@synopackageland/cli 0.11.0 → 0.12.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.12.0 (2026-10-16)
+
+- Generated Apps use templates 0.12.0, SDK 0.12.0 and UI 0.10.1. Vue pages and sections stack at the UI section gap, and SDK dialogs size to their content.
+- `metadata.screenshots` accepts up to 5 `https://` URLs, matching the catalog; `check` refuses more, or an `http://` URL, with `STANDALONE_TEXT_INVALID`.
+- The executor digest table records SDK 0.12.0, whose executor and lifecycle digests equal 0.11.0's. This CLI builds SDK 0.12.x executors; upgrade backend and frontend pins to 0.12.0 together.
+- 繁中：產生的 App 使用 templates 0.12.0、SDK 0.12.0 與 UI 0.10.1；Vue 頁面與區塊以 UI section gap 排列，SDK 對話框依內容決定寬度。`metadata.screenshots` 最多 5 個 `https://` URL，與 catalog 一致，超過或使用 `http://` 時 `check` 回報 `STANDALONE_TEXT_INVALID`。digest 表記錄 SDK 0.12.0（與 0.11.0 相同）；此 CLI 建置 SDK 0.12.x executor，後端／前端 pin 需一併升級至 0.12.0。
+
 ## 0.11.0 (2026-10-16)
 
 - Add capabilities.webapi named profiles with purpose and exact API/method/version lists, pinned in the administrator-approved executor policy. Build, inspect, lifecycle, bridge services and consent details support WebAPI-only Apps without granting file/root operations.

package/README.md

@@ -185,7 +185,7 @@ Third-party components keep their own terms.
 - Keep `backend/THIRD_PARTY_NOTICES.txt` current when you change Go modules. Your own binaries,
   added modules, container images and upstream apps need their own notices.
 
-SDK 0.11.0 adds delegated JSON WebAPI profiles. With CLI 0.11.0, declare:
+Delegated JSON WebAPI profiles need SDK 0.11.0 or later. Declare:
 
 ```yaml
 capabilities:
@@ -199,7 +199,7 @@ capabilities:
           delete: [6]
 ```
 
-Use matching backend/frontend SDK 0.11.0 pins. The profile participates in the
+Use matching backend/frontend SDK pins. The profile participates in the
 normal executor approval digest; a profile change needs administrator approval.
 Users grant the named profile separately. The permanent denylist, current-user
 permission checks, bounded JSON and uncertain-outcome rules are in the SDK's

package/dist/package-metadata.d.ts

@@ -17,5 +17,7 @@ export interface PackageMetadata {
     screenshots?: string[];
 }
 export declare function safeMetadataUrl(value: unknown, mail?: boolean): value is string;
+/** The catalog shows at most 5 screenshots and loads them over https only. */
+export declare const MAX_SCREENSHOTS = 5;
 export declare function validateMetadata(raw: unknown): PackageMetadata;
 export declare function metadataInfoFields(metadata?: PackageMetadata): [string, string][];

package/dist/package-metadata.js

@@ -14,6 +14,9 @@ export function safeMetadataUrl(value, mail = false) {
         return false;
     }
 }
+/** The catalog shows at most 5 screenshots and loads them over https only. */
+export const MAX_SCREENSHOTS = 5;
+const safeScreenshotUrl = (value) => safeMetadataUrl(value) && value.startsWith("https:");
 export function validateMetadata(raw) {
     if (!raw || typeof raw !== "object" || Array.isArray(raw))
         throw new Error("invalid metadata");
@@ -38,8 +41,8 @@ export function validateMetadata(raw) {
             throw new Error("unknown metadata");
         if (k === "screenshots") {
             if (!Array.isArray(v) ||
-                v.length > 12 ||
-                !v.every((u) => safeMetadataUrl(u)))
+                v.length > MAX_SCREENSHOTS ||
+                !v.every(safeScreenshotUrl))
                 throw new Error("invalid screenshots");
         }
         else if ((k === "long_description" || k === "changelog") &&

package/dist/runtime/executor-digests.json

@@ -1,5 +1,5 @@
 {
-    "0.11.0": {
+    "0.12.0": {
         "x86_64": "abe0a42699fed06aeeb7520e5a4f3393cae64f83a66773b70630f0db0c5ed107",
         "aarch64": "1fdf171a665279f16ca1c2605a54996b2359fa69531c6fe4e890f5bda61c1bef",
         "armv7": "946f73df833929283f94289f025fd73897416777be5e0867d1e73f0b6c3031d7",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -25,7 +25,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@synopackageland/templates": "0.11.0",
+    "@synopackageland/templates": "0.12.0",
     "ajv": "^8.17.1",
     "commander": "^13.1.0",
     "tar": "^7.4.3",

package/schema/package-metadata.schema.json

@@ -90,10 +90,10 @@
     },
     "screenshots": {
       "type": "array",
-      "maxItems": 12,
+      "maxItems": 5,
       "items": {
         "type": "string",
-        "pattern": "^https?://",
+        "pattern": "^https://",
         "maxLength": 2048
       }
     }

package/schema/synology-app.schema.json

@@ -275,10 +275,10 @@
         },
         "screenshots": {
           "type": "array",
-          "maxItems": 12,
+          "maxItems": 5,
           "items": {
             "type": "string",
-            "pattern": "^https?://",
+            "pattern": "^https://",
             "maxLength": 2048
           }
         }