@synopackageland/sdk 0.9.9 → 0.10.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/sdk",
-  "version": "0.9.9",
+  "version": "0.10.1",
   "description": "Frontend SDK for DSM packages built with synopkgland: headless client and Vue components",
   "license": "MIT",
   "homepage": "https://github.com/synopackageland/syno-pkg-land-sdk/tree/main/ts#readme",
@@ -30,7 +30,7 @@
   },
   "files": [
     "dist",
-    "spec"
+    "spec/protocol"
   ],
   "scripts": {
     "prepack": "test -d node_modules || { echo '@synopackageland/sdk: run npm ci before npm pack' >&2; exit 1; }; npm run build",
@@ -40,7 +40,7 @@
   },
   "peerDependencies": {
     "@lucide/vue": "^1.48.0",
-    "@synopackageland/ui": "^0.9.3",
+    "@synopackageland/ui": "^0.9.4",
     "vue": "^3.5.0"
   },
   "peerDependenciesMeta": {
@@ -53,7 +53,7 @@
   },
   "devDependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/ui": "0.9.3",
+    "@synopackageland/ui": "0.9.4",
     "@types/node": "24.19.2",
     "@vitejs/plugin-vue": "6.0.9",
     "jsdom": "27.4.0",

package/spec/protocol/v1/README.md

@@ -22,8 +22,8 @@ the executor against the vectors here.
    accept a connection only from the package user or root (peer credentials).
 2. A connection carries exactly one request and one response.
 3. A request is one line of UTF-8 JSON ending in `\n`. A request line MUST NOT
-   exceed 64 KiB including the newline; the executor answers
-   `REQUEST_TOO_LARGE`.
+   exceed 64 KiB including the newline, or 1 MiB for `root.run` and
+   `root.start`; the executor answers `REQUEST_TOO_LARGE`.
 4. The executor MUST answer one line of JSON ending in `\n` and close.
 5. The executor SHOULD close a connection that sends nothing for 15 seconds.
 
@@ -114,6 +114,157 @@ packages.
   own files and DSM's generated conf), `unregistered`, or `cleanup-required`
   (anything else, including a failed change).
 
+## Root programs
+
+Since 0.10.0. Each `root` entry pins a program by its SHA-256 digest; a bare
+digest is a script `root.run` may run with the defaults. The object form is
+`{"digest", "kind", "schema", "run"}`: `kind` `script` (`root/<name>.sh`) or
+`binary` (`root/<name>`), `schema` a closed JSON Schema subset for its params,
+`run` its `timeout_s` (1–120, default 20) and `max_output` (≤ 64 MiB,
+default 1 MiB), `job` its background limits: `timeout_s` (1–604800, default
+86400), `grace_s` (1–60, default 10), `max_concurrent` (1–4, default 1) and
+`nice` (0–19, default 10). `executor/README.md` lists the schema keywords.
+`root.run` needs `run`, `root.start` needs `job`; an entry may have both.
+
+Every root program, whatever starts it:
+
+- runs as root in `/`, in its own process group, without core dumps, with
+  stdin the params JSON (`{}` without params) followed by EOF;
+- gets only `PATH=/usr/syno/bin:/usr/syno/sbin:/usr/bin:/bin`, `LANG=C`,
+  `HOME=/` and these variables:
+
+| Variable | Set for | Value |
+|---|---|---|
+| `SYNOPKGLAND_PACKAGE` | all | the package name |
+| `SYNOPKGLAND_ROOT_MODE` | all | `run`, `job`, `stop` or `purge` |
+| `SYNOPKGLAND_REQUESTED_BY` | run, job | the verified DSM user name |
+| `SYNOPKGLAND_REQUEST_ID` | run | 64 hex digits, unique per call |
+| `SYNOPKGLAND_JOB_ID` | job | the job's `job_id` |
+| `SYNOPKGLAND_CONTROL_FD` | job | `4` |
+| `SYNOPKGLAND_PROGRESS_FD` | job | `5` |
+| `SYNOPKGLAND_ROOT_STATE` | all, with `root_state` | the root state directory |
+
+- `root.run` MUST require an administrator session whose Application
+  Privileges allow the App, and an entry with `run`; params outside the
+  schema, or any params without one, are `INVALID_REQUEST`.
+- The executor MUST give the params to the program only as JSON on stdin,
+  and MUST set `SYNOPKGLAND_REQUESTED_BY` to the verified user name. The
+  environment holds nothing else from the caller.
+- It MUST execute the descriptor whose content it checked against the digest,
+  never the path again.
+- A program that exits, whatever its status, is a result: `request_id`,
+  `exit_code`, `stderr` and either `output` (UTF-8, in a reply under 64 KiB)
+  or `staging` and `size`, a package-owned staging file the client reads and
+  removes. Past the timeout the process group is killed (`ROOT_TIMEOUT`);
+  output past `max_output` is `limit-exceeded`; a full staging quota is
+  `ROOT_STAGING_FULL`; two running programs make a third `ROOT_BUSY`.
+- A `root.run` request MAY be up to 1 MiB; the executor answers within 130
+  seconds and a client SHOULD wait 140.
+- `root.run` cannot be canceled: a closed connection does not stop the
+  program, which runs until it exits or its timeout. Work that may be stopped
+  is a root job (`root.start`, `root.jobs.stop`).
+
+## Root jobs
+
+Since 0.10.0. `root.start`, `root.jobs.list`, `root.jobs.get` and
+`root.jobs.stop` come together in `operations`. Each requires an administrator
+session whose Application Privileges allow the App, like `root.run`; any such
+administrator sees and stops every job of the package.
+
+| op | params | result |
+|---|---|---|
+| `root.start` | `name`, `params` (object, optional) | `{"job_id", "state": "running"}` |
+| `root.jobs.list` | none | `{"jobs": [summary, ...]}`, newest first |
+| `root.jobs.get` | `job_id` | job |
+| `root.jobs.stop` | `job_id` | job, `stopping` or already ended |
+
+A job is:
+
+```json
+{
+  "job_id": "<64 hex digits>",
+  "name": "clean",
+  "state": "running",
+  "requested_by": "alice",
+  "started_at": "2026-10-13T05:00:00Z",
+  "ended_at": "2026-10-13T05:03:12Z",
+  "exit_code": 0,
+  "cancel_reason": "user",
+  "progress": {"percent": 40, "message": "scanning", "phase": "scan"},
+  "result": {"freed": 3},
+  "output": "first 4 KiB of stdout and stderr"
+}
+```
+
+- `state` is `running`, `stopping` (a cancel was sent), or an end:
+  `succeeded` (exit 0), `failed` (another exit or a signal), `canceled` (it
+  ended after a cancel, however it exited), `timed-out` or `interrupted`
+  (the executor ended without seeing it end). `ended_at`, `exit_code` (an
+  exit, not a signal) and `cancel_reason` appear once they apply; `progress`
+  and `result` once the job reported them. `output` is valid UTF-8.
+- A summary is a job without `result`, `output` and the progress `message`
+  and `phase`, so the 64 records fit a reply; `root.jobs.get` answers the
+  whole job.
+- `root.start` MUST refuse with `ROOT_BUSY` while the entry runs
+  `max_concurrent` jobs or the package runs four. Params follow the entry's
+  schema as for `root.run`. An entry without `job` is `POLICY_DENIED`.
+- An unknown `job_id` is `ROOT_JOB_NOT_FOUND`. The executor keeps the 64
+  newest records; older ones are removed.
+- `root.jobs.stop` of an ended job returns it unchanged.
+- Jobs do not survive the executor: when it stops, every running job is
+  canceled, and a job a crashed executor left is `interrupted` (its process
+  group is killed when the same process still runs).
+
+### Progress and cancel
+
+The job reports on fd 5 and is told to stop on fd 4; both are pipes.
+
+- **Progress** (fd 5, job to executor): JSON lines of at most 32 KiB, each an
+  object with any of `percent` (number 0–100), `message` (string, at most 512
+  characters), `phase` (string, at most 64 characters) and `result` (any JSON,
+  at most 16 KiB encoded). Each member present replaces the previous one; a
+  line with anything else is ignored whole. `result` is the job's answer for
+  its caller, kept after it ends.
+- **Cancel** (fd 4, executor to job): one line `{"cancel":"<reason>"}`, with
+  reason `user` (`root.jobs.stop`), `stop` (package stop), `upgrade`
+  (package upgrade), `purge` (uninstall) or `executor-stop`. EOF on fd 4
+  means the executor ended: the job should stop too. The job ends
+  gracefully; `grace_s` after the cancel (at most 15 seconds on package stop,
+  upgrade and uninstall) the executor kills its process group.
+- **Timeout**: `timeout_s` after the start the process group is killed
+  without a cancel (`timed-out`).
+- A job MAY also keep its own progress files (for example in
+  `SYNOPKGLAND_ROOT_STATE`) for its App to read; the executor does not
+  interpret them.
+- Clients poll `root.jobs.get`; each answer is the job's latest progress. A
+  bridge MAY turn successive answers into progress events.
+
+## Package stop step
+
+Since 0.10.0. A policy MAY carry `"stop": "<name>"`, naming a `root` entry the
+executor runs when the package stops, after its jobs ended, with no session.
+Its argument is `prepare-upgrade` when the package account wrote `upgrade`
+to `var/executor/stop-reason` before the stop request (the
+`executor/lifecycle stop --upgrade` helper does; DSM's `preupgrade` should
+use it), and `stop` otherwise; jobs are canceled with `upgrade` or `stop`
+accordingly. It runs for at most 30 seconds, only while the approval is live
+(as for the purge step), its exit and output go to the executor log, and a
+failure does not stop the stop. `root.run` and `root.start` refuse it with
+`POLICY_DENIED`.
+
+## Root state directory
+
+Since 0.10.0. A policy with `"root_state": true` gives its root programs a
+directory only root can read: `/volumeN/@synopkgland/<package>`, root:root
+0700, on the volume that holds the package's `var` (DSM's
+`/volumeN/@appdata/<package>`); `/volumeN/@synopkgland` is root:root 0755.
+The executor creates it at start and passes it as `SYNOPKGLAND_ROOT_STATE`;
+when the package `var` is not on a volume it MUST NOT start root programs
+that need it (`ROOT_FAILED`). The directory is outside every package
+directory, so upgrades keep it. At uninstall the purge step sees it; after
+the step the executor deletes it for `delete-state` and keeps it for
+`keep-state`, so a reinstall on the same volume finds it again.
+
 ## Uninstall purge step
 
 Since 0.9.7. A policy MAY carry `"purge": "<name>"`, naming one of its `root`
@@ -131,7 +282,7 @@ runs as root at uninstall, with no session.
   skip the op and log `purge root step skipped: not approved`.
 - The op gets the argument `delete-state` when the package account wrote
   `delete-state` to `var/executor/uninstall` before its request (the
-  `executor/lifecycle purge --delete-state` helper does), and no argument
+  `executor/lifecycle purge --delete-state` helper does), and `keep-state`
   otherwise. It runs for at most 60 seconds; its exit status and output go to
   the purge log, and a failure MUST NOT stop the rest of the purge.
 

package/spec/protocol/v1/errors.json

@@ -151,8 +151,40 @@
       "kind": "refusal",
       "retryable": false,
       "httpStatus": 500,
-      "en": "The root operation exited with a non-zero status or failed to run.",
-      "zh-TW": "root 操作以非零狀態結束，或無法執行。"
+      "en": "The root program could not run, ended by a signal, or its output could not be kept.",
+      "zh-TW": "root 程式無法執行、被訊號終止，或其輸出無法保存。"
+    },
+    {
+      "code": "ROOT_TIMEOUT",
+      "kind": "refusal",
+      "retryable": true,
+      "httpStatus": 504,
+      "en": "The root program ran past its policy timeout and was killed.",
+      "zh-TW": "root 程式超過 policy 的時限，已被終止。"
+    },
+    {
+      "code": "ROOT_BUSY",
+      "kind": "refusal",
+      "retryable": true,
+      "httpStatus": 429,
+      "en": "The package already runs as many root programs as it may.",
+      "zh-TW": "此套件同時執行的 root 程式已達上限。"
+    },
+    {
+      "code": "ROOT_STAGING_FULL",
+      "kind": "refusal",
+      "retryable": true,
+      "httpStatus": 507,
+      "en": "Root output waiting in the staging folder already fills its quota.",
+      "zh-TW": "staging 資料夾中等待取走的 root 輸出已達配額。"
+    },
+    {
+      "code": "ROOT_JOB_NOT_FOUND",
+      "kind": "refusal",
+      "retryable": false,
+      "httpStatus": 404,
+      "en": "No root job of the package has this job_id.",
+      "zh-TW": "此套件沒有這個 job_id 的 root 工作。"
     },
     {
       "code": "PORTAL_FAILED",
@@ -335,8 +367,8 @@
       "kind": "refusal",
       "retryable": false,
       "httpStatus": 413,
-      "en": "The file is larger than max_bytes.",
-      "zh-TW": "檔案超過 max_bytes。"
+      "en": "The file is larger than max_bytes, or root output is larger than its policy max_output.",
+      "zh-TW": "檔案超過 max_bytes，或 root 輸出超過 policy 的 max_output。"
     },
     {
       "code": "OPERATION_CANCELED",

package/spec/protocol/v1/schema/root.jobs.get.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/synopackageland/syno-pkg-land-sdk/spec/protocol/v1/schema/root.jobs.get.json",
+  "title": "root.jobs.get",
+  "description": "Administrator whom Application Privileges allow to use the App: one root job with its state, latest progress and result.",
+  "since": "0.10.0",
+  "auth": "required",
+  "type": "object",
+  "properties": {
+    "job_id": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    }
+  },
+  "additionalProperties": false,
+  "required": [
+    "job_id"
+  ]
+}

package/spec/protocol/v1/schema/root.jobs.list.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/synopackageland/syno-pkg-land-sdk/spec/protocol/v1/schema/root.jobs.list.json",
+  "title": "root.jobs.list",
+  "description": "Administrator whom Application Privileges allow to use the App: list the package's root jobs, newest first.",
+  "since": "0.10.0",
+  "auth": "required",
+  "type": "object",
+  "properties": {},
+  "additionalProperties": false
+}

package/spec/protocol/v1/schema/root.jobs.stop.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/synopackageland/syno-pkg-land-sdk/spec/protocol/v1/schema/root.jobs.stop.json",
+  "title": "root.jobs.stop",
+  "description": "Administrator whom Application Privileges allow to use the App: ask a running root job to cancel; it is killed after its grace.",
+  "since": "0.10.0",
+  "auth": "required",
+  "type": "object",
+  "properties": {
+    "job_id": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    }
+  },
+  "additionalProperties": false,
+  "required": [
+    "job_id"
+  ]
+}

package/spec/protocol/v1/schema/root.run.json

@@ -2,14 +2,18 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/synopackageland/syno-pkg-land-sdk/spec/protocol/v1/schema/root.run.json",
   "title": "root.run",
-  "description": "Administrator: run a root operation pinned by digest in the policy.",
+  "description": "Administrator whom Application Privileges allow to use the App: run a root program pinned by digest in the policy. Params reach the program on stdin as JSON, checked against the entry's schema; the reply carries its exit code, stderr and output, or a staging file for large output.",
   "since": "0.9.0",
   "auth": "required",
   "type": "object",
   "properties": {
     "name": {
       "type": "string",
-      "minLength": 1
+      "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$"
+    },
+    "params": {
+      "type": "object",
+      "description": "The program's params; without a schema in the policy only {} is accepted."
     }
   },
   "additionalProperties": false,

package/spec/protocol/v1/schema/root.start.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/synopackageland/syno-pkg-land-sdk/spec/protocol/v1/schema/root.start.json",
+  "title": "root.start",
+  "description": "Administrator whom Application Privileges allow to use the App: start a root job, a pinned program with job limits, in the background. Params reach it on stdin; it reports progress on fd 5 and is told to cancel on fd 4.",
+  "since": "0.10.0",
+  "auth": "required",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$"
+    },
+    "params": {
+      "type": "object",
+      "description": "The job's params; without a schema in the policy only {} is accepted."
+    }
+  },
+  "additionalProperties": false,
+  "required": [
+    "name"
+  ]
+}

package/spec/protocol/v1/vectors/files.jsonl

@@ -7,5 +7,16 @@
 {"name":"move-missing-size","request":{"v":1,"op":"files.moveFromStaging","params":{"delegation_id":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job_id":"export-20261009","staging":"exports/report.csv","name":"report.csv"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{}},"state":{"grants":[{"id":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","username":"alice","key":"save","path":"/home/exports"}]},"expect":{"ok":false,"code":"INVALID_REQUEST"}}
 {"name":"operation-status-unknown","request":{"v":1,"op":"files.operationStatus","params":{"delegation_id":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job_id":"export-20261009"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{}},"state":{"grants":[{"id":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","username":"alice","key":"save","path":"/home/exports"}]},"expect":{"ok":false,"code":"operation-not-found"}}
 {"name":"root-run-unpinned","request":{"v":1,"op":"root.run","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"whoami"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{}},"state":{},"expect":{"ok":false,"code":"POLICY_DENIED"}}
+{"name":"root-run-params-outside-schema","request":{"v":1,"op":"root.run","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"scan","params":{"mode":"slow"}}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{"scan":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","schema":{"type":"object","additionalProperties":false,"properties":{"mode":{"type":"string","enum":["fast","full"]}},"required":["mode"]},"run":{}}}},"state":{},"expect":{"ok":false,"code":"INVALID_REQUEST"}}
+{"name":"root-run-params-unknown-member","request":{"v":1,"op":"root.run","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"scan","params":{"mode":"fast","path":"/"}}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{"scan":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","schema":{"type":"object","additionalProperties":false,"properties":{"mode":{"type":"string","enum":["fast","full"]}},"required":["mode"]},"run":{}}}},"state":{},"expect":{"ok":false,"code":"INVALID_REQUEST"}}
+{"name":"root-run-params-without-schema","request":{"v":1,"op":"root.run","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"scan","params":{"mode":"fast"}}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{"scan":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"}},"state":{},"expect":{"ok":false,"code":"INVALID_REQUEST"}}
+{"name":"root-run-job-only-entry","request":{"v":1,"op":"root.run","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"scan"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{"scan":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job":{}}}},"state":{},"expect":{"ok":false,"code":"POLICY_DENIED"}}
 {"name":"root-run-purge-step","request":{"v":1,"op":"root.run","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"purge"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{"purge":"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"},"purge":"purge"},"state":{},"expect":{"ok":false,"code":"POLICY_DENIED"}}
 {"name":"root-run-bad-name","request":{"v":1,"op":"root.run","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"../x"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run"],"destinations":["save"],"lifetime":"until-revoked","root":{}},"state":{},"expect":{"ok":false,"code":"INVALID_REQUEST"}}
+{"name":"root-start-run-only-entry","request":{"v":1,"op":"root.start","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"scan"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run","root.start","root.jobs.list","root.jobs.get","root.jobs.stop"],"destinations":["save"],"lifetime":"until-revoked","root":{"scan":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"}},"state":{},"expect":{"ok":false,"code":"POLICY_DENIED"}}
+{"name":"root-start-params-outside-schema","request":{"v":1,"op":"root.start","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"name":"clean","params":{"days":0}}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run","root.start","root.jobs.list","root.jobs.get","root.jobs.stop"],"destinations":["save"],"lifetime":"until-revoked","root":{"clean":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","schema":{"type":"object","additionalProperties":false,"properties":{"days":{"type":"integer","minimum":1}}},"job":{}}}},"state":{},"expect":{"ok":false,"code":"INVALID_REQUEST"}}
+{"name":"root-jobs-list-empty","request":{"v":1,"op":"root.jobs.list","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run","root.start","root.jobs.list","root.jobs.get","root.jobs.stop"],"destinations":["save"],"lifetime":"until-revoked","root":{"clean":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job":{}}}},"state":{},"expect":{"ok":true,"result":{"jobs":[]}}}
+{"name":"root-jobs-get-unknown","request":{"v":1,"op":"root.jobs.get","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"job_id":"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run","root.start","root.jobs.list","root.jobs.get","root.jobs.stop"],"destinations":["save"],"lifetime":"until-revoked","root":{"clean":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job":{}}}},"state":{},"expect":{"ok":false,"code":"ROOT_JOB_NOT_FOUND"}}
+{"name":"root-jobs-stop-unknown","request":{"v":1,"op":"root.jobs.stop","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"job_id":"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run","root.start","root.jobs.list","root.jobs.get","root.jobs.stop"],"destinations":["save"],"lifetime":"until-revoked","root":{"clean":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job":{}}}},"state":{},"expect":{"ok":false,"code":"ROOT_JOB_NOT_FOUND"}}
+{"name":"root-jobs-get-bad-id","request":{"v":1,"op":"root.jobs.get","auth":{"dsm_cookie":"admin","dsm_synotoken":"contract-token"},"params":{"job_id":"../x"}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run","root.start","root.jobs.list","root.jobs.get","root.jobs.stop"],"destinations":["save"],"lifetime":"until-revoked","root":{"clean":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job":{}}}},"state":{},"expect":{"ok":false,"code":"INVALID_REQUEST"}}
+{"name":"root-jobs-list-not-admin","request":{"v":1,"op":"root.jobs.list","auth":{"dsm_cookie":"alice","dsm_synotoken":"contract-token"},"params":{}},"policy":{"v":1,"package":"contract","app":"app","scope":"home","operations":["status","delegate.create","delegate.list","delegate.revoke","files.list","files.write","files.moveFromStaging","files.operationStatus","files.cancelOperation","delegate.disable","delegate.enable","delegate.audit","root.run","root.start","root.jobs.list","root.jobs.get","root.jobs.stop"],"destinations":["save"],"lifetime":"until-revoked","root":{"clean":{"digest":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","job":{}}}},"state":{},"expect":{"ok":false,"code":"ADMIN_REQUIRED"}}