOK {
-		t.Fatalf("manifest bypass read after failed delete expected 200, got %d", manifestBypassRead.StatusCode)
-	}
-	var gotManifest operation.ChunkManifest
-	if err = json.Unmarshal(manifestBypassBody, &gotManifest); err != nil {
-		t.Fatalf("manifest bypass read expected JSON payload, got decode error: %v body=%q", err, string(manifestBypassBody))
-	}
-	if len(gotManifest.Chunks) != 1 || gotManifest.Chunks[0].Fid != "not-a-valid-fid" {
-		t.Fatalf("manifest payload mismatch after failed delete: %+v", gotManifest)
-	}
-}

test/volume_server/http/compressed_read_test.go

@@ -1,97 +0,0 @@
-package volume_server_http_test
-
-import (
-	"bytes"
-	"compress/gzip"
-	"io"
-	"net/http"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-)
-
-func gzipData(t testing.TB, data []byte) []byte {
-	t.Helper()
-	var buf bytes.Buffer
-	zw := gzip.NewWriter(&buf)
-	if _, err := zw.Write(data); err != nil {
-		t.Fatalf("gzip write: %v", err)
-	}
-	if err := zw.Close(); err != nil {
-		t.Fatalf("gzip close: %v", err)
-	}
-	return buf.Bytes()
-}
-
-func gunzipData(t testing.TB, data []byte) []byte {
-	t.Helper()
-	zr, err := gzip.NewReader(bytes.NewReader(data))
-	if err != nil {
-		t.Fatalf("gunzip new reader: %v", err)
-	}
-	defer zr.Close()
-	out, err := io.ReadAll(zr)
-	if err != nil {
-		t.Fatalf("gunzip read: %v", err)
-	}
-	return out
-}
-
-func TestCompressedReadAcceptEncodingMatrix(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(103)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	fid := framework.NewFileID(volumeID, 772007, 0x708192A3)
-	plainPayload := []byte("compressed-read-accept-encoding-matrix-content-compressed-read-accept-encoding-matrix-content")
-	compressedPayload := gzipData(t, plainPayload)
-
-	uploadReq, err := http.NewRequest(http.MethodPost, clusterHarness.VolumeAdminURL()+"/"+fid, bytes.NewReader(compressedPayload))
-	if err != nil {
-		t.Fatalf("create compressed upload request: %v", err)
-	}
-	uploadReq.Header.Set("Content-Type", "text/plain")
-	uploadReq.Header.Set("Content-Encoding", "gzip")
-	uploadResp := framework.DoRequest(t, client, uploadReq)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("compressed upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	gzipReadReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	gzipReadReq.Header.Set("Accept-Encoding", "gzip")
-	gzipReadResp := framework.DoRequest(t, client, gzipReadReq)
-	gzipReadBody := framework.ReadAllAndClose(t, gzipReadResp)
-	if gzipReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("gzip-accepted read expected 200, got %d", gzipReadResp.StatusCode)
-	}
-	if gzipReadResp.Header.Get("Content-Encoding") != "gzip" {
-		t.Fatalf("gzip-accepted read expected Content-Encoding=gzip, got %q", gzipReadResp.Header.Get("Content-Encoding"))
-	}
-	if string(gunzipData(t, gzipReadBody)) != string(plainPayload) {
-		t.Fatalf("gzip-accepted read body mismatch after gunzip")
-	}
-
-	identityReadReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	identityReadReq.Header.Set("Accept-Encoding", "identity")
-	identityReadResp := framework.DoRequest(t, client, identityReadReq)
-	identityReadBody := framework.ReadAllAndClose(t, identityReadResp)
-	if identityReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("identity read expected 200, got %d", identityReadResp.StatusCode)
-	}
-	if identityReadResp.Header.Get("Content-Encoding") != "" {
-		t.Fatalf("identity read expected no Content-Encoding header, got %q", identityReadResp.Header.Get("Content-Encoding"))
-	}
-	if string(identityReadBody) != string(plainPayload) {
-		t.Fatalf("identity read body mismatch: got %q want %q", string(identityReadBody), string(plainPayload))
-	}
-}

test/volume_server/http/headers_static_test.go

@@ -1,102 +0,0 @@
-package volume_server_http_test
-
-import (
-	"fmt"
-	"net/http"
-	"strings"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-)
-
-func TestReadPassthroughHeadersAndDownloadDisposition(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(96)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	fullFileID := framework.NewFileID(volumeID, 661122, 0x55667788)
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fullFileID, []byte("passthrough-header-content"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	parts := strings.SplitN(fullFileID, ",", 2)
-	if len(parts) != 2 {
-		t.Fatalf("unexpected file id format: %q", fullFileID)
-	}
-	fidOnly := parts[1]
-
-	url := fmt.Sprintf("%s/%d/%s/%s?response-content-type=text/plain&response-cache-control=no-store&dl=true",
-		clusterHarness.VolumeAdminURL(),
-		volumeID,
-		fidOnly,
-		"report.txt",
-	)
-	resp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, url))
-	_ = framework.ReadAllAndClose(t, resp)
-	if resp.StatusCode != http.StatusOK {
-		t.Fatalf("passthrough read expected 200, got %d", resp.StatusCode)
-	}
-	if resp.Header.Get("Content-Type") != "text/plain" {
-		t.Fatalf("response-content-type override mismatch: %q", resp.Header.Get("Content-Type"))
-	}
-	if resp.Header.Get("Cache-Control") != "no-store" {
-		t.Fatalf("response-cache-control override mismatch: %q", resp.Header.Get("Cache-Control"))
-	}
-	contentDisposition := resp.Header.Get("Content-Disposition")
-	if !strings.Contains(contentDisposition, "attachment") || !strings.Contains(contentDisposition, "report.txt") {
-		t.Fatalf("download disposition header mismatch: %q", contentDisposition)
-	}
-}
-
-func TestStaticAssetEndpoints(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	client := framework.NewHTTPClient()
-
-	faviconResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/favicon.ico"))
-	_ = framework.ReadAllAndClose(t, faviconResp)
-	if faviconResp.StatusCode != http.StatusOK {
-		t.Fatalf("/favicon.ico expected 200, got %d", faviconResp.StatusCode)
-	}
-
-	staticResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/seaweedfsstatic/seaweed50x50.png"))
-	_ = framework.ReadAllAndClose(t, staticResp)
-	if staticResp.StatusCode != http.StatusOK {
-		t.Fatalf("/seaweedfsstatic/seaweed50x50.png expected 200, got %d", staticResp.StatusCode)
-	}
-}
-
-func TestStaticAssetEndpointsOnPublicPort(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	client := framework.NewHTTPClient()
-
-	faviconResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, clusterHarness.VolumePublicURL()+"/favicon.ico"))
-	_ = framework.ReadAllAndClose(t, faviconResp)
-	if faviconResp.StatusCode != http.StatusOK {
-		t.Fatalf("public /favicon.ico expected 200, got %d", faviconResp.StatusCode)
-	}
-
-	staticResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, clusterHarness.VolumePublicURL()+"/seaweedfsstatic/seaweed50x50.png"))
-	_ = framework.ReadAllAndClose(t, staticResp)
-	if staticResp.StatusCode != http.StatusOK {
-		t.Fatalf("public /seaweedfsstatic/seaweed50x50.png expected 200, got %d", staticResp.StatusCode)
-	}
-}

test/volume_server/http/image_transform_test.go

@@ -1,92 +0,0 @@
-package volume_server_http_test
-
-import (
-	"bytes"
-	"fmt"
-	"image"
-	"image/color"
-	"image/png"
-	"net/http"
-	"strings"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-)
-
-func makePNGFixture(t testing.TB, width, height int) []byte {
-	t.Helper()
-
-	img := image.NewRGBA(image.Rect(0, 0, width, height))
-	for y := 0; y < height; y++ {
-		for x := 0; x < width; x++ {
-			img.Set(x, y, color.RGBA{R: uint8(x * 20), G: uint8(y * 20), B: 200, A: 255})
-		}
-	}
-
-	var buf bytes.Buffer
-	if err := png.Encode(&buf, img); err != nil {
-		t.Fatalf("encode png fixture: %v", err)
-	}
-	return buf.Bytes()
-}
-
-func decodeImageConfig(t testing.TB, data []byte) image.Config {
-	t.Helper()
-	cfg, _, err := image.DecodeConfig(bytes.NewReader(data))
-	if err != nil {
-		t.Fatalf("decode image config: %v", err)
-	}
-	return cfg
-}
-
-func TestImageResizeAndCropReadVariants(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P1())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(101)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	client := framework.NewHTTPClient()
-	fullFileID := framework.NewFileID(volumeID, 772004, 0x4D5E6F70)
-	uploadReq := newUploadRequest(t, clusterHarness.VolumeAdminURL()+"/"+fullFileID, makePNGFixture(t, 6, 4))
-	uploadReq.Header.Set("Content-Type", "image/png")
-	uploadResp := framework.DoRequest(t, client, uploadReq)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("image upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	parts := strings.SplitN(fullFileID, ",", 2)
-	if len(parts) != 2 {
-		t.Fatalf("unexpected file id format: %q", fullFileID)
-	}
-	fidOnly := parts[1]
-
-	resizeURL := fmt.Sprintf("%s/%d/%s/%s?width=2&height=1", clusterHarness.VolumeAdminURL(), volumeID, fidOnly, "fixture.png")
-	resizeResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, resizeURL))
-	resizeBody := framework.ReadAllAndClose(t, resizeResp)
-	if resizeResp.StatusCode != http.StatusOK {
-		t.Fatalf("image resize read expected 200, got %d", resizeResp.StatusCode)
-	}
-	resizeCfg := decodeImageConfig(t, resizeBody)
-	if resizeCfg.Width > 2 || resizeCfg.Height > 1 {
-		t.Fatalf("image resize expected dimensions <= 2x1, got %dx%d", resizeCfg.Width, resizeCfg.Height)
-	}
-
-	cropURL := fmt.Sprintf("%s/%d/%s/%s?crop_x1=1&crop_y1=1&crop_x2=4&crop_y2=3", clusterHarness.VolumeAdminURL(), volumeID, fidOnly, "fixture.png")
-	cropResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodGet, cropURL))
-	cropBody := framework.ReadAllAndClose(t, cropResp)
-	if cropResp.StatusCode != http.StatusOK {
-		t.Fatalf("image crop read expected 200, got %d", cropResp.StatusCode)
-	}
-	cropCfg := decodeImageConfig(t, cropBody)
-	if cropCfg.Width != 3 || cropCfg.Height != 2 {
-		t.Fatalf("image crop expected 3x2, got %dx%d", cropCfg.Width, cropCfg.Height)
-	}
-}

test/volume_server/http/public_cors_methods_test.go

@@ -1,331 +0,0 @@
-package volume_server_http_test
-
-import (
-	"bytes"
-	"net/http"
-	"strconv"
-	"testing"
-
-	"github.com/seaweedfs/seaweedfs/test/volume_server/framework"
-	"github.com/seaweedfs/seaweedfs/test/volume_server/matrix"
-)
-
-func TestPublicPortReadOnlyMethodBehavior(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(81)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, 123321, 0x01020304)
-	originalData := []byte("public-port-original")
-	replacementData := []byte("public-port-replacement")
-	client := framework.NewHTTPClient()
-
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, originalData)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("admin upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	publicReadResp := framework.ReadBytes(t, client, clusterHarness.VolumePublicURL(), fid)
-	publicReadBody := framework.ReadAllAndClose(t, publicReadResp)
-	if publicReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("public GET expected 200, got %d", publicReadResp.StatusCode)
-	}
-	if string(publicReadBody) != string(originalData) {
-		t.Fatalf("public GET body mismatch: got %q want %q", string(publicReadBody), string(originalData))
-	}
-
-	publicPostReq := newUploadRequest(t, clusterHarness.VolumePublicURL()+"/"+fid, replacementData)
-	publicPostResp := framework.DoRequest(t, client, publicPostReq)
-	_ = framework.ReadAllAndClose(t, publicPostResp)
-	if publicPostResp.StatusCode != http.StatusOK {
-		t.Fatalf("public POST expected passthrough 200, got %d", publicPostResp.StatusCode)
-	}
-
-	publicDeleteResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodDelete, clusterHarness.VolumePublicURL()+"/"+fid))
-	_ = framework.ReadAllAndClose(t, publicDeleteResp)
-	if publicDeleteResp.StatusCode != http.StatusOK {
-		t.Fatalf("public DELETE expected passthrough 200, got %d", publicDeleteResp.StatusCode)
-	}
-
-	adminReadResp := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), fid)
-	adminReadBody := framework.ReadAllAndClose(t, adminReadResp)
-	if adminReadResp.StatusCode != http.StatusOK {
-		t.Fatalf("admin GET after public POST/DELETE expected 200, got %d", adminReadResp.StatusCode)
-	}
-	if string(adminReadBody) != string(originalData) {
-		t.Fatalf("public port should not mutate data: got %q want %q", string(adminReadBody), string(originalData))
-	}
-}
-
-func TestCorsAndUnsupportedMethodBehavior(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(82)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, 789789, 0x0A0B0C0D)
-	client := framework.NewHTTPClient()
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte("cors-check"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("admin upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	adminOriginReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumeAdminURL()+"/"+fid)
-	adminOriginReq.Header.Set("Origin", "https://example.com")
-	adminOriginResp := framework.DoRequest(t, client, adminOriginReq)
-	_ = framework.ReadAllAndClose(t, adminOriginResp)
-	if adminOriginResp.Header.Get("Access-Control-Allow-Origin") != "*" {
-		t.Fatalf("admin GET origin header mismatch: %q", adminOriginResp.Header.Get("Access-Control-Allow-Origin"))
-	}
-	if adminOriginResp.Header.Get("Access-Control-Allow-Credentials") != "true" {
-		t.Fatalf("admin GET credentials header mismatch: %q", adminOriginResp.Header.Get("Access-Control-Allow-Credentials"))
-	}
-
-	publicOriginReq := mustNewRequest(t, http.MethodGet, clusterHarness.VolumePublicURL()+"/"+fid)
-	publicOriginReq.Header.Set("Origin", "https://example.com")
-	publicOriginResp := framework.DoRequest(t, client, publicOriginReq)
-	_ = framework.ReadAllAndClose(t, publicOriginResp)
-	if publicOriginResp.Header.Get("Access-Control-Allow-Origin") != "*" {
-		t.Fatalf("public GET origin header mismatch: %q", publicOriginResp.Header.Get("Access-Control-Allow-Origin"))
-	}
-	if publicOriginResp.Header.Get("Access-Control-Allow-Credentials") != "true" {
-		t.Fatalf("public GET credentials header mismatch: %q", publicOriginResp.Header.Get("Access-Control-Allow-Credentials"))
-	}
-
-	adminPatchReq, err := http.NewRequest(http.MethodPatch, clusterHarness.VolumeAdminURL()+"/"+fid, bytes.NewReader([]byte("patch")))
-	if err != nil {
-		t.Fatalf("create admin PATCH request: %v", err)
-	}
-	adminPatchResp := framework.DoRequest(t, client, adminPatchReq)
-	_ = framework.ReadAllAndClose(t, adminPatchResp)
-	if adminPatchResp.StatusCode != http.StatusBadRequest {
-		t.Fatalf("admin PATCH expected 400, got %d", adminPatchResp.StatusCode)
-	}
-
-	publicPatchReq, err := http.NewRequest(http.MethodPatch, clusterHarness.VolumePublicURL()+"/"+fid, bytes.NewReader([]byte("patch")))
-	if err != nil {
-		t.Fatalf("create public PATCH request: %v", err)
-	}
-	publicPatchResp := framework.DoRequest(t, client, publicPatchReq)
-	_ = framework.ReadAllAndClose(t, publicPatchResp)
-	if publicPatchResp.StatusCode != http.StatusOK {
-		t.Fatalf("public PATCH expected passthrough 200, got %d", publicPatchResp.StatusCode)
-	}
-}
-
-func TestUnsupportedMethodTraceParity(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(83)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, 123999, 0x01010101)
-	client := framework.NewHTTPClient()
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte("trace-method-check"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	adminTraceReq := mustNewRequest(t, http.MethodTrace, clusterHarness.VolumeAdminURL()+"/"+fid)
-	adminTraceResp := framework.DoRequest(t, client, adminTraceReq)
-	_ = framework.ReadAllAndClose(t, adminTraceResp)
-	if adminTraceResp.StatusCode != http.StatusBadRequest {
-		t.Fatalf("admin TRACE expected 400, got %d", adminTraceResp.StatusCode)
-	}
-
-	publicTraceReq := mustNewRequest(t, http.MethodTrace, clusterHarness.VolumePublicURL()+"/"+fid)
-	publicTraceResp := framework.DoRequest(t, client, publicTraceReq)
-	_ = framework.ReadAllAndClose(t, publicTraceResp)
-	if publicTraceResp.StatusCode != http.StatusOK {
-		t.Fatalf("public TRACE expected passthrough 200, got %d", publicTraceResp.StatusCode)
-	}
-}
-
-func TestUnsupportedMethodPropfindParity(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(84)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, 124000, 0x02020202)
-	client := framework.NewHTTPClient()
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte("propfind-method-check"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	adminReq := mustNewRequest(t, "PROPFIND", clusterHarness.VolumeAdminURL()+"/"+fid)
-	adminResp := framework.DoRequest(t, client, adminReq)
-	_ = framework.ReadAllAndClose(t, adminResp)
-	if adminResp.StatusCode != http.StatusBadRequest {
-		t.Fatalf("admin PROPFIND expected 400, got %d", adminResp.StatusCode)
-	}
-
-	publicReq := mustNewRequest(t, "PROPFIND", clusterHarness.VolumePublicURL()+"/"+fid)
-	publicResp := framework.DoRequest(t, client, publicReq)
-	_ = framework.ReadAllAndClose(t, publicResp)
-	if publicResp.StatusCode != http.StatusOK {
-		t.Fatalf("public PROPFIND expected passthrough 200, got %d", publicResp.StatusCode)
-	}
-
-	verifyResp := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), fid)
-	verifyBody := framework.ReadAllAndClose(t, verifyResp)
-	if verifyResp.StatusCode != http.StatusOK {
-		t.Fatalf("verify GET expected 200, got %d", verifyResp.StatusCode)
-	}
-	if string(verifyBody) != "propfind-method-check" {
-		t.Fatalf("PROPFIND should not mutate data, got %q", string(verifyBody))
-	}
-}
-
-func TestUnsupportedMethodConnectParity(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(85)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, 124001, 0x03030303)
-	client := framework.NewHTTPClient()
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte("connect-method-check"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	adminReq := mustNewRequest(t, "CONNECT", clusterHarness.VolumeAdminURL()+"/"+fid)
-	adminResp := framework.DoRequest(t, client, adminReq)
-	_ = framework.ReadAllAndClose(t, adminResp)
-	if adminResp.StatusCode != http.StatusBadRequest {
-		t.Fatalf("admin CONNECT expected 400, got %d", adminResp.StatusCode)
-	}
-
-	publicReq := mustNewRequest(t, "CONNECT", clusterHarness.VolumePublicURL()+"/"+fid)
-	publicResp := framework.DoRequest(t, client, publicReq)
-	_ = framework.ReadAllAndClose(t, publicResp)
-	if publicResp.StatusCode != http.StatusOK {
-		t.Fatalf("public CONNECT expected passthrough 200, got %d", publicResp.StatusCode)
-	}
-
-	verifyResp := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), fid)
-	verifyBody := framework.ReadAllAndClose(t, verifyResp)
-	if verifyResp.StatusCode != http.StatusOK {
-		t.Fatalf("verify GET expected 200, got %d", verifyResp.StatusCode)
-	}
-	if string(verifyBody) != "connect-method-check" {
-		t.Fatalf("CONNECT should not mutate data, got %q", string(verifyBody))
-	}
-}
-
-func TestUnsupportedMethodMkcolParity(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(88)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, 124004, 0x06060606)
-	client := framework.NewHTTPClient()
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, []byte("mkcol-method-check"))
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	adminReq := mustNewRequest(t, "MKCOL", clusterHarness.VolumeAdminURL()+"/"+fid)
-	adminResp := framework.DoRequest(t, client, adminReq)
-	_ = framework.ReadAllAndClose(t, adminResp)
-	if adminResp.StatusCode != http.StatusBadRequest {
-		t.Fatalf("admin MKCOL expected 400, got %d", adminResp.StatusCode)
-	}
-
-	publicReq := mustNewRequest(t, "MKCOL", clusterHarness.VolumePublicURL()+"/"+fid)
-	publicResp := framework.DoRequest(t, client, publicReq)
-	_ = framework.ReadAllAndClose(t, publicResp)
-	if publicResp.StatusCode != http.StatusOK {
-		t.Fatalf("public MKCOL expected passthrough 200, got %d", publicResp.StatusCode)
-	}
-
-	verifyResp := framework.ReadBytes(t, client, clusterHarness.VolumeAdminURL(), fid)
-	verifyBody := framework.ReadAllAndClose(t, verifyResp)
-	if verifyResp.StatusCode != http.StatusOK {
-		t.Fatalf("verify GET expected 200, got %d", verifyResp.StatusCode)
-	}
-	if string(verifyBody) != "mkcol-method-check" {
-		t.Fatalf("MKCOL should not mutate data, got %q", string(verifyBody))
-	}
-}
-
-func TestPublicPortHeadReadParity(t *testing.T) {
-	if testing.Short() {
-		t.Skip("skipping integration test in short mode")
-	}
-
-	clusterHarness := framework.StartSingleVolumeCluster(t, matrix.P2())
-	conn, grpcClient := framework.DialVolumeServer(t, clusterHarness.VolumeGRPCAddress())
-	defer conn.Close()
-
-	const volumeID = uint32(86)
-	framework.AllocateVolume(t, grpcClient, volumeID, "")
-
-	fid := framework.NewFileID(volumeID, 124002, 0x04040404)
-	payload := []byte("public-head-parity-content")
-	client := framework.NewHTTPClient()
-
-	uploadResp := framework.UploadBytes(t, client, clusterHarness.VolumeAdminURL(), fid, payload)
-	_ = framework.ReadAllAndClose(t, uploadResp)
-	if uploadResp.StatusCode != http.StatusCreated {
-		t.Fatalf("upload expected 201, got %d", uploadResp.StatusCode)
-	}
-
-	headResp := framework.DoRequest(t, client, mustNewRequest(t, http.MethodHead, clusterHarness.VolumePublicURL()+"/"+fid))
-	headBody := framework.ReadAllAndClose(t, headResp)
-	if headResp.StatusCode != http.StatusOK {
-		t.Fatalf("public HEAD expected 200, got %d", headResp.StatusCode)
-	}
-	if got := headResp.Header.Get("Content-Length"); got != strconv.Itoa(len(payload)) {
-		t.Fatalf("public HEAD content-length mismatch: got %q want %d", got, len(payload))
-	}
-	if len(headBody) != 0 {
-		t.Fatalf("public HEAD body should be empty, got %d bytes", len(headBody))
-	}
-}