@synopackageland/cli 0.5.0 → 0.6.0

package/dist/templates/native-go/backend/internal/helper/supervisor_socket_eof_test.go

@@ -1,74 +0,0 @@
-package helper
-
-import (
-	"encoding/json"
-	"strings"
-	"testing"
-	"time"
-)
-
-func TestSupervisorUnixPeerEOF(t *testing.T) {
-	req := supervisorRequest{Op: "grants", Nonce: strings.Repeat("a", 64), Data: json.RawMessage(`{}`)}
-	frame, err := json.Marshal(req)
-	if err != nil {
-		t.Fatal(err)
-	}
-	for _, closeMode := range []string{"full-close", "half-close"} {
-		for _, tc := range []struct {
-			name  string
-			frame []byte
-			code  Code
-		}{
-			{"valid", frame, ""},
-			{"empty-eof", nil, ErrInvalid},
-			{"partial", []byte(`{`), ErrInvalid},
-			{"trailing", append(append([]byte(nil), frame...), []byte(`{}`)...), ErrInvalid},
-		} {
-			t.Run(closeMode+"/"+tc.name, func(t *testing.T) {
-				server, client := supervisorSocketPair(t)
-				if _, err := client.Write(tc.frame); err != nil {
-					t.Fatal(err)
-				}
-				if closeMode == "full-close" {
-					err = client.Close()
-				} else {
-					err = client.CloseWrite()
-				}
-				if err != nil {
-					t.Fatal(err)
-				}
-				// The peer has already closed before SetReadDeadline, Peek and
-				// SetDeadline execute in the unmodified production receiver.
-				got, code := receiveSupervisorRequest(server)
-				if code != tc.code || (code == "" && (got.Op != req.Op || got.Nonce != req.Nonce || string(got.Data) != string(req.Data))) {
-					t.Fatalf("peer EOF: got %+v %s, want %s", got, code, tc.code)
-				}
-			})
-		}
-		t.Run(closeMode+"/delayed-attestation", func(t *testing.T) {
-			server, client := supervisorSocketPair(t)
-			done := make(chan error, 1)
-			go func() {
-				time.Sleep(150 * time.Millisecond)
-				_, err := client.Write(frame)
-				if err == nil {
-					if closeMode == "full-close" {
-						err = client.Close()
-					} else {
-						err = client.CloseWrite()
-					}
-				}
-				done <- err
-			}()
-			got, code := receiveSupervisorRequest(server)
-			server.Close()
-			client.Close()
-			if err := <-done; err != nil {
-				t.Fatal(err)
-			}
-			if code != "" || got.Nonce != req.Nonce {
-				t.Fatalf("delayed peer EOF: got %+v %s", got, code)
-			}
-		})
-	}
-}

package/dist/templates/native-go/backend/internal/helper/supervisor_socket_test.go

@@ -1,45 +0,0 @@
-package helper
-
-import (
-	"net"
-	"os"
-	"path/filepath"
-	"testing"
-	"time"
-)
-
-// Use the production transport: unlike net.Pipe, a Unix socket retains unread
-// bytes and permits local deadline changes after its peer closes. Keep the path
-// short enough for Darwin's sockaddr_un, independent of the subtest name.
-func supervisorSocketPair(t *testing.T) (server, client *net.UnixConn) {
-	t.Helper()
-	dir, err := os.MkdirTemp("/tmp", "supervisor-frame-")
-	if err != nil {
-		t.Fatal(err)
-	}
-	t.Cleanup(func() {
-		if err := os.RemoveAll(dir); err != nil {
-			t.Error(err)
-		}
-	})
-	addr := &net.UnixAddr{Net: "unix", Name: filepath.Join(dir, "s")}
-	listener, err := net.ListenUnix("unix", addr)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer listener.Close()
-	if err := listener.SetDeadline(time.Now().Add(2 * time.Second)); err != nil {
-		t.Fatal(err)
-	}
-	client, err = net.DialUnix("unix", nil, addr)
-	if err != nil {
-		t.Fatal(err)
-	}
-	t.Cleanup(func() { client.Close() })
-	server, err = listener.AcceptUnix()
-	if err != nil {
-		t.Fatal(err)
-	}
-	t.Cleanup(func() { server.Close() })
-	return server, client
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/create.json

@@ -1,23 +0,0 @@
-{
-  "inventory": {
-    "package": "Fixture",
-    "version": "1.0.0-0001",
-    "protocol": 2,
-    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-  },
-  "op": "nas.files.create",
-  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
-  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
-  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
-  "grantRevision": 1,
-  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
-  "args": {
-    "segments": [
-      "new.txt"
-    ],
-    "bytes": 1048576,
-    "exclusive": true
-  }
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/frames.json

@@ -1,67 +0,0 @@
-[
-  {
-    "name": "valid-read",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": ""
-  },
-  {
-    "name": "unknown-subject",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"uid\":0,\"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": "invalid-request"
-  },
-  {
-    "name": "duplicate-nonce",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\":\"x\",\"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": "invalid-request"
-  },
-  {
-    "name": "unknown-nested-field",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"offset\":0,\"maxBytes\": 1048576\n  }\n}\n",
-    "code": "invalid-request"
-  },
-  {
-    "name": "case-alias",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"Nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": "invalid-request"
-  },
-  {
-    "name": "downgrade",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 1,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": "incompatible"
-  },
-  {
-    "name": "future-version",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 3,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": "incompatible"
-  },
-  {
-    "name": "write-gated",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.create\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"new.txt\"\n    ],\n    \"bytes\": 1048576,\n    \"exclusive\": true\n  }\n}\n",
-    "code": "unsupported"
-  },
-  {
-    "name": "parent-traversal",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"..\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": "invalid-request"
-  },
-  {
-    "name": "unpaired-surrogate",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"\\ud800\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n",
-    "code": "invalid-request"
-  },
-  {
-    "name": "trailing-frame",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048576\n  }\n}\n{}",
-    "code": "invalid-request"
-  },
-  {
-    "name": "read-over-limit",
-    "frame": "{\n  \"inventory\": {\n    \"package\": \"Fixture\",\n    \"version\": \"1.0.0-0001\",\n    \"protocol\": 2,\n    \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n    \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"\n  },\n  \"op\": \"nas.files.read\",\n  \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\n  \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\",\n  \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\",\n  \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\n  \"grantRevision\": 1,\n  \"ticket\": \"1111111111111111111111111111111111111111111111111111111111111111\",\n  \"args\": {\n    \"segments\": [\n      \"note.txt\"\n    ],\n    \"maxBytes\": 1048577\n  }\n}\n",
-    "code": "limit-exceeded"
-  },
-  {
-    "name": "missing-ticket",
-    "frame": "{\"inventory\": {\"package\": \"Fixture\", \"version\": \"1.0.0-0001\", \"protocol\": 2, \"payloadDigest\": \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\", \"registryDigest\": \"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\"}, \"op\": \"nas.files.read\", \"nonce\": \"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\", \"operationId\": \"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\", \"epoch\": \"eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee\", \"grantId\": \"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\", \"grantRevision\": 1, \"args\": {\"segments\": [\"note.txt\"], \"maxBytes\": 1048576}}",
-    "code": "invalid-request"
-  }
-]

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/grant-store.json

@@ -1,52 +0,0 @@
-{
-  "grantSchema": 1,
-  "storeRevision": 1,
-  "grants": [
-    {
-      "grantSchema": 1,
-      "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
-      "grantRevision": 1,
-      "inventory": {
-        "package": "Fixture",
-        "version": "1.0.0-0001",
-        "protocol": 2,
-        "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-        "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-      },
-      "approvalBinding": "5555555555555555555555555555555555555555555555555555555555555555",
-      "capabilityDigest": "6666666666666666666666666666666666666666666666666666666666666666",
-      "owner": {
-        "kind": "local",
-        "subjectRef": "3333333333333333333333333333333333333333333333333333333333333333",
-        "instanceRef": "4444444444444444444444444444444444444444444444444444444444444444"
-      },
-      "issuer": {
-        "kind": "local",
-        "subjectRef": "3333333333333333333333333333333333333333333333333333333333333333",
-        "instanceRef": "4444444444444444444444444444444444444444444444444444444444444444"
-      },
-      "scope": {
-        "kind": "user-personal",
-        "targetKind": "directory",
-        "anchorRef": "7777777777777777777777777777777777777777777777777777777777777777",
-        "segments": [
-          "Docs"
-        ],
-        "objectRef": "8888888888888888888888888888888888888888888888888888888888888888",
-        "mountRef": "9999999999999999999999999999999999999999999999999999999999999999"
-      },
-      "actions": [
-        "nas.files.list",
-        "nas.files.stat",
-        "nas.files.read"
-      ],
-      "state": "active",
-      "createdAt": 1791000000000,
-      "lastValidatedBinding": {
-        "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-        "subjectProof": "3333333333333333333333333333333333333333333333333333333333333333",
-        "scopeProof": "8888888888888888888888888888888888888888888888888888888888888888"
-      }
-    }
-  ]
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/intent.json

@@ -1,20 +0,0 @@
-{
-  "intentId": "2222222222222222222222222222222222222222222222222222222222222222",
-  "inventory": {
-    "package": "Fixture",
-    "version": "1.0.0-0001",
-    "protocol": 2,
-    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-  },
-  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-  "subjectRef": "3333333333333333333333333333333333333333333333333333333333333333",
-  "sessionRef": "4444444444444444444444444444444444444444444444444444444444444444",
-  "candidateId": "7777777777777777777777777777777777777777777777777777777777777777",
-  "scopeKind": "user-personal",
-  "actions": [
-    "nas.files.read"
-  ],
-  "summaryDigest": "6666666666666666666666666666666666666666666666666666666666666666",
-  "expiresAt": 1791000030000
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/list.json

@@ -1,20 +0,0 @@
-{
-  "inventory": {
-    "package": "Fixture",
-    "version": "1.0.0-0001",
-    "protocol": 2,
-    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-  },
-  "op": "nas.files.list",
-  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
-  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
-  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
-  "grantRevision": 1,
-  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
-  "args": {
-    "segments": [],
-    "limit": 200
-  }
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/publish.json

@@ -1,20 +0,0 @@
-{
-  "inventory": {
-    "package": "Fixture",
-    "version": "1.0.0-0001",
-    "protocol": 2,
-    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-  },
-  "op": "nas.files.publish",
-  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
-  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
-  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
-  "grantRevision": 1,
-  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
-  "args": {
-    "stageId": "2222222222222222222222222222222222222222222222222222222222222222",
-    "noOverwrite": true
-  }
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/read.json

@@ -1,22 +0,0 @@
-{
-  "inventory": {
-    "package": "Fixture",
-    "version": "1.0.0-0001",
-    "protocol": 2,
-    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-  },
-  "op": "nas.files.read",
-  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
-  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
-  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
-  "grantRevision": 1,
-  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
-  "args": {
-    "segments": [
-      "note.txt"
-    ],
-    "maxBytes": 1048576
-  }
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/stat.json

@@ -1,22 +0,0 @@
-{
-  "inventory": {
-    "package": "Fixture",
-    "version": "1.0.0-0001",
-    "protocol": 2,
-    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-  },
-  "op": "nas.files.stat",
-  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
-  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
-  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
-  "grantRevision": 1,
-  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
-  "args": {
-    "segments": [
-      "\u8cc7\u6599\u593e",
-      "a%2fb"
-    ]
-  }
-}

package/dist/templates/native-go/backend/internal/helper/testdata/protocol2/write-stream.json

@@ -1,22 +0,0 @@
-{
-  "inventory": {
-    "package": "Fixture",
-    "version": "1.0.0-0001",
-    "protocol": 2,
-    "payloadDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-    "registryDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
-  },
-  "op": "nas.files.write-stream",
-  "nonce": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
-  "operationId": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
-  "epoch": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
-  "grantId": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
-  "grantRevision": 1,
-  "ticket": "1111111111111111111111111111111111111111111111111111111111111111",
-  "args": {
-    "segments": [
-      "new.txt"
-    ],
-    "maxBytes": 67108864
-  }
-}

package/dist/templates/native-go/backend/internal/helper/unit_connection.go

@@ -1,75 +0,0 @@
-package helper
-
-import (
-	"bytes"
-	"errors"
-	"io"
-	"sync/atomic"
-
-	"github.com/godbus/dbus/v5"
-)
-
-// Keep transport construction independent of observer reconciliation. Optional
-// interceptors remain available to the observer's diagnostic instrumentation.
-func newObserverConnection(raw io.ReadWriteCloser, handler dbus.SignalHandler, opts ...dbus.ConnOption) (*dbus.Conn, error) {
-	stream := &observerDBusStream{ReadWriteCloser: raw}
-	return dbus.NewConn(stream, append([]dbus.ConnOption{dbus.WithSignalHandler(handler)}, opts...)...)
-}
-
-// NewConn's generic transport has no public ReadMessage override. After auth,
-// decode one complete frame at this boundary and replay its original bytes to
-// godbus. A socket read error (including v5.2.2's header-padding panic) then
-// reaches inWorker at the start of a message, where it takes the normal Close /
-// Terminator / pending-call error path. No partial message reaches the observer.
-// Reading stays in the existing worker; no extra goroutine, queue, or timer.
-type observerDBusStream struct {
-	io.ReadWriteCloser
-	messages atomic.Bool
-	frame    *bytes.Reader // single reader, like godbus's underlying transport
-}
-
-func (s *observerDBusStream) Write(p []byte) (int, error) {
-	n, err := s.ReadWriteCloser.Write(p)
-	// Auth starts inWorker only after this write returns. Keep authentication
-	// text on the raw stream and switch before the first binary read can begin.
-	if err == nil && n == len(p) && bytes.Equal(p, []byte("BEGIN\r\n")) {
-		s.messages.Store(true)
-	}
-	return n, err
-}
-
-func (s *observerDBusStream) Read(p []byte) (int, error) {
-	if !s.messages.Load() {
-		return s.ReadWriteCloser.Read(p)
-	}
-	if len(p) == 0 {
-		return 0, nil
-	}
-	if s.frame == nil || s.frame.Len() == 0 {
-		packet, err := readObserverDBusFrame(s.ReadWriteCloser)
-		if err != nil {
-			return 0, err
-		}
-		s.frame = bytes.NewReader(packet)
-	}
-	return s.frame.Read(p)
-}
-
-var errObserverDBusDecode = errors.New("observer D-Bus decoder panic")
-
-func readObserverDBusFrame(raw io.Reader) (packet []byte, err error) {
-	defer func() {
-		if failure := recover(); failure != nil {
-			packet = nil
-			err = errObserverDBusDecode
-			if cause, ok := failure.(error); ok {
-				err = errors.Join(err, cause)
-			}
-		}
-	}()
-	var captured bytes.Buffer
-	if _, err := dbus.DecodeMessage(io.TeeReader(raw, &captured)); err != nil {
-		return nil, err
-	}
-	return captured.Bytes(), nil
-}

package/dist/templates/native-go/backend/internal/helper/unit_connection_linux_test.go

@@ -1,135 +0,0 @@
-package helper
-
-import (
-	"bufio"
-	"encoding/binary"
-	"fmt"
-	"io"
-	"net"
-	"os"
-	"strings"
-	"sync"
-	"syscall"
-	"testing"
-	"time"
-
-	"github.com/godbus/dbus/v5"
-)
-
-// Pause neither the decoder nor its goroutine: identify the exact socket read
-// after the header so tests can close the underlying connection at padding.
-type observerPaddingConn struct {
-	net.Conn
-	mu      sync.Mutex
-	armed   bool
-	read    int
-	header  int
-	padding chan struct{}
-	once    sync.Once
-}
-
-func (c *observerPaddingConn) Read(p []byte) (int, error) {
-	c.mu.Lock()
-	if c.armed && c.read == c.header {
-		c.once.Do(func() { close(c.padding) })
-	}
-	c.mu.Unlock()
-	n, err := c.Conn.Read(p)
-	c.mu.Lock()
-	if c.armed {
-		c.read += n
-	}
-	c.mu.Unlock()
-	return n, err
-}
-
-func (c *observerPaddingConn) arm(header int) {
-	c.mu.Lock()
-	defer c.mu.Unlock()
-	c.armed, c.header = true, header
-}
-
-// The production observer uses NewConn over a raw Unix socket, AuthExternal,
-// and WithSignalHandler(o). Exercise that same generic transport and Auth's
-// actual background inWorker, without a host bus or installed package fixture.
-func observerTestBus(t *testing.T, handler dbus.SignalHandler, opts ...dbus.ConnOption) (*dbus.Conn, *observerPaddingConn, net.Conn) {
-	t.Helper()
-	fds, err := syscall.Socketpair(syscall.AF_UNIX, syscall.SOCK_STREAM, 0)
-	if err != nil {
-		t.Fatal(err)
-	}
-	ends := make([]net.Conn, 2)
-	for j, fd := range fds {
-		f := os.NewFile(uintptr(fd), "observer-test-bus")
-		ends[j], err = net.FileConn(f)
-		f.Close()
-		if err != nil {
-			t.Fatal(err)
-		}
-		t.Cleanup(func() { ends[j].Close() })
-		ends[j].SetDeadline(time.Now().Add(5 * time.Second))
-	}
-	raw := &observerPaddingConn{Conn: ends[0], padding: make(chan struct{})}
-	conn, err := newObserverConnection(raw, handler, opts...)
-	if err != nil {
-		t.Fatal(err)
-	}
-	t.Cleanup(func() { conn.Close() })
-	authDone := make(chan error, 1)
-	go func() {
-		r := bufio.NewReader(ends[1])
-		first, err := r.ReadByte()
-		if err == nil && first != 0 {
-			err = fmt.Errorf("missing authentication null byte")
-		}
-		for _, step := range []struct{ request, reply string }{
-			{"AUTH\r\n", "REJECTED EXTERNAL\r\n"},
-			{"AUTH EXTERNAL\r\n", "OK 0123456789abcdef0123456789abcdef\r\n"},
-			{"BEGIN\r\n", ""},
-		} {
-			if err != nil {
-				break
-			}
-			var line string
-			line, err = r.ReadString('\n')
-			if err == nil && line != step.request {
-				err = fmt.Errorf("unexpected auth request %q", strings.TrimSpace(line))
-			}
-			if err == nil && step.reply != "" {
-				_, err = io.WriteString(ends[1], step.reply)
-			}
-		}
-		authDone <- err
-	}()
-	if err := conn.Auth([]dbus.Auth{dbus.AuthExternal("0")}); err != nil {
-		t.Fatal(err)
-	}
-	if err := <-authDone; err != nil {
-		t.Fatal(err)
-	}
-	return conn, raw, ends[1]
-}
-
-func TestLinuxObserverDBusIntactFrame(t *testing.T) {
-	for _, order := range []binary.ByteOrder{binary.LittleEndian, binary.BigEndian} {
-		t.Run(order.String(), func(t *testing.T) {
-			o := &unitObserver{gate: newAdmission(testBinding())}
-			o.gate.observe(testBinding(), 7, true, time.Now())
-			received := make(chan *dbus.Message, 1)
-			_, raw, peer := observerTestBus(t, o, dbus.WithIncomingInterceptor(func(m *dbus.Message) { received <- m }))
-			packet, header := observerPaddedFrame(t, order)
-			raw.arm(header)
-			if _, err := peer.Write(packet); err != nil {
-				t.Fatal(err)
-			}
-			select {
-			case m := <-received:
-				if len(m.Body) != 1 || m.Body[0] != "x" || !o.gate.allow(time.Now()) {
-					t.Fatalf("intact frame changed observation: %+v; %s", m, o.gate.reason())
-				}
-			case <-time.After(time.Second):
-				t.Fatal("background reader did not deliver intact frame")
-			}
-		})
-	}
-}