@synopackageland/cli 0.5.0 → 0.6.0

package/dist/templates/native-go/backend/internal/helper/s1r_actor_races_linux_test.go

@@ -1,250 +0,0 @@
-package helper
-
-import (
-	"context"
-	"errors"
-	"os"
-	"strings"
-	"testing"
-
-	"golang.org/x/sys/unix"
-)
-
-func s1rActorRaces(t *testing.T, spec s1rActorSpec, kind string) {
-	root := spec.Root + "/race"
-	pin, code := pinReadOnlyRoot(root)
-	if code != "" {
-		t.Fatal(code)
-	}
-	defer pin.Close()
-	ctx := context.Background()
-	switch kind {
-	case "symlink":
-		for _, link := range []struct{ name, target string }{{"inside-link", "file"}, {"outside-link", "../bob/file"}, {"dir-link", "../bob"}} {
-			s1rMust(t, os.Symlink(link.target, root+"/"+link.name))
-		}
-		for _, action := range []Action{ActionStat, ActionRead, ActionList, ActionReadStream} {
-			segments := []string{"outside-link"}
-			if action == ActionList {
-				segments = []string{"dir-link"}
-			}
-			work := readWork(pin, segments...)
-			work.Action = action
-			if action == ActionList {
-				work.MaxBytes = 0
-				work.Limit = 20
-			}
-			if action == ActionStat {
-				work.MaxBytes = 0
-			}
-			if action == ActionReadStream {
-				x, r := openActorReadTransfer(ctx, pin, work, fixtureReadOnlyACL{})
-				if x != nil {
-					x.Close()
-				}
-				if r.Code != ErrDenied || r.Bytes != 0 {
-					t.Fatal("symlink stream", r)
-				}
-			} else {
-				r, b := executeReadOnly(ctx, pin, work, fixtureReadOnlyACL{})
-				if r.Code != ErrDenied || len(b) > 0 || r.Entry != nil || r.List != nil {
-					t.Fatal("symlink metadata/read", action, r)
-				}
-			}
-		}
-		r, b := executeReadOnly(ctx, pin, readWork(pin, "inside-link"), fixtureReadOnlyACL{})
-		if r.Code != ErrDenied || len(b) > 0 {
-			t.Fatal("internal symlink followed", r)
-		}
-		r, _ = executeReadOnly(ctx, pin, readOnlyWork{RootPath: root, Action: ActionList, Segments: []string{}, Limit: 20}, fixtureReadOnlyACL{})
-		if r.Code != "" || r.List == nil || len(r.List.Entries) != 1 || r.List.Entries[0].Name != "file" {
-			t.Fatal("symlink names leaked by list", r)
-		}
-		for _, segments := range [][]string{{"outside-link"}, {"dir-link", "new"}} {
-			x, c := openActorWriteTransfer(ctx, pin, writeWork{RootPath: root, Action: ActionCreate, Segments: segments, MaxBytes: 3}, fixtureReadOnlyACL{})
-			if x != nil {
-				x.Close()
-			}
-			if c != ErrDenied {
-				t.Fatal("symlink create", c)
-			}
-		}
-		t.Log("stat/list/read/stream/create reject symlinks; list filters symlink names")
-	case "stat-rename", "list-rename", "read-rename":
-		s1rMust(t, os.Mkdir(root+"/sub", 0700))
-		s1rMust(t, os.WriteFile(root+"/sub/file", []byte("original"), 0600))
-		mutated := false
-		acl := fixtureReadOnlyACL{hook: func() {
-			if mutated {
-				return
-			}
-			mutated = true
-			s1rMust(t, os.Rename(root+"/sub", root+"/moved"))
-			s1rMust(t, os.Mkdir(root+"/sub", 0700))
-			s1rMust(t, os.WriteFile(root+"/sub/file", []byte("foreign"), 0600))
-		}}
-		work := readWork(pin, "sub", "file")
-		if kind == "stat-rename" {
-			work.Action = ActionStat
-			work.MaxBytes = 0
-		}
-		if kind == "list-rename" {
-			work.Action = ActionList
-			work.MaxBytes = 0
-			work.Segments = []string{"sub"}
-			work.Limit = 20
-		}
-		r, b := executeReadOnly(ctx, pin, work, acl)
-		if r.Code != ErrStale || len(b) != 0 || r.Entry != nil || r.List != nil {
-			t.Fatal("renamed ancestry released bytes", r, string(b))
-		}
-		t.Log(kind + ": replacement after resolver open refuses bytes and metadata with stale")
-	case "stream-rename":
-		work := readWork(pin, "file")
-		work.Action = ActionReadStream
-		x, r := openActorReadTransfer(ctx, pin, work, fixtureReadOnlyACL{})
-		if r.Code != "" {
-			t.Fatal(r)
-		}
-		defer x.Close()
-		b, c := x.ReadChunk(ctx, 3)
-		if c != "" || string(b) != "can" {
-			t.Fatal(c, string(b))
-		}
-		s1rMust(t, os.Rename(root+"/file", root+"/old"))
-		s1rMust(t, os.Symlink("../bob/file", root+"/file"))
-		b, c = x.ReadChunk(ctx, 3)
-		if c != ErrDenied || len(b) != 0 {
-			t.Fatal("stream followed replacement", c, string(b))
-		}
-		t.Log("first fixed-FD stream chunk succeeds; symlink replacement refuses next chunk")
-	case "create-rename", "publish-rename", "publish-symlink":
-		s1rMust(t, os.Mkdir(root+"/sub", 0700))
-		staged := kind != "create-rename"
-		work := writeWork{RootPath: root, Action: ActionCreate, Segments: []string{"sub", "result"}, MaxBytes: 6}
-		if staged {
-			work.Action = ActionWriteStream
-			work.Staged = true
-		}
-		x, c := openActorWriteTransfer(ctx, pin, work, fixtureReadOnlyACL{})
-		if c != "" {
-			t.Fatal(c)
-		}
-		defer x.Close()
-		receipt, c := x.WriteChunk(ctx, []byte("abc"))
-		if c != "" || receipt.BytesWritten != 3 {
-			t.Fatal(receipt, c)
-		}
-		if kind == "publish-symlink" {
-			s1rMust(t, os.Symlink("../file", root+"/sub/result"))
-			receipt, c = x.Commit(ctx)
-			if c != ErrDenied || receipt.Published || receipt.Committed {
-				t.Fatal("publish replaced symlink", receipt, c)
-			}
-			target, e := os.Readlink(root + "/sub/result")
-			s1rMust(t, e)
-			if target != "../file" {
-				t.Fatal(target)
-			}
-		} else {
-			s1rMust(t, os.Rename(root+"/sub", root+"/moved"))
-			s1rMust(t, os.Mkdir(root+"/sub", 0700))
-			s1rMust(t, os.WriteFile(root+"/sub/result", []byte("foreign"), 0600))
-			if staged {
-				receipt, c = x.Commit(ctx)
-				if c != ErrStale || receipt.Published {
-					t.Fatal("publish after rename", receipt, c)
-				}
-			} else {
-				receipt, c = x.WriteChunk(ctx, []byte("def"))
-				if c != ErrPartial || receipt.BytesWritten != 3 {
-					t.Fatal("write after rename", receipt, c)
-				}
-			}
-			b, e := os.ReadFile(root + "/sub/result")
-			s1rMust(t, e)
-			if string(b) != "foreign" {
-				t.Fatal("foreign destination overwritten", string(b))
-			}
-			if staged {
-				if _, e := os.Stat(root + "/moved/result"); !os.IsNotExist(e) {
-					t.Fatal("anonymous stage became visible", e)
-				}
-			} else {
-				b, e = os.ReadFile(root + "/moved/result")
-				s1rMust(t, e)
-				if string(b) != "abc" {
-					t.Fatal("partial bytes changed", string(b))
-				}
-			}
-		}
-		t.Logf("%s: refusal=%s receipt=%+v; foreign destination preserved", kind, c, receipt)
-	case "publish-permission-loss":
-		work := writeWork{RootPath: root, Action: ActionWriteStream, Segments: []string{"result"}, MaxBytes: 3, Staged: true}
-		x, c := openActorWriteTransfer(ctx, pin, work, fixtureReadOnlyACL{})
-		if c != "" {
-			t.Fatal(c)
-		}
-		defer x.Close()
-		_, c = x.WriteChunk(ctx, []byte("abc"))
-		if c != "" {
-			t.Fatal(c)
-		}
-		s1rMust(t, os.Chmod(root, 0500))
-		defer os.Chmod(root, 0700)
-		r, c := x.Commit(ctx)
-		if c != ErrDenied || !r.Created || r.Published || r.Committed || r.BytesWritten != 3 {
-			t.Fatal("publish after parent chmod", r, c)
-		}
-		if _, e := os.Stat(root + "/result"); !os.IsNotExist(e) {
-			t.Fatal("publish wrote forbidden directory", e)
-		}
-		var st unix.Stat_t
-		s1rMust(t, unix.Fstat(int(x.file.Fd()), &st))
-		if st.Nlink != 0 || st.Size != 3 {
-			t.Fatal("anonymous stage changed after denial", st.Nlink, st.Size)
-		}
-		if retry, code := x.Commit(ctx); code != ErrReplay || retry != r {
-			t.Fatal("denied publish replay changed receipt", retry, code)
-		}
-		x.Close()
-		x.Close()
-		if _, e := x.file.Stat(); !errors.Is(e, os.ErrClosed) {
-			t.Fatal("stage descriptor still open", e)
-		}
-		entries, e := os.ReadDir(root)
-		s1rMust(t, e)
-		if len(entries) != 1 || entries[0].Name() != "file" {
-			t.Fatal("denied publish left a named stage", entries)
-		}
-		t.Log("parent write permission removed: publish denied; staged bytes and receipt retained; close leaves no named stage")
-	case "open-fd-write-permission-loss":
-		work := writeWork{RootPath: root, Action: ActionCreate, Segments: []string{"result"}, MaxBytes: 6}
-		x, c := openActorWriteTransfer(ctx, pin, work, fixtureReadOnlyACL{})
-		if c != "" {
-			t.Fatal(c)
-		}
-		defer x.Close()
-		r, c := x.WriteChunk(ctx, []byte("abc"))
-		if c != "" {
-			t.Fatal(c)
-		}
-		s1rMust(t, x.file.Chmod(0000))
-		defer x.file.Chmod(0600)
-		r, c = x.WriteChunk(ctx, []byte("def"))
-		if c != "" || r.BytesWritten != 6 {
-			t.Fatal("Linux open-FD semantics", r, c)
-		}
-		r, c = x.Commit(ctx)
-		if c != "" || !r.Committed {
-			t.Fatal(r, c)
-		}
-		b, e := os.ReadFile(root + "/result")
-		if !os.IsPermission(e) || len(b) != 0 {
-			t.Fatal("new open bypassed chmod", e, string(b))
-		}
-		t.Log("chmod 000 denies a new open; previously opened writer FD still writes/commits under Linux semantics")
-	default:
-		t.Fatal("unknown race", strings.TrimSpace(kind))
-	}
-}

package/dist/templates/native-go/backend/internal/helper/s1r_fixture_contract_linux_test.go

@@ -1,18 +0,0 @@
-package helper
-
-import (
-	"os"
-	"testing"
-)
-
-func TestS1RFixtureContract(t *testing.T) {
-	if os.Geteuid() != 0 {
-		t.Skip("disposable root VM only")
-	}
-	root := s1rFixture(t)
-	for _, name := range []string{"alice", "bob", "supplementary", "acl-allow", "acl-mask", "acl-file-mask", "inherit", "readonly", "race"} {
-		if _, err := os.Stat(root + "/" + name + "/file"); err != nil {
-			t.Fatal(name, err)
-		}
-	}
-}

package/dist/templates/native-go/backend/internal/helper/sdk_assembly_linux.go

@@ -1,51 +0,0 @@
-//go:build linux && synopkgland_sdk_workers
-
-package helper
-
-import (
-	"context"
-	"dsmapp/internal/dsm"
-	"dsmapp/internal/filestation"
-)
-
-type unavailableSDKValidator struct{}
-
-func (unavailableSDKValidator) ValidateJob(context.Context, NativeActor, sdkJobRequest, Grant, sdkJobCheckpoint) (sdkJobProof, Code) {
-	return sdkJobProof{}, ErrUnavailable
-}
-
-// The sole owner calls this once, after the authority's startup reconciliation.
-// Native/POSIX services stay unavailable. Production uses only session-authenticated
-// File Station requests; explicit native VM fixtures retain their own test seam.
-func openSDKJobs(c Client, binary string, s *supervisorGrants, repo *FileGrantRepository) (*sdkJobOwner, Code, string) {
-	if len(sdkCompiledRegistry) == 0 {
-		return nil, ErrUnavailable, "jobs-registry"
-	}
-	journal, code, stage := newSDKFileJobJournalDiagnostic(repo)
-	if code != "" {
-		return nil, code, stage
-	}
-	var validator sdkJobValidator = unavailableSDKValidator{}
-	if v, ok := s.services.consent.(sdkJobValidator); ok {
-		validator = v
-	}
-	o, code := newSDKJobOwner(s, sdkCompiledRegistry, sdkJobServices{Validator: validator, Journal: journal, Start: func(a NativeActor, b operationBinding, p sdkJobPlan) (sdkJobProcess, error) {
-		return startLinuxSDKJob(c, binary, a, b, p)
-	}})
-	if code != "" {
-		return nil, code, "jobs-owner"
-	}
-	// Reuse the same retained journal/index for revocation. No observer, validator,
-	// ready/consume loop or background child bootstrap is installed.
-	if _, code = newSDKBackgroundOwner(o, nil, nil, journal, newSDKEpochClock()); code != "" {
-		return nil, code, "background-index"
-	}
-	if _, nativeFixture := s.services.consent.(sdkJobValidator); !nativeFixture {
-		o.session, code = newSDKSessionJobs(o, filestation.Local("/var/packages/"+c.Expected.Package+"/var"), dsm.NewAuthenticator())
-		if code != "" {
-			return nil, code, "session-history"
-		}
-	}
-	newSDKJobViews(o)
-	return o, "", ""
-}

package/dist/templates/native-go/backend/internal/helper/sdk_attach.go

@@ -1,83 +0,0 @@
-//go:build synopkgland_sdk_workers
-
-package helper
-
-import (
-	"context"
-	"time"
-)
-
-// Called only by the sole supervisor owner. The reference is bound to the
-// immutable job record; no persisted deadline can survive owner restart.
-func (o *sdkJobOwner) issueAttach(j *sdkJob) Code {
-	id, code := sdkRandomRef()
-	if code != "" {
-		return code
-	}
-	now := o.attachNow()
-	if now < 0 || now > time.Duration(1<<63-1)-sdkAttachTTL {
-		return ErrExpired
-	}
-	j.attach = &sdkAttachLease{id: id, principal: j.actor.Principal(), session: j.actor.SessionRef(), epoch: o.grants.cohort.epoch, last: now, deadline: now + sdkAttachTTL}
-	return ""
-}
-func (o *sdkJobOwner) attachExpired(j *sdkJob) bool {
-	a := j.attach
-	if a == nil || o.attachNow == nil {
-		return true
-	}
-	now := o.attachNow()
-	if a.denied || now < a.last || now >= a.deadline || a.epoch != o.grants.cohort.epoch {
-		a.denied = true
-		return true
-	}
-	a.last = now
-	return false
-}
-func (o *sdkJobOwner) renewAttach(ctx context.Context, carriers SessionCarriers, jobID, attachID string) Code {
-	j := o.jobs[jobID]
-	if j == nil || j.attach == nil || j.background != nil || !allReferences(attachID) || j.attach.id != attachID {
-		return ErrDenied
-	}
-	// Authenticate even denial paths, with no caller-selected identity or roles.
-	v := newSDKJobViews(o)
-	actor, code := v.actor(ctx, carriers)
-	if code != "" {
-		return code
-	}
-	if actor.Principal() != j.attach.principal || actor.SessionRef() != j.attach.session {
-		return ErrDenied
-	}
-	if j.terminal || j.failure != "" || j.receipt.Job.CancelRequested {
-		return ErrStale
-	}
-	expire := func() Code {
-		if code := o.cancelOwned(ctx, j); code != "" {
-			return code
-		}
-		return ErrExpired
-	}
-	if o.attachExpired(j) {
-		return expire()
-	}
-	if !o.grants.cohort.gate.allow(o.grants.cohort.now()) {
-		return ErrFenced
-	}
-	if code = v.budget(actor); code != "" {
-		return code
-	}
-	// Proof/budget work cannot renew a deadline which passed in the meantime.
-	if ctx.Err() != nil {
-		return nativeContextCode(ctx)
-	}
-	if o.attachExpired(j) {
-		return expire()
-	}
-	now := o.attachNow()
-	if now < j.attach.last || now >= j.attach.deadline || now > time.Duration(1<<63-1)-sdkAttachTTL {
-		j.attach.denied = true
-		return expire()
-	}
-	j.attach.last, j.attach.deadline = now, now+sdkAttachTTL
-	return ""
-}

package/dist/templates/native-go/backend/internal/helper/sdk_attach_contract.go

@@ -1,32 +0,0 @@
-//go:build synopkgland_sdk_workers
-
-package helper
-
-import "time"
-
-// S7 interactive liveness: these are independent of worker total/checkpoint
-// deadlines. The owner holds the monotonic deadline only in this process.
-const sdkAttachRenewInterval = 2 * time.Second
-const sdkAttachTTL = 6 * time.Second
-
-const SDKAttachRenewMS = int64(sdkAttachRenewInterval / time.Millisecond)
-const SDKAttachTTLMS = int64(sdkAttachTTL / time.Millisecond)
-
-type sdkAttachLease struct {
-	id        string
-	principal Principal
-	session   string
-	epoch     string
-	deadline  time.Duration
-	last      time.Duration
-	denied    bool
-}
-
-// Public lease reference is an index, never a bearer authentication credential.
-type sdkAttachReceipt struct {
-	JobID        string `json:"jobId"`
-	Revision     uint64 `json:"revision"`
-	AttachID     string `json:"attachId"`
-	RenewAfterMS int64  `json:"renewAfterMs"`
-	TTLMS        int64  `json:"ttlMs"`
-}

package/dist/templates/native-go/backend/internal/helper/sdk_attach_test.go

@@ -1,184 +0,0 @@
-//go:build synopkgland_sdk_workers
-
-package helper
-
-import (
-	"context"
-	"dsmapp/internal/helper/jobcontract"
-	"testing"
-	"time"
-)
-
-func attachFixture(t *testing.T) (*sdkJobTestFixture, *time.Duration, *sdkJob) {
-	t.Helper()
-	f := sdkJobFixture(t)
-	elapsed := time.Duration(0)
-	f.o.attachNow = func() time.Duration { return elapsed }
-	if code := f.submit(); code != "" {
-		t.Fatal(code)
-	}
-	j := f.o.jobs[f.r.Control.Binding.Job.ID]
-	if j.attach == nil || !allReferences(j.attach.id) {
-		t.Fatal("submit did not issue a root lease")
-	}
-	return f, &elapsed, j
-}
-func renewAttach(f *sdkJobTestFixture, j *sdkJob) Code {
-	return f.o.renewAttach(context.Background(), f.carriers, j.request.Control.Binding.Job.ID, j.attach.id)
-}
-func TestSDKAttachExpiryDurableCancelAndQ(t *testing.T) {
-	f, elapsed, j := attachFixture(t)
-	*elapsed = sdkAttachTTL
-	if c := f.o.poll(context.Background()); c != "" {
-		t.Fatal(c)
-	}
-	if !j.terminal || j.receipt.Job.State != jobcontract.Canceled || !j.receipt.Job.Drained || f.journal.cancels != 1 {
-		t.Fatal(j.receipt, f.journal.cancels)
-	}
-	if c := renewAttach(f, j); c == "" {
-		t.Fatal("late renew resurrected job")
-	}
-}
-func TestSDKAttachRenewExpiryOrderingAndNoDeadlineExtension(t *testing.T) {
-	for _, expired := range []bool{false, true} {
-		t.Run(map[bool]string{false: "renew-first", true: "expiry-first"}[expired], func(t *testing.T) {
-			f, elapsed, j := attachFixture(t)
-			admitted, checkpoint, activity := j.op.admittedAt, j.lastCheckpoint, j.op.lastActivity
-			controls := len(f.o.controls)
-			*elapsed = sdkAttachTTL - time.Nanosecond
-			if expired {
-				*elapsed = sdkAttachTTL
-			}
-			c := renewAttach(f, j)
-			if expired {
-				if c != ErrExpired || !j.receipt.Job.Drained {
-					t.Fatal(c, j.receipt)
-				}
-				return
-			}
-			if c != "" {
-				t.Fatal(c)
-			}
-			if j.op.admittedAt != admitted || j.lastCheckpoint != checkpoint || j.op.lastActivity != activity || len(f.o.controls) != controls {
-				t.Fatal("renew changed job deadline/tickets")
-			}
-			*elapsed = sdkAttachTTL
-			if c = f.o.poll(context.Background()); c != "" || j.terminal {
-				t.Fatal(c, j.receipt)
-			}
-			*elapsed = 2 * sdkAttachTTL
-			f.o.poll(context.Background())
-			if !j.receipt.Job.Drained {
-				t.Fatal("renewed lease did not expire")
-			}
-		})
-	}
-}
-func TestSDKAttachRejectsForeignBindingsAndFreshProofLoss(t *testing.T) {
-	for _, kind := range []string{"token", "session", "principal", "epoch", "logout"} {
-		t.Run(kind, func(t *testing.T) {
-			f, _, j := attachFixture(t)
-			switch kind {
-			case "token":
-				j.attach.id = grantRef('f')
-			case "session":
-				f.native.session.SessionRef = grantRef('e')
-				f.native.app.SessionRef = grantRef('e')
-			case "principal":
-				j.attach.principal.SubjectRef = grantRef('f')
-			case "epoch":
-				j.attach.epoch = grantRef('f')
-			case "logout":
-				f.native.sessionCode = ErrDenied
-			}
-			token := j.attach.id
-			if kind == "token" {
-				token = grantRef('e')
-			}
-			before := j.attach.deadline
-			if c := f.o.renewAttach(context.Background(), f.carriers, j.request.Control.Binding.Job.ID, token); c == "" {
-				t.Fatal("foreign renew accepted")
-			}
-			if j.attach.deadline != before {
-				t.Fatal("failed renew extended lease")
-			}
-		})
-	}
-}
-func TestSDKAttachClockJumpAndRestart(t *testing.T) {
-	for _, jump := range []time.Duration{-time.Hour, time.Hour} {
-		t.Run(jump.String(), func(t *testing.T) {
-			f, elapsed, j := attachFixture(t)
-			before := j.attach.deadline
-			wall := f.c.now()
-			f.c.now = func() time.Time { return wall.Add(jump) }
-			// Wall-clock discontinuity cannot change the owner's monotonic lease.
-			if f.o.attachExpired(j) || j.attach.deadline != before {
-				t.Fatal("wall jump changed attach TTL")
-			}
-			*elapsed = sdkAttachTTL
-			if !f.o.attachExpired(j) {
-				t.Fatal("wall jump extended lease")
-			}
-		})
-	}
-	f, elapsed, j := attachFixture(t)
-	*elapsed = time.Second
-	if c := renewAttach(f, j); c != "" {
-		t.Fatal(c)
-	}
-	*elapsed = 0
-	if !f.o.attachExpired(j) {
-		t.Fatal("monotonic rollback accepted")
-	}
-	// A fresh owner has no old lease even for a coincidentally equal job id.
-	fresh := sdkJobFixture(t)
-	if c := fresh.o.renewAttach(context.Background(), fresh.carriers, j.request.Control.Binding.Job.ID, j.attach.id); c == "" {
-		t.Fatal("owner restart restored lease")
-	}
-}
-func TestSDKAttachSharesStatusBudgetNotMutationTickets(t *testing.T) {
-	f, _, j := attachFixture(t)
-	v := newSDKJobViews(f.o)
-	before := len(f.o.controls)
-	if _, c := v.ownerPage(context.Background(), f.carriers, ""); c != "" {
-		t.Fatal(c)
-	}
-	if c := renewAttach(f, j); c != "" {
-		t.Fatal(c)
-	}
-	if c := renewAttach(f, j); c != ErrBusy {
-		t.Fatal("renew bypassed status budget", c)
-	}
-	if len(f.o.controls) != before {
-		t.Fatal("renew consumed mutation tickets")
-	}
-	if sdkAttachTTL != 6*time.Second || sdkAttachRenewInterval != 2*time.Second {
-		t.Fatal("unexpected lease bounds")
-	}
-}
-func TestSDKAttachCancelDurabilityFailureNeverClaimsQ(t *testing.T) {
-	f, elapsed, j := attachFixture(t)
-	f.journal.cancelCode = ErrUnavailable
-	*elapsed = sdkAttachTTL
-	if c := f.o.poll(context.Background()); c != ErrCleanupRequired {
-		t.Fatal(c)
-	}
-	if j.receipt.Job.Drained || j.receipt.Job.State != jobcontract.CleanupRequired {
-		t.Fatal(j.receipt)
-	}
-	if c := renewAttach(f, j); c == "" {
-		t.Fatal("uncertain cancel renewed")
-	}
-}
-
-func TestSDKAttachExpiryDuringCheckpointProofCannotIssueLease(t *testing.T) {
-	f, elapsed, j := attachFixture(t)
-	f.event(t, sdkJobEvent{Kind: "ready"})
-	replies := len(f.children[0].replies)
-	f.validator.after = func() { *elapsed = sdkAttachTTL }
-	f.event(t, sdkJobEvent{Kind: "checkpoint", Checkpoint: sdkJobCheckpoint{Phase: "before-step"}})
-	if len(f.children[0].replies) != replies || !j.receipt.Job.CancelRequested || !j.receipt.Job.Drained {
-		t.Fatal("expired during proof but issued checkpoint or omitted durable cancel", j.receipt)
-	}
-}

package/dist/templates/native-go/backend/internal/helper/sdk_authority_schema_test.go

@@ -1,6 +0,0 @@
-//go:build synopkgland_sdk_workers
-
-package helper
-
-// Ordinary behavioral fixtures start with a current envelope; migration has separate tests.
-const testAuthoritySchema = 2