@synopackageland/cli 0.8.0 → 0.9.0

package/dist/templates/_executor/tasks_test.go

@@ -1,223 +0,0 @@
-package main
-
-import (
-	"context"
-	"encoding/json"
-	"errors"
-	"os"
-	"path/filepath"
-	"regexp"
-	"strings"
-	"synopkgland/executor/internal/taskscript"
-	"testing"
-)
-
-type schedulerFixture struct {
-	changed, foreignOwner, duplicate bool
-	script                           string
-	// deleteReply replaces the delete envelope, as DSM sends it.
-	deleteReply string
-	deleted     []string
-}
-
-func (s *schedulerFixture) Exec(_ context.Context, _ string, args []string) ([]byte, error) {
-	api, method := "", ""
-	for _, a := range args {
-		if strings.HasPrefix(a, "api=") {
-			api = strings.TrimPrefix(a, "api=")
-		}
-		if strings.HasPrefix(a, "method=") {
-			method = strings.TrimPrefix(a, "method=")
-		}
-	}
-	owner := "root"
-	if s.foreignOwner {
-		owner = "other"
-	}
-	generated, _ := taskscript.Generate("TestApp", strings.Repeat("b", 64))
-	script := generated[1].Script
-	if api == "SYNO.Core.EventScheduler" {
-		script = generated[0].Script
-	}
-	if s.script != "" {
-		script = s.script
-	}
-	if s.changed {
-		script = "unrelated"
-	}
-	var data any
-	if method == "delete" {
-		s.deleted = append(s.deleted, api)
-		if api == "SYNO.Core.TaskScheduler" && !contains(args, `tasks=[{"id":7,"real_owner":"root"}]`) {
-			return nil, errors.New("wrong delete reference")
-		}
-		if s.deleteReply != "" {
-			return []byte(s.deleteReply), nil
-		}
-		data = map[string]any{}
-	} else if api == "SYNO.Core.EventScheduler" {
-		data = map[string]any{"task_name": "TestApp executor boot", "owner": map[string]string{"0": owner}, "operation": script, "operation_type": "script", "event": "bootup", "enable": true}
-	} else if method == "list" {
-		tasks := []map[string]any{{"name": "TestApp executor control", "id": 7}, {"name": "TestApp executor boot", "id": 1000}}
-		if s.duplicate {
-			tasks = append(tasks, tasks[0])
-		}
-		data = map[string]any{"tasks": tasks, "total": len(tasks)}
-	} else {
-		data = map[string]any{"name": "TestApp executor control", "id": 7, "owner": owner, "real_owner": owner, "enable": false, "type": "script", "extra": map[string]any{"script": script}}
-	}
-	return json.Marshal(map[string]any{"success": true, "data": data})
-}
-func TestPurgeDeletesOnlyExactOwnRootTasksAndProtectedState(t *testing.T) {
-	for _, mode := range []string{"exact", "script changed", "owner changed", "duplicate control", "foreign name"} {
-		t.Run(mode, func(t *testing.T) {
-			cmd := &schedulerFixture{changed: mode == "script changed", foreignOwner: mode == "owner changed", duplicate: mode == "duplicate control"}
-			inventory := taskInventory{Package: "TestApp", PolicyDigest: strings.Repeat("b", 64), Tasks: []approvedTask{{Kind: "boot", Name: "TestApp executor boot", ScriptDigest: canonicalTaskDigest(t, "boot")}, {Kind: "control", Name: "TestApp executor control", ScriptDigest: canonicalTaskDigest(t, "control")}}}
-			if mode == "foreign name" {
-				inventory.Tasks[0].Name = "OtherApp executor boot"
-			}
-			state := filepath.Join(t.TempDir(), "state")
-			socket := filepath.Join(t.TempDir(), "socket")
-			os.MkdirAll(filepath.Join(state, "runtime"), 0700)
-			os.MkdirAll(socket, 0700)
-			if err := purgeWithInventory(context.Background(), &liveDSM{Command: cmd}, "TestApp", inventory, state, filepath.Join(state, "runtime"), socket, func(string) {}); err != nil {
-				t.Fatal(err)
-			}
-			if _, err := os.Stat(state); !os.IsNotExist(err) {
-				t.Fatal("state survived")
-			}
-			want := 0
-			if mode == "exact" {
-				want = 2
-			}
-			if mode == "duplicate control" {
-				want = 1
-			}
-			if len(cmd.deleted) != want {
-				t.Fatal("deleted mismatched tasks", cmd.deleted)
-			}
-		})
-	}
-}
-
-func TestSnapshotRequiresBothExactSchedulerDefinitionsBeforeWritingInventory(t *testing.T) {
-	for _, mismatch := range []bool{false, true} {
-		t.Run(map[bool]string{false: "exact setup", true: "changed root task"}[mismatch], func(t *testing.T) {
-			dir := realTestPath(t, t.TempDir())
-			ed := strings.Repeat("a", 64)
-			pd := strings.Repeat("b", 64)
-			tasks := []map[string]string{}
-			generated, err := taskscript.Generate("TestApp", pd)
-			if err != nil {
-				t.Fatal(err)
-			}
-			for _, task := range generated {
-				tasks = append(tasks, map[string]string{"kind": task.Kind, "name": task.Name, "header": task.Header, "script": task.Script})
-			}
-			setup := map[string]any{"package": "TestApp", "executorDigest": ed, "policyDigest": pd, "implementation": "executor", "tasks": tasks}
-			b, _ := json.Marshal(setup)
-			path := filepath.Join(dir, "setup.json")
-			os.WriteFile(path, b, 0600)
-			command := &snapshotFixture{mismatch: mismatch, tasks: tasks}
-			err = snapshotTasks(context.Background(), &liveDSM{Command: command}, "TestApp", ed, pd, path, dir)
-			if (err != nil) != mismatch {
-				t.Fatal("snapshot validation", err)
-			}
-			b, readErr := os.ReadFile(filepath.Join(dir, "tasks.json"))
-			if mismatch {
-				if !os.IsNotExist(readErr) {
-					t.Fatal("unverified inventory persisted")
-				}
-				return
-			}
-			var inv taskInventory
-			if json.Unmarshal(b, &inv) != nil || !validInventory("TestApp", inv) {
-				t.Fatal("missing verified inventory")
-			}
-		})
-	}
-}
-
-type snapshotFixture struct {
-	mismatch bool
-	tasks    []map[string]string
-}
-
-func (s *snapshotFixture) Exec(ctx context.Context, path string, args []string) ([]byte, error) {
-	f := &schedulerFixture{changed: s.mismatch}
-	for _, a := range args {
-		if a == "api=SYNO.Core.EventScheduler" {
-			f.script = s.tasks[0]["script"]
-		}
-		if a == "api=SYNO.Core.TaskScheduler" {
-			f.script = s.tasks[1]["script"]
-		}
-	}
-	return f.Exec(ctx, path, args)
-}
-
-func canonicalTaskDigest(t *testing.T, kind string) string {
-	t.Helper()
-	tasks, err := taskscript.Generate("TestApp", strings.Repeat("b", 64))
-	if err != nil {
-		t.Fatal(err)
-	}
-	for _, task := range tasks {
-		if task.Kind == kind {
-			return hashBytes([]byte(task.Script))
-		}
-	}
-	t.Fatal("task kind")
-	return ""
-}
-
-// t-0229: preuninst took 15-23 s; time each scheduler phase and the file
-// removal separately, naming the package, so a device log shows which waits.
-func TestPurgeLogsPhaseTimingWithPackageName(t *testing.T) {
-	cmd := &schedulerFixture{}
-	inventory := taskInventory{Package: "TestApp", PolicyDigest: strings.Repeat("b", 64), Tasks: []approvedTask{{Kind: "boot", Name: "TestApp executor boot", ScriptDigest: canonicalTaskDigest(t, "boot")}, {Kind: "control", Name: "TestApp executor control", ScriptDigest: canonicalTaskDigest(t, "control")}}}
-	state := filepath.Join(t.TempDir(), "state")
-	socket := filepath.Join(t.TempDir(), "socket")
-	os.MkdirAll(filepath.Join(state, "runtime"), 0700)
-	os.MkdirAll(socket, 0700)
-	logs := []string{}
-	if err := purgeWithInventory(context.Background(), &liveDSM{Command: cmd}, "TestApp", inventory, state, filepath.Join(state, "runtime"), socket, func(s string) { logs = append(logs, s) }); err != nil {
-		t.Fatal(err)
-	}
-	task := regexp.MustCompile(`^task cleanup timing: package=TestApp kind=(boot|control) lookup_ms=\d+ delete_ms=\d+ verify_ms=\d+$`)
-	total := regexp.MustCompile(`^purge timing: package=TestApp tasks_ms=\d+ files_ms=\d+$`)
-	kinds := []string{}
-	for _, line := range logs {
-		if m := task.FindStringSubmatch(line); m != nil {
-			kinds = append(kinds, m[1])
-		}
-	}
-	if strings.Join(kinds, ",") != "boot,control" || len(logs) == 0 || !total.MatchString(logs[len(logs)-1]) {
-		t.Fatal(logs)
-	}
-}
-
-// t-0237: EventScheduler delete v1 and TaskScheduler delete v2 answer a success
-// without data; that is a confirmed delete, while a refusal stays unconfirmed.
-func TestPurgeConfirmsDatalessDeleteSuccess(t *testing.T) {
-	for reply, unconfirmed := range map[string]bool{
-		`{"success":true}`:                        false,
-		`{"httpd_restart":false,"success":true}`:  false,
-		`{"success":false,"error":{"code":4800}}`: true,
-		`{"success":true,"error":{"code":4800}}`:  true,
-	} {
-		cmd := &schedulerFixture{deleteReply: reply}
-		inventory := taskInventory{Package: "TestApp", PolicyDigest: strings.Repeat("b", 64), Tasks: []approvedTask{{Kind: "boot", Name: "TestApp executor boot", ScriptDigest: canonicalTaskDigest(t, "boot")}, {Kind: "control", Name: "TestApp executor control", ScriptDigest: canonicalTaskDigest(t, "control")}}}
-		logs := []string{}
-		purgeTasks(context.Background(), &liveDSM{Command: cmd}, "TestApp", inventory, func(s string) { logs = append(logs, s) })
-		found := 0
-		for _, line := range logs {
-			if strings.HasPrefix(line, "task cleanup unconfirmed: ") {
-				found++
-			}
-		}
-		if (found == 2) != unconfirmed || (found != 0 && found != 2) || len(cmd.deleted) != 2 {
-			t.Fatal(reply, logs)
-		}
-	}
-}

package/dist/templates/_executor/testdata/evidence/cleanup.json

@@ -1,24 +0,0 @@
-{
-  "accounts_present": {
-    "p2probe1": false,
-    "p2probe2": false,
-    "p2probeadm": false,
-    "p2probepkg": false
-  },
-  "paths_present": {
-    "/usr/local/etc/synopkgland/p2probepkg": false,
-    "/var/packages/p2probepkg": false,
-    "/run/synopkgland/p2probepkg": false,
-    "/var/services/homes/p2probe1": false,
-    "/var/services/homes/p2probe2": false,
-    "/var/services/homes/p2probeadm": false,
-    "/var/services/homes/p2probepkg": false,
-    "/tmp/p2probe-executor.test": false,
-    "/tmp/p2probe-executor-setup.py": false,
-    "/tmp/p2probe-executor-live.py": false,
-    "/tmp/p2probe-executor-final.py": false
-  },
-  "executor_processes": [],
-  "tasks_created": 0,
-  "administrators_probe_members": []
-}

package/dist/templates/_executor/testdata/evidence/final-smoke.jsonl

@@ -1,9 +0,0 @@
-{"scenario": "final status", "response": {"ok": true, "result": {"executor_digest": "bc6d66fb667abf19a2a15f45da3aa90fc84e26fceaf9198bf904b6f8daa1b960", "policy_digest": "ccd9a4932bedd460f7b4f4d54d64449241f510721c19daa9caa426a12415fd6c", "ready": true, "version": "1"}}}
-{"scenario": "delegate.create /home", "response": {"ok": true, "result": {"delegation_id": "eb56c3b83d12021ad31958a51fb2a79007455f5511fab79c2e2a501041d22821", "expires_at": "2026-10-08T01:37:34.700143938Z", "subject": {"uid": 1231, "username": "p2probe1"}}}}
-{"scenario": "final list", "response": {"ok": true, "result": {"files": [{"isdir": true, "name": "p2probe-folder", "path": "/home/p2probe-folder"}, {"isdir": false, "name": "p2probe-output", "path": "/home/p2probe-output"}], "offset": 0, "total": 2}}}
-{"scenario": "final info", "response": {"ok": true, "result": {"files": [{"isdir": false, "name": "p2probe-output", "path": "/home/p2probe-output"}]}}}
-{"scenario": "final createFolder", "response": {"ok": true, "result": {"folders": [{"isdir": true, "name": "p2probe-final-folder", "path": "/home/p2probe-final-folder"}]}}}
-{"scenario": "final checkPermission", "response": {"ok": true, "result": {"blSkip": false}}}
-{"scenario": "kernel ACL denies other home", "exit_code": 1, "stderr": "executor: open /volume1/homes/p2probe2: no such file or directory\n", "note": "Target had already been deleted. This establishes missing-path refusal only; see separate existing-home kernel probe."}
-{"scenario": "duplicate serve", "exit_code": 1, "stderr": "executor: already running\n"}
-{"scenario": "final revoke", "response": {"ok": true, "result": {"revoked": true}}}

package/dist/templates/_executor/testdata/evidence/kernel-acl.json

@@ -1,6 +0,0 @@
-{
-  "scenario": "kernel ACL denies existing other home",
-  "target_exists": true,
-  "exit_code": 1,
-  "stderr": "executor: open /volume1/homes/p2probeadm: permission denied\n"
-}

package/dist/templates/_executor/testdata/evidence/linux-tests.log

@@ -1,123 +0,0 @@
-=== RUN   TestDSMAccountFailClosed
-=== RUN   TestDSMAccountFailClosed/valid
-=== RUN   TestDSMAccountFailClosed/success_empty
-=== RUN   TestDSMAccountFailClosed/success_no_user
-=== RUN   TestDSMAccountFailClosed/missing_expiry
-=== RUN   TestDSMAccountFailClosed/disabled
-=== RUN   TestDSMAccountFailClosed/uid_mismatch
-=== RUN   TestDSMAccountFailClosed/name_mismatch
---- PASS: TestDSMAccountFailClosed (0.00s)
-    --- PASS: TestDSMAccountFailClosed/valid (0.00s)
-    --- PASS: TestDSMAccountFailClosed/success_empty (0.00s)
-    --- PASS: TestDSMAccountFailClosed/success_no_user (0.00s)
-    --- PASS: TestDSMAccountFailClosed/missing_expiry (0.00s)
-    --- PASS: TestDSMAccountFailClosed/disabled (0.00s)
-    --- PASS: TestDSMAccountFailClosed/uid_mismatch (0.00s)
-    --- PASS: TestDSMAccountFailClosed/name_mismatch (0.00s)
-=== RUN   TestDSMAppPrivilege
-=== RUN   TestDSMAppPrivilege/allow
-=== RUN   TestDSMAppPrivilege/deny
-=== RUN   TestDSMAppPrivilege/custom
-=== RUN   TestDSMAppPrivilege/missing
-=== RUN   TestDSMAppPrivilege/duplicate
---- PASS: TestDSMAppPrivilege (0.01s)
-    --- PASS: TestDSMAppPrivilege/allow (0.00s)
-    --- PASS: TestDSMAppPrivilege/deny (0.00s)
-    --- PASS: TestDSMAppPrivilege/custom (0.00s)
-    --- PASS: TestDSMAppPrivilege/missing (0.00s)
-    --- PASS: TestDSMAppPrivilege/duplicate (0.00s)
-=== RUN   TestDSMVerify
---- PASS: TestDSMVerify (0.00s)
-=== RUN   TestDSMArgvAndEmbeddedError
---- PASS: TestDSMArgvAndEmbeddedError (0.00s)
-=== RUN   TestRootRequiresVerifiedAdmin
---- PASS: TestRootRequiresVerifiedAdmin (0.00s)
-=== RUN   TestSubdirectoryBinding
---- PASS: TestSubdirectoryBinding (0.00s)
-=== RUN   TestDSMEmptyOperationDataDenied
---- PASS: TestDSMEmptyOperationDataDenied (0.00s)
-=== RUN   TestRejections
-=== RUN   TestRejections/missing_account
-=== RUN   TestRejections/disabled
-=== RUN   TestRejections/unknown_disabled_state
-=== RUN   TestRejections/admin_runner
-=== RUN   TestRejections/system_runner
-=== RUN   TestRejections/uid_reuse
-=== RUN   TestRejections/app_deny
-=== RUN   TestRejections/expired
-=== RUN   TestRejections/revoked
-=== RUN   TestRejections/job
-=== RUN   TestRejections/scope
-=== RUN   TestRejections/dotdot
-=== RUN   TestRejections/name
-=== RUN   TestRejections/outside_staging
---- PASS: TestRejections (0.01s)
-    --- PASS: TestRejections/missing_account (0.00s)
-    --- PASS: TestRejections/disabled (0.00s)
-    --- PASS: TestRejections/unknown_disabled_state (0.00s)
-    --- PASS: TestRejections/admin_runner (0.00s)
-    --- PASS: TestRejections/system_runner (0.00s)
-    --- PASS: TestRejections/uid_reuse (0.00s)
-    --- PASS: TestRejections/app_deny (0.00s)
-    --- PASS: TestRejections/expired (0.00s)
-    --- PASS: TestRejections/revoked (0.00s)
-    --- PASS: TestRejections/job (0.00s)
-    --- PASS: TestRejections/scope (0.00s)
-    --- PASS: TestRejections/dotdot (0.00s)
-    --- PASS: TestRejections/name (0.00s)
-    --- PASS: TestRejections/outside_staging (0.00s)
-=== RUN   TestUnknownAndPolicy
---- PASS: TestUnknownAndPolicy (0.00s)
-=== RUN   TestSpoofedUsername
---- PASS: TestSpoofedUsername (0.00s)
-=== RUN   TestScopeSymlink
---- PASS: TestScopeSymlink (0.00s)
-=== RUN   TestOperationDelegation
---- PASS: TestOperationDelegation (0.00s)
-=== RUN   TestListAndRevokeOwnership
---- PASS: TestListAndRevokeOwnership (0.00s)
-=== RUN   TestProtocol
-=== RUN   TestProtocol/oversize
-=== RUN   TestProtocol/unknown_field
-=== RUN   TestProtocol/duplicate
-=== RUN   TestProtocol/utf8
-=== RUN   TestProtocol/version
---- PASS: TestProtocol (0.00s)
-    --- PASS: TestProtocol/oversize (0.00s)
-    --- PASS: TestProtocol/unknown_field (0.00s)
-    --- PASS: TestProtocol/duplicate (0.00s)
-    --- PASS: TestProtocol/utf8 (0.00s)
-    --- PASS: TestProtocol/version (0.00s)
-=== RUN   TestWrongPeer
---- PASS: TestWrongPeer (0.00s)
-=== RUN   TestStorePersistence
---- PASS: TestStorePersistence (0.00s)
-=== RUN   TestFileStationPrivilegeRequiredSeparately
---- PASS: TestFileStationPrivilegeRequiredSeparately (0.00s)
-=== RUN   TestSharedScope
---- PASS: TestSharedScope (0.00s)
-=== RUN   TestPolicyValidation
---- PASS: TestPolicyValidation (0.00s)
-=== RUN   TestFilenameAndTTL
---- PASS: TestFilenameAndTTL (0.00s)
-=== RUN   TestStoreRejectSymlinkAndMode
---- PASS: TestStoreRejectSymlinkAndMode (0.00s)
-=== RUN   TestDropOrderAndFailures
---- PASS: TestDropOrderAndFailures (0.00s)
-=== RUN   TestLinuxStagingSymlinks
---- PASS: TestLinuxStagingSymlinks (0.00s)
-=== RUN   TestLinuxCopyScopeAndNoOverwrite
---- PASS: TestLinuxCopyScopeAndNoOverwrite (0.00s)
-=== RUN   TestLinuxPeerCredential
---- PASS: TestLinuxPeerCredential (0.00s)
-=== RUN   TestLinuxPIDLock
---- PASS: TestLinuxPIDLock (0.00s)
-=== RUN   TestScriptDigest
---- PASS: TestScriptDigest (0.00s)
-=== RUN   TestLinuxStagingRootSymlink
---- PASS: TestLinuxStagingRootSymlink (0.00s)
-=== RUN   TestLinuxStagingHardlinkAndOwner
---- PASS: TestLinuxStagingHardlinkAndOwner (0.00s)
-=== RUN   TestScriptTimeoutAndOutputLimit
---- PASS: TestScriptTimeoutAndOutputLimit (0.11s)
-PASS

package/dist/templates/_executor/testdata/evidence/live.jsonl

@@ -1,23 +0,0 @@
-{"scenario": "status", "response": {"ok": true, "result": {"executor_digest": "4b0ae64de9e55f5c09de107ee5158791d114c0a31ddcb890fd848ee8dd9997fc", "policy_digest": "ccd9a4932bedd460f7b4f4d54d64449241f510721c19daa9caa426a12415fd6c", "ready": true, "version": "1"}}}
-{"scenario": "wrong peer", "response": {"closed": true}}
-{"scenario": "delegate.create /home", "response": {"ok": true, "result": {"delegation_id": "2758bd7d59f186c0e8cf3b09c6f347020616e42ae8286032e0bac5732e526393", "expires_at": "2026-10-08T01:33:23.604403596Z", "subject": {"uid": 1231, "username": "p2probe1"}}}}
-{"scenario": "files.write own home", "response": {"ok": true, "result": {"path": "/home/p2probe-output"}}}
-{"scenario": "owner", "uid": 1231, "gid": 100, "mode": "0o711", "content": "P2 executor content\n"}
-{"scenario": "ACL readback", "acl": "ACL version: 1 \nArchive: is_inherit,is_support_ACL \nOwner: [p2probe1(user)] \n--------------------- \n\t [0] user:p2probe1:allow:rwxpdDaARWcCo:---- (level:1)\n\t [1] group:administrators:allow:rwxpdDaARWc--:---- (level:2)\n\t [3] user:p2probe1:allow:rwxpdDaARWcCo:---- (level:2)\n\t [4] everyone::allow:--x----------:---- (level:2)", "note": "Unrelated inherited ACL rows omitted; parent ACL was not changed."}
-{"scenario": "no overwrite", "response": {"ok": false, "code": "WRITE_FAILED", "message": "write failed"}}
-{"scenario": "other home", "response": {"ok": false, "code": "SCOPE_DENIED", "message": "scope denied"}}
-{"scenario": "symlink escape", "response": {"ok": false, "code": "SCOPE_DENIED", "message": "scope denied"}}
-{"scenario": "cross job", "response": {"ok": false, "code": "DELEGATION_DENIED", "message": "delegation denied"}}
-{"scenario": "admin runner", "response": {"ok": false, "code": "INELIGIBLE", "message": "ineligible"}}
-{"scenario": "root.run admin", "response": {"ok": true, "result": {"output": "0\n"}}}
-{"scenario": "root.run regular", "response": {"ok": false, "code": "ADMIN_REQUIRED", "message": "admin required"}}
-{"scenario": "files.list", "response": {"ok": true, "result": {"files": [{"isdir": false, "name": "p2probe-output", "path": "/home/p2probe-output"}], "offset": 0, "total": 1}}}
-{"scenario": "files.info", "response": {"ok": true, "result": {"files": [{"isdir": false, "name": "p2probe-output", "path": "/home/p2probe-output"}]}}}
-{"scenario": "files.createFolder", "response": {"ok": true, "result": {"folders": [{"isdir": true, "name": "p2probe-folder", "path": "/home/p2probe-folder"}]}}}
-{"scenario": "files.checkPermission", "response": {"ok": true, "result": {"blSkip": false}}}
-{"scenario": "disabled runner", "response": {"ok": false, "code": "INELIGIBLE", "message": "ineligible"}}
-{"scenario": "AppPriv deny", "response": {"ok": false, "code": "APP_DENIED", "message": "app denied"}}
-{"scenario": "revoke", "response": {"ok": true, "result": {"revoked": true}}}
-{"scenario": "revoked", "response": {"ok": false, "code": "DELEGATION_DENIED", "message": "delegation denied"}}
-{"scenario": "delegate.create /home", "response": {"ok": true, "result": {"delegation_id": "fd1401cfacf74a51571c9991007b74f3b00d1965d0c024555e4950b0c2764885", "expires_at": "2026-10-08T01:33:50.727843683Z", "subject": {"uid": 1233, "username": "p2probe2"}}}}
-{"scenario": "deleted runner", "response": {"ok": false, "code": "INELIGIBLE", "message": "ineligible"}}

package/dist/templates/_executor/testdata/evidence/storage.json

@@ -1,90 +0,0 @@
-{
-  "host": "vt-nas.syno",
-  "dsm": "7.4-90069",
-  "arch": "x86_64",
-  "measurements": [
-    {
-      "path": "/usr/syno/etc/packages",
-      "owner": "root",
-      "group": "root",
-      "mode": "0o755",
-      "resolved": "/usr/syno/etc/packages",
-      "symlink": false
-    },
-    {
-      "path": "/usr/syno/etc/packages/FileStation",
-      "owner": "FileStation",
-      "group": "FileStation",
-      "mode": "0o755",
-      "resolved": "/usr/syno/etc/packages/FileStation",
-      "symlink": false
-    },
-    {
-      "path": "/var/packages/FileStation/etc",
-      "owner": "root",
-      "group": "root",
-      "mode": "0o777",
-      "resolved": "/usr/syno/etc/packages/FileStation",
-      "symlink": true
-    },
-    {
-      "path": "/usr/local",
-      "owner": "root",
-      "group": "root",
-      "mode": "0o755",
-      "resolved": "/usr/local",
-      "symlink": false
-    },
-    {
-      "path": "/usr/local/etc",
-      "owner": "root",
-      "group": "root",
-      "mode": "0o755",
-      "resolved": "/usr/local/etc",
-      "symlink": false
-    },
-    {
-      "path": "/usr/local/etc/synopkgland/p2probepkg",
-      "owner": "root",
-      "group": "root",
-      "mode": "0o700",
-      "resolved": "/usr/local/etc/synopkgland/p2probepkg",
-      "symlink": false
-    },
-    {
-      "path": "/usr/local/etc/synopkgland/p2probepkg/runtime",
-      "owner": "root",
-      "group": "root",
-      "mode": "0o700",
-      "resolved": "/usr/local/etc/synopkgland/p2probepkg/runtime",
-      "symlink": false
-    },
-    {
-      "path": "/usr/local/etc/synopkgland/p2probepkg/delegations",
-      "owner": "root",
-      "group": "root",
-      "mode": "0o700",
-      "resolved": "/usr/local/etc/synopkgland/p2probepkg/delegations",
-      "symlink": false
-    },
-    {
-      "path": "/run/synopkgland/p2probepkg",
-      "owner": "root",
-      "group": "users",
-      "mode": "0o750",
-      "resolved": "/run/synopkgland/p2probepkg",
-      "symlink": false
-    },
-    {
-      "path": "/run/synopkgland/p2probepkg/executor.sock",
-      "owner": "root",
-      "group": "users",
-      "mode": "0o660",
-      "resolved": "/run/synopkgland/p2probepkg/executor.sock",
-      "symlink": false
-    }
-  ],
-  "reboot_retention": "unverified in this task",
-  "package_upgrade_retention": "unverified in this task",
-  "dsm_update_retention": "unknown"
-}

package/dist/templates/_executor/testdata/evidence/validation.json

@@ -1,55 +0,0 @@
-{
-  "baseline": "e13b651",
-  "host": "darwin/arm64 Go 1.26.0",
-  "linux_host": "vt-nas.syno DSM 7.4-90069 x86_64",
-  "executor_tests": {
-    "host_cases_passed": 52,
-    "host_top_level_tests": 21,
-    "linux_cases_passed": 61,
-    "linux_top_level_tests": 30
-  },
-  "gates": {
-    "native-go": {
-      "result": "PASS",
-      "checks": [
-        "executor race/vet/gofmt",
-        "Linux amd64/arm64 vet, static build, test compilation",
-        "native-go backend race/vet/gofmt"
-      ]
-    },
-    "daemon-gateway": {
-      "result": "PASS"
-    },
-    "npm": {
-      "result": "PASS",
-      "cli": {
-        "tests": 795,
-        "pass": 793,
-        "skip": 2,
-        "fail": 0
-      },
-      "package_source": {
-        "tests": 64,
-        "pass": 64,
-        "fail": 0
-      },
-      "release_scripts": {
-        "tests": 6,
-        "pass": 6,
-        "fail": 0
-      },
-      "shell_scripts": "PASS"
-    },
-    "website": {
-      "result": "PASS",
-      "tests": 41,
-      "pass": 41,
-      "fail": 0,
-      "astro_errors": 0,
-      "astro_hints": 1
-    }
-  },
-  "final_live_executor_sha256": "bc6d66fb667abf19a2a15f45da3aa90fc84e26fceaf9198bf904b6f8daa1b960",
-  "live_policy_sha256": "ccd9a4932bedd460f7b4f4d54d64449241f510721c19daa9caa426a12415fd6c",
-  "spk": "Not built; CLI/SPK integration is outside this task ownership."
-}