@synopackageland/cli 0.3.10 → 0.4.1

package/templates/native-go/backend/internal/helper/supervisor_socket_eof_test.go

@@ -0,0 +1,74 @@
+package helper
+
+import (
+	"encoding/json"
+	"strings"
+	"testing"
+	"time"
+)
+
+func TestSupervisorUnixPeerEOF(t *testing.T) {
+	req := supervisorRequest{Op: "grants", Nonce: strings.Repeat("a", 64), Data: json.RawMessage(`{}`)}
+	frame, err := json.Marshal(req)
+	if err != nil {
+		t.Fatal(err)
+	}
+	for _, closeMode := range []string{"full-close", "half-close"} {
+		for _, tc := range []struct {
+			name  string
+			frame []byte
+			code  Code
+		}{
+			{"valid", frame, ""},
+			{"empty-eof", nil, ErrInvalid},
+			{"partial", []byte(`{`), ErrInvalid},
+			{"trailing", append(append([]byte(nil), frame...), []byte(`{}`)...), ErrInvalid},
+		} {
+			t.Run(closeMode+"/"+tc.name, func(t *testing.T) {
+				server, client := supervisorSocketPair(t)
+				if _, err := client.Write(tc.frame); err != nil {
+					t.Fatal(err)
+				}
+				if closeMode == "full-close" {
+					err = client.Close()
+				} else {
+					err = client.CloseWrite()
+				}
+				if err != nil {
+					t.Fatal(err)
+				}
+				// The peer has already closed before SetReadDeadline, Peek and
+				// SetDeadline execute in the unmodified production receiver.
+				got, code := receiveSupervisorRequest(server)
+				if code != tc.code || (code == "" && (got.Op != req.Op || got.Nonce != req.Nonce || string(got.Data) != string(req.Data))) {
+					t.Fatalf("peer EOF: got %+v %s, want %s", got, code, tc.code)
+				}
+			})
+		}
+		t.Run(closeMode+"/delayed-attestation", func(t *testing.T) {
+			server, client := supervisorSocketPair(t)
+			done := make(chan error, 1)
+			go func() {
+				time.Sleep(150 * time.Millisecond)
+				_, err := client.Write(frame)
+				if err == nil {
+					if closeMode == "full-close" {
+						err = client.Close()
+					} else {
+						err = client.CloseWrite()
+					}
+				}
+				done <- err
+			}()
+			got, code := receiveSupervisorRequest(server)
+			server.Close()
+			client.Close()
+			if err := <-done; err != nil {
+				t.Fatal(err)
+			}
+			if code != "" || got.Nonce != req.Nonce {
+				t.Fatalf("delayed peer EOF: got %+v %s", got, code)
+			}
+		})
+	}
+}

package/templates/native-go/backend/internal/helper/supervisor_socket_test.go

@@ -0,0 +1,45 @@
+package helper
+
+import (
+	"net"
+	"os"
+	"path/filepath"
+	"testing"
+	"time"
+)
+
+// Use the production transport: unlike net.Pipe, a Unix socket retains unread
+// bytes and permits local deadline changes after its peer closes. Keep the path
+// short enough for Darwin's sockaddr_un, independent of the subtest name.
+func supervisorSocketPair(t *testing.T) (server, client *net.UnixConn) {
+	t.Helper()
+	dir, err := os.MkdirTemp("/tmp", "supervisor-frame-")
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		if err := os.RemoveAll(dir); err != nil {
+			t.Error(err)
+		}
+	})
+	addr := &net.UnixAddr{Net: "unix", Name: filepath.Join(dir, "s")}
+	listener, err := net.ListenUnix("unix", addr)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer listener.Close()
+	if err := listener.SetDeadline(time.Now().Add(2 * time.Second)); err != nil {
+		t.Fatal(err)
+	}
+	client, err = net.DialUnix("unix", nil, addr)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { client.Close() })
+	server, err = listener.AcceptUnix()
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { server.Close() })
+	return server, client
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/create.json

@@ -0,0 +1,23 @@
+{
+  "inventory": {
+    "package": "Fixture",
+    "version": "1.0.0-0001",
+    "protocol": 2,
+    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "op": "nas.files.create",
+  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "grantRevision": 1,
+  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
+  "args": {
+    "segments": [
+      "new.txt"
+    ],
+    "bytes": 1048576,
+    "exclusive": true
+  }
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/frames.json

@@ -0,0 +1,67 @@
+[
+  {
+    "name": "valid-read",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": ""
+  },
+  {
+    "name": "unknown-subject",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"uid\":0,\"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": "invalid-request"
+  },
+  {
+    "name": "duplicate-nonce",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\":\"x\",\"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": "invalid-request"
+  },
+  {
+    "name": "unknown-nested-field",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"offset\":0,\"maxBytes\": 1048576\n  }\n}\n",
+    "code": "invalid-request"
+  },
+  {
+    "name": "case-alias",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"Nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": "invalid-request"
+  },
+  {
+    "name": "downgrade",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 1,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": "incompatible"
+  },
+  {
+    "name": "future-version",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 3,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": "incompatible"
+  },
+  {
+    "name": "write-gated",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.create\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"new.txt\"\n    ],\n    \"bytes\": 1048576,\n    \"exclusive\": true\n  }\n}\n",
+    "code": "unsupported"
+  },
+  {
+    "name": "parent-traversal",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"..\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": "invalid-request"
+  },
+  {
+    "name": "unpaired-surrogate",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"\\ud800\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
+    "code": "invalid-request"
+  },
+  {
+    "name": "trailing-frame",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n{}",
+    "code": "invalid-request"
+  },
+  {
+    "name": "read-over-limit",
+    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048577\n  }\n}\n",
+    "code": "limit-exceeded"
+  },
+  {
+    "name": "missing-ticket",
+    "frame": "{\"inventory\": {\"package\": \"Fixture\", \"version\": \"1.0.0-0001\", \"protocol\": 2, \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\", \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"}, \"op\": \"nas.files.read\", \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\", \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\", \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\", \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\", \"grantRevision\": 1, \"args\": {\"segments\": [\"note.txt\"], \"maxBytes\": 1048576}}",
+    "code": "invalid-request"
+  }
+]

package/templates/native-go/backend/internal/helper/testdata/protocol2/grant-store.json

@@ -0,0 +1,52 @@
+{
+  "grantSchema": 1,
+  "storeRevision": 1,
+  "grants": [
+    {
+      "grantSchema": 1,
+      "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+      "grantRevision": 1,
+      "inventory": {
+        "package": "Fixture",
+        "version": "1.0.0-0001",
+        "protocol": 2,
+        "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+      },
+      "approvalBinding": "5555555555555555555555555555555555555555555555555555555555555555",
+      "capabilityDigest": "6666666666666666666666666666666666666666666666666666666666666666",
+      "owner": {
+        "kind": "local",
+        "subjectRef": "3333333333333333333333333333333333333333333333333333333333333333",
+        "instanceRef": "4444444444444444444444444444444444444444444444444444444444444444"
+      },
+      "issuer": {
+        "kind": "local",
+        "subjectRef": "3333333333333333333333333333333333333333333333333333333333333333",
+        "instanceRef": "4444444444444444444444444444444444444444444444444444444444444444"
+      },
+      "scope": {
+        "kind": "user-personal",
+        "targetKind": "directory",
+        "anchorRef": "7777777777777777777777777777777777777777777777777777777777777777",
+        "segments": [
+          "Docs"
+        ],
+        "objectRef": "8888888888888888888888888888888888888888888888888888888888888888",
+        "mountRef": "9999999999999999999999999999999999999999999999999999999999999999"
+      },
+      "actions": [
+        "nas.files.list",
+        "nas.files.stat",
+        "nas.files.read"
+      ],
+      "state": "active",
+      "createdAt": 1791000000000,
+      "lastValidatedBinding": {
+        "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+        "subjectProof": "3333333333333333333333333333333333333333333333333333333333333333",
+        "scopeProof": "8888888888888888888888888888888888888888888888888888888888888888"
+      }
+    }
+  ]
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/intent.json

@@ -0,0 +1,20 @@
+{
+  "intentId": "2222222222222222222222222222222222222222222222222222222222222222",
+  "inventory": {
+    "package": "Fixture",
+    "version": "1.0.0-0001",
+    "protocol": 2,
+    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "subjectRef": "3333333333333333333333333333333333333333333333333333333333333333",
+  "sessionRef": "4444444444444444444444444444444444444444444444444444444444444444",
+  "candidateId": "7777777777777777777777777777777777777777777777777777777777777777",
+  "scopeKind": "user-personal",
+  "actions": [
+    "nas.files.read"
+  ],
+  "summaryDigest": "6666666666666666666666666666666666666666666666666666666666666666",
+  "expiresAt": 1791000030000
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/list.json

@@ -0,0 +1,20 @@
+{
+  "inventory": {
+    "package": "Fixture",
+    "version": "1.0.0-0001",
+    "protocol": 2,
+    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "op": "nas.files.list",
+  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "grantRevision": 1,
+  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
+  "args": {
+    "segments": [],
+    "limit": 200
+  }
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/publish.json

@@ -0,0 +1,20 @@
+{
+  "inventory": {
+    "package": "Fixture",
+    "version": "1.0.0-0001",
+    "protocol": 2,
+    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "op": "nas.files.publish",
+  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "grantRevision": 1,
+  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
+  "args": {
+    "stageId": "2222222222222222222222222222222222222222222222222222222222222222",
+    "noOverwrite": true
+  }
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/read.json

@@ -0,0 +1,22 @@
+{
+  "inventory": {
+    "package": "Fixture",
+    "version": "1.0.0-0001",
+    "protocol": 2,
+    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "op": "nas.files.read",
+  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "grantRevision": 1,
+  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
+  "args": {
+    "segments": [
+      "note.txt"
+    ],
+    "maxBytes": 1048576
+  }
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/stat.json

@@ -0,0 +1,22 @@
+{
+  "inventory": {
+    "package": "Fixture",
+    "version": "1.0.0-0001",
+    "protocol": 2,
+    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "op": "nas.files.stat",
+  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "grantRevision": 1,
+  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
+  "args": {
+    "segments": [
+      "\u8cc7\u6599\u593e",
+      "a%2fb"
+    ]
+  }
+}

package/templates/native-go/backend/internal/helper/testdata/protocol2/write-stream.json

@@ -0,0 +1,22 @@
+{
+  "inventory": {
+    "package": "Fixture",
+    "version": "1.0.0-0001",
+    "protocol": 2,
+    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "op": "nas.files.write-stream",
+  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "grantRevision": 1,
+  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
+  "args": {
+    "segments": [
+      "new.txt"
+    ],
+    "maxBytes": 67108864
+  }
+}

package/templates/native-go/backend/internal/helper/unit_connection.go

@@ -0,0 +1,75 @@
+package helper
+
+import (
+	"bytes"
+	"errors"
+	"io"
+	"sync/atomic"
+
+	"github.com/godbus/dbus/v5"
+)
+
+// Keep transport construction independent of observer reconciliation. Optional
+// interceptors remain available to the observer's diagnostic instrumentation.
+func newObserverConnection(raw io.ReadWriteCloser, handler dbus.SignalHandler, opts ...dbus.ConnOption) (*dbus.Conn, error) {
+	stream := &observerDBusStream{ReadWriteCloser: raw}
+	return dbus.NewConn(stream, append([]dbus.ConnOption{dbus.WithSignalHandler(handler)}, opts...)...)
+}
+
+// NewConn's generic transport has no public ReadMessage override. After auth,
+// decode one complete frame at this boundary and replay its original bytes to
+// godbus. A socket read error (including v5.2.2's header-padding panic) then
+// reaches inWorker at the start of a message, where it takes the normal Close /
+// Terminator / pending-call error path. No partial message reaches the observer.
+// Reading stays in the existing worker; no extra goroutine, queue, or timer.
+type observerDBusStream struct {
+	io.ReadWriteCloser
+	messages atomic.Bool
+	frame    *bytes.Reader // single reader, like godbus's underlying transport
+}
+
+func (s *observerDBusStream) Write(p []byte) (int, error) {
+	n, err := s.ReadWriteCloser.Write(p)
+	// Auth starts inWorker only after this write returns. Keep authentication
+	// text on the raw stream and switch before the first binary read can begin.
+	if err == nil && n == len(p) && bytes.Equal(p, []byte("BEGIN\r\n")) {
+		s.messages.Store(true)
+	}
+	return n, err
+}
+
+func (s *observerDBusStream) Read(p []byte) (int, error) {
+	if !s.messages.Load() {
+		return s.ReadWriteCloser.Read(p)
+	}
+	if len(p) == 0 {
+		return 0, nil
+	}
+	if s.frame == nil || s.frame.Len() == 0 {
+		packet, err := readObserverDBusFrame(s.ReadWriteCloser)
+		if err != nil {
+			return 0, err
+		}
+		s.frame = bytes.NewReader(packet)
+	}
+	return s.frame.Read(p)
+}
+
+var errObserverDBusDecode = errors.New("observer D-Bus decoder panic")
+
+func readObserverDBusFrame(raw io.Reader) (packet []byte, err error) {
+	defer func() {
+		if failure := recover(); failure != nil {
+			packet = nil
+			err = errObserverDBusDecode
+			if cause, ok := failure.(error); ok {
+				err = errors.Join(err, cause)
+			}
+		}
+	}()
+	var captured bytes.Buffer
+	if _, err := dbus.DecodeMessage(io.TeeReader(raw, &captured)); err != nil {
+		return nil, err
+	}
+	return captured.Bytes(), nil
+}

package/templates/native-go/backend/internal/helper/unit_connection_linux_test.go

@@ -0,0 +1,135 @@
+package helper
+
+import (
+	"bufio"
+	"encoding/binary"
+	"fmt"
+	"io"
+	"net"
+	"os"
+	"strings"
+	"sync"
+	"syscall"
+	"testing"
+	"time"
+
+	"github.com/godbus/dbus/v5"
+)
+
+// Pause neither the decoder nor its goroutine: identify the exact socket read
+// after the header so tests can close the underlying connection at padding.
+type observerPaddingConn struct {
+	net.Conn
+	mu      sync.Mutex
+	armed   bool
+	read    int
+	header  int
+	padding chan struct{}
+	once    sync.Once
+}
+
+func (c *observerPaddingConn) Read(p []byte) (int, error) {
+	c.mu.Lock()
+	if c.armed && c.read == c.header {
+		c.once.Do(func() { close(c.padding) })
+	}
+	c.mu.Unlock()
+	n, err := c.Conn.Read(p)
+	c.mu.Lock()
+	if c.armed {
+		c.read += n
+	}
+	c.mu.Unlock()
+	return n, err
+}
+
+func (c *observerPaddingConn) arm(header int) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	c.armed, c.header = true, header
+}
+
+// The production observer uses NewConn over a raw Unix socket, AuthExternal,
+// and WithSignalHandler(o). Exercise that same generic transport and Auth's
+// actual background inWorker, without a host bus or installed package fixture.
+func observerTestBus(t *testing.T, handler dbus.SignalHandler, opts ...dbus.ConnOption) (*dbus.Conn, *observerPaddingConn, net.Conn) {
+	t.Helper()
+	fds, err := syscall.Socketpair(syscall.AF_UNIX, syscall.SOCK_STREAM, 0)
+	if err != nil {
+		t.Fatal(err)
+	}
+	ends := make([]net.Conn, 2)
+	for j, fd := range fds {
+		f := os.NewFile(uintptr(fd), "observer-test-bus")
+		ends[j], err = net.FileConn(f)
+		f.Close()
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Cleanup(func() { ends[j].Close() })
+		ends[j].SetDeadline(time.Now().Add(5 * time.Second))
+	}
+	raw := &observerPaddingConn{Conn: ends[0], padding: make(chan struct{})}
+	conn, err := newObserverConnection(raw, handler, opts...)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { conn.Close() })
+	authDone := make(chan error, 1)
+	go func() {
+		r := bufio.NewReader(ends[1])
+		first, err := r.ReadByte()
+		if err == nil && first != 0 {
+			err = fmt.Errorf("missing authentication null byte")
+		}
+		for _, step := range []struct{ request, reply string }{
+			{"AUTH\r\n", "REJECTED EXTERNAL\r\n"},
+			{"AUTH EXTERNAL\r\n", "OK 0123456789abcdef0123456789abcdef\r\n"},
+			{"BEGIN\r\n", ""},
+		} {
+			if err != nil {
+				break
+			}
+			var line string
+			line, err = r.ReadString('\n')
+			if err == nil && line != step.request {
+				err = fmt.Errorf("unexpected auth request %q", strings.TrimSpace(line))
+			}
+			if err == nil && step.reply != "" {
+				_, err = io.WriteString(ends[1], step.reply)
+			}
+		}
+		authDone <- err
+	}()
+	if err := conn.Auth([]dbus.Auth{dbus.AuthExternal("0")}); err != nil {
+		t.Fatal(err)
+	}
+	if err := <-authDone; err != nil {
+		t.Fatal(err)
+	}
+	return conn, raw, ends[1]
+}
+
+func TestLinuxObserverDBusIntactFrame(t *testing.T) {
+	for _, order := range []binary.ByteOrder{binary.LittleEndian, binary.BigEndian} {
+		t.Run(order.String(), func(t *testing.T) {
+			o := &unitObserver{gate: newAdmission(testBinding())}
+			o.gate.observe(testBinding(), 7, true, time.Now())
+			received := make(chan *dbus.Message, 1)
+			_, raw, peer := observerTestBus(t, o, dbus.WithIncomingInterceptor(func(m *dbus.Message) { received <- m }))
+			packet, header := observerPaddedFrame(t, order)
+			raw.arm(header)
+			if _, err := peer.Write(packet); err != nil {
+				t.Fatal(err)
+			}
+			select {
+			case m := <-received:
+				if len(m.Body) != 1 || m.Body[0] != "x" || !o.gate.allow(time.Now()) {
+					t.Fatalf("intact frame changed observation: %+v; %s", m, o.gate.reason())
+				}
+			case <-time.After(time.Second):
+				t.Fatal("background reader did not deliver intact frame")
+			}
+		})
+	}
+}