@synopackageland/cli 0.5.0 → 0.6.0

package/dist/standalone/worker-registry.js

@@ -1,167 +0,0 @@
-import { createHash } from "node:crypto";
-import { lstatSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-import { inertWorkerRegistry } from "./helper-inventory.js";
-import { WORKER_CONTRACT } from "./worker-contract.js";
-import { fail, strictJSON } from "./worker-contract-json.js";
-const actions = ["nas.files.list", "nas.files.stat", "nas.files.read", "nas.files.read-stream"];
-const modes = ["interactive", "background"];
-const checkpoints = ["before-step", "before-chunk", "before-result"];
-const ceilings = {
-    inputBytes: 8192, steps: 16, totalMs: 120000, idleMs: 10000, metadataMs: 5000,
-    boundedMs: 10000, boundedBytes: 1048576, streamBytes: 67108864, chunkBytes: 65536, outstandingLeases: 1,
-};
-const idPattern = /^[a-z][a-z0-9_]{0,31}$/;
-const digestPattern = /^[a-f0-9]{64}$/;
-const asciiCompare = (a, b) => a < b ? -1 : a > b ? 1 : 0;
-function object(value, required, optional = []) {
-    if (typeof value !== "object" || value === null || Array.isArray(value))
-        return fail();
-    const o = value;
-    if (required.some(k => !Object.hasOwn(o, k)) || Object.keys(o).some(k => !required.includes(k) && !optional.includes(k)))
-        fail();
-    return o;
-}
-function bounded(value, max, min = 1) {
-    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < min)
-        return fail();
-    if (value > max)
-        fail("limit-exceeded");
-    return value;
-}
-function digest(value) {
-    if (typeof value !== "string" || !digestPattern.test(value))
-        return fail();
-    return value;
-}
-function subset(value, allowed) {
-    if (!Array.isArray(value) || !value.length || new Set(value).size !== value.length || value.some(v => !allowed.includes(v)))
-        return fail();
-    return allowed.filter(v => value.includes(v));
-}
-function limits(value, partial) {
-    const keys = Object.keys(ceilings);
-    const raw = object(value, partial ? [] : keys, partial ? keys : []);
-    const result = { ...ceilings };
-    for (const k of keys)
-        if (Object.hasOwn(raw, k))
-            result[k] = bounded(raw[k], ceilings[k]);
-    if (result.idleMs > result.totalMs || result.metadataMs > result.totalMs || result.boundedMs > result.totalMs || result.chunkBytes > result.streamBytes)
-        fail();
-    return result;
-}
-/** Manifest metadata only; never accepts a source path or a caller-chosen digest. */
-export function parseSDKWorkers(value, inertIDs = []) {
-    if (typeof value !== "object" || value === null || Array.isArray(value))
-        return fail();
-    const entries = Object.entries(value);
-    if (!entries.length || entries.length + inertIDs.length > WORKER_CONTRACT.maxWorkers)
-        fail("limit-exceeded");
-    return Object.fromEntries(entries.sort(([a], [b]) => asciiCompare(a, b)).map(([id, value]) => {
-        if (!idPattern.test(id) || inertIDs.includes(id))
-            fail();
-        const o = object(value, ["kind", "workerRevision", "actions", "modes"], ["limits"]);
-        if (o.kind !== "sdk-read-plan")
-            fail("unsupported");
-        return [id, {
-                kind: "sdk-read-plan", workerRevision: bounded(o.workerRevision, Number.MAX_SAFE_INTEGER),
-                actions: subset(o.actions, actions), modes: subset(o.modes, modes),
-                limits: limits(Object.hasOwn(o, "limits") ? o.limits : {}, true),
-            }];
-    }));
-}
-/** Must match jobcontract/bindings.go; filenames and exact source bytes are bound. */
-export function sourceWorkerBindings(backend) {
-    const hash = (kind, names, root = "internal/helper/jobcontract", version = 1) => {
-        const h = createHash("sha256").update(`synopkgland/m3/${kind}/source-v${version}\0`);
-        for (const name of names) {
-            const path = join(backend, root, name);
-            if (!lstatSync(path).isFile() || lstatSync(path).size > 1048576)
-                fail();
-            for (const b of [Buffer.from(name), readFileSync(path)]) {
-                const size = Buffer.alloc(4);
-                size.writeUInt32BE(b.length);
-                h.update(size).update(b);
-            }
-        }
-        return h.digest("hex");
-    };
-    return {
-        handlerBinding: hash("handler", ["jobcontract/stub.go", "sdk_job_child_linux.go", "sdk_job_process_linux.go", "sdk_job.go", "sdk_attach.go", "sdk_rpc.go", "sdk_session.go", "sdk_session_contract.go"], "internal/helper", 2),
-        inputSchemaDigest: hash("input", ["decode.go", "digest.go", "types.go", "validate.go"]),
-        outputSchemaDigest: hash("result", ["decode.go", "result.go", "types.go", "validate.go"]),
-    };
-}
-export function buildWorkerRegistry(inert, sdkWorkers, backend) {
-    // Do not even read new SDK files for legacy projects (including old templates).
-    if (sdkWorkers === undefined)
-        return inertWorkerRegistry(inert);
-    const configs = parseSDKWorkers(sdkWorkers, inert.map(w => w.id));
-    const bindings = sourceWorkerBindings(backend);
-    const registry = {
-        registrySchema: 2, productionAvailability: "unavailable",
-        inert: inert.map(({ id, digest }) => ({ id, digest })).sort((a, b) => asciiCompare(a.id, b.id)),
-        sdk: Object.entries(configs).map(([workerId, c]) => ({
-            registrySchema: 2, workerId, workerRevision: c.workerRevision, kind: c.kind,
-            ...bindings, actions: c.actions, modes: c.modes, checkpoints: [...checkpoints], limits: c.limits,
-        })),
-    };
-    const raw = JSON.stringify(registry);
-    decodeSDKRegistry(raw);
-    return raw;
-}
-/** Structural/artifact inspection only; the compiled Go consumer checks source bindings. */
-export function decodeSDKRegistry(raw) {
-    const r = object(strictJSON(raw, WORKER_CONTRACT.maxArtifactBytes), ["registrySchema", "productionAvailability", "inert", "sdk"]);
-    if (r.registrySchema !== 2 || r.productionAvailability !== "unavailable")
-        fail("incompatible");
-    if (!Array.isArray(r.inert) || !Array.isArray(r.sdk) || !r.sdk.length || r.inert.length + r.sdk.length > WORKER_CONTRACT.maxWorkers)
-        return fail();
-    const ids = new Set();
-    let previous = "";
-    const id = (value) => {
-        if (typeof value !== "string" || !idPattern.test(value) || value <= previous || ids.has(value))
-            return fail();
-        previous = value;
-        ids.add(value);
-        return value;
-    };
-    const inert = r.inert.map(value => {
-        const w = object(value, ["id", "digest"]);
-        return { id: id(w.id), digest: digest(w.digest) };
-    });
-    previous = "";
-    const sdk = r.sdk.map(value => {
-        const w = object(value, ["registrySchema", "workerId", "workerRevision", "kind", "handlerBinding", "inputSchemaDigest", "outputSchemaDigest", "actions", "modes", "checkpoints", "limits"]);
-        if (w.registrySchema !== 2 || w.kind !== "sdk-read-plan")
-            fail("incompatible");
-        if (JSON.stringify(w.checkpoints) !== JSON.stringify(checkpoints))
-            fail();
-        return {
-            registrySchema: 2, workerId: id(w.workerId), workerRevision: bounded(w.workerRevision, Number.MAX_SAFE_INTEGER), kind: "sdk-read-plan",
-            handlerBinding: digest(w.handlerBinding), inputSchemaDigest: digest(w.inputSchemaDigest), outputSchemaDigest: digest(w.outputSchemaDigest),
-            actions: subset(w.actions, actions), modes: subset(w.modes, modes), checkpoints: [...checkpoints], limits: limits(w.limits, false),
-        };
-    });
-    const result = { registrySchema: 2, productionAvailability: "unavailable", inert, sdk };
-    // One byte representation is compiled and approved; no aliases or reordering.
-    if (JSON.stringify(result) !== (typeof raw === "string" ? raw : Buffer.from(raw).toString("utf8")))
-        fail();
-    return result;
-}
-const safeReasons = ["invalid-request", "incompatible", "unsupported", "replay", "stale", "expired", "denied", "unavailable", "suspended", "revoked", "fenced", "busy", "limit-exceeded", "canceled", "timeout", "partial", "commit-uncertain", "cleanup-required", "internal"];
-export function decodeWorkerResult(raw) {
-    const r = object(strictJSON(raw, WORKER_CONTRACT.maxProgressBytes), ["resultSchema", "completedSteps", "entries", "bytesRead"], ["safeReason"]);
-    if (r.resultSchema !== 1)
-        fail("incompatible");
-    const result = {
-        resultSchema: 1, completedSteps: bounded(r.completedSteps, 16, 0),
-        entries: bounded(r.entries, 3200, 0), bytesRead: bounded(r.bytesRead, 67108864, 0),
-    };
-    if (Object.hasOwn(r, "safeReason")) {
-        if (!safeReasons.includes(r.safeReason))
-            fail();
-        result.safeReason = r.safeReason;
-    }
-    return result;
-}

package/dist/templates/_shared/notice-overrides/index.json

@@ -1,14 +0,0 @@
-{
-  "@better-auth/utils@0.4.2": {
-    "integrity": "sha512-AUxrvu+HaaODsUyzDxFgwd/8RZ1yZaYo42LXKSrU2oGgR38pS1ij8nqQKNgtTWoYGpNevNXtCfgTy6loHveW9A==",
-    "file": "utils-0.4.2-LICENSE",
-    "source": "https://github.com/better-auth/utils/blob/ef522888b7b2ff77ca13f0afb476dfae8f297862/LICENSE",
-    "provenance": "Release manifests declare MIT but omit license text; retained upstream project license added in commit ef522888b7b2ff77ca13f0afb476dfae8f297862"
-  },
-  "@better-auth/utils@0.5.0": {
-    "integrity": "sha512-BL8W4EfIZFwlu0r54m3v1ztjDhu6dDe/amLTm0xybmbZaNgYUqhD3SjpAsnq0q8YD6/ki4iwIgxJNLP/N3TxiA==",
-    "file": "utils-0.5.0-LICENSE",
-    "source": "https://github.com/better-auth/utils/blob/ef522888b7b2ff77ca13f0afb476dfae8f297862/LICENSE",
-    "provenance": "Release manifests declare MIT but omit license text; retained upstream project license added in commit ef522888b7b2ff77ca13f0afb476dfae8f297862"
-  }
-}

package/dist/templates/_shared/notice-overrides/utils-0.4.2-LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2024 - present, Bereket Engida
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/dist/templates/_shared/notice-overrides/utils-0.5.0-LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2024 - present, Bereket Engida
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/dist/templates/binary/native.yaml

@@ -1,16 +0,0 @@
-schema: 1
-
-targets:
-  x86_64:
-    path: ./dist/app-x86_64.tar.gz
-    strip_components: 1
-  aarch64:
-    path: ./dist/app-aarch64.tar.gz
-    strip_components: 1
-
-service:
-  exec: bin/app
-  args:
-    - "-data=${SYNOPKG_PKGVAR}"
-  env:
-    TMPDIR: ${SYNOPKG_PKGVAR}/tmp

package/dist/templates/binary/synology-app.yaml

@@ -1,7 +0,0 @@
-schema: 1
-package: com.example.binary-app
-version: 0.1.0
-displayname: Binary App
-description: A minimal Syno Package Land app that runs one prebuilt binary.
-maintainer: Syno Package Land
-os_min_ver: "7.1-42661"

package/dist/templates/compose-import/compose.yaml

@@ -1,10 +0,0 @@
-services:
-  app:
-    image: hello-world:latest@sha256:5e23090353324d887c48ad5e5c56d294eab81588df9605b07d1afe895f9cc8f8
-    volumes:
-      - "${MEDIA_SHARE}:/media"
-      - "${BACKUP_SHARE}:/backup"
-      - "upstream_data:/var/lib/upstream"
-
-volumes:
-  upstream_data:

package/dist/templates/compose-import/synology-app.yaml

@@ -1,15 +0,0 @@
-schema: 1
-package: com.synology.compose.import
-version: 0.1.0
-displayname: Compose Import
-description: Start from an existing Compose file and select two Shared Folders at install time.
-maintainer: Syno Package Land
-os_min_ver: "7.2.1-69057"
-
-install:
-  MEDIA_SHARE:
-    type: shared_folder
-  BACKUP_SHARE:
-    type: shared_folder
-  RUN_AS:
-    type: dsm_user

package/dist/templates/hello-web/compose.yaml

@@ -1,24 +0,0 @@
-services:
-  web:
-    image: busybox:1.36@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662
-    # DSM worker constraints to preserve when changing this service:
-    # 1) command/entrypoint arrays must not contain bare numeric elements
-    #    (such as "18333"). DSM's docker-project worker drops the quotes on a
-    #    YAML round-trip and turns them into integers, so postinst acquire
-    #    fails (error 276 -> package broken/150, with an empty worker_msg that
-    #    tells the developer nothing). Keep the port inside one string.
-    #    `synopkgland validate` already rejects the bare form.
-    # 2) The default is not 8080: that port is often taken by an existing
-    #    container on a real NAS, and the conflict shows up as the same
-    #    unexplained broken/150.
-    # The official nginx image cannot be used either: the resource worker
-    # injects an arbitrary package UID/GID, and the nginx entrypoint needs
-    # root during startup, so it exits immediately under that identity.
-    command: ["sh","-c","httpd -f -p 18333 -h /usr/share/nginx/html"]
-    # Bound to loopback on purpose: the DSM-authenticated gateway generated by
-    # `synopkgland build-spk` is the only way in. A port on every interface would
-    # bypass DSM sign-in, and `synopkgland validate` rejects it.
-    ports:
-      - "127.0.0.1:18333:18333"
-    volumes:
-      - "./html:/usr/share/nginx/html:ro"

package/dist/templates/hello-web/html/app.js

@@ -1 +0,0 @@
-document.getElementById("status").textContent = "Your app is running.";

package/dist/templates/hello-web/html/index.html

@@ -1,13 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>Hello Web</title>
-  </head>
-  <body>
-    <h1>Hello Web</h1>
-    <p id="status">Loading…</p>
-    <script type="module" src="./app.js"></script>
-  </body>
-</html>

package/dist/templates/hello-web/synology-app.yaml

@@ -1,16 +0,0 @@
-schema: 1
-package: com.synology.hello.web
-version: 0.1.0
-displayname: Hello Web
-description: A minimal Syno Package Land web app template.
-maintainer: Syno Package Land
-os_min_ver: "7.2.1-69057"
-adminprotocol: http
-adminport: 18333
-adminurl: /
-integration:
-  web:
-    launch: dsm-window
-    # Who may open the app: dsm-users (any signed-in DSM user), dsm-admins,
-    # dsm-groups (with groups: [...]) or public (no DSM sign-in).
-    access: dsm-users

package/dist/templates/hello-web-page/compose.yaml

@@ -1,24 +0,0 @@
-services:
-  web:
-    image: busybox:1.36@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662
-    # DSM worker constraints to preserve when changing this service:
-    # 1) command/entrypoint arrays must not contain bare numeric elements
-    #    (such as "18333"). DSM's docker-project worker drops the quotes on a
-    #    YAML round-trip and turns them into integers, so postinst acquire
-    #    fails (error 276 -> package broken/150, with an empty worker_msg that
-    #    tells the developer nothing). Keep the port inside one string.
-    #    `synopkgland validate` already rejects the bare form.
-    # 2) The default is not 8080: that port is often taken by an existing
-    #    container on a real NAS, and the conflict shows up as the same
-    #    unexplained broken/150.
-    # The official nginx image cannot be used either: the resource worker
-    # injects an arbitrary package UID/GID, and the nginx entrypoint needs
-    # root during startup, so it exits immediately under that identity.
-    command: ["sh","-c","httpd -f -p 18333 -h /usr/share/nginx/html"]
-    # Bound to loopback on purpose: the DSM-authenticated gateway generated by
-    # `synopkgland build-spk` is the only way in. A port on every interface would
-    # bypass DSM sign-in, and `synopkgland validate` rejects it.
-    ports:
-      - "127.0.0.1:18333:18333"
-    volumes:
-      - "./html:/usr/share/nginx/html:ro"

package/dist/templates/hello-web-page/html/app.js

@@ -1 +0,0 @@
-document.getElementById("status").textContent = "Your app is running.";

package/dist/templates/hello-web-page/html/index.html

@@ -1,13 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>Hello Web Page</title>
-  </head>
-  <body>
-    <h1>Hello Web Page</h1>
-    <p id="status">Loading…</p>
-    <script type="module" src="./app.js"></script>
-  </body>
-</html>

package/dist/templates/hello-web-page/synology-app.yaml

@@ -1,16 +0,0 @@
-schema: 1
-package: com.synology.hello.web.page
-version: 0.1.0
-displayname: Hello Web Page
-description: A Syno Package Land web app template that opens in a new browser page.
-maintainer: Syno Package Land
-os_min_ver: "7.2.1-69057"
-adminprotocol: http
-adminport: 18333
-adminurl: /
-integration:
-  web:
-    launch: new-page
-    # Who may open the app: dsm-users (any signed-in DSM user), dsm-admins,
-    # dsm-groups (with groups: [...]) or public (no DSM sign-in).
-    access: dsm-users

package/dist/templates/native-go/backend/cmd/app/sdk_main.go

@@ -1,60 +0,0 @@
-//go:build synopkgland_sdk_workers
-
-// Command app is the package backend. DSM runs it as a CGI (ui/cgi/api.cgi in
-// the package) under the package account, once per request.
-package main
-
-import (
-	"encoding/json"
-	"fmt"
-	"log"
-	"net/http/cgi"
-	"os"
-
-	"dsmapp/internal/api"
-	"dsmapp/internal/app"
-	"dsmapp/internal/dsm"
-	"dsmapp/internal/filestation"
-	"dsmapp/internal/helper"
-)
-
-// Set by `synopkgland build-spk` through -ldflags -X; never read from a request.
-var (
-	packageID       = "dev"
-	version         = "0.0.0"
-	helperInventory = ""
-	// "session" when the project opted into the interactive File Station adapter.
-	fileStation = ""
-)
-
-func main() {
-	log.SetFlags(0)
-	log.SetPrefix(packageID + ": ")
-	if os.Getenv("GATEWAY_INTERFACE") == "" {
-		fmt.Fprintf(os.Stderr, "%s %s: this program runs as the package's DSM CGI; open the app from the DSM main menu.\n", packageID, version)
-		os.Exit(2)
-	}
-	cfg := app.Config{
-		PackageID: packageID,
-		Version:   version,
-		DataDir:   "/var/packages/" + packageID + "/var",
-	}
-	if helperInventory != "" {
-		if json.Unmarshal([]byte(helperInventory), &cfg.HelperInventory) != nil || cfg.HelperInventory.Package != packageID || cfg.HelperInventory.Version != version {
-			cfg.HelperInventory = helper.Inventory{Package: packageID}
-		}
-	}
-	if err := app.Migrate(cfg); err != nil {
-		log.Fatalf("schema migration failed: %v", err)
-	}
-	if app.SessionFilesEnabled(cfg.HelperInventory, fileStation) {
-		cfg.SessionFiles = filestation.Local(cfg.DataDir)
-	}
-	srv, err := api.NewServer(dsm.NewAuthenticator(), app.Routes(cfg)...)
-	if err != nil {
-		log.Fatal(err)
-	}
-	if err := cgi.Serve(app.SDKHandler(srv)); err != nil {
-		log.Fatal(err)
-	}
-}

package/dist/templates/native-go/backend/cmd/dsm-readonly-probe/main_linux.go

@@ -1,46 +0,0 @@
-// A standalone evidence-only static probe. No helper activation or mutation.
-package main
-
-import (
-	"context"
-	"dsmapp/internal/dsmprobe"
-	"encoding/json"
-	"golang.org/x/sys/unix"
-	"io"
-	"os"
-	"runtime"
-	"time"
-)
-
-func main() {
-	if len(os.Args) != 2 || os.Args[1] != "--wire-v1" {
-		os.Exit(2)
-	}
-	// Watchdog owns this bounded observation; no children or services are created.
-	go func() { time.Sleep(8 * time.Second); os.Exit(124) }()
-	runtime.LockOSThread()
-	if unix.Prctl(unix.PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) != nil || unix.Prctl(unix.PR_SET_DUMPABLE, 0, 0, 0, 0) != nil {
-		os.Exit(3)
-	}
-	data, e := io.ReadAll(io.LimitReader(os.Stdin, dsmprobe.MaxRequestBytes+1))
-	if e != nil {
-		os.Exit(2)
-	}
-	request, e := dsmprobe.DecodeRequest(data)
-	if e != nil {
-		os.Exit(2)
-	}
-	ctx, cancel := context.WithTimeout(context.Background(), 7*time.Second)
-	defer cancel()
-	out, e := dsmprobe.Collect(ctx, request)
-	if e != nil {
-		out.Status = "unsupported"
-	}
-	data, e = json.Marshal(out)
-	if e != nil || len(data) > dsmprobe.MaxResponseBytes {
-		os.Exit(3)
-	}
-	if _, e = os.Stdout.Write(append(data, '\n')); e != nil {
-		os.Exit(3)
-	}
-}

package/dist/templates/native-go/backend/cmd/helper/main.go

@@ -1,47 +0,0 @@
-// Built only when dsm-package.yaml explicitly opts into integration.
-package main
-
-import (
-	"context"
-	"dsmapp/internal/helper"
-	"encoding/json"
-	"fmt"
-	"os"
-)
-
-var helperInventory string
-
-func main() {
-	var i helper.Inventory
-	if len(os.Args) != 2 || json.Unmarshal([]byte(helperInventory), &i) != nil {
-		os.Exit(2)
-	}
-	if os.Args[1] == "check-stopped" || os.Args[1] == "diagnose" || os.Args[1] == "diagnose-startup" {
-		c, err := helper.LocalClient(i)
-		if err != nil {
-			os.Exit(1)
-		}
-		if os.Args[1] == "diagnose-startup" {
-			diagnostic, err := c.StartupDiagnostic()
-			if err != nil {
-				fmt.Fprintln(os.Stderr, "startup diagnostic unavailable")
-				os.Exit(1)
-			}
-			json.NewEncoder(os.Stdout).Encode(diagnostic)
-			return
-		}
-		if os.Args[1] == "diagnose" {
-			json.NewEncoder(os.Stdout).Encode(c.Status(context.Background()))
-			return
-		}
-		if c.CheckStopped(context.Background()) != nil {
-			os.Exit(1)
-		}
-		return
-	}
-	if err := helper.RunLinux(i, os.Args[1]); err != nil {
-		fmt.Fprintln(os.Stderr, "helper lifecycle refused")
-		os.Exit(1)
-	}
-	fmt.Println(`{"success":true}`)
-}

package/dist/templates/native-go/backend/cmd/helper/sdk_registry.go

@@ -1,19 +0,0 @@
-//go:build synopkgland_sdk_workers
-
-package main
-
-import (
-	"dsmapp/internal/helper"
-	"encoding/json"
-	"os"
-)
-
-// Linker-bound source-validated registry, never package-writable JSON.
-var sdkWorkerRegistry string
-
-func init() {
-	var inventory helper.Inventory
-	if json.Unmarshal([]byte(helperInventory), &inventory) != nil || helper.InstallSDKRegistry(inventory, sdkWorkerRegistry) != "" {
-		os.Exit(2)
-	}
-}