@synopackageland/cli 0.8.0 → 0.9.0

package/dist/templates/native-go/backend/internal/identity/store.go

@@ -1,109 +0,0 @@
-package identity
-
-import (
-	"encoding/json"
-	"errors"
-	"os"
-	"path/filepath"
-	"syscall"
-	"time"
-)
-
-type record struct {
-	Subject Subject   `json:"subject"`
-	Expires time.Time `json:"expires"`
-}
-type bucket struct {
-	Start time.Time `json:"start"`
-	Count int       `json:"count"`
-}
-type state struct {
-	Sessions map[string]record `json:"sessions"`
-	Rates    map[string]bucket `json:"rates"`
-}
-
-// CGI processes share a package-private, locked store. Only hashes of bearer
-// IDs and rate-limit subjects are persisted; DSM credentials never enter it.
-func (s *Service) transaction(fn func(*state) error) error {
-	if err := os.MkdirAll(s.dir, 0700); err != nil {
-		return err
-	}
-	if err := os.Chmod(s.dir, 0700); err != nil {
-		return err
-	}
-	lock, err := os.OpenFile(filepath.Join(s.dir, "lock"), os.O_CREATE|os.O_RDWR, 0600)
-	if err != nil {
-		return err
-	}
-	defer lock.Close()
-	if err = syscall.Flock(int(lock.Fd()), syscall.LOCK_EX); err != nil {
-		return err
-	}
-	defer syscall.Flock(int(lock.Fd()), syscall.LOCK_UN)
-	st := state{Sessions: map[string]record{}, Rates: map[string]bucket{}}
-	path := filepath.Join(s.dir, "state.json")
-	raw, err := os.ReadFile(path)
-	if err == nil {
-		if len(raw) > 4<<20 || json.Unmarshal(raw, &st) != nil || st.Sessions == nil || st.Rates == nil {
-			return errors.New("invalid identity store")
-		}
-	} else if !errors.Is(err, os.ErrNotExist) {
-		return err
-	}
-	now := s.cfg.Now()
-	for k, v := range st.Sessions {
-		if !now.Before(v.Expires) {
-			delete(st.Sessions, k)
-		}
-	}
-	for k, v := range st.Rates {
-		if !now.Before(v.Start.Add(time.Minute)) {
-			delete(st.Rates, k)
-		}
-	}
-	result := fn(&st)
-	raw, err = json.Marshal(st)
-	if err != nil {
-		return err
-	}
-	tmp, err := os.CreateTemp(s.dir, ".state-*")
-	if err != nil {
-		return err
-	}
-	defer os.Remove(tmp.Name())
-	if _, err = tmp.Write(raw); err != nil {
-		tmp.Close()
-		return err
-	}
-	if err = tmp.Close(); err != nil {
-		return err
-	}
-	if err = os.Rename(tmp.Name(), path); err != nil {
-		return err
-	}
-	return result
-}
-func (s *Service) limited(st *state, ip, account string) bool {
-	keys := []string{"ip:" + digest(ip), "account:" + digest(account)}
-	for i, key := range keys {
-		limit := 20
-		if i == 1 {
-			limit = 5
-		}
-		if st.Rates[key].Count >= limit {
-			return true
-		}
-	}
-	if len(st.Rates) > 4096 {
-		return true
-	}
-	for _, key := range keys {
-		b := st.Rates[key]
-		if b.Count == 0 {
-			b.Start = s.cfg.Now()
-		}
-		b.Count++
-		st.Rates[key] = b
-	}
-	return false
-}

package/dist/templates/native-go/backend/internal/jsonlimits/limits.go

@@ -1,48 +0,0 @@
-// Package jsonlimits bounds JSON complexity before a decoder allocates values.
-package jsonlimits
-
-const (
-	MaxDepth           = 32
-	MaxStructuralBytes = 65536
-)
-
-// WithinLimits scans raw JSON using constant memory. It counts punctuation
-// outside strings, bounding both wide collections and nesting independently
-// of the transport's byte limit. Syntax validation remains the decoder's job.
-func WithinLimits(body []byte) bool {
-	depth, structural := 0, 0
-	inString, escaped := false, false
-	for _, c := range body {
-		if inString {
-			if escaped {
-				escaped = false
-			} else if c == '\\' {
-				escaped = true
-			} else if c == '"' {
-				inString = false
-			}
-			continue
-		}
-		switch c {
-		case '"':
-			inString = true
-		case '{', '[':
-			depth++
-			structural++
-			if depth > MaxDepth {
-				return false
-			}
-		case '}', ']':
-			if depth > 0 {
-				depth--
-			}
-			structural++
-		case ',', ':':
-			structural++
-		}
-		if structural > MaxStructuralBytes {
-			return false
-		}
-	}
-	return true
-}

package/dist/templates/native-go/backend/internal/jsonlimits/limits_test.go

@@ -1,52 +0,0 @@
-package jsonlimits
-
-import (
-	"encoding/json"
-	"strings"
-	"testing"
-)
-
-func TestExactStructureAndDepthBounds(t *testing.T) {
-	for name, tc := range map[string]struct {
-		body string
-		ok   bool
-	}{
-		"structure at limit":   {"[" + strings.Repeat("0,", MaxStructuralBytes-2) + "0]", true},
-		"structure over limit": {"[" + strings.Repeat("0,", MaxStructuralBytes-1) + "0]", false},
-		"depth at limit":       {strings.Repeat("[", MaxDepth) + "0" + strings.Repeat("]", MaxDepth), true},
-		"depth over limit":     {strings.Repeat("[", MaxDepth+1) + "0" + strings.Repeat("]", MaxDepth+1), false},
-		"object punctuation":   {"{" + strings.Repeat(`"x":0,`, MaxStructuralBytes/2) + `"x":0}`, false},
-	} {
-		t.Run(name, func(t *testing.T) {
-			if !json.Valid([]byte(tc.body)) {
-				t.Fatal("invalid fixture")
-			}
-			if WithinLimits([]byte(tc.body)) != tc.ok {
-				t.Fatalf("want allowed=%v", tc.ok)
-			}
-		})
-	}
-}
-
-func TestStringEscapesCannotHideFollowingStructure(t *testing.T) {
-	for _, value := range []string{`\`, `"`, `\"`, `[]{}:,`, "\u4f60\u597d"} {
-		encoded, err := json.Marshal(strings.Repeat(value, 65536))
-		if err != nil {
-			t.Fatal(err)
-		}
-		if !WithinLimits(encoded) {
-			t.Fatal("string contents counted as structure")
-		}
-		body := append(append([]byte(`{"text":`), encoded...), []byte(`,"array":[`+strings.Repeat("0,", MaxStructuralBytes)+`0]}`)...)
-		if !json.Valid(body) || WithinLimits(body) {
-			t.Fatal("escaped string hid oversized array")
-		}
-	}
-}
-
-func TestScannerDoesNotAllocate(t *testing.T) {
-	body := []byte("[" + strings.Repeat("0,", MaxStructuralBytes-2) + "0]")
-	if allocations := testing.AllocsPerRun(10, func() { WithinLimits(body) }); allocations != 0 {
-		t.Fatalf("allocations=%v", allocations)
-	}
-}

package/dist/templates/native-go/backend/internal/portal/portal.go

@@ -1,138 +0,0 @@
-// Package portal reads the DSM Application Portal alias an administrator set
-// for this package. DSM owns the setting: the package never writes it, and
-// anything this reader does not fully understand reads as Unavailable.
-package portal
-
-import (
-	"bytes"
-	"encoding/json"
-	"errors"
-	"io"
-	"io/fs"
-	"os"
-	"regexp"
-	"syscall"
-	"unicode/utf8"
-
-	"dsmapp/internal/jsonlimits"
-)
-
-// MaxConfigBytes bounds DSM's saved setting; its real size is a few hundred bytes.
-const MaxConfigBytes = 64 << 10
-
-const (
-	// Active means users can open the app at /<alias>/ after DSM sign-in.
-	Active = "active"
-	// Inactive means no administrator has set an alias yet.
-	Inactive = "inactive"
-	// Unavailable means the setting could not be read safely.
-	Unavailable = "unavailable"
-)
-
-// Status is what portal.status returns; Alias is set only when Active.
-type Status struct {
-	State string `json:"state"`
-	Alias string `json:"alias,omitempty"`
-}
-
-// A single URL path segment; DSM's own validation is looser than this.
-var aliasPattern = regexp.MustCompile(`^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$`)
-
-// ConfigPath is where DSM saves the package's portal setting
-// (/var/packages/<package>/etc is the package's @appconf directory).
-func ConfigPath(packageID string) string {
-	return "/var/packages/" + packageID + "/etc/AppPortal.json"
-}
-
-// Read returns the saved alias when the setting belongs to appID.
-func Read(path, appID string) Status {
-	raw, err := readBounded(path)
-	if errors.Is(err, fs.ErrNotExist) {
-		return Status{State: Inactive}
-	}
-	if err != nil {
-		return Status{State: Unavailable}
-	}
-	id, alias, ok := parse(raw)
-	if !ok || id != appID {
-		return Status{State: Unavailable}
-	}
-	if alias == "" {
-		return Status{State: Inactive}
-	}
-	if !aliasPattern.MatchString(alias) {
-		return Status{State: Unavailable}
-	}
-	return Status{State: Active, Alias: alias}
-}
-
-func readBounded(path string) ([]byte, error) {
-	f, err := os.OpenFile(path, os.O_RDONLY|syscall.O_NOFOLLOW|syscall.O_NONBLOCK, 0)
-	if err != nil {
-		return nil, err
-	}
-	defer f.Close()
-	info, err := f.Stat()
-	if err != nil {
-		return nil, err
-	}
-	if !info.Mode().IsRegular() {
-		return nil, errors.New("not a regular file")
-	}
-	raw, err := io.ReadAll(io.LimitReader(f, MaxConfigBytes+1))
-	if err != nil {
-		return nil, err
-	}
-	if len(raw) > MaxConfigBytes {
-		return nil, errors.New("too large")
-	}
-	return raw, nil
-}
-
-// parse accepts exactly one JSON object with unique top-level keys, a string
-// id and a string or null alias; other DSM fields are skipped unread.
-func parse(raw []byte) (id, alias string, ok bool) {
-	if !utf8.Valid(raw) || !jsonlimits.WithinLimits(raw) {
-		return "", "", false
-	}
-	d := json.NewDecoder(bytes.NewReader(raw))
-	if token, err := d.Token(); err != nil || token != json.Delim('{') {
-		return "", "", false
-	}
-	seen := map[string]bool{}
-	hasID := false
-	for d.More() {
-		token, err := d.Token()
-		key, isKey := token.(string)
-		if err != nil || !isKey || seen[key] {
-			return "", "", false
-		}
-		seen[key] = true
-		var value json.RawMessage
-		if err := d.Decode(&value); err != nil {
-			return "", "", false
-		}
-		switch key {
-		case "id":
-			if json.Unmarshal(value, &id) != nil || id == "" {
-				return "", "", false
-			}
-			hasID = true
-		case "alias":
-			var text *string
-			if json.Unmarshal(value, &text) != nil {
-				return "", "", false
-			}
-			if text != nil {
-				alias = *text
-			}
-		}
-	}
-	if token, err := d.Token(); err != nil || token != json.Delim('}') {
-		return "", "", false
-	}
-	if _, err := d.Token(); err != io.EOF {
-		return "", "", false
-	}
-	return id, alias, hasID
-}

package/dist/templates/native-go/backend/internal/portal/portal_test.go

@@ -1,89 +0,0 @@
-package portal
-
-import (
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-)
-
-const appID = "SYNO.SDS.HelloGo.Instance"
-
-// saved mirrors DSM 7.4's AppPortal.json after an administrator sets an alias.
-func saved(alias string) string {
-	return "{\n\t\"acl\" : \"\",\n\t\"alias\" : " + alias + ",\n\t\"alternatePort\" : null,\n\t\"application\" : \"Hello Go\",\n\t\"fqdn\" : null,\n\t\"https\" : \n\t{\n\t\t\"hsts\" : false\n\t},\n\t\"id\" : \"" + appID + "\",\n\t\"version\" : 3\n}\n"
-}
-
-func write(t *testing.T, content string) string {
-	t.Helper()
-	path := filepath.Join(t.TempDir(), "AppPortal.json")
-	if err := os.WriteFile(path, []byte(content), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	return path
-}
-
-func TestActiveAlias(t *testing.T) {
-	got := Read(write(t, saved(`"hello-go"`)), appID)
-	if got != (Status{State: Active, Alias: "hello-go"}) {
-		t.Fatalf("got %+v", got)
-	}
-}
-
-func TestNoSavedSettingIsInactive(t *testing.T) {
-	if got := Read(filepath.Join(t.TempDir(), "AppPortal.json"), appID); got != (Status{State: Inactive}) {
-		t.Fatalf("missing file: %+v", got)
-	}
-	for _, alias := range []string{`null`, `""`} {
-		if got := Read(write(t, saved(alias)), appID); got != (Status{State: Inactive}) {
-			t.Fatalf("alias %s: %+v", alias, got)
-		}
-	}
-}
-
-func TestAnythingElseFailsClosed(t *testing.T) {
-	other := strings.Replace(saved(`"hello-go"`), appID, "SYNO.SDS.Other.Instance", 1)
-	cases := map[string]string{
-		"another app":     other,
-		"no id":           `{"alias":"hello-go"}`,
-		"duplicate alias": `{"alias":"hello-go","alias":"evil","id":"` + appID + `"}`,
-		"duplicate id":    `{"id":"SYNO.SDS.Other.Instance","alias":"hello-go","id":"` + appID + `"}`,
-		"alias number":    saved(`1`),
-		"alias path":      saved(`"a/b"`),
-		"alias dots":      saved(`".."`),
-		"alias query":     saved(`"a?b"`),
-		"alias too long":  saved(`"` + strings.Repeat("a", 65) + `"`),
-		"array":           `[]`,
-		"trailing value":  saved(`"hello-go"`) + `{}`,
-		"not json":        `alias=hello-go`,
-		"not utf8":        "{\"alias\":\"\xff\",\"id\":\"" + appID + "\"}",
-		"too large":       saved(`"hello-go"`) + strings.Repeat(" ", MaxConfigBytes),
-		"too deep":        strings.Replace(saved(`"hello-go"`), `"acl" : ""`, `"acl" : `+strings.Repeat("[", 64)+strings.Repeat("]", 64), 1),
-	}
-	for name, content := range cases {
-		if got := Read(write(t, content), appID); got != (Status{State: Unavailable}) {
-			t.Errorf("%s: %+v", name, got)
-		}
-	}
-}
-
-func TestOnlyARegularFileIsRead(t *testing.T) {
-	dir := t.TempDir()
-	target := write(t, saved(`"hello-go"`))
-	link := filepath.Join(dir, "AppPortal.json")
-	if err := os.Symlink(target, link); err != nil {
-		t.Fatal(err)
-	}
-	if got := Read(link, appID); got != (Status{State: Unavailable}) {
-		t.Fatalf("symlink: %+v", got)
-	}
-	if got := Read(dir, appID); got != (Status{State: Unavailable}) {
-		t.Fatalf("directory: %+v", got)
-	}
-}
-
-func TestConfigPathIsThePackagesOwnSetting(t *testing.T) {
-	if got := ConfigPath("HelloGo"); got != "/var/packages/HelloGo/etc/AppPortal.json" {
-		t.Fatal(got)
-	}
-}

package/dist/templates/native-go/dsm-package.yaml

@@ -1,71 +0,0 @@
-# Standalone native DSM package: an unsigned SPK that runs as its own package
-# `synopkgland build` reads this file.
-schema: 2
-
-# INFO.package: letters and digits, starting with a letter. It also names the
-# DSM app (SYNO.SDS.<package>) and the CGI URL /webman/3rdparty/<package>/.
-package: __PACKAGE__
-version: 0.1.0
-# Increase for every SPK you hand out with the same version (INFO 0.1.0-0001).
-build: 1
-displayname: __DISPLAY_NAME__
-description: A native DSM package with a Go backend and a DSM window UI.
-# Package Center and DSM window icon: a square PNG of at least 256x256, or a
-# folder of icon_<size>.png. Omit to use the SDK default icon.
-# icon: assets/icon.png
-maintainer: Your Name
-# Optional INFO/website metadata. Omit fields you do not need.
-# metadata:
-#   contact_email: you@example.com
-#   support_email: support@example.com
-#   homepage: https://example.com
-#   source_url: https://github.com/you/your-app
-#   issues_url: https://github.com/you/your-app/issues
-#   license: MIT
-#   long_description:
-#     en: |-
-#       Explain what the app does and how to use it.
-#     zh-TW: Translated description.
-#   changelog:          # text, or per-language like long_description
-#     en: |-
-#       - Most important change first. Omit to use Release notes.
-#     zh-TW: |-
-#       - Translated changes.
-#   screenshots: [https://example.com/screenshot.png]
-os_min_ver: "7.1-42661"
-
-# One SPK per architecture. Supported: x86_64, aarch64, armv7 (add it here to
-# build it; armv7 jobs/delegate/root-ops/daemon are built but not NAS-verified).
-arches: [x86_64, aarch64]
-
-backend:
-  kind: go
-  dir: backend
-  main: ./cmd/app
-
-ui:
-  # Static files served at /webman/3rdparty/<package>/app/. app.js and app.css
-  # are required; anything else (images, chunks) is copied as is.
-  dir: ui
-
-# UI languages: i18n/messages/<locale>.json for en, zh-TW, zh-CN, ja, ko, de,
-# fr, es and it (DSM's other languages fall back to English). build checks
-# that every language has the en.json keys and placeholders, and that the keys
-# listed in the glossary use DSM's own wording.
-i18n:
-  messages: i18n/messages
-  glossary: i18n/glossary.json
-  # Package Center text per language (INFO displayname_<lang>/description_<lang>).
-  # English comes from displayname/description above.
-  info:
-    zh-TW: { description: 以 Go 後端與 DSM 視窗介面打造的原生 DSM 套件。 }
-    zh-CN: { description: 以 Go 后端与 DSM 窗口界面构建的原生 DSM 套件。 }
-    ja: { description: Go バックエンドと DSM ウィンドウ UI を備えたネイティブ DSM パッケージ。 }
-    ko: { description: Go 백엔드와 DSM 창 UI를 갖춘 네이티브 DSM 패키지. }
-    de: { description: Ein natives DSM-Paket mit Go-Backend und DSM-Fenster-Oberfläche. }
-    fr: { description: Un paquet DSM natif avec un backend Go et une interface en fenêtre DSM. }
-    es: { description: Un paquete nativo de DSM con backend en Go e interfaz en ventana de DSM. }
-    it: { description: Un pacchetto DSM nativo con backend Go e interfaccia in una finestra DSM. }
-
-# Optional SDK capabilities; delegate/rootOps share administrator-approved executor setup.
-capabilities: {}

package/dist/templates/native-go/gitignore

@@ -1 +0,0 @@
-dist/