Files
node/vms/platformvm/txs/staker_dispatch_guard_test.go
zeekay 7cf87b230b node-unified is the node
The module already called itself github.com/luxfi/node while containing no node
in Go: cmd/luxd was twenty-one lines that printed the size of a few types, and
the Go column of the matrix measured a VM plugin. A repo that fetches the thing
it claims to be has not replaced it, so the Go sources move in — 1515 files,
the daemon and everything under it — and the build reaches outside this module
for nothing.

Rust and C++ sit beside it unchanged and are still measured against it by the
differential. That is the point of one repo: the reference implementation and
the two ports are the same checkout, so parity is a thing you can run rather
than a thing you assert.

Verified: builds, and the closure carries no lux-private — checked at build time
rather than believed. The daemon starts twelve chains on a local network
(P X C Q Z A B G K M F, plus D through its plugin) and reports healthy.
2026-09-07 16:15:25 -07:00

42 lines
1.6 KiB
Go

// Copyright (C) 2019-2026, Lux Industries Inc. All rights reserved.
// See the file LICENSE for licensing terms.
package txs
import "testing"
// TestStakerDispatchSafety pins the interface-satisfaction invariant that the
// staker type-switches in service.go (getStakerAttributes) and
// executor/proposal_tx_executor.go depend on.
//
// Struct-is-wire turned RewardsOwner from a struct field into an accessor
// method, so *AddValidatorTx now structurally satisfies BOTH ValidatorTx and
// DelegatorTx. That is SAFE only because:
//
// 1. every dispatch site checks `case txs.ValidatorTx` BEFORE
// `case txs.DelegatorTx`, so an AddValidatorTx routes as a validator; and
// 2. *AddDelegatorTx does NOT satisfy ValidatorTx (it lacks
// ValidationRewardsOwner() and Shares()), so a delegator can never
// mis-route into the validator branch.
//
// If a future edit gives AddDelegatorTx those methods, or reorders a switch,
// this test fails loudly instead of silently mis-paying rewards.
func TestStakerDispatchSafety(t *testing.T) {
var (
vdr any = (*AddValidatorTx)(nil)
del any = (*AddDelegatorTx)(nil)
)
if _, ok := vdr.(ValidatorTx); !ok {
t.Fatal("*AddValidatorTx must satisfy ValidatorTx")
}
if _, ok := del.(DelegatorTx); !ok {
t.Fatal("*AddDelegatorTx must satisfy DelegatorTx")
}
// The safety property: a delegator must NOT look like a
// validator, because every dispatch checks ValidatorTx first.
if _, ok := del.(ValidatorTx); ok {
t.Fatal("*AddDelegatorTx must NOT satisfy ValidatorTx — delegators would mis-route to the validator branch")
}
}