@synopackageland/cli 0.10.0 → 0.10.1

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 0.10.1 (2026-10-13)
+
+Builds with SDK 0.10.1 and templates 0.10.1: `init` writes SDK v0.10.1 (Go
+module, Rust crate tag and `backend.sdk`) and `@synopackageland/sdk` 0.10.1.
+The executor digest table adds SDK 0.10.1 and keeps 0.10.0. SDK 0.10.1's
+executor changed, so an App rebuilt on it carries a new executor digest and
+its pins are approved again; the lifecycle digests equal 0.10.0. The bridge
+manifest schema is synced from the SDK (`capabilities.root` also serves
+`executor.status` and `executor.control`).
+
+繁中摘要：使用 SDK 0.10.1 與 templates 0.10.1；digest 表新增 SDK 0.10.1（保留
+0.10.0）。executor 變更，改用 SDK 0.10.1 重建的 App 要重新核准 executor digest，
+lifecycle digest 與 0.10.0 相同。
+
+- A Python, Node.js or Rust App with root-ops and a Vue UI borrows
+  `native-go-root-ops/frontend`, as a Go App gets it from its overlay: its
+  `ExecutorGate.vue` holds the App's pages until an administrator approves
+  the executor (templates 0.10.1).
+- Fix: in a DSM window with root operations (`capabilities.rootOps`, and so a
+  `portal` App), the App root now fills the window body below the root panels.
+  It had no height, so an App root asking for `height:100%` collapsed to its
+  content: a loading overlay covered only the top of the window, and a dialog
+  centred on the App root was placed above the window. Windows without root
+  operations are unchanged.
+
 ## 0.10.0 (2026-10-13)
 
 Builds with SDK 0.10.0 and templates 0.10.0: `init` writes SDK v0.10.0 (Go

package/dist/capability-overlays.js

@@ -22,7 +22,7 @@ function bridgeOverlays(template) {
     return {
         // The example hashes a file the caller picks, which the runtime reads only for an App with files.
         jobs: { overlays: [`${template}-jobs`], borrowed: ['native-go-jobs/frontend'], removed: [], permissions: {}, implied: ['files'], methods: ['hash.submit', 'hash.get', 'hash.cancel'] },
-        'root-ops': { overlays: [`${template}-root-ops`], borrowed: ['native-go-root-ops/root'], removed: [], permissions: {}, methods: ['whoami.run'] },
+        'root-ops': { overlays: [`${template}-root-ops`], borrowed: ['native-go-root-ops/root', 'native-go-root-ops/frontend'], removed: [], permissions: {}, methods: ['whoami.run'] },
         delegate: {
             overlays: [`${template}-delegate`], borrowed: ['native-go-jobs/frontend', 'native-go-delegate/frontend'], removed: [],
             permissions: { 'app.status': 'authenticated', 'report.save': 'authenticated' }, methods: ['report.save'],

package/dist/runtime/executor-digests.json

@@ -9,5 +9,16 @@
             "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
         },
         "goToolchain": "go1.26.9"
+    },
+    "0.10.1": {
+        "x86_64": "51b538e6ec1cb8fa2a4e00291eda097969352d6e2d9a3e7ade5da5359f1065de",
+        "aarch64": "9038b5ad7b4822e967f18390ca28b6f0021a3044ed461809b3f7333f17400840",
+        "armv7": "22d872cc618e3af4a052955186d36a6851e9f96ad959ee8ea7d3fbb5eec968bd",
+        "lifecycle": {
+            "x86_64": "d65500c4f04713a32b45d360059281391acfa5e00ee24895fdd2de7b82735372",
+            "aarch64": "94f6cd119186ff482b8aea56541dd1f9d53c147566bc1efdca6f5a1c86198331",
+            "armv7": "cafc97c89f5645c14a8cf31d6d9f258394ed6f2d086478a7aebd04d57c274b4e"
+        },
+        "goToolchain": "go1.26.9"
     }
 }

package/dist/standalone/dsm-window.js

@@ -363,6 +363,9 @@ const ROOT_PANEL_CSS = [
     ".dsmapp-rootpanel-actions button{margin-right:8px;padding:4px 14px}",
     ".dsmapp-rootpanel-primary{background:#057feb;color:#fff;border:1px solid #057feb;border-radius:3px}",
     ".dsmapp-rootpanel-hint{color:#526070;font-size:12px}.dsmapp-rootpanel [hidden]{display:none}",
+    // The panels keep their height; the App root fills the rest of the window body, as without root operations.
+    ".dsmapp-rootwindow{display:flex;flex-direction:column;height:100%}",
+    ".dsmapp-rootwindow>.dsmapp-rootpanels{flex:none}.dsmapp-rootwindow>.dsmapp-root{flex:1 1 0;min-height:0}",
 ].join("");
 /**
  * A Vue app approves in the SDK's ExecutorSettings, which also carries an
@@ -374,7 +377,7 @@ function settingsOnlyApproval(manifest) {
 /**
  * The capabilities.rootOps: true additions to the window: the exact tasks and panel
  * text, the access runtime wired to DSM's own password confirmation and the
- * AppWindow's WebAPI channel, and the panel above the app.
+ * AppWindow's WebAPI channel, and the panel above the app, which fills the rest.
  */
 function renderRootParts(ns, manifest) {
     return {
@@ -394,7 +397,7 @@ ${PASSWORD_CONFIRM}
 
 `,
         html: `autoScroll: true,
-      html: '<style>${ROOT_PANEL_CSS}</style><div class="dsmapp-rootpanels"></div><div class="dsmapp-root"></div>'`,
+      html: '<style>${ROOT_PANEL_CSS}</style><div class="dsmapp-rootwindow"><div class="dsmapp-rootpanels"></div><div class="dsmapp-root"></div></div>'`,
         mount: `    var session = function () {
       var current = SYNO.SDS.Session || {};
       return { name: current.user, admin: current.is_admin === true };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -24,7 +24,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@synopackageland/templates": "0.10.0",
+    "@synopackageland/templates": "0.10.1",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "tar": "^7.4.3",

package/schema/bridge-manifest.v1.schema.json

@@ -59,7 +59,7 @@
         "identity": { "const": "standalone", "$comment": "The SDK's App sign-in (identity.*) authenticates instead of DSM." },
         "portal": { "type": "boolean", "$comment": "true serves portal.status, to the browser and as the svc portal.status." },
         "jobs": { "type": "boolean", "$comment": "Added in v1 (additive). true offers the svc bg.submit, bg.get and bg.cancel on the package's job store." },
-        "root": { "type": "boolean", "$comment": "Added in v1 (additive). true offers the svc root.run, root.start, root.jobs.list, root.jobs.get and root.jobs.stop: the runtime forwards them to the package's executor with the request's DSM session, and the executor's policy and the App privilege decide." },
+        "root": { "type": "boolean", "$comment": "Added in v1 (additive). true offers the svc root.run, root.start, root.jobs.list, root.jobs.get and root.jobs.stop: the runtime forwards them to the package's executor with the request's DSM session, and the executor's policy and the App privilege decide. It also serves the browser routes executor.status and executor.control (README, Executor routes)." },
         "delegate": {
           "type": "object",
           "additionalProperties": false,