@synopackageland/cli 0.5.3 → 0.6.0

package/templates/native-go-vue/frontend/src/nas/mock-provider.ts

@@ -1,119 +0,0 @@
-import {readActions, type DiscoveryAnchor, type FolderEntry, type GrantView, type NasProvider, type PickerContext, type PreparedIntent, type SafeCode, type ScopeKind} from './provider'
-
-// In-memory fixtures only. This does NOT validate DSM identity/ACL, implement
-// durable R/Q, issue protocol-2 tickets or connect a helper. Never use as auth.
-type Subject = 'admin' | 'normal1' | 'normal2'
-type Binding = {subject: Subject; session: number; epoch: number}
-type Browse = Binding & PickerContext & {canceled: boolean}
-type Candidate = Binding & FolderEntry & {contextId: string; scopeKind: ScopeKind; location: string; depth: number}
-type Intent = Binding & PreparedIntent & {candidateId: string; consumed: boolean}
-type Record = {owner: Subject; view: GrantView}
-function opaque() {return Array.from(crypto.getRandomValues(new Uint8Array(32)), b=>b.toString(16).padStart(2,'0')).join('')}
-function fail(code:SafeCode):never {throw {code}}
-function aborted(signal:AbortSignal) {if(signal.aborted) fail('canceled')}
-const clone = <T>(value:T):T => JSON.parse(JSON.stringify(value))
-
-export function createMockNasService(options:{now?:()=>number; drained?:boolean; appName?:string; pageSize?:number; homeAvailable?:boolean; personalFolders?:readonly string[]} = {}) {
- const now=options.now ?? Date.now
- const subjects = new Map<Subject, {session:number; admin:boolean}>([['admin',{session:1,admin:true}],['normal1',{session:1,admin:false}],['normal2',{session:1,admin:false}]])
- const contexts=new Map<string,Browse>(), candidates=new Map<string,Candidate>(), intents=new Map<string,Intent>(), records=new Map<string,Record>()
- const cursors=new Map<string,Binding & {contextId:string; nodeId?:string; offset:number}>()
- // References have S1's shape but are synthetic fixtures, not native proofs.
- const principals = new Map([...subjects.keys()].map(subject=>[subject,{kind:'local' as const,subjectRef:opaque(),instanceRef:opaque()}]))
- const epoch={value:1}
- function connect(subject:Subject):NasProvider {
-  const actor=()=>subjects.get(subject)!
-  const binding=():Binding=>({subject,session:actor().session,epoch:epoch.value})
-  function check(b:Binding) {
-   if(b.subject!==subject) fail('denied')
-   if(b.session!==actor().session || b.epoch!==epoch.value) fail('stale')
-  }
-  function browse(id:string) {
-   const ctx=contexts.get(id); if(!ctx) fail('denied'); check(ctx)
-   if(ctx.canceled) fail('canceled')
-   if(now()>=ctx.expiresAt) fail('expired')
-   if(ctx.scopeKind==='app-shared' && !actor().admin) fail('denied')
-   return ctx
-  }
-  function candidate(id:string) {
-   const node=candidates.get(id); if(!node) fail('denied'); check(node); browse(node.contextId)
-   return node
-  }
-  function entry(ctx:Browse, displayName:string, depth:number, parent?:Candidate):Candidate {
-   const node:Candidate={...binding(),contextId:ctx.contextId,scopeKind:ctx.scopeKind,nodeId:opaque(),displayName,targetKind:'directory',selectable:true,depth,location:parent?`${parent.location} / ${displayName}`:`${ctx.scopeKind==='user-personal'?'My home':'Shared folders'} / ${displayName}`}
-   candidates.set(node.nodeId,node); return node
-  }
-  const visible=()=>[...records.values()].filter(r=>r.owner===subject || r.view.scopeKind==='app-shared').map(r=>({...clone(r.view),canRevoke:r.view.scopeKind==='app-shared'?actor().admin:r.owner===subject}))
-  const provider:NasProvider = {
-   mode:'mock',
-   async begin(scopeKind,signal) {
-    aborted(signal)
-    if(!['user-personal','app-shared'].includes(scopeKind)) fail('invalid-request')
-    if(scopeKind==='app-shared' && !actor().admin) fail('denied')
-    if(scopeKind==='user-personal' && options.homeAvailable===false) fail('unavailable')
-    // Bound retained fixtures; never evict unexpired replay/intent state.
-    if(contexts.size>=256) fail('limit-exceeded')
-    const ctx:Browse={...binding(),contextId:opaque(),scopeKind,expiresAt:now()+60_000,canceled:false}
-    contexts.set(ctx.contextId,ctx)
-    return {contextId:ctx.contextId,scopeKind,expiresAt:ctx.expiresAt}
-   },
-   async list(contextId,nodeId,cursor,signal) {
-    aborted(signal); const ctx=browse(contextId), parent=nodeId?candidate(nodeId):undefined
-    if(parent && parent.contextId!==contextId) fail('denied')
-    let offset=0
-    if(cursor) {
-     const c=cursors.get(cursor); if(!c) fail('denied'); check(c)
-     if(c.contextId!==contextId || c.nodeId!==nodeId) fail('denied'); offset=c.offset
-    }
-    // Own home never returns a selectable home root. Only subdirectories do.
-    // Shared discovery first supplies S1 anchor metadata; no absolute paths.
-    const anchors:DiscoveryAnchor[]=[{ref:opaque(),displayName:'Team documents',kind:ctx.scopeKind,owner:principals.get(subject)!,localFilesystem:true}]
-    const names=parent?(parent.displayName==='Empty folder' || parent.depth>=2?[]:['Reports']):(ctx.scopeKind==='user-personal'?(options.personalFolders ?? ['Projects','Empty folder']):anchors.map(a=>a.displayName))
-    const size=Math.max(1,Math.min(200,options.pageSize ?? 200)), slice=names.slice(offset,offset+size)
-    const entries=slice.map(name=>{
-     const n=entry(ctx,name,(parent?.depth ?? 0)+1,parent)
-     return {nodeId:n.nodeId,displayName:n.displayName,targetKind:n.targetKind,selectable:n.selectable}
-    })
-    let nextCursor:string|undefined
-    if(offset+size<names.length) {nextCursor=opaque();cursors.set(nextCursor,{...binding(),contextId,nodeId,offset:offset+size})}
-    return {entries,nextCursor}
-   },
-   async prepare(candidateId,signal) {
-    aborted(signal);const node=candidate(candidateId)
-    if(!node.selectable) fail('denied')
-    if([...intents.values()].filter(i=>i.subject===subject && !i.consumed && i.expiresAt>now() && !contexts.get(candidates.get(i.candidateId)!.contextId)!.canceled).length>=8) fail('limit-exceeded')
-    const intent:Intent={...binding(),intentId:opaque(),candidateId,consumed:false,summaryDigest:opaque(),expiresAt:now()+30_000,summary:{appName:options.appName ?? 'Mock package',scopeKind:node.scopeKind,displayName:node.location,targetKind:'directory',actions:[...readActions],persistent:true}}
-    // Synthetic digest-shaped token bound to this immutable fixture summary;
-    // the real S3 adapter must supply its actual exact-summary digest.
-    intents.set(intent.intentId,intent);return clone({intentId:intent.intentId,summaryDigest:intent.summaryDigest,expiresAt:intent.expiresAt,summary:intent.summary})
-   },
-   async confirm(intentId,summaryDigest,signal) {
-    aborted(signal);const intent=intents.get(intentId);if(!intent) fail('denied');check(intent)
-    if(intent.consumed) fail('replay')
-    if(now()>=intent.expiresAt) fail('expired')
-    if(summaryDigest!==intent.summaryDigest) fail('stale')
-    const node=candidate(intent.candidateId)
-    if(node.scopeKind==='app-shared' && !actor().admin) fail('denied')
-    if(records.size>=256) fail('limit-exceeded')
-    intent.consumed=true
-    const view:GrantView={grantId:opaque(),revision:1,scopeKind:node.scopeKind,displayName:node.location,targetKind:'directory',actions:[...readActions],effectiveState:'active',createdAt:now(),canRevoke:true}
-    records.set(view.grantId,{owner:subject,view});return clone(view)
-   },
-   async cancel(contextId) {
-    const ctx=contexts.get(contextId);if(!ctx) return;check(ctx);ctx.canceled=true
-   },
-   async grants(signal) {aborted(signal);return visible()},
-   async settings(signal) {aborted(signal);return {items:visible(),canManageShared:actor().admin}},
-   async revoke(grantId,revision,signal) {
-    aborted(signal);const record=records.get(grantId);if(!record) fail('denied')
-    if(record.view.scopeKind==='app-shared'?!actor().admin:record.owner!==subject) fail('denied')
-    if(record.view.revision!==revision) fail('stale')
-    if(record.view.effectiveState!=='revoked') {record.view.revision++;record.view.effectiveState='revoked'}
-    record.view.drained=options.drained ?? true
-    return {grantId,grantRevision:record.view.revision,revoked:true,drained:record.view.drained}
-   },
-  }
-  return provider
- }
- return {connect,setAdmin(subject:Subject,admin:boolean){subjects.get(subject)!.admin=admin},invalidate(subject:Subject){subjects.get(subject)!.session++},newEpoch(){epoch.value++;for(const r of records.values()) if(r.view.effectiveState==='active') r.view.effectiveState='suspended'}}
-}

package/templates/native-go-vue/frontend/src/nas/use-m2-request.ts

@@ -1,18 +0,0 @@
-import {onBeforeUnmount,ref} from 'vue'
-
-// The provider owns the 22 s bound (backend handlers are bounded to 20 s).
-// Local cancellation suppresses late display updates, never promises rollback.
-export function useM2Request(){
- const busy=ref(false),error=ref<unknown>()
- let disposed=false,generation=0,active:AbortController|undefined
- function cancel(){generation++;active?.abort();active=undefined;busy.value=false;error.value=undefined}
- async function run<T>(fn:(signal:AbortSignal)=>Promise<T>):Promise<T|undefined>{
-  if(disposed||busy.value)return
-  const version=++generation,controller=new AbortController();active=controller;busy.value=true;error.value=undefined
-  try{const value=await fn(controller.signal);return !disposed&&version===generation?value:undefined}
-  catch(e){if(!disposed&&version===generation)error.value=e;return undefined}
-  finally{if(!disposed&&version===generation){busy.value=false;active=undefined}}
- }
- onBeforeUnmount(()=>{disposed=true;cancel()})
- return {busy,error,run,cancel}
-}

package/templates/native-go-vue/frontend/src/sdk-main.ts

@@ -1,39 +0,0 @@
-import {createApp} from 'vue'
-import App from './SDKApp.vue'
-import {JobsProviderKey,JobsAdminProviderKey} from './jobs/provider'
-import {createConnectedJobsProvider,createConnectedJobsAdminProvider} from './jobs/connected-provider'
-import type {Context} from './context'
-import {NasProviderKey, type NasProvider} from './nas/provider'
-import {M2ProviderKey} from './nas/m2-contract'
-import {createM2Provider} from './nas/m2-provider'
-import '@synopackageland/ui/themes/dsm7-embedded.css'
-import './style.css'
-import './m2-style.css'
-
-let mountSequence = 0
-export function mount(root: HTMLElement, ctx: Context, options: {nasProvider?: NasProvider} = {}) {
- const app = createApp(App, {ctx})
- const jobs=createConnectedJobsProvider(ctx)
- const selections=createM2Provider(ctx)
- app.provide(M2ProviderKey,selections)
- app.provide(JobsProviderKey,jobs)
- app.provide(JobsAdminProviderKey,createConnectedJobsAdminProvider(ctx))
- // The shipped strict-S1 build never installs a NAS provider. Preview is dev/mock only.
- if(import.meta.env.DEV && options.nasProvider?.mode === 'mock') app.provide(NasProviderKey, options.nasProvider)
- // Include the generated package ID, an instance counter and randomness even
- // across separately loaded bundles. getRandomValues also works on DSM HTTP.
- app.config.idPrefix = `__PACKAGE__-${++mountSequence}-${crypto.getRandomValues(new Uint32Array(4)).join('-')}`
- const hadRootClass = root.classList.contains('dsmapp-vue-root')
- root.classList.add('dsmapp-vue-root')
- app.mount(root)
- return {unmount() {app.unmount(); jobs.disconnect(); selections.dispose(); if(!hadRootClass) root.classList.remove('dsmapp-vue-root')}}
-}
-// Register with the existing per-package DSM window loader. Never share a
-// singleton app or user/session state between different mount calls.
-const script = document.currentScript as HTMLScriptElement | null
-const packageID = script?.getAttribute('data-package')
-const host = window as unknown as {DsmPackageApps: Record<string, {mount: typeof mount}>}
-if (packageID) {
- host.DsmPackageApps = host.DsmPackageApps || {}
- host.DsmPackageApps[packageID] = {mount}
-}

package/templates/native-go-vue/frontend/test/jobs-connected.test.ts

@@ -1,163 +0,0 @@
-// @vitest-environment jsdom
-import {afterEach,expect,test,vi} from 'vitest'
-import {createConnectedJobsProvider,ATTACH_RENEW_MS,ATTACH_TTL_MS} from '../src/jobs/connected-provider'
-const id=(c:string)=>c.repeat(64)
-const signal=()=>new AbortController().signal
-const rawPage=()=>({revision:1,items:[{jobId:id('a'),revision:1,mode:'interactive',state:'running',progress:{completedUnits:0,totalUnits:1},drained:false,effectsUnknown:false}]})
-afterEach(()=>vi.useRealTimers())
-test('connected provider renews root-issued lease, never resubmits, and cancels best effort on pagehide',async()=>{
- vi.useFakeTimers()
- const call=vi.fn(async(method:string)=>{
-  if(method==='jobs.prepare')return {intentId:id('b'),jobId:id('a'),summaryDigest:id('c'),expiresAt:Date.now()+30000}
-  if(method==='jobs.submit')return {jobId:id('a'),attachId:id('d'),renewAfterMs:2000,ttlMs:6000,revision:1}
-  if(method==='jobs.status')return rawPage()
-  return {}
- })
- const p=createConnectedJobsProvider({call:call as any})
- const prepared=await p.prepareInteractive(signal(),{id:'scan',revision:1},{id:id('e'),revision:1},{steps:[{action:'nas.files.stat',segments:['fixture']}]})
- await p.submitInteractive(prepared,signal())
- expect(p.mode).toBe('connected');expect(p.readiness.background).toBe('unavailable')
- await vi.advanceTimersByTimeAsync(2000)
- expect(call.mock.calls.filter(([m])=>m==='jobs.attach')).toHaveLength(1)
- window.dispatchEvent(new Event('pagehide'));await Promise.resolve()
- expect(call.mock.calls.some(([m])=>m==='jobs.cancel')).toBe(true)
- await vi.advanceTimersByTimeAsync(12000)
- expect(call.mock.calls.filter(([m])=>m==='jobs.attach')).toHaveLength(1)
- expect(call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(1)
- expect(ATTACH_RENEW_MS).toBe(2000);expect(ATTACH_TTL_MS).toBe(6000)
- p.disconnect()
-})
-test('a throttled or failed renewal does not extend the client deadline or retry submit',async()=>{
- vi.useFakeTimers()
- const call=vi.fn(async(method:string)=>{
-  if(method==='jobs.submit')return {jobId:id('a'),attachId:id('d'),renewAfterMs:2000,ttlMs:6000,revision:1}
-  if(method==='jobs.attach')throw {code:'expired'}
-  return rawPage()
- })
- const p=createConnectedJobsProvider({call:call as any})
- await p.submitInteractive({intentId:id('b'),jobId:id('a'),summaryDigest:id('c'),expiresAt:Date.now()+30000},signal())
- await vi.advanceTimersByTimeAsync(10000)
- expect(call.mock.calls.filter(([m])=>m==='jobs.attach')).toHaveLength(1)
- expect(call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(1)
- p.disconnect()
-})
-test('late submit callback after unmount never installs a renewal timer',async()=>{
- vi.useFakeTimers()
- let done!:(x:unknown)=>void
- const call=vi.fn(()=>new Promise(r=>done=r))
- const p=createConnectedJobsProvider({call:call as any})
- const pending=p.submitInteractive({intentId:id('b'),jobId:id('a'),summaryDigest:id('c'),expiresAt:Date.now()+30000},signal())
- p.disconnect()
- done({jobId:id('a'),attachId:id('d'),renewAfterMs:2000,ttlMs:6000,revision:1})
- await expect(pending).rejects.toMatchObject({code:'canceled'})
- await vi.advanceTimersByTimeAsync(10000)
- expect(call.mock.calls).toHaveLength(1)
-})
-test('background controls stay unavailable; projection strips private unexpected fields',async()=>{
- const call=vi.fn(async()=>({...rawPage(),token:'secret'}))
- const p=createConnectedJobsProvider({call:call as any})
- await expect(p.prepare(signal())).rejects.toMatchObject({code:'unavailable'})
- const page=await p.list(signal());expect(JSON.stringify(page)).not.toContain('secret')
- p.disconnect()
-})
-
-test('interactive readiness requires the live session mode response',async()=>{
- let available=false
- const p=createConnectedJobsProvider({call:vi.fn(async()=>({revision:1,items:[],...(available?{availability:'session-required'}:{})})) as never})
- expect(p.readiness.interactive).toBe('unavailable')
- await p.list(signal());expect(p.readiness.interactive).toBe('unavailable')
- available=true
- await p.list(signal());expect(p.readiness.interactive).toBe('ready')
- expect(p.readiness.background).toBe('unavailable')
- p.disconnect();expect(p.readiness.interactive).toBe('unavailable')
-})
-
- test('revalidating sticks through unrelated failures until a valid ready status, and keeps safe reason',async()=>{
- let mode='revalidating'
- const p=createConnectedJobsProvider({call:(async()=>{
-  if(mode!=='ready')throw {code:mode}
-  return {...rawPage(),availability:'session-required',items:[{...rawPage().items[0],state:'canceled',safeReason:'fenced',secret:'CANARY'}]}
- }) as any})
- await expect(p.list(signal())).rejects.toMatchObject({code:'revalidating'})
- expect(p.readiness.interactive).toBe('revalidating')
- mode='timeout';await expect(p.list(signal())).rejects.toMatchObject({code:'timeout'})
- expect(p.readiness.interactive).toBe('revalidating')
- mode='ready';const page=await p.list(signal())
- expect(p.readiness.interactive).toBe('ready');expect(page.items[0].safeReason).toBe('fenced')
- expect(JSON.stringify(page)).not.toContain('CANARY');p.disconnect()
- })
- test('explicit resubmission uses a snapshot and fresh intent/id, never retries a lost submit reply',async()=>{
- let number=0,lost=false
- const calls:any[]=[]
- const call=vi.fn(async(method:string,args:any)=>{
-  calls.push([method,args])
-  if(method==='jobs.prepare'){number++;return {intentId:id(String(number)),jobId:id(String(number+2)),summaryDigest:id('c'),expiresAt:Date.now()+30000}}
-  if(method==='jobs.submit'){if(lost)throw {code:'timeout'};return {jobId:id(String(number+2)),attachId:id('d'),renewAfterMs:2000,ttlMs:6000,revision:1}}
-  if(method==='jobs.status')return {revision:2,availability:'session-required',items:[{...rawPage().items[0],jobId:id('3'),state:'canceled',safeReason:'fenced'}]}
-  return {}
- })
- const p=createConnectedJobsProvider({call:call as any})
- const input={steps:[{action:'nas.files.stat',segments:['fixture']}]}
- const prepared=await p.prepareInteractive(signal(),{id:'scan',revision:1},{id:id('e'),revision:1},input)
- await p.submitInteractive(prepared,signal());input.steps[0].segments[0]='changed'
- await p.list(signal());expect(p.canResubmit?.(id('3'))).toBe(true)
- expect(calls.filter(([m])=>m==='jobs.submit')).toHaveLength(1)
- lost=true;await expect(p.resubmit?.(id('3'),signal())).rejects.toMatchObject({code:'timeout'})
- expect(calls.filter(([m])=>m==='jobs.prepare')[1][1].input.steps[0].segments).toEqual(['fixture'])
- expect(calls.filter(([m])=>m==='jobs.submit')[1][1].intentId).toBe(id('2'))
- expect(p.canResubmit?.(id('3'))).toBe(false)
- await expect(p.resubmit?.(id('3'),signal())).rejects.toMatchObject({code:'unavailable'})
- expect(calls.filter(([m])=>m==='jobs.submit')).toHaveLength(2)
- p.disconnect()
- })
-
-test('successful resubmit makes a distinct job and is unavailable for other reasons or after disconnect',async()=>{
- let number=0,reason='fenced'
- const call=vi.fn(async(method:string)=>{
-  if(method==='jobs.prepare'){number++;return {intentId:id(String(number)),jobId:id(String(number+2)),summaryDigest:id('c'),expiresAt:Date.now()+30000}}
-  if(method==='jobs.submit')return {jobId:id(String(number+2)),attachId:id('d'),renewAfterMs:2000,ttlMs:6000,revision:1}
-  if(method==='jobs.status')return {revision:2,availability:'session-required',items:[{...rawPage().items[0],jobId:id('3'),state:'canceled',safeReason:reason}]}
-  return {}
- })
- const p=createConnectedJobsProvider({call:call as any})
- const prepared=await p.prepareInteractive(signal(),{id:'scan',revision:1},{id:id('e'),revision:1},{steps:[{action:'nas.files.stat',segments:['fixture']}]})
- await p.submitInteractive(prepared,signal())
- reason='expired';await p.list(signal());expect(p.canResubmit?.(id('3'))).toBe(false)
- reason='fenced';await p.list(signal())
- const result=await p.resubmit!(id('3'),signal());expect(result.jobId).toBe(id('4'))
- expect(result.jobId).not.toBe(prepared.jobId);expect(p.canResubmit?.(id('3'))).toBe(false)
- expect(p.resubmissionState?.(id('3'))).toBe('submitted')
- expect(call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(2)
- p.disconnect();expect(p.canResubmit?.(id('3'))).toBe(false)
-})
-
-test('lost resubmit reply uses only lookup of the fresh intent, even when lookup itself is refused',async()=>{
- let number=0,lookupRefused=true
- const call=vi.fn(async(method:string,args:any)=>{
-  if(method==='jobs.prepare'){number++;return {intentId:id(String(number)),jobId:id(String(number+2)),summaryDigest:id('c'),expiresAt:Date.now()+30000}}
-  if(method==='jobs.submit'){if(number===2)throw {code:'timeout'};return {jobId:id('3'),attachId:id('d'),renewAfterMs:2000,ttlMs:6000,revision:1}}
-  if(method==='jobs.lookup'){expect(args.intentId).toBe(id('2'));if(lookupRefused)throw {code:'denied'};return {...rawPage().items[0],jobId:id('4')}}
-  if(method==='jobs.status')return {revision:2,availability:'session-required',items:[{...rawPage().items[0],jobId:id('3'),state:'canceled',safeReason:'fenced'}]}
-  return {}
- })
- const p=createConnectedJobsProvider({call:call as any})
- const prepared=await p.prepareInteractive(signal(),{id:'scan',revision:1},{id:id('e'),revision:1},{steps:[{action:'nas.files.stat',segments:['fixture']}]})
- await p.submitInteractive(prepared,signal());await p.list(signal())
- await expect(p.resubmit!(id('3'),signal())).rejects.toMatchObject({code:'timeout'})
- expect(p.resubmissionState?.(id('3'))).toBe('uncertain')
- await expect(p.lookupResubmission!(id('3'),signal())).rejects.toMatchObject({code:'denied'})
- expect(p.resubmissionState?.(id('3'))).toBe('uncertain');expect(p.canResubmit?.(id('3'))).toBe(false)
- lookupRefused=false
- expect(await p.lookupResubmission!(id('3'),signal())).toEqual({jobId:id('4')})
- expect(p.resubmissionState?.(id('3'))).toBe('submitted')
- expect(call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(2)
- p.disconnect()
-})
-
- test('live worker projection validates limits and drops private authority metadata',async()=>{
- let workers:any=[{id:'inspect',revision:7,actions:['nas.files.read'],maxBytes:4096,handlerBinding:'CANARY'}]
- const p=createConnectedJobsProvider({call:(async()=>({revision:1,items:[],availability:'session-required',workers})) as any})
- await p.list(signal());expect(p.interactive.workers).toEqual([{id:'inspect',revision:7,actions:['nas.files.read'],maxBytes:4096}])
- for(const invalid of [[{...workers[0],maxBytes:524289}],[{...workers[0],actions:['nas.files.write']}],[workers[0],workers[0]],null]){workers=invalid;await expect(p.list(signal())).rejects.toMatchObject({code:'invalid-request'})}
- p.disconnect();expect(p.interactive.workers).toEqual([])
- })

package/templates/native-go-vue/frontend/test/jobs-preview.html

@@ -1,22 +0,0 @@
-<!doctype html>
-<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>S5 local mock fixture</title>
-<style>body{margin:0;background:#f3f5f7}main{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,28rem),1fr));gap:24px;padding:24px}.preview{padding:20px;background:white;min-width:0}.preview h1{font:600 18px system-ui;margin:0 0 20px}</style></head>
-<body><main><section class="preview"><h1>Owner one · mock</h1><div id="owner-one"></div></section><section class="preview"><h1>Owner two · mock</h1><div id="owner-two"></div></section><section class="preview"><h1>Administrator · redacted mock</h1><div id="admin"></div></section><section class="preview"><h1>Production · unavailable</h1><div id="unavailable"></div></section></main>
-<script type="module">
-import {createApp,h} from 'vue'
-import {AppRoot} from '@synopackageland/ui'
-import '@synopackageland/ui/themes/dsm7-embedded.css'
-import '../src/style.css'
-import JobsPanel from '../src/jobs/JobsPanel.vue'
-import JobsAdminPanel from '../src/jobs/JobsAdminPanel.vue'
-import {JobsProviderKey,JobsAdminProviderKey} from '../src/jobs/provider'
-import {createMockJobsService,unavailableJobsProvider} from '../src/jobs/mock-provider'
-if(!import.meta.env.DEV)throw new Error('Mock fixture is development only')
-const service=createMockJobsService(),one=service.connect('one'),two=service.connect('two')
-function mount(id,component,key,provider){const app=createApp({render:()=>h(AppRoot,{},()=>h(component,{locale:'en'}))});app.config.idPrefix=id;app.provide(key,provider);app.mount('#'+id);return app}
-const first=mount('owner-one',JobsPanel,JobsProviderKey,one)
-mount('owner-two',JobsPanel,JobsProviderKey,two)
-mount('admin',JobsAdminPanel,JobsAdminProviderKey,service.connectAdmin())
-mount('unavailable',JobsPanel,JobsProviderKey,unavailableJobsProvider)
-window.s5Preview={unmountFirst(){first.unmount()},async states(){return (await one.list(new AbortController().signal)).items}}
-</script></body></html>

package/templates/native-go-vue/frontend/test/jobs.test.ts

@@ -1,176 +0,0 @@
-// @vitest-environment jsdom
-import {test,expect,vi} from 'vitest'
-import {createApp,h,nextTick} from 'vue'
-import {AppRoot} from '@synopackageland/ui'
-import JobsPanel from '../src/jobs/JobsPanel.vue'
-import {createMockJobsService,unavailableJobsProvider} from '../src/jobs/mock-provider'
-import {JobsProviderKey,type JobsProvider} from '../src/jobs/provider'
-import {jobCatalogs,jobCopy} from '../src/jobs/i18n'
-async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
-function mount(provider:JobsProvider,locale='en'){
- const root=document.createElement('div');document.body.append(root)
- const app=createApp({render:()=>h(AppRoot,{},()=>h(JobsPanel,{locale}))})
- app.config.idPrefix=`jobs-${Math.random()}`;app.provide(JobsProviderKey,provider);app.mount(root)
- return {root,close(){app.unmount();root.remove()}}
-}
-function click(root:HTMLElement,text:string){const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text)!;expect(b).toBeTruthy();b.click()}
-test('unavailable is visible and contains no action that pretends to work',async()=>{
- const f=mount(unavailableJobsProvider);await settle();expect(f.root.textContent).toContain(jobCopy('en').unavailable);expect(f.root.querySelector('button')).toBeNull();f.close()
-})
-test('two AppRoots, explicit server consent, lost confirm reply, close modes and nine locales',async()=>{
- for(const locale of Object.keys(jobCatalogs)){
-  const s=createMockJobsService(),a=s.connect('one'),b=s.connect('two'),f=mount(a,locale),g=mount(b,locale),copy=jobCopy(locale)
-  await settle();expect(f.root.textContent).toContain(copy.interactiveHelp)
-  click(f.root,copy.prepare);await settle();expect(g.root.textContent).not.toContain('Mock App')
-  const consent=f.root.querySelector<HTMLElement>('[role=checkbox]')!;consent.focus();expect(document.activeElement).toBe(consent)
-  expect([...f.root.querySelectorAll('button')].find(x=>x.textContent===copy.confirm)?.disabled).toBe(true)
-  consent.click();await settle();s.loseConfirmReply=true;click(f.root,copy.confirm);await settle()
-  expect(s.confirmCount).toBe(1);expect(f.root.textContent).toContain(copy.uncertain)
-  click(f.root,copy.lookup);await settle();expect(s.confirmCount).toBe(1)
-  const jobs=await a.list(new AbortController().signal);expect(jobs.items.some(j=>j.mode==='background')).toBe(true)
-  f.close();g.close();const after=await a.list(new AbortController().signal)
-  expect(after.items.find(j=>j.mode==='interactive')?.state).toBe('canceled');expect(after.items.find(j=>j.mode==='background')?.state).toBe('pending')
-  expect(Object.keys(copy).sort()).toEqual(Object.keys(jobCatalogs.en).sort())
- }
-})
-test('late prepare callback cannot restore closed consent or issue confirm',async()=>{
- const s=createMockJobsService(),p=s.connect('one');let release!:(x:any)=>void
- const summary=await p.prepare(new AbortController().signal)
- p.prepare=()=>new Promise(r=>release=r);const confirm=vi.spyOn(p,'confirm'),f=mount(p);await settle();click(f.root,jobCopy('en').prepare);await settle();f.close();release(summary);await settle();expect(confirm).not.toHaveBeenCalled()
-})
-test('mock enforces cross-user/CAS and preserves revoked versus drained',async()=>{
- const s=createMockJobsService(),a=s.connect('one'),b=s.connect('two'),signal=new AbortController().signal
- const summary=await a.prepare(signal)
- await expect(b.confirm(summary,signal)).rejects.toMatchObject({code:'denied'})
- await expect(a.confirm({...summary,storeRevision:0},signal)).rejects.toMatchObject({code:'stale'})
- await a.confirm(summary,signal);const job=await a.lookup(summary.intentId,signal);expect(job).toBeTruthy()
- await expect(b.lookup(summary.intentId,signal)).rejects.toMatchObject({code:'denied'})
- s.drain=false;const d=job!.delegation!;const r=await a.revoke(d.id,d.revision,d.storeRevision,signal)
- expect(r).toEqual({revoked:true,drained:false});expect((await a.lookup(summary.intentId,signal))?.state).toBe('cleanup-required')
-})
-
-test('malicious progress, error payloads and terminal labels never become success',async()=>{
- const s=createMockJobsService(),p=s.connect('one'),f=mount(p);await settle()
- p.list=async()=>({revision:1,items:[{jobId:'safe',revision:1,mode:'interactive',state:'running',completedUnits:'CANARY/path' as any,totalUnits:1,drained:false,effectsUnknown:false}]})
- click(f.root,jobCopy('en').refresh);await settle()
- expect(f.root.innerHTML).not.toContain('CANARY');expect(f.root.textContent).toContain(jobCopy('en').error)
- p.list=async()=>{throw {code:'CANARY',message:'/volume1/SECRET',stack:'TOKEN'}}
- click(f.root,jobCopy('en').refresh);await settle();expect(f.root.innerHTML).not.toMatch(/SECRET|TOKEN|CANARY/)
- f.close()
-})
-
-test('admin panel shows safe management only and cancels through its separate provider',async()=>{
- const {default:AdminPanel}=await import('../src/jobs/JobsAdminPanel.vue')
- const {JobsAdminProviderKey}=await import('../src/jobs/provider')
- const s=createMockJobsService();s.connect('one');const admin=s.connectAdmin()
- const root=document.createElement('div');document.body.append(root)
- const app=createApp({render:()=>h(AppRoot,{},()=>h(AdminPanel,{locale:'en'}))});app.provide(JobsAdminProviderKey,admin);app.mount(root);await settle()
- expect(root.textContent).not.toContain('one');expect(root.querySelector('progress')).toBeNull()
- click(root,jobCopy('en').cancel);await settle();expect(root.textContent).toContain(jobCopy('en').drained)
- app.unmount();root.remove()
-})
-
-test('mock pagination is bounded and cursor is bound to provider and snapshot',async()=>{
- const s=createMockJobsService(),a=s.connect('one'),b=s.connect('two'),signal=new AbortController().signal
- for(let i=0;i<10;i++)s.connect('one')
- const page=await a.list(signal);expect(page.items).toHaveLength(10);expect(page.nextCursor).toBeTruthy()
- const rest=await a.list(signal,page.nextCursor);expect(rest.items).toHaveLength(1)
- await expect(b.list(signal,page.nextCursor)).rejects.toMatchObject({code:'stale'})
- await a.cancel(page.items[0].jobId,page.items[0].revision,signal)
- await expect(a.list(signal,page.nextCursor)).rejects.toMatchObject({code:'stale'})
-})
-
-test('loss of native access discards cached rows and consent for that mount only',async()=>{
- const s=createMockJobsService(),p=s.connect('one'),f=mount(p),g=mount(s.connect('two'));await settle()
- click(f.root,jobCopy('en').prepare);await settle();expect(f.root.textContent).toContain('Mock App')
- p.list=async()=>{throw {code:'session_required',message:'SECRET'}}
- click(f.root,jobCopy('en').refresh);await settle()
- expect(f.root.textContent).not.toContain('Mock App');expect(f.root.textContent).not.toContain(jobCopy('en').running)
- expect(f.root.querySelectorAll('button')).toHaveLength(0);expect(g.root.textContent).toContain(jobCopy('en').running)
- f.close();g.close()
-})
-
-test('owner DOM advances a bounded page and refresh returns to the first snapshot page',async()=>{
- const s=createMockJobsService(),p=s.connect('one');for(let i=0;i<10;i++)s.connect('one')
- const f=mount(p);await settle();expect(f.root.querySelectorAll('.nas-grants > li')).toHaveLength(10)
- click(f.root,jobCopy('en').next);await settle();expect(f.root.querySelectorAll('.nas-grants > li')).toHaveLength(1)
- click(f.root,jobCopy('en').refresh);await settle();expect(f.root.querySelectorAll('.nas-grants > li')).toHaveLength(10)
- f.close()
-})
-
- test('connected unavailable modes explain attach expiry and hide background consent',async()=>{
- const {createConnectedJobsProvider}=await import('../src/jobs/connected-provider')
- const p=createConnectedJobsProvider({call:async()=>({revision:1,items:[]}) as any}),f=mount(p)
- await settle()
- expect(f.root.textContent).not.toContain(jobCopy('en').mock)
- expect(f.root.textContent).toContain('6 seconds')
- expect(f.root.textContent).toContain('Background jobs are unavailable')
- expect([...f.root.querySelectorAll('button')].some(b=>b.textContent===jobCopy('en').prepare)).toBe(false)
- f.close()
-})
-
-test('connected admin view requests management data explicitly and never claims mock or empty before loading',async()=>{
- const {default:AdminPanel}=await import('../src/jobs/JobsAdminPanel.vue')
- const {JobsAdminProviderKey}=await import('../src/jobs/provider')
- const {createConnectedJobsAdminProvider}=await import('../src/jobs/connected-provider')
- const call=vi.fn(async()=>({revision:1,items:[]}))
- const root=document.createElement('div');document.body.append(root)
- const app=createApp({render:()=>h(AppRoot,{},()=>h(AdminPanel,{locale:'en'}))});app.provide(JobsAdminProviderKey,createConnectedJobsAdminProvider({call:call as any}));app.mount(root);await settle()
- expect(root.textContent).not.toContain(jobCopy('en').mock);expect(root.textContent).not.toContain(jobCopy('en').empty)
- expect(call).not.toHaveBeenCalled();click(root,jobCopy('en').refresh);await settle()
- expect(call).toHaveBeenCalledWith('jobs.admin.status',{});expect(root.textContent).toContain(jobCopy('en').empty)
- app.unmount();root.remove()
-})
-
-test('fence cancellation is explained in nine locales; resubmit is explicit and disabled while revalidating',async()=>{
- const {reactive}=await import('vue')
- for(const locale of Object.keys(jobCatalogs)){
-  const copy=jobCopy(locale) as any,s=createMockJobsService(),p=s.connect('one')
-  const readiness=reactive({interactive:'revalidating',background:'unavailable'})
-  Object.assign(p,{readiness,canResubmit:()=>true,resubmit:vi.fn(async()=>({jobId:'new-job'}))})
-  p.list=async()=>({revision:1,items:[{jobId:'old-job',revision:1,mode:'interactive',state:'canceled',safeReason:'fenced',completedUnits:0,drained:false,effectsUnknown:true}]})
-  const f=mount(p,locale);await settle()
-  expect(f.root.textContent).toContain(copy.revalidating)
-  expect(f.root.textContent).toContain(copy.fenceCanceled)
-  const button=[...f.root.querySelectorAll('button')].find(b=>b.textContent===copy.resubmit)!
-  expect(button).toBeTruthy();expect(button.disabled).toBe(true)
-  expect((p as any).resubmit).not.toHaveBeenCalled()
-  readiness.interactive='ready';await settle();expect(button.disabled).toBe(false)
-  button.focus();expect(document.activeElement).toBe(button)
-  button.click();button.click();await settle();expect((p as any).resubmit).toHaveBeenCalledTimes(1)
-  f.close()
- }
-})
-
-
-test('an uncertain resubmission offers lookup only, while reopened history has no reusable plan',async()=>{
- const copy=jobCopy('en'),s=createMockJobsService(),p=s.connect('one')
- let state:'uncertain'|'submitted'|undefined
- const resubmit=vi.fn(async()=>{state='uncertain';throw {code:'timeout'}})
- const lookup=vi.fn(async()=>{state='submitted';return {jobId:'new-job'}})
- Object.assign(p,{readiness:{interactive:'ready',background:'unavailable'},resubmissionState:()=>state,canResubmit:()=>state===undefined,resubmit,lookupResubmission:lookup})
- p.list=async()=>({revision:1,items:[{jobId:'old-job',revision:1,mode:'interactive',state:'canceled',safeReason:'fenced',completedUnits:0,drained:false,effectsUnknown:true}]})
- const f=mount(p);await settle();click(f.root,copy.resubmit);await settle()
- expect(f.root.textContent).toContain(copy.resubmitUncertain)
- expect([...f.root.querySelectorAll('button')].some(b=>b.textContent===copy.resubmit)).toBe(false)
- click(f.root,copy.resubmitLookup);await settle();expect(resubmit).toHaveBeenCalledTimes(1);expect(lookup).toHaveBeenCalledTimes(1)
- expect(f.root.textContent).toContain(copy.resubmitSubmitted);f.close()
- const q=s.connect('two');q.list=p.list;Object.assign(q,{readiness:{interactive:'ready',background:'unavailable'}})
- const g=mount(q);await settle();expect(g.root.textContent).toContain(copy.resubmitUnavailable)
- expect([...g.root.querySelectorAll('button')].find(b=>b.textContent===copy.resubmit)?.disabled).toBe(true);g.close()
-})
-
-test('connected active jobs refresh at a bounded interval and stop at terminal/unmount',async()=>{
- vi.useFakeTimers()
- const p=createMockJobsService().connect('one')
- const page=await p.list(new AbortController().signal)
- let done=false
- const list=vi.fn(async()=>({...page,items:page.items.map(j=>({...j,state:done?'succeeded':'running'}))}))
- const provider={...p,mode:'connected',readiness:{interactive:'ready',background:'unavailable'},list} as JobsProvider
- const f=mount(provider)
- try{
-  await settle();expect(list).toHaveBeenCalledTimes(1)
-  done=true;await vi.advanceTimersByTimeAsync(2500);await settle();expect(list).toHaveBeenCalledTimes(2)
-  await vi.advanceTimersByTimeAsync(10000);expect(list).toHaveBeenCalledTimes(2)
- }finally{f.close();vi.useRealTimers()}
-})

package/templates/native-go-vue/frontend/test/m2-preview.html

@@ -1,27 +0,0 @@
-<!doctype html><html lang="en"><head><meta charset="utf-8"><title>M2 local fixture</title><style>html,body{margin:0;height:100%}#root{height:100%}</style></head><body><div id="root"></div><script type="module">
-import {mount} from '../src/m2-main.ts'
-// Synthetic route responses for local browser QA only. No NAS or credentials.
-const id='a'.repeat(64),params=new URLSearchParams(location.search),selections=[],calls=[]
-const folder={name:'Home',path:'/home',isdir:true,additional:{size:0}}
-const note={name:'notes.txt',path:'/home/notes.txt',isdir:false,additional:{size:3}}
-window.fixture={calls,selections,error:'',user:'normal1',reopen:undefined}
-mount(document.querySelector('#root'),{
- locale:params.get('locale')||'en',reopen(fn){window.fixture.reopen=fn;return ()=>{}},
- async call(method,args={}){
-  calls.push({method,args})
-  if(method==='app.status')return {package:'M2 local fixture',version:'1',user:window.fixture.user,admin:false}
-  if(window.fixture.error)throw {code:window.fixture.error}
-  if(method==='nas.session.status')return {mode:'filestation-session',interactive:'session-required',background:'unavailable',validation:'local-only'}
-  if(method==='nas.discovery')return {files:args.folder?[]:null,shares:args.folder?undefined:[folder],total:args.folder?0:1,offset:0}
-  if(method==='nas.grants.list')return [...selections]
-  if(method==='nas.grants.confirm'){const s={grantId:id,folder:args.folder,writable:args.writable};selections.push(s);return s}
-  if(method==='nas.grants.revoke'){selections.splice(0);return {revoked:true}}
-  if(method==='nas.files.list')return {files:[note],total:1,offset:0}
-  if(method==='nas.files.stat')return note
-  if(method==='nas.files.read')return {data:'YWJj',bytes:3}
-  if(method==='nas.files.create')return {created:true}
-  if(method==='nas.files.write')return {written:true}
-  throw {code:'unknown_method'}
- }
-})
-</script></body></html>