@synopackageland/cli 0.5.3 → 0.6.1

package/dist/templates/native-go-vue/frontend/test/nas-ui.test.ts

@@ -1,261 +0,0 @@
-// @vitest-environment jsdom
-import {expect, test, vi} from 'vitest'
-import {nextTick} from 'vue'
-import {mount} from '../src/main'
-import {createMockNasService} from '../src/nas/mock-provider'
-import {catalogs, nasCopy, format, errorCopy} from '../src/nas/i18n'
-import type {NasProvider} from '../src/nas/provider'
-import type {Context} from '../src/context'
-
-async function settle() {for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}await new Promise(r=>setTimeout(r,25))}
-function click(root:HTMLElement, text:string) {const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text || b.getAttribute('aria-label')===text);expect(b,text).toBeTruthy();b!.click()}
-function fixture(nas:NasProvider | undefined, user='normal1', locale='en') {
- const root=document.createElement('div');document.body.append(root)
- const reopen:Array<()=>void>=[]
- const ctx={locale,reopen(fn:()=>void){reopen.push(fn)},call:vi.fn(async(method:string)=> {
-  if(method==='app.status') return {package:'SamePackage',version:'1',user,admin:user==='admin'}
-  if(method==='integration.status') return {state:'not-enabled',reason:'not-requested',packageRunning:'unknown',scheduler:'not-probed'}
-  throw {code:'unknown_method'}
- })} as Context
- const app=mount(root,ctx,{nasProvider:nas})
- return {root,app,ctx,reopen}
-}
-function cleanup(...fixtures:ReturnType<typeof fixture>[]) {for(const f of fixtures){f.app.unmount();f.root.remove()}}
-
-test('managed account pilot stays visibly off with maintenance and approval restrictions',async()=> {
- const f=fixture(createMockNasService().connect('admin'),'admin')
- try {
-  await settle()
-  expect(f.root.textContent).toContain('Managed account pilot: off')
-  expect(f.root.textContent).toContain('Account changes or unverified identity revoke access')
-  expect(f.root.textContent).toContain('Enabling this pilot is unavailable in this build')
-  expect([...f.root.querySelectorAll('button')].some(b=>b.textContent?.includes('Enable managed'))).toBe(false)
- } finally {cleanup(f)}
-})
-
-test('nine complete catalogs resolve DSM locale aliases with English fallback',()=> {
- expect(Object.keys(catalogs)).toEqual(['en','zh-TW','zh-CN','ja','ko','de','fr','es','it'])
- for(const catalog of Object.values(catalogs)) {
-  expect(Object.keys(catalog).sort()).toEqual(Object.keys(catalogs.en).sort())
-  expect(Object.values(catalog).every(s=>typeof s==='string' && s.trim().length>0)).toBe(true)
-  for(const key of Object.keys(catalogs.en) as Array<keyof typeof catalogs.en>) {
-   expect(catalog[key].match(/\{\w+\}/g) ?? []).toEqual(catalogs.en[key].match(/\{\w+\}/g) ?? [])
-  }
- }
- expect(nasCopy('cht')).toEqual(catalogs['zh-TW'])
- expect(nasCopy('zh_CN')).toEqual(catalogs['zh-CN'])
- expect(nasCopy('unknown')).toEqual(catalogs.en)
-})
-
-test('account changes discard the bound provider UI and its pending candidate context',async()=> {
- const provider=createMockNasService().connect('normal1'), cancel=vi.spyOn(provider,'cancel'), f=fixture(provider)
- try {
-  await settle();click(f.root,'Choose my folder');await settle()
-  f.ctx.call=vi.fn(async(method:string)=>method==='app.status'?{package:'SamePackage',version:'1',user:'normal2',admin:false}:{state:'not-enabled',reason:'not-requested',packageRunning:'unknown',scheduler:'not-probed'})
-  f.reopen.forEach(fn=>fn());await settle()
-  expect(f.root.textContent).toContain('normal2')
-  expect(f.root.querySelector('[role="dialog"]')).toBeNull()
-  expect(f.root.textContent).not.toContain('Choose my folder')
-  expect(cancel).toHaveBeenCalled()
- } finally {cleanup(f)}
-})
-
-test('all nine locale UIs localize dialog controls and allow keyboard review without mouse-only actions',async()=> {
- for(const locale of Object.keys(catalogs)) {
-  const copy=nasCopy(locale), f=fixture(createMockNasService().connect('normal1'),'normal1',locale)
-  try {
-   await settle();click(f.root,copy.choosePersonal);await settle()
-   const selected=[...f.root.querySelectorAll('button')].find(b=>b.getAttribute('aria-label')===format(copy.select,'Projects'))!
-   selected.focus();expect(document.activeElement).toBe(selected)
-   // Native Button remains a keyboard-activatable button (browser verifies Enter).
-   expect(selected.tagName).toBe('BUTTON');selected.click();await settle()
-   click(f.root,copy.review);await settle();expect(f.root.textContent).toContain(copy.persistent)
-   expect(f.root.querySelector(`button[aria-label="${copy.close}"]`)).toBeTruthy()
-   click(f.root,copy.cancel);await settle()
-  } finally {cleanup(f)}
- }
-})
-
-test('home unavailable is recoverable and native diagnostics are never rendered',async()=> {
- const provider=createMockNasService({homeAvailable:false}).connect('normal1'), f=fixture(provider)
- try {
-  await settle();click(f.root,'Choose my folder');await settle()
-  expect(f.root.textContent).toContain('Required native identity or permission proof is unavailable')
-  provider.begin=async()=>{throw {code:'unknown',message:'/volume1/private-secret stderr'}}
-  click(f.root,'Retry');await settle()
-  expect(f.root.textContent).toContain('The request failed')
-  expect(f.root.textContent).not.toMatch(/private-secret|stderr/)
- } finally {cleanup(f)}
-})
-
-test('picker browse, separate selection/summary, cancel, empty and confirm use injected provider only',async()=> {
- const service=createMockNasService(), provider=service.connect('normal1'), cancel=vi.spyOn(provider,'cancel'), f=fixture(provider)
- try {
-  await settle();click(f.root,'Choose my folder');await settle()
-  expect(f.root.textContent).toContain('Mock preview')
-  expect(f.root.querySelector('[role="dialog"]')).toBeTruthy()
-  click(f.root,'Select Projects');await settle()
-  expect(f.root.textContent).not.toContain('Persistent access')
-  click(f.root,'Review access');await settle()
-  expect(f.root.textContent).toContain('Persistent access')
-  click(f.root,'Cancel');await settle()
-  expect(cancel).toHaveBeenCalled()
-  expect(await provider.grants(new AbortController().signal)).toEqual([])
-  click(f.root,'Choose my folder');await settle();click(f.root,'Open Empty folder');await settle()
-  expect(f.root.textContent).toContain('This folder is empty')
-  click(f.root,'Back');await settle();click(f.root,'Select Projects');await settle();click(f.root,'Review access');await settle();click(f.root,'Confirm access');await settle()
-  expect(f.root.querySelector('[role="dialog"]')).toBeNull()
-  expect(f.root.textContent).toContain('Active')
- } finally {cleanup(f)}
-})
-
-test('two same-package apps retain local modality, unique ARIA IDs and cancellation isolation',async()=> {
- const service=createMockNasService(), a=fixture(service.connect('normal1')), b=fixture(service.connect('normal2'))
- const body=document.body.getAttribute('style')
- try {
-  await settle();click(a.root,'Choose my folder');click(b.root,'Choose my folder');await settle()
-  const ids=[...document.querySelectorAll('[id]')].map(n=>n.id).filter(Boolean)
-  expect(new Set(ids).size).toBe(ids.length)
-  for(const f of [a,b]) {
-   const dialog=f.root.querySelector('[role="dialog"]')!
-   expect(dialog.hasAttribute('aria-modal')).toBe(false)
-   for(const name of ['aria-labelledby','aria-describedby']) expect(f.root.querySelector(`[id="${dialog.getAttribute(name)}"]`)).toBeTruthy()
-  }
-  expect(getComputedStyle(b.root).pointerEvents).not.toBe('none')
-  click(a.root,'Cancel');await settle()
-  expect(a.root.querySelector('[role="dialog"]')).toBeNull()
-  expect(b.root.querySelector('[role="dialog"]')).toBeTruthy()
-  expect(document.body.getAttribute('style')).toBe(body)
- } finally {cleanup(a,b)}
-})
-
-test('intent expiry is actionable; revoked but not drained never claims transfers stopped',async()=> {
- let now=1000
- const service=createMockNasService({now:()=>now,drained:false}), provider=service.connect('normal1'), f=fixture(provider)
- try {
-  await settle();click(f.root,'Choose my folder');await settle();click(f.root,'Select Projects');await settle();click(f.root,'Review access');await settle()
-  now+=30_000;click(f.root,'Confirm access');await settle()
-  expect(f.root.textContent).toContain('expired')
-  expect(await provider.grants(new AbortController().signal)).toEqual([])
-  click(f.root,'Cancel');await settle();click(f.root,'Choose my folder');await settle();click(f.root,'Select Projects');await settle();click(f.root,'Review access');await settle();click(f.root,'Confirm access');await settle()
-  click(f.root,'Revoke');await settle()
-  expect(f.root.textContent).toContain('already sent or written')
-  click(f.root,'Confirm revoke');await settle()
-  expect(f.root.textContent).toContain('Revoked; stopping transfers')
- } finally {cleanup(f)}
-})
-
-test('unmount aborts late browse and cancels its context without creating a grant',async()=> {
- const provider=createMockNasService().connect('normal1'), base=provider.list.bind(provider)
- let resolve!:()=>void, requestSignal!:AbortSignal
- provider.list=async(...args)=>{requestSignal=args[3];await new Promise<void>(r=>resolve=r);return base(...args)}
- const cancel=vi.spyOn(provider,'cancel'), f=fixture(provider)
- await settle();click(f.root,'Choose my folder');await settle();f.app.unmount()
- expect(requestSignal.aborted).toBe(true);expect(cancel).toHaveBeenCalled()
- resolve();await settle();expect(f.root.childElementCount).toBe(0);f.root.remove()
-})
-
-test('late begin after close is canceled and rapid double review consumes one intent',async()=> {
- const provider=createMockNasService().connect('normal1'), begin=provider.begin.bind(provider)
- let release!:()=>void
- provider.begin=async(kind,signal)=>{await new Promise<void>(r=>release=r);return begin(kind,new AbortController().signal)}
- const cancel=vi.spyOn(provider,'cancel'), prepare=vi.spyOn(provider,'prepare'), f=fixture(provider)
- try {
-  await settle();click(f.root,'Choose my folder');await settle();click(f.root,'Cancel');await settle()
-  release();await settle();expect(cancel).toHaveBeenCalled();expect(f.root.querySelector('[role="dialog"]')).toBeNull()
-  provider.begin=begin
-  click(f.root,'Choose my folder');await settle();click(f.root,'Select Projects');await settle()
-  click(f.root,'Review access');click(f.root,'Review access');await settle()
-  expect(prepare).toHaveBeenCalledTimes(1)
- } finally {cleanup(f)}
-})
-
-test('long folder names stay text, and revoked without Q uses pending cleanup copy',async()=> {
- const name='<img src=x onerror=alert(1)> '+ '\u5e74\u5ea6\u5831\u544a'.repeat(20)
- const provider=createMockNasService({personalFolders:[name]}).connect('normal1'), f=fixture(provider)
- try {
-  await settle();click(f.root,'Choose my folder');await settle()
-  expect(f.root.textContent).toContain(name);expect(f.root.querySelector('img')).toBeNull()
-  click(f.root,'Cancel');await settle()
-  provider.settings=async()=>({canManageShared:false,items:[{grantId:'fixture',revision:2,scopeKind:'user-personal',displayName:name,targetKind:'directory',actions:['nas.files.read'],effectiveState:'revoked',createdAt:1000,canRevoke:true,cleanupRequired:true}]})
-  click(f.root,'Refresh access');await settle()
-  expect(f.root.textContent).toContain('Revoked; cleanup needs verification')
-  expect(f.root.textContent).toContain('Read files')
-  expect(f.root.textContent).not.toContain('List folders')
- } finally {cleanup(f)}
-})
-
-
-test('S8 production defaults display unavailable for normal/admin even when lifecycle is ready',async()=> {
- for(const user of ['normal1','admin']) for(const locale of Object.keys(catalogs)) {
-  const f=fixture(undefined,user,locale),copy=nasCopy(locale)
-  try {
-   f.ctx.call=vi.fn(async(method:string)=> {
-    if(method==='app.status') return {package:'SamePackage',version:'1',user,admin:user==='admin'}
-    if(method==='integration.status') return {state:'ready',packageRunning:'running',scheduler:'ready'}
-    if(method==='personal.list') return {items:[]}
-    throw {code:'unknown_method'}
-   })
-   f.reopen.forEach(fn=>fn());await settle()
-   expect(f.root.textContent).toContain(copy.unavailableMessage)
-   expect(f.root.textContent).toContain(copy.pilotUnavailable)
-   expect(f.root.textContent).toContain(copy.noUnlock)
-   expect(f.root.textContent).not.toContain(copy.choosePersonal)
-   expect(f.root.textContent).not.toContain(copy.chooseShared)
-   expect(f.root.textContent).not.toContain(copy.emptyGrant)
-   expect(f.ctx.call.mock.calls.some(([method])=>method.startsWith('nas.'))).toBe(false)
-  } finally {cleanup(f)}
- }
-})
-
-test('S8 unavailable connected providers are ignored; only development mocks have a picker',async()=> {
- const connected=createMockNasService().connect('normal1')
- Object.defineProperty(connected,'mode',{value:'connected'})
- const settings=vi.spyOn(connected,'settings'),f=fixture(connected)
- try {
-  await settle()
-  expect(f.root.textContent).toContain(nasCopy('en').unavailableMessage)
-  expect(f.root.textContent).not.toContain('Choose my folder')
-  expect(settings).not.toHaveBeenCalled()
- } finally {cleanup(f)}
-})
-
-
-test('S8 safe error codes distinguish missing proof, denial, missing method and app authentication',()=> {
- for(const copy of Object.values(catalogs)) {
-  for(const [code,key] of [['unavailable','errorNativeProof'],['denied','errorDenied'],['unknown_method','errorUnknownMethod'],['unsupported','errorUnsupported'],['session_required','errorSession'],['auth_unavailable','errorAuthentication']] as const) {
-   expect(errorCopy({code,message:'/volume1/private cookie=sid'},copy)).toBe(copy[key])
-   expect(errorCopy({code,message:'/volume1/private cookie=sid'},copy)).not.toMatch(/volume1|cookie=sid/)
-  }
-  expect(new Set(['unavailable','denied','unknown_method','unsupported'].map(code=>errorCopy({code},copy))).size).toBe(4)
- }
-})
-
-
-test('S8 app request failures use localized safe-code copy without native diagnostics',async()=> {
- for(const code of ['denied','unknown_method','unavailable','unsupported','session_required','auth_unavailable']) {
-  const f=fixture(undefined,'normal1','cht')
-  try {
-   await settle()
-   f.ctx.call=vi.fn(async()=>{throw {code,message:'/volume1/private cookie=sid'}})
-   f.reopen.forEach(fn=>fn());await settle()
-   expect(f.root.querySelector('[role="alert"]')?.textContent).toBe(errorCopy({code},nasCopy('cht')))
-   expect(f.root.textContent).not.toMatch(/volume1|cookie=sid/)
-  } finally {cleanup(f)}
- }
-})
-
- test('S1R risk and reauthorization are disclosed in nine unavailable UIs without data actions',async()=> {
-  for(const locale of Object.keys(catalogs)) {
-   const copy=nasCopy(locale) as any, f=fixture(undefined,'normal1',locale)
-   try {
-    await settle()
-    for(const key of ['relaxedRisk','relaxedReauthorize','relaxedPermissions']) {
-     expect(copy[key],`${locale}:${key}`).toBeTypeOf('string')
-     expect(f.root.textContent).toContain(copy[key])
-    }
-    expect(f.root.textContent).not.toContain(copy.choosePersonal)
-    expect(f.ctx.call.mock.calls.some(([method])=>method.startsWith('nas.'))).toBe(false)
-   } finally {cleanup(f)}
-  }
- })

package/dist/templates/native-go-vue/frontend/test/picker-wire.test.ts

@@ -1,110 +0,0 @@
-// @vitest-environment jsdom
-import {expect,test,vi} from 'vitest'
-import {nextTick} from 'vue'
-import {mount} from '../src/sdk-main'
-import {jobCopy,jobCatalogs} from '../src/jobs/i18n'
-import {m2Copy} from '../src/nas/m2-i18n'
-import type {Context} from '../src/context'
-const id=(c:string)=>c.repeat(64)
-async function settle(){for(let i=0;i<35;i++){await Promise.resolve();await nextTick()}await new Promise(r=>setTimeout(r,25))}
-function click(root:HTMLElement,text:string){const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text||b.getAttribute('aria-label')===text);expect(b,text).toBeTruthy();b!.click()}
-function fixture(locale='en'){
- let state='running',reason='',lost=false,user='normal1',deny=false
- const reopen:Array<()=>void>=[]
- const wire=()=>({jobId:id('b'),revision:2,mode:'interactive',state,safeReason:reason||undefined,progress:{completedUnits:state==='succeeded'?1:0,totalUnits:1},drained:state==='succeeded',effectsUnknown:false})
- const call=vi.fn(async(method:string,args?:Record<string,unknown>)=>{
-  if(method==='app.status')return {package:'t0090',version:'1',user,admin:false}
-  if(method==='integration.status')return {state:'ready',packageRunning:'running',scheduler:'ready'}
-  if(method==='personal.list')return {items:[]}
-  if(method==='jobs.status')return {revision:2,availability:'session-required',workers:[{id:'inspect',revision:7,actions:['nas.files.list','nas.files.stat','nas.files.read'],maxBytes:4096}],items:call.mock.calls.some(([m])=>m==='jobs.submit')?[wire()]:[]}
-  if(method==='nas.discovery'){if(deny)throw {code:'denied',message:'Cookie=CANARY'};return {files:args?.folder?[{name:'fixture.txt',path:'/home/fixture.txt',isdir:false,additional:{size:3}}]:null,shares:args?.folder?undefined:[{name:'Home',path:'/home',isdir:true}],total:1,offset:0}}
-  if(method==='nas.grants.confirm')return {grantId:id('a'),folder:args!.folder,writable:args!.writable}
-  if(method==='jobs.prepare')return {intentId:id('c'),jobId:id('b'),summaryDigest:id('d'),expiresAt:Date.now()+30000}
-  if(method==='jobs.submit'){if(lost)throw {code:'timeout'};return {jobId:id('b'),attachId:id('e'),revision:1,renewAfterMs:2000,ttlMs:6000}}
-  if(method==='jobs.lookup')return wire()
-  if(method==='jobs.cancel'){state='canceled';return {}}
-  throw {code:'unknown_method'}
- })
- const root=document.createElement('div');document.body.append(root)
- const ctx={locale,call,reopen(fn:()=>void){reopen.push(fn);return ()=>{}}} as Context
- const app=mount(root,ctx)
- return {root,app,call,reopen,done(){state='succeeded'},fence(){state='canceled';reason='fenced'},lost(){lost=true},deny(){deny=true},switchUser(){user='normal2'},close(){app.unmount();root.remove()}}
-}
-// The UI Select is a Reka combobox: drive it by keyboard (the UI README helper), which also proves it is keyboard operable.
-// Attrs such as data-job-action land on the focusable combobox itself.
-async function choose(root:HTMLElement,marker:string,label:string){
- const trigger=root.querySelector<HTMLElement>(`[${marker}][role=combobox]`)!;expect(trigger,marker).toBeTruthy()
- expect(trigger.id,marker).toBeTruthy();expect(root.querySelector(`label[for="${trigger.id}"]`),marker).toBeTruthy()
- trigger.dispatchEvent(new KeyboardEvent('keydown',{key:'ArrowDown',bubbles:true,cancelable:true}));await settle()
- const option=[...document.querySelectorAll<HTMLElement>('[role=option]')].find(o=>o.textContent?.trim()===label)
- if(!option||option.getAttribute('aria-disabled')==='true')throw new Error(`No enabled option: ${label}`)
- option.focus();option.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',bubbles:true,cancelable:true}));await settle()
- expect(trigger.textContent).toContain(label)
-}
-async function pick(f:ReturnType<typeof fixture>,file=true){
- const j=jobCopy('en'),n=m2Copy('en')
- click(f.root,j.chooseSource);await settle()
- if(file){click(f.root,'Open Home');await settle();const button=f.root.querySelector<HTMLButtonElement>('button[aria-label="Select fixture.txt"]')!;expect(button.textContent?.trim()).toBe('Select fixture.txt');click(f.root,'Select fixture.txt')}
- else click(f.root,'Select Home')
- await settle();click(f.root,n.confirm);await settle()
-}
-test('SDK mount connects file picker, folder consent, worker revision, single submit and completion/cancel/fence',async()=>{
- const f=fixture(),j=jobCopy('en')
- try{
-  await settle();expect(f.call.mock.calls.some(([m])=>m==='personal.list')).toBe(false);await pick(f)
-  expect(f.call).toHaveBeenCalledWith('nas.grants.confirm',{folder:'/home',writable:false})
-  expect(f.root.textContent).toContain('/home/fixture.txt')
-  expect(f.root.textContent).not.toContain('NAS folder grants and file operations are not available yet.')
-  click(f.root,j.submitInteractive);click(f.root,j.submitInteractive);await settle()
-  expect(f.call).toHaveBeenCalledWith('jobs.prepare',{worker:{id:'inspect',revision:7},parent:{id:id('a'),revision:1},input:{steps:[{action:'nas.files.stat',segments:['fixture.txt']}]}})
-  expect(f.call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(1)
-  expect(f.root.querySelector('progress')).toBeTruthy()
-  click(f.root,j.cancel);await settle();expect(f.root.textContent).toContain(j.canceled)
-  f.fence();click(f.root.querySelector<HTMLElement>('.jobs-panel')!,j.refresh);await settle();expect(f.root.textContent).toContain(j.fenceCanceled)
-  f.done();click(f.root.querySelector<HTMLElement>('.jobs-panel')!,j.refresh);await settle();expect(f.root.textContent).toContain(j.succeeded)
- }finally{f.close()}
-})
-test('lost initial submit reply locks the form to original lookup; permissions fail without grant or submit',async()=>{
- const f=fixture(),j=jobCopy('en')
- try{
-  await settle();await pick(f);f.lost();click(f.root,j.submitInteractive);await settle()
-  expect(f.root.textContent).toContain(j.uncertain)
-  const button=[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===j.submitInteractive);expect(button?.disabled).toBe(true)
-  click(f.root,j.lookup);await settle()
-  expect(f.call).toHaveBeenCalledWith('jobs.lookup',{intentId:id('c')})
-  expect(f.call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(1)
- }finally{f.close()}
- const g=fixture()
- try{await settle();g.deny();click(g.root,j.chooseSource);await settle();expect(g.root.textContent).toContain(m2Copy('en').errorDenied);expect(g.root.textContent).not.toContain('CANARY');expect(g.call.mock.calls.some(([m])=>m==='nas.grants.confirm'||m==='jobs.submit')).toBe(false)}finally{g.close()}
-})
-test('folder list/read bounds and identity switch clear pending input; nine job catalogs stay complete',async()=>{
- const f=fixture(),j=jobCopy('en')
- try{
-  await settle();await pick(f,false)
-  await choose(f.root,'data-job-action',j.listOperation)
-  const limit=f.root.querySelector<HTMLInputElement>('input[data-job-bound]')!;limit.value='101';limit.dispatchEvent(new Event('input',{bubbles:true}));await settle()
-  click(f.root,j.submitInteractive);await settle();expect(f.call.mock.calls.some(([m])=>m==='jobs.prepare')).toBe(false)
-  limit.value='5';limit.dispatchEvent(new Event('input',{bubbles:true}));await settle();click(f.root,j.submitInteractive);await settle()
-  expect(f.call).toHaveBeenCalledWith('jobs.prepare',{worker:{id:'inspect',revision:7},parent:{id:id('a'),revision:1},input:{steps:[{action:'nas.files.list',segments:[],limit:5}]}})
-  f.switchUser();f.reopen.forEach(fn=>fn());await settle();expect(f.root.querySelector('[data-job-action]')).toBeNull()
- }finally{f.close()}
- for(const copy of Object.values(jobCatalogs)){expect(Object.keys(copy).sort()).toEqual(Object.keys(jobCatalogs.en).sort());for(const key of Object.keys(copy) as Array<keyof typeof copy>){expect(copy[key].trim()).not.toBe('');expect(copy[key].match(/\{\w+\}/g)??[]).toEqual(jobCatalogs.en[key].match(/\{\w+\}/g)??[])}}
-})
-
-test('read input is bounded by the live worker and late prepare cannot submit after account switch',async()=>{
- const f=fixture(),j=jobCopy('en')
- try{
-  await settle();await pick(f)
-  await choose(f.root,'data-job-action',j.readOperation)
-  const bound=f.root.querySelector<HTMLInputElement>('input[data-job-bound]')!;expect(bound.max).toBe('4096');expect(f.root.querySelector<HTMLLabelElement>(`label[for="${bound.id}"]`)?.textContent).toContain(j.byteLimit)
-  bound.value='24';bound.dispatchEvent(new Event('input',{bubbles:true}));await settle();click(f.root.querySelector<HTMLElement>('.jobs-panel')!,j.refresh);await settle();expect(bound.value).toBe('24')
-  bound.value='4097';bound.dispatchEvent(new Event('input',{bubbles:true}));await settle();click(f.root,j.submitInteractive);await settle();expect(f.call.mock.calls.some(([m])=>m==='jobs.prepare')).toBe(false)
-  bound.value='3';bound.dispatchEvent(new Event('input',{bubbles:true}));await settle()
-  let done!:(value:unknown)=>void
-  const original=f.call.getMockImplementation()!
-  f.call.mockImplementation(async(method,args)=>method==='jobs.prepare'?new Promise(resolve=>done=resolve):original(method,args))
-  click(f.root,j.submitInteractive);await settle();f.switchUser();f.reopen.forEach(fn=>fn());await settle()
-  done({intentId:id('c'),jobId:id('b'),summaryDigest:id('d'),expiresAt:Date.now()+30000});await settle()
-  expect(f.call.mock.calls.some(([m])=>m==='jobs.submit')).toBe(false)
- }finally{f.close()}
-})

package/dist/templates/native-go-vue/frontend/test/shell-preview.html

@@ -1,19 +0,0 @@
-<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Shell local fixture</title><style>html,body{margin:0;height:100%}#root{height:100%}</style></head>
-<body><div id="root"></div><script type="module">
-import {mount} from '../src/main.ts'
-import {createMockNasService} from '../src/nas/mock-provider.ts'
-// Synthetic responses for local browser QA of the DSM shell. No NAS, no credentials.
-const params=new URLSearchParams(location.search),state=params.get('state')||'ready',locale=params.get('locale')||'en'
-mount(document.querySelector('#root'),{
- locale,reopen(){return()=>{}},
- async call(method){
-  if(method==='app.status')return {package:'T0133 Sidebar Demo',version:'0.1.0-0001',user:'admin',admin:true}
-  if(method==='integration.status')return {state,reason:state==='ready'?'fixture':'not-requested',packageRunning:'running',scheduler:'ready'}
-  if(method==='identity.status')return {mode:'better-auth'}
-  if(method==='personal.list')return {items:[{id:'demo-private',name:'My sample note'}]}
-  if(method==='personal.read')return {id:'demo-private',text:'Remember to check the DSM window layout.'}
-  throw {code:'unknown_method'}
- },
- root:{state:async()=> 'missing',authorize:async()=> 'ready',run:async()=>{},remove:async()=> 'missing'},
-},{nasProvider:createMockNasService().connect('admin')})
-</script></body></html>

package/dist/templates/native-go-vue/frontend/test/shell-sdk.test.ts

@@ -1,73 +0,0 @@
-// @vitest-environment jsdom
-import {expect,test,vi} from 'vitest'
-import {createApp,h,nextTick} from 'vue'
-import SDKApp from '../src/SDKApp.vue'
-import {JobsProviderKey,type JobsProvider} from '../src/jobs/provider'
-import {jobCopy} from '../src/jobs/i18n'
-import {createMockNasService} from '../src/nas/mock-provider'
-import {NasProviderKey} from '../src/nas/provider'
-import {shellCopy} from '../src/shell/i18n'
-import type {Context} from '../src/context'
-
-async function settle(){for(let i=0;i<16;i++){await Promise.resolve();await nextTick()}await new Promise(resolve=>setTimeout(resolve,25))}
-function navLabels(root:HTMLElement){return [...root.querySelectorAll<HTMLElement>('[data-nav-item]')].map(node=>node.textContent?.trim())}
-function heading(root:HTMLElement){return root.querySelector('h1')?.textContent?.trim()}
-function pageText(root:HTMLElement,page:string){return root.querySelector(`[data-page="${page}"]`)?.textContent??''}
-function clickNav(root:HTMLElement,label:string){const node=[...root.querySelectorAll<HTMLElement>('[data-nav-item]')].find(node=>node.textContent?.trim()===label);expect(node,label).toBeTruthy();node!.click()}
-
-// A connected provider advertises interactive workers; the mock used by the
-// standalone preview does not. This stub keeps both modes on one provider so
-// the shell test can exercise both pages.
-function provider():JobsProvider{
- return {
-  mode:'mock',
-  readiness:{interactive:'ready',background:'ready'},
-  interactive:{workers:[],prepareInteractive:async()=>{throw {code:'unavailable'}},submitInteractive:async()=>{throw {code:'unavailable'}}},
-  list:async()=>({revision:1,items:[]}),
-  prepare:async()=>{throw {code:'unavailable'}},
-  confirm:async()=>{},
-  lookup:async()=>undefined,
-  cancel:async()=>{},
-  revoke:async()=>({revoked:true,drained:true}),
-  disconnect(){},
- }
-}
-function fixture(admin:boolean,locale='en'){
- const call=vi.fn(async(method:string)=>{
-  if(method==='app.status') return {package:'SdkShell',version:'0.1.0-0001',user:admin?'admin':'normal1',admin}
-  if(method==='integration.status') return {state:'ready',reason:'fixture',packageRunning:'unknown',scheduler:'not-probed'}
-  if(method==='identity.status') return {mode:'none'}
-  throw {code:'unknown_method'}
- })
- const ctx={locale,call,reopen:()=>()=>{}} as unknown as Context
- const root=document.createElement('div');document.body.append(root)
- const app=createApp({render:()=>h(SDKApp,{ctx})})
- app.config.idPrefix=`sdk-shell-${Math.random()}`
- app.provide(JobsProviderKey,provider())
- app.provide(NasProviderKey,createMockNasService().connect(admin?'admin':'normal1'))
- app.mount(root)
- return {root,close(){app.unmount();root.remove()}}
-}
-
-test('interactive and background work get separate pages and the admin page is administrator-only',async()=>{
- const admin=fixture(true),other=fixture(false)
- try{
-  await settle()
-  expect(navLabels(admin.root)).toEqual(['Status','NAS folder access','Interactive jobs','Background jobs','Job management'])
-  expect(navLabels(other.root)).toEqual(['Status','NAS folder access','Interactive jobs','Background jobs'])
-  expect(heading(admin.root)).toBe(shellCopy('en').status)
-
-  clickNav(admin.root,shellCopy('en').interactive);await settle()
-  expect(heading(admin.root)).toBe('Interactive jobs')
-  expect(pageText(admin.root,'interactive')).toContain(jobCopy('en').interactiveHelp)
-  expect(pageText(admin.root,'interactive')).not.toContain(jobCopy('en').backgroundHelp)
-
-  clickNav(admin.root,shellCopy('en').background);await settle()
-  expect(heading(admin.root)).toBe('Background jobs')
-  expect(pageText(admin.root,'background')).toContain(jobCopy('en').backgroundHelp)
-  expect(pageText(admin.root,'background')).not.toContain(jobCopy('en').interactiveHelp)
-
-  clickNav(other.root,shellCopy('en').interactive);await settle()
-  expect(other.root.textContent).not.toContain(jobCopy('en').adminTitle)
- }finally{admin.close();other.close()}
-})

package/templates/_authorization/main.go

@@ -1,104 +0,0 @@
-// CLI-owned root bootstrap: accepts only compiled fixed operations. The native
-// task copies and pins this executable before it can run with root authority.
-package main
-
-import (
-	"crypto/sha256"
-	"encoding/base64"
-	"encoding/hex"
-	"encoding/json"
-	"errors"
-	"fmt"
-	"io"
-	"os"
-	"os/exec"
-)
-
-var inventoryBase64 string
-
-type inventory struct {
-	Schema     int    `json:"schema"`
-	Package    string `json:"package"`
-	Version    string `json:"version"`
-	Operations []struct {
-		Name string `json:"name"`
-		Body string `json:"body"`
-	} `json:"operations"`
-	Files []struct {
-		Path string `json:"path"`
-		Size int64  `json:"size"`
-		Hash string `json:"sha256"`
-	} `json:"files"`
-}
-
-func run(args []string) error {
-	if os.Geteuid() != 0 || len(args) != 1 {
-		return errors.New("root and one fixed operation required")
-	}
-	var i inventory
-	raw, decode := base64.StdEncoding.DecodeString(inventoryBase64)
-	if decode != nil || json.Unmarshal(raw, &i) != nil || i.Schema != 2 || len(i.Operations) == 0 {
-		return errors.New("invalid compiled inventory")
-	}
-	var body string
-	for _, op := range i.Operations {
-		if op.Name == args[0] {
-			body = op.Body
-		}
-	}
-	if body == "" {
-		return errors.New("unknown operation")
-	}
-	// Disable/teardown/repair retain an escape path when UI payload is corrupt;
-	// they still execute only compiled, hash-pinned cleanup code.
-	cleanup := args[0] == "helper_disable" || args[0] == "helper_teardown" || args[0] == "helper_repair" || args[0] == "helper_purge"
-	if !cleanup {
-		if e := verifyFiles("/var/packages/"+i.Package+"/target", raw); e != nil {
-			return e
-		}
-	}
-	cmd := exec.Command("/bin/sh", "-eu", "-c", body)
-	cmd.Env = []string{"PATH=/usr/sbin:/usr/bin:/sbin:/bin"}
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-	return cmd.Run()
-}
-func verifyFiles(dir string, raw []byte) error {
-	var i inventory
-	if json.Unmarshal(raw, &i) != nil || i.Schema != 2 {
-		return errors.New("invalid inventory")
-	}
-	root, e := os.OpenRoot(dir)
-	if e != nil {
-		return e
-	}
-	defer root.Close()
-	for _, p := range i.Files {
-		if p.Size < 0 || p.Size > 64<<20 {
-			return errors.New("invalid size")
-		}
-		f, e := root.Open(p.Path)
-		if e != nil {
-			return e
-		}
-		st, e := f.Stat()
-		if e != nil || !st.Mode().IsRegular() || st.Size() != p.Size {
-			f.Close()
-			return errors.New("untrusted payload")
-		}
-		h := sha256.New()
-		_, e = io.Copy(h, io.LimitReader(f, p.Size+1))
-		f.Close()
-		if e != nil || hex.EncodeToString(h.Sum(nil)) != p.Hash {
-			return errors.New("untrusted payload")
-		}
-	}
-	return nil
-}
-
-func main() {
-	if e := run(os.Args[1:]); e != nil {
-		fmt.Fprintln(os.Stderr, "authorization bootstrap refused:", e)
-		os.Exit(1)
-	}
-}

package/templates/_authorization/main_test.go

@@ -1,35 +0,0 @@
-package main
-
-import (
-	"crypto/sha256"
-	"fmt"
-	"os"
-	"path/filepath"
-	"testing"
-)
-
-func TestInventoryRejectsReplacementAndSymlinkEscape(t *testing.T) {
-	dir := t.TempDir()
-	body := []byte("approved bytes")
-	os.WriteFile(filepath.Join(dir, "file"), body, 0600)
-	raw := fmt.Sprintf(`{"schema":2,"files":[{"path":"file","size":%d,"sha256":"%x"}]}`, len(body), sha256.Sum256(body))
-	if e := verifyFiles(dir, []byte(raw)); e != nil {
-		t.Fatal(e)
-	}
-	os.WriteFile(filepath.Join(dir, "file"), []byte("altered bytes!"), 0600)
-	if e := verifyFiles(dir, []byte(raw)); e == nil {
-		t.Fatal("accepted replacement")
-	}
-	os.Remove(filepath.Join(dir, "file"))
-	outside := filepath.Join(t.TempDir(), "file")
-	os.WriteFile(outside, body, 0600)
-	os.Symlink(outside, filepath.Join(dir, "file"))
-	if e := verifyFiles(dir, []byte(raw)); e == nil {
-		t.Fatal("accepted external symlink")
-	}
-}
-func TestUnknownOperationNeverRuns(t *testing.T) {
-	if e := run([]string{"arbitrary"}); e == nil {
-		t.Fatal("accepted unknown operation")
-	}
-}

package/templates/_shared/notice-overrides/index.json

@@ -1,14 +0,0 @@
-{
-  "@better-auth/utils@0.4.2": {
-    "integrity": "sha512-AUxrvu+HaaODsUyzDxFgwd/8RZ1yZaYo42LXKSrU2oGgR38pS1ij8nqQKNgtTWoYGpNevNXtCfgTy6loHveW9A==",
-    "file": "utils-0.4.2-LICENSE",
-    "source": "https://github.com/better-auth/utils/blob/ef522888b7b2ff77ca13f0afb476dfae8f297862/LICENSE",
-    "provenance": "Release manifests declare MIT but omit license text; retained upstream project license added in commit ef522888b7b2ff77ca13f0afb476dfae8f297862"
-  },
-  "@better-auth/utils@0.5.0": {
-    "integrity": "sha512-BL8W4EfIZFwlu0r54m3v1ztjDhu6dDe/amLTm0xybmbZaNgYUqhD3SjpAsnq0q8YD6/ki4iwIgxJNLP/N3TxiA==",
-    "file": "utils-0.5.0-LICENSE",
-    "source": "https://github.com/better-auth/utils/blob/ef522888b7b2ff77ca13f0afb476dfae8f297862/LICENSE",
-    "provenance": "Release manifests declare MIT but omit license text; retained upstream project license added in commit ef522888b7b2ff77ca13f0afb476dfae8f297862"
-  }
-}

package/templates/_shared/notice-overrides/utils-0.4.2-LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2024 - present, Bereket Engida
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.