@synopackageland/cli 0.5.0 → 0.6.0

package/templates/native-go-background/frontend/src/background/i18n/zh-CN.json

@@ -1,83 +0,0 @@
-{
-  "title": "后台任务",
-  "help": "将选择的一个文件复制到套件内，由套件账号计算 SHA-256。退出登录后任务仍会继续。副本与结果由套件保存，源权限变化不会收回；再次登录即可查看自己的结果。",
-  "unsupported": "你的账号无法使用后台任务。请管理员允许普通用户。",
-  "modeOn": "后台模式已开启",
-  "modeOff": "后台模式已关闭",
-  "enable": "开启",
-  "disable": "关闭",
-  "worker": "Worker",
-  "workerRunning": "Worker 正以 {user} 运行",
-  "workerStopped": "Worker 未运行",
-  "chooseFile": "选择文件",
-  "chosen": "已选择的文件：{path}",
-  "pickerTitle": "选择要导入的文件",
-  "pickerConsent": "所选文件会使用你当前的 DSM 登录读取一次并交给后台任务，不会保存授权。",
-  "submit": "导入并提交",
-  "refresh": "刷新",
-  "cancel": "取消",
-  "result": "结果",
-  "download": "下载结果",
-  "noJobs": "暂无任务",
-  "state_queued": "排队中",
-  "state_running": "运行中",
-  "state_succeeded": "成功",
-  "state_failed": "失败",
-  "state_canceled": "已取消",
-  "state_interrupted": "已中断",
-  "limits": "每个文件最多 {size} KiB、队列 {queue} 个任务、每个任务 {seconds} 秒。",
-  "errors": {
-    "failed": "无法完成请求。请刷新后重试。",
-    "unsupported": "你的账号无法使用后台任务。请管理员允许普通用户。",
-    "disabled": "后台模式已关闭。",
-    "limit-exceeded": "文件超过上限。",
-    "queue-full": "队列已满。",
-    "quota-exceeded": "后台存储空间已满。",
-    "conflict": "任务状态已变更，请刷新。",
-    "not_found": "未找到。",
-    "denied": "访问被拒绝。",
-    "session_required": "DSM 会话已过期，请重新登录。",
-    "owner-queue-full": "你的待处理任务已达上限。请等待完成或取消一个任务。",
-    "owner-quota-exceeded": "你的后台存储已达上限。请管理员清除旧任务。",
-    "identity_unavailable": "无法确认你的 DSM 用户 UID。请重新登录或联系管理员。",
-    "schedule-full": "已达 8 个计划上限。请删除计划。",
-    "input-unavailable": "私有副本不存在或已更改。请重新导入。"
-  },
-  "ownerScope": "你只能查看、取消及下载自己的任务。",
-  "adminScope": "管理员可查看及取消所有用户的任务。",
-  "ownerLimits": "每人上限：{jobs} 个待处理任务、{size} KiB 输入与预留结果存储。",
-  "allowUsers": "允许普通用户",
-  "blockUsers": "禁用普通用户",
-  "usersOn": "已允许普通用户",
-  "usersOff": "已禁用普通用户",
-  "owner": "所有者：{user}（UID {uid}）",
-  "purgeOwner": "清除所有者的任务",
-  "purgeConfirm": "清除 {user}（UID {uid}）的所有任务？运行中的任务会取消并等待结束；已保存的结果会移除。",
-  "confirmPurge": "确认清除",
-  "keepJobs": "保留任务",
-  "schedulesTitle": "计划",
-  "scheduleHelp": "由套件账户每小时、每日或每周重新计算固定私有副本。最多 8 个计划；错过的执行仅记录，不补跑。",
-  "scheduleCopy": "计划重跑副本",
-  "scheduleSource": "私有副本：{name}",
-  "interval": "重复间隔",
-  "hourly": "每小时",
-  "daily": "每日",
-  "weekly": "每周",
-  "scheduleConsent": "我同意保留此固定副本，并由套件账户重新计算。不读取新来源文件或个人 ACL。",
-  "createSchedule": "创建计划",
-  "noSchedules": "暂无计划",
-  "scheduleOn": "已启用",
-  "scheduleOff": "已停用",
-  "nextRun": "下次执行：{time}",
-  "missedRuns": "错过执行：{count} 次",
-  "disableSchedule": "停用计划",
-  "deleteSchedule": "删除计划",
-  "deleteScheduleConsent": "删除 {name} 的计划？排队任务将取消，运行中的任务将停止并完成收尾。已完成结果保留。",
-  "confirmDeleteSchedule": "确认删除",
-  "enableSchedule": "启用计划",
-  "enableScheduleConsent": "使用当前 worker revision 启用 {name} 的计划？我同意重新计算此固定副本。不重播过去的执行。",
-  "confirmEnableSchedule": "确认启用",
-  "revisionChanged": "Worker revision 已更改。管理员须检查并明确启用此计划。",
-  "scheduledJob": "计划执行",
-  "unknownTime": "未知"
-}

package/templates/native-go-background/frontend/src/background/i18n/zh-TW.json

@@ -1,83 +0,0 @@
-{
-  "title": "背景工作",
-  "help": "將選取的一個檔案複製到套件內，由套件帳號計算 SHA-256。登出後工作仍會繼續。副本與結果由套件保存，來源權限變動不會收回；再次登入即可查看自己的結果。",
-  "unsupported": "你的帳號無法使用背景工作。請管理員允許一般使用者。",
-  "modeOn": "背景模式已開啟",
-  "modeOff": "背景模式已關閉",
-  "enable": "開啟",
-  "disable": "關閉",
-  "worker": "Worker",
-  "workerRunning": "Worker 正以 {user} 執行",
-  "workerStopped": "Worker 未執行",
-  "chooseFile": "選擇檔案",
-  "chosen": "已選擇的檔案：{path}",
-  "pickerTitle": "選擇要匯入的檔案",
-  "pickerConsent": "選取的檔案會用你目前的 DSM 登入讀取一次並交給背景工作，不會保存授權。",
-  "submit": "匯入並送出",
-  "refresh": "重新整理",
-  "cancel": "取消",
-  "result": "結果",
-  "download": "下載結果",
-  "noJobs": "尚無工作",
-  "state_queued": "排隊中",
-  "state_running": "執行中",
-  "state_succeeded": "成功",
-  "state_failed": "失敗",
-  "state_canceled": "已取消",
-  "state_interrupted": "已中斷",
-  "limits": "每個檔案最多 {size} KiB、佇列 {queue} 個工作、每個工作 {seconds} 秒。",
-  "errors": {
-    "failed": "無法完成要求。請重新整理後再試。",
-    "unsupported": "你的帳號無法使用背景工作。請管理員允許一般使用者。",
-    "disabled": "背景模式已關閉。",
-    "limit-exceeded": "檔案超過上限。",
-    "queue-full": "佇列已滿。",
-    "quota-exceeded": "背景儲存空間已滿。",
-    "conflict": "工作狀態已變更，請重新整理。",
-    "not_found": "找不到。",
-    "denied": "存取被拒絕。",
-    "session_required": "DSM 工作階段已過期，請重新登入。",
-    "owner-queue-full": "你的待處理工作已達上限。請等待完成或取消一個工作。",
-    "owner-quota-exceeded": "你的背景儲存已達上限。請管理員清除舊工作。",
-    "identity_unavailable": "無法確認你的 DSM 使用者 UID。請重新登入或洽管理員。",
-    "schedule-full": "已達 8 個排程上限。請刪除排程。",
-    "input-unavailable": "私有副本不存在或已變更。請重新匯入。"
-  },
-  "ownerScope": "你只能檢視、取消及下載自己的工作。",
-  "adminScope": "管理員可檢視及取消所有使用者的工作。",
-  "ownerLimits": "每人上限：{jobs} 個待處理工作、{size} KiB 輸入與預留結果儲存。",
-  "allowUsers": "允許一般使用者",
-  "blockUsers": "停用一般使用者",
-  "usersOn": "已允許一般使用者",
-  "usersOff": "已停用一般使用者",
-  "owner": "擁有者：{user}（UID {uid}）",
-  "purgeOwner": "清除擁有者的工作",
-  "purgeConfirm": "清除 {user}（UID {uid}）的所有工作？執行中的工作會取消並等待結束；已儲存的結果會移除。",
-  "confirmPurge": "確認清除",
-  "keepJobs": "保留工作",
-  "schedulesTitle": "排程",
-  "scheduleHelp": "由套件帳號每小時、每日或每週重算固定私有副本。最多 8 個排程；錯過的執行只記錄，不補跑。",
-  "scheduleCopy": "排程重跑副本",
-  "scheduleSource": "私有副本：{name}",
-  "interval": "重複間隔",
-  "hourly": "每小時",
-  "daily": "每日",
-  "weekly": "每週",
-  "scheduleConsent": "我同意保留此固定副本，並由套件帳號重算。不讀取新來源檔案或個人 ACL。",
-  "createSchedule": "建立排程",
-  "noSchedules": "尚無排程",
-  "scheduleOn": "已啟用",
-  "scheduleOff": "已停用",
-  "nextRun": "下次執行：{time}",
-  "missedRuns": "錯過執行：{count} 次",
-  "disableSchedule": "停用排程",
-  "deleteSchedule": "刪除排程",
-  "deleteScheduleConsent": "刪除 {name} 的排程？排隊工作會取消，執行中工作會停止並完成收尾。已完成結果保留。",
-  "confirmDeleteSchedule": "確認刪除",
-  "enableSchedule": "啟用排程",
-  "enableScheduleConsent": "使用目前 worker revision 啟用 {name} 的排程？我同意重算此固定副本。不重播過去的執行。",
-  "confirmEnableSchedule": "確認啟用",
-  "revisionChanged": "Worker revision 已變更。管理員須審閱並明確啟用此排程。",
-  "scheduledJob": "排程執行",
-  "unknownTime": "未知"
-}

package/templates/native-go-background/frontend/src/background/picker-provider.ts

@@ -1,13 +0,0 @@
-import type {Context} from '../context'
-import {createM2Provider} from '../nas/m2-provider'
-import type {M2Provider} from '../nas/m2-contract'
-
-// The shared File Station picker browses through bg.browse, the caller's
-// own session, so a package built without --file-station still has a picker.
-// Confirming a pick stores nothing and grants nothing: submit re-reads the file
-// through the same session. Only the listing and the confirm step are real; the
-// grant and file operations of the full provider are never reached from here.
-export function createBackgroundPickerProvider(ctx:Pick<Context,'call'>):M2Provider{
- const provider=createM2Provider({call:(method,params)=>ctx.call(method==='nas.discovery'?'bg.browse':method,params)})
- return {...provider,async confirm(folder,writable){return {grantId:'',folder,writable}}}
-}

package/templates/native-go-background/frontend/test/background.test.ts

@@ -1,179 +0,0 @@
-// @vitest-environment jsdom
-import {readFileSync} from 'node:fs'
-import {join} from 'node:path'
-import {test,expect} from 'vitest'
-import {createApp,h,nextTick} from 'vue'
-import {AppRoot} from '@synopackageland/ui'
-import BackgroundPanel from '../src/background/BackgroundPanel.vue'
-import {backgroundCatalogs,backgroundCopy} from '../src/background/i18n'
-import {m2Copy} from '../src/nas/m2-i18n'
-// The UI Select is a Reka combobox: drive it by keyboard (the UI README helper), which also proves it is keyboard operable.
-// Attrs such as data-schedule-interval land on the focusable combobox itself.
-async function choose(root:HTMLElement,marker:string,label:string){
- const trigger=root.querySelector<HTMLElement>(`[${marker}][role=combobox]`)!;expect(trigger,marker).toBeTruthy()
- expect(trigger.id,marker).toBeTruthy();expect(root.querySelector(`label[for="${trigger.id}"]`),marker).toBeTruthy()
- trigger.dispatchEvent(new KeyboardEvent('keydown',{key:'ArrowDown',bubbles:true,cancelable:true}));await settle()
- const option=[...document.querySelectorAll<HTMLElement>('[role=option]')].find(o=>o.textContent?.trim()===label)
- if(!option||option.getAttribute('aria-disabled')==='true')throw new Error(`No enabled option: ${label}`)
- option.focus();option.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',bubbles:true,cancelable:true}));await settle()
- expect(trigger.textContent).toContain(label)
-}
-async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
-type Call=(method:string,params?:Record<string,unknown>)=>Promise<any>
-function mount(call:Call,locale='en'){
- const root=document.createElement('div');document.body.append(root)
- const app=createApp({render:()=>h(AppRoot,{},()=>h(BackgroundPanel,{ctx:{call,locale}}))})
- app.config.idPrefix=`bg-${Math.random()}`;app.mount(root)
- return {root,close(){app.unmount();root.remove()}}
-}
-const click=(root:HTMLElement,text:string)=>{const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text)!;expect(b).toBeTruthy();b.click()}
-const status=(enabled:boolean)=>({supported:true,enabled,admin:true,allowOrdinaryUsers:false,revision:1,queued:0,running:0,worker:{username:'SynoPkg',alive:true},limits:{maxInputBytes:524288,maxQueued:16,maxOwnerPending:2,maxOwnerBytes:1048576,maxTotalBytes:16777216,jobTimeoutSeconds:60}})
-
-test('non-administrators see unsupported and no action',async()=>{
- const f=mount(async()=>{throw {code:'unsupported'}});await settle()
- expect(f.root.textContent).toContain(backgroundCopy('en').unsupported);expect(f.root.querySelector('button')).toBeNull();f.close()
-})
-const browse=(args?:Record<string,unknown>)=>args?.folder
- ?{files:[{name:'fixture.bin',path:`${args.folder}/fixture.bin`,isdir:false,additional:{size:3}}],total:1,offset:0}
- :{shares:[{name:'share',path:'/share',isdir:true}],total:1,offset:0}
-test('enable, pick a file, submit, cancel and result use only bg.* routes',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[];let enabled=false,jobs:any[]=[]
- const f=mount(async(m,p)=>{
-  calls.push([m,p])
-  switch(m){
-   case 'bg.status':return status(enabled)
-   case 'bg.jobs.list':return {jobs}
-   case 'bg.browse':return browse(p)
-   case 'bg.mode.set':enabled=true;return {enabled}
-   case 'bg.jobs.submit':jobs=[{id:'j1',name:'fixture.bin',state:'queued'}];return {job:jobs[0],duplicate:false}
-   case 'bg.jobs.cancel':jobs=[{...jobs[0],state:'canceled'}];return {job:jobs[0]}
-   case 'bg.jobs.result':return {result:{sha256:'x'}}
-  }
- });await settle()
- const copy=backgroundCopy('en'),pick=m2Copy('en')
- click(f.root,copy.enable);await settle()
- expect(f.root.querySelector('[data-bg-folder]')).toBeNull();expect(f.root.querySelector('[data-bg-file]')).toBeNull()
- const submitButton=()=>[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===copy.submit)!
- expect(submitButton().disabled).toBe(true)
- click(f.root,copy.chooseFile);await settle()
- click(f.root,'Open share');await settle()
- click(f.root,'Select fixture.bin');await settle();click(f.root,pick.confirm);await settle()
- expect(f.root.textContent).toContain('/share/fixture.bin')
- expect(submitButton().disabled).toBe(false)
- click(f.root,copy.submit);await settle()
- const submit=calls.find(c=>c[0]==='bg.jobs.submit')![1]!
- expect(submit.folder).toBe('/share');expect(submit.relative).toBe('fixture.bin');expect(typeof submit.key).toBe('string')
- expect(f.root.querySelector('[data-job-state=queued]')).not.toBeNull()
- click(f.root,copy.cancel);await settle()
- expect(f.root.querySelector('[data-job-state=canceled]')).not.toBeNull()
- expect(calls.filter(c=>c[0]==='bg.browse').length).toBeGreaterThan(0)
- expect(calls.every(c=>/^bg\./.test(c[0]))).toBe(true)
- f.close()
-})
-test('a denied listing shows a localized error and cannot submit',async()=>{
- const f=mount(async(m)=>{
-  if(m==='bg.status')return status(true)
-  if(m==='bg.jobs.list')return {jobs:[]}
-  if(m==='bg.browse')throw {code:'denied',message:'Cookie=CANARY'}
- });await settle()
- click(f.root,backgroundCopy('en').chooseFile);await settle()
- expect(f.root.textContent).toContain(m2Copy('en').errorDenied);expect(f.root.textContent).not.toContain('CANARY')
- expect([...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===backgroundCopy('en').submit)!.disabled).toBe(true)
- f.close()
-})
-test('nine locales have identical keys and placeholders',()=>{
- const en=backgroundCatalogs.en,flat=(o:any,p=''):Record<string,string>=>Object.fromEntries(Object.entries(o).flatMap(([k,v])=>typeof v==='string'?[[p+k,v]]:Object.entries(flat(v,`${p}${k}.`))))
- const base=flat(en)
- expect(Object.keys(backgroundCatalogs).sort()).toEqual(['de','en','es','fr','it','ja','ko','zh-CN','zh-TW'])
- for(const catalog of Object.values(backgroundCatalogs)){
-  const map=flat(catalog);expect(Object.keys(map).sort()).toEqual(Object.keys(base).sort())
-  for(const [k,v] of Object.entries(map)){expect(v.length).toBeGreaterThan(0);expect(v.match(/\{\w+\}/g)??[]).toEqual(base[k].match(/\{\w+\}/g)??[])}
- }
-})
-
-test('a null job list from the worker renders as no jobs',async()=>{
- const f=mount(async m=>m==='bg.status'?status(true):m==='bg.jobs.list'?{jobs:null}:{});await settle()
- expect(f.root.textContent).toContain(backgroundCopy('en').noJobs);f.close()
-})
-
-test('the picker dialog explains the one-time read, not the M2 saved-selection consent',async()=>{
- for(const locale of Object.keys(backgroundCatalogs)){
-  const f=mount(async(m,p)=>m==='bg.status'?status(true):m==='bg.jobs.list'?{jobs:[]}:browse(p),locale);await settle()
-  const copy=backgroundCopy(locale)
-  click(f.root,copy.chooseFile);await settle()
-  const dialog=f.root.querySelector('[role=dialog]')!.textContent!
-  expect(dialog).toContain(copy.pickerConsent);expect(dialog).not.toContain(m2Copy(locale).consent)
-  f.close()
- }
-})
-
-test('ordinary owner can submit but has no administrator controls',async()=>{
- const calls:string[]=[]
- const f=mount(async(m,p)=>{calls.push(m);if(m==='bg.status')return {...status(true),admin:false,allowOrdinaryUsers:true};if(m==='bg.jobs.list')return {jobs:[{id:'owned',name:'owned.bin',state:'queued',submitter:{user:'bob',uid:'1025'}}]};if(m==='bg.browse')return browse(p);return {}});await settle()
- const c=backgroundCopy('en')
- expect(f.root.textContent).toContain(c.ownerScope)
- expect(f.root.textContent).not.toContain(c.disable)
- expect(f.root.textContent).not.toContain(c.allowUsers)
- expect(f.root.textContent).not.toContain(c.purgeOwner)
- expect([...f.root.querySelectorAll('button')].some(b=>b.textContent?.trim()===c.chooseFile)).toBe(true)
- click(f.root,c.cancel);await settle();expect(calls).toContain('bg.jobs.cancel');f.close()
-})
-test('admin ordinary-user switch and exact owner purge require explicit confirmation',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[]
- const f=mount(async(m,p)=>{calls.push([m,p]);if(m==='bg.status')return {...status(true),admin:true,allowOrdinaryUsers:false};if(m==='bg.jobs.list')return {jobs:[{id:'one',name:'a',state:'succeeded',submitter:{user:'bob',uid:'1025'}}]};return {}});await settle()
- const c=backgroundCopy('en');click(f.root,c.allowUsers);await settle()
- expect(calls.find(([m])=>m==='bg.users.set')?.[1]).toEqual({allowOrdinaryUsers:true})
- click(f.root,c.purgeOwner);await settle();expect(calls.some(([m])=>m==='bg.jobs.purge')).toBe(false)
- click(f.root,c.confirmPurge);await settle()
- expect(calls.find(([m])=>m==='bg.jobs.purge')?.[1]).toEqual({owner:{user:'bob',uid:'1025'}});f.close()
-})
-test('malformed status cannot render action controls or crash the panel',async()=>{
- const f=mount(async()=>({state:'not-enabled'}));await settle()
- expect(f.root.textContent).toContain(backgroundCopy('en').errors.failed)
- expect(f.root.querySelector('button')).toBeNull();f.close()
-})
-
-test('schedule creation requires copy consent; owner controls disable and delete exact schedule',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[];let schedules:any[]=[]
- const f=mount(async(m,p)=>{calls.push([m,p]);switch(m){
- case 'bg.status':return {...status(true),owner:{user:'bob',uid:'1025'},admin:false,allowOrdinaryUsers:true}
- case 'bg.jobs.list':return {jobs:[{id:'import',name:'copy.bin',state:'succeeded',copyRetained:true,submitter:{user:'bob',uid:'1025'}}]}
- case 'bg.schedules.list':return {schedules}
- case 'bg.schedules.create':schedules=[{id:'schedule',name:'copy.bin',owner:{user:'bob',uid:'1025'},enabled:true,intervalSeconds:3600,nextAt:'2026-10-05T01:00:00Z',missed:0,workerRevision:1}];return {schedule:schedules[0]}
- case 'bg.schedules.disable':schedules=[{...schedules[0],enabled:false}];return {schedule:schedules[0]}
- case 'bg.schedules.delete':schedules=[];return {deleted:true}
- default:return {}
- }});await settle();const c=backgroundCopy('en')
- click(f.root,c.scheduleCopy);await settle()
- expect(calls.some(([m])=>m==='bg.schedules.create')).toBe(false)
- const create=[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===c.createSchedule)!
- expect(create.disabled).toBe(true)
- await choose(f.root,'data-schedule-interval',c.weekly)
- const consent=f.root.querySelector<HTMLElement>('[data-schedule-consent] [role=checkbox], [role=checkbox][data-schedule-consent]')!;consent.click();await settle()
- click(f.root,c.createSchedule);await settle()
- expect(calls.find(([m])=>m==='bg.schedules.create')?.[1]).toMatchObject({jobId:'import',intervalSeconds:604800,consent:true})
- expect(f.root.querySelector('[data-schedule-id=schedule]')?.textContent).toContain(c.nextRun.replace('{time}','').trim().split(':')[0])
- click(f.root,c.disableSchedule);await settle();expect(calls.find(([m])=>m==='bg.schedules.disable')?.[1]).toEqual({id:'schedule'})
- click(f.root,c.deleteSchedule);await settle();expect(calls.some(([m])=>m==='bg.schedules.delete')).toBe(false)
- click(f.root,c.confirmDeleteSchedule);await settle();expect(calls.find(([m])=>m==='bg.schedules.delete')?.[1]).toEqual({id:'schedule'});f.close()
-})
-
-test('administrator sees the exact selected copy before enabling a schedule',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[]
- const name='private-'.padEnd(128,'x')
- const f=mount(async(m,p)=>{calls.push([m,p]);if(m==='bg.status')return status(true);if(m==='bg.jobs.list')return {jobs:[]};if(m==='bg.schedules.list')return {schedules:[{id:'disabled',name,owner:{user:'normal1',uid:'1025'},enabled:false,nextAt:'2026-10-05T01:00:00Z',missed:0}]};return {}});await settle()
- const c=backgroundCopy('en');click(f.root,c.enableSchedule);await settle()
- const expected=c.enableScheduleConsent.replace('{name}',name)
- expect(expected).toContain(name);expect(f.root.textContent).toContain(expected)
- expect(calls.some(([m])=>m==='bg.schedules.enable')).toBe(false)
- click(f.root,c.confirmEnableSchedule);await settle()
- expect(calls.find(([m])=>m==='bg.schedules.enable')?.[1]).toEqual({id:'disabled',consent:true});f.close()
-})
-
-// Same rule as the base template (test/native-controls.test.ts): UI components only, and the
-// UI's own Form auto layout and FormItem id binding instead of per-app workarounds.
-test('the background panel uses only UI components and the UI form binding',()=>{
- const template=readFileSync(join(__dirname,'../src/background/BackgroundPanel.vue'),'utf8').replace(/<script[\s\S]*?<\/script>/g,'').replace(/<style[\s\S]*?<\/style>/g,'')
- expect(template.match(/<(?:a|input|select|textarea|label)[\s>/]/g)).toBeNull()
- expect(template).not.toMatch(/direction="vertical"|field\.controlId|role="group"/)
-})

package/templates/native-go-better-auth/backend/internal/app/identity.go

@@ -1,208 +0,0 @@
-package app
-
-import (
-	"bytes"
-	"context"
-	"crypto/rand"
-	"encoding/hex"
-	"encoding/json"
-	"errors"
-	"io"
-	"io/fs"
-	"os"
-	"os/exec"
-	"syscall"
-	"time"
-
-	"dsmapp/internal/api"
-)
-
-const maxIdentityBytes = 1 << 20
-
-// Only the selected overlay includes this runner. It invokes a fixed package
-// payload as the package account, never a root helper or arbitrary command.
-var identityRun = func(ctx context.Context, cfg Config, input []byte) ([]byte, error) {
-	ctx, cancel := context.WithTimeout(ctx, 10*time.Second)
-	defer cancel()
-	cmd := exec.CommandContext(ctx, "/var/packages/Node.js_v22/target/usr/local/bin/node", "/var/packages/"+cfg.PackageID+"/target/integration/identity/app.mjs")
-	cmd.Env = []string{"NODE_ENV=production", "PATH=/usr/bin:/bin"}
-	cmd.Stdin = bytes.NewReader(input)
-	var out limitedIdentityOutput
-	cmd.Stdout = &out
-	// Do not expose subprocess messages or credentials in the CGI envelope.
-	if err := cmd.Run(); err != nil {
-		return nil, err
-	}
-	return out.Bytes(), nil
-}
-
-type limitedIdentityOutput struct{ bytes.Buffer }
-
-func (w *limitedIdentityOutput) Write(p []byte) (int, error) {
-	if w.Len()+len(p) > maxIdentityBytes {
-		return 0, errors.New("oversized identity output")
-	}
-	return w.Buffer.Write(p)
-}
-func (cfg Config) identityRoutes() []api.Route {
-	return []api.Route{
-		api.User("identity.status", func(_ context.Context, _ api.Caller, p json.RawMessage) (any, error) {
-			if err := decodeParams(p, &struct{}{}); err != nil {
-				return nil, err
-			}
-			return map[string]string{"mode": "better-auth"}, nil
-		}),
-		api.User("identity.login", cfg.identityHandler("login")), api.User("identity.current", cfg.identityHandler("current")), api.User("identity.logout", cfg.identityHandler("logout")),
-	}
-}
-func (cfg Config) identityHandler(method string) api.Handler {
-	return func(ctx context.Context, caller api.Caller, params json.RawMessage) (any, error) {
-		var cookie string
-		if method == "login" {
-			if err := decodeParams(params, &struct{}{}); err != nil {
-				return nil, err
-			}
-		} else {
-			var in struct {
-				Cookie string `json:"cookie"`
-			}
-			if err := decodeParams(params, &in); err != nil {
-				return nil, err
-			}
-			cookie = in.Cookie
-			if len(cookie) > 8192 {
-				return nil, api.BadRequest("app session too large")
-			}
-		}
-		if _, err := cfg.personalID(ctx, caller); err != nil {
-			return nil, err
-		}
-		principal, err := personalLookup(caller.User())
-		if err != nil || principal.Username != caller.User() {
-			return nil, identityUnavailable()
-		}
-		result, err := cfg.identityExchange(ctx, method, cookie, map[string]string{"name": caller.User(), "uid": principal.Uid, "gid": principal.Gid})
-		if err != nil {
-			return nil, identityUnavailable()
-		}
-		if !result.OK {
-			return nil, &api.Error{Code: "identity_refused", Message: "App session refused; create a fresh app session with your DSM login"}
-		}
-		return map[string]string{"user": result.User, "cookie": result.Cookie, "expiresAt": result.ExpiresAt}, nil
-	}
-}
-
-type identityResult struct {
-	OK        bool   `json:"ok"`
-	User      string `json:"user"`
-	Cookie    string `json:"cookie"`
-	ExpiresAt string `json:"expiresAt"`
-}
-
-func identityUnavailable() error {
-	return &api.Error{Code: "identity_unavailable", Message: "Optional Node identity is unavailable; check the selected Node.js_v22 runtime"}
-}
-func (cfg Config) identityExchange(ctx context.Context, method, cookie string, principal map[string]string) (identityResult, error) {
-	var result identityResult
-	root, err := os.OpenRoot(cfg.DataDir)
-	if err != nil {
-		return result, err
-	}
-	defer root.Close()
-	if err = root.Mkdir("identity", 0700); err != nil && !errors.Is(err, fs.ErrExist) {
-		return result, err
-	}
-	info, err := root.Lstat("identity")
-	if err != nil || !info.IsDir() || info.Mode().Perm()&0077 != 0 {
-		return result, errors.New("unsafe directory")
-	}
-	dir, err := root.OpenRoot("identity")
-	if err != nil {
-		return result, err
-	}
-	defer dir.Close()
-	lock, err := dir.OpenFile("store.lock", os.O_CREATE|os.O_RDWR|syscall.O_NOFOLLOW, 0600)
-	if err != nil {
-		return result, err
-	}
-	defer lock.Close()
-	if err = personalRegular(lock); err != nil {
-		return result, err
-	}
-	// Nonblocking retry bounds contention. CGI never hangs on an abandoned lock.
-	deadline := time.NewTimer(10 * time.Second)
-	defer deadline.Stop()
-	for {
-		err = syscall.Flock(int(lock.Fd()), syscall.LOCK_EX|syscall.LOCK_NB)
-		if err == nil {
-			break
-		}
-		if err != syscall.EWOULDBLOCK && err != syscall.EAGAIN {
-			return result, err
-		}
-		select {
-		case <-ctx.Done():
-			return result, ctx.Err()
-		case <-deadline.C:
-			return result, errors.New("identity busy")
-		case <-time.After(10 * time.Millisecond):
-		}
-	}
-	defer syscall.Flock(int(lock.Fd()), syscall.LOCK_UN)
-	store := json.RawMessage(`{}`)
-	f, err := dir.OpenFile("store.json", os.O_RDONLY|syscall.O_NOFOLLOW, 0)
-	if err == nil {
-		if err = personalRegular(f); err != nil {
-			f.Close()
-			return result, err
-		}
-		b, e := io.ReadAll(io.LimitReader(f, maxIdentityBytes+1))
-		f.Close()
-		if e != nil || len(b) > maxIdentityBytes || !json.Valid(b) {
-			return result, errors.New("invalid store")
-		}
-		store = b
-	} else if !errors.Is(err, fs.ErrNotExist) {
-		return result, err
-	}
-	nonce := make([]byte, 32)
-	if _, err = rand.Read(nonce); err != nil {
-		return result, err
-	}
-	input, err := json.Marshal(map[string]any{"packageID": cfg.PackageID, "store": store, "method": method, "cookie": cookie, "principal": principal, "ticket": hex.EncodeToString(nonce)})
-	if err != nil || len(input) > maxIdentityBytes {
-		return result, errors.New("identity input too large")
-	}
-	output, err := identityRun(ctx, cfg, input)
-	if err != nil || len(output) > maxIdentityBytes {
-		return result, errors.New("identity subprocess failed")
-	}
-	var response struct {
-		Store  json.RawMessage `json:"store"`
-		Result identityResult  `json:"result"`
-	}
-	if err = json.Unmarshal(output, &response); err != nil || len(response.Store) == 0 || !json.Valid(response.Store) {
-		return result, errors.New("invalid response")
-	}
-	tempName := ".store-" + hex.EncodeToString(nonce)
-	temp, err := dir.OpenFile(tempName, os.O_CREATE|os.O_EXCL|os.O_WRONLY|syscall.O_NOFOLLOW, 0600)
-	if err != nil {
-		return result, err
-	}
-	defer dir.Remove(tempName)
-	_, err = temp.Write(response.Store)
-	if err == nil {
-		err = temp.Sync()
-	}
-	closeErr := temp.Close()
-	if err != nil {
-		return result, err
-	}
-	if closeErr != nil {
-		return result, closeErr
-	}
-	if err = dir.Rename(tempName, "store.json"); err != nil {
-		return result, err
-	}
-	return response.Result, nil
-}