internal/

Package cosigntest stands in for cosign in tests that need its verdict to depend on *who* signed, not merely on whether verification was asked for.

Package dbtemplate builds a database file once per test binary and hands each test its own copy, so that a suite does not pay to build the same database over and over.

Package drivertest stands in for what the executor drivers talk to — a container runtime's CLI and a Kubernetes API server — so a test can drive the real drivers end to end (Task 20403): the container driver's staged lease files on disk, and the Kubernetes driver's lease Secret in the stand-in API server, are what a revocation has to reach.

Package edgetest stages what an edge-channel upgrade touches, for tests (Task 20376): a device installed as `cloop executor agent install` would install it — unit, drop-ins, remote-upgrade helper, binary — under a temp directory, and an edge release served over HTTP whose assets a stand-in cosign (internal/cosigntest) will accept or refuse by signer.

Package hometest isolates a test binary from the developer's real home directory.

Package rbactest holds the ui.oidc shapes every RBAC reporter is tested against (Task 20395): `cloop hub doctor`, the Settings panel, /api/me and the startup log each have to give authz.Enforced's answer for the same five blocks, and leave :8888's access exactly as it was.

Package ssohubtest runs a hub with single sign-on in a test's own process, for tests of the terminal commands that talk to one (Task 20417).

Package statedbtest gives tests a fully migrated, empty state.db without migrating one.

Package taskfill builds a pm.Task with every exported field set, for tests that must notice when a store drops one (Task 20361).

Package termquery keeps cloop from questioning the terminal as it starts (Task 20374).