fix: remove private deployment metadata and retain release licenses

tests/test_server_release.py

@@ -63,7 +63,7 @@ def test_release_readiness_retries_on_actual_listener(release_tool, monkeypatch)
 
     def listener(url, timeout):
         calls.append(url)
-        if url != "http://192.0.2.10:81/ready" or len(calls) == 1:
+        if url != release_tool.ORIGIN + "/ready" or len(calls) == 1:
             raise urllib.error.URLError("Connection refused during restart")
         return io.BytesIO(b'{"status":"ready"}')
 
@@ -71,3 +71,24 @@ def test_release_readiness_retries_on_actual_listener(release_tool, monkeypatch)
     monkeypatch.setattr(release_tool.time, "sleep", lambda _: None)
     release_tool.wait_ready()
     assert len(calls) == 2
+
+
+def test_release_requires_private_storage_identity_before_host_actions(
+    release_tool, monkeypatch
+):
+    calls = []
+    monkeypatch.setattr(release_tool.os, "geteuid", lambda: 0)
+    monkeypatch.setattr(release_tool, "run", lambda *args: calls.append(args))
+    monkeypatch.delenv("FRAME_FLOW_MOUNT_UUID", raising=False)
+    with pytest.raises(AssertionError, match="FRAME_FLOW_MOUNT_UUID"):
+        release_tool.main()
+    assert calls == []
+
+
+def test_release_rejects_wrong_storage_uuid(release_tool, monkeypatch):
+    monkeypatch.setattr(release_tool.os, "geteuid", lambda: 0)
+    monkeypatch.setenv("FRAME_FLOW_MOUNT_UUID", "expected-storage-uuid")
+    monkeypatch.setenv("FRAME_FLOW_ORIGIN", release_tool.ORIGIN)
+    monkeypatch.setattr(release_tool, "run", lambda *args: "different-storage-uuid")
+    with pytest.raises(AssertionError):
+        release_tool.main()

tests/test_synology_photos_api.py

@@ -69,12 +69,12 @@ def test_people_pagination_does_not_stop_at_500(settings, monkeypatch):
         return {
             "list": [
                 {"id": i}
-                for i in range(params["offset"], min(1334, params["offset"] + 500))
+                for i in range(params["offset"], min(1203, params["offset"] + 500))
             ]
         }
 
     monkeypatch.setattr(p, "request", request)
-    assert len(p.people()) == 1334
+    assert len(p.people()) == 1203
     assert calls == [0, 500, 1000]