package notify import ( "io" "log" "sync" "testing" "time" ) // Operator ruling 2026-09-15 (decision A) — "box is down" mail is not swallowed by the quiet hour. // BIGNIGHT F9: a node_stale 39 minutes after F8's node_stale was suppressed by the 1-hour cooldown. // // RED-PROOF (run 2026-09-15, recorded in REPORT.md): with operatorCooldownFor returning the hour for // every type (the pre-ruling behaviour), the 39-minute node_stale was suppressed and this failed at // "node_stale 39 min after the previous one was suppressed". func TestOperatorCooldown_NodeLivenessBypassesQuietHour(t *testing.T) { st := newDispStore(t) d := NewDispatcher(st, "test-key", "from@felhom.eu", "op@felhom.eu", true, log.New(io.Discard, "", 0)) var mu sync.Mutex sent := 0 d.sendEmailFn = func(string, string, string, map[string]string) error { mu.Lock(); defer mu.Unlock(); sent++; return nil } count := func() int { mu.Lock(); defer mu.Unlock(); return sent } // The previous node_stale mail went 39 minutes ago. d.mu.Lock() d.opCooldowns["c1:node_stale"] = time.Now().Add(-39 * time.Minute) d.opCooldowns["c1:app_start_failed"] = time.Now().Add(-39 * time.Minute) d.mu.Unlock() d.processOperator("c1", "node_stale", "warning", "box stale", "{}", "hub") if count() != 1 { t.Fatalf("node_stale 39 min after the previous one was suppressed (sent=%d) — the BIGNIGHT F9 silence", count()) } // A flap 1 minute later is deduped. d.processOperator("c1", "node_stale", "warning", "box stale again", "{}", "hub") if count() != 1 { t.Fatalf("node_stale 1 min after a sent one was mailed again (sent=%d) — the 5-minute dedupe is gone", count()) } // The design is unchanged for every other type: still the hour. d.processOperator("c1", "app_start_failed", "warning", "app down", "{}", "hub") if count() != 1 { t.Fatalf("a non-liveness type lost its 1-hour cooldown (sent=%d)", count()) } for _, et := range []string{"node_down", "node_recovered"} { if operatorCooldownFor(et) != nodeLivenessDedupeWindow { t.Fatalf("%s is not in the ruling's bypass", et) } } if operatorCooldownFor("host_stale") != operatorCooldown { t.Fatal("host_stale is not in the 2026-09-15 ruling and must keep the hour") } }