@synopackageland/cli 0.4.0 → 0.5.0

package/dist/templates/native-go-background/frontend/src/background/i18n/zh-CN.json

@@ -0,0 +1,83 @@
+{
+  "title": "后台任务",
+  "help": "将选择的一个文件复制到套件内，由套件账号计算 SHA-256。退出登录后任务仍会继续。副本与结果由套件保存，源权限变化不会收回；再次登录即可查看自己的结果。",
+  "unsupported": "你的账号无法使用后台任务。请管理员允许普通用户。",
+  "modeOn": "后台模式已开启",
+  "modeOff": "后台模式已关闭",
+  "enable": "开启",
+  "disable": "关闭",
+  "worker": "Worker",
+  "workerRunning": "Worker 正以 {user} 运行",
+  "workerStopped": "Worker 未运行",
+  "chooseFile": "选择文件",
+  "chosen": "已选择的文件：{path}",
+  "pickerTitle": "选择要导入的文件",
+  "pickerConsent": "所选文件会使用你当前的 DSM 登录读取一次并交给后台任务，不会保存授权。",
+  "submit": "导入并提交",
+  "refresh": "刷新",
+  "cancel": "取消",
+  "result": "结果",
+  "download": "下载结果",
+  "noJobs": "暂无任务",
+  "state_queued": "排队中",
+  "state_running": "运行中",
+  "state_succeeded": "成功",
+  "state_failed": "失败",
+  "state_canceled": "已取消",
+  "state_interrupted": "已中断",
+  "limits": "每个文件最多 {size} KiB、队列 {queue} 个任务、每个任务 {seconds} 秒。",
+  "errors": {
+    "failed": "无法完成请求。请刷新后重试。",
+    "unsupported": "你的账号无法使用后台任务。请管理员允许普通用户。",
+    "disabled": "后台模式已关闭。",
+    "limit-exceeded": "文件超过上限。",
+    "queue-full": "队列已满。",
+    "quota-exceeded": "后台存储空间已满。",
+    "conflict": "任务状态已变更，请刷新。",
+    "not_found": "未找到。",
+    "denied": "访问被拒绝。",
+    "session_required": "DSM 会话已过期，请重新登录。",
+    "owner-queue-full": "你的待处理任务已达上限。请等待完成或取消一个任务。",
+    "owner-quota-exceeded": "你的后台存储已达上限。请管理员清除旧任务。",
+    "identity_unavailable": "无法确认你的 DSM 用户 UID。请重新登录或联系管理员。",
+    "schedule-full": "已达 8 个计划上限。请删除计划。",
+    "input-unavailable": "私有副本不存在或已更改。请重新导入。"
+  },
+  "ownerScope": "你只能查看、取消及下载自己的任务。",
+  "adminScope": "管理员可查看及取消所有用户的任务。",
+  "ownerLimits": "每人上限：{jobs} 个待处理任务、{size} KiB 输入与预留结果存储。",
+  "allowUsers": "允许普通用户",
+  "blockUsers": "禁用普通用户",
+  "usersOn": "已允许普通用户",
+  "usersOff": "已禁用普通用户",
+  "owner": "所有者：{user}（UID {uid}）",
+  "purgeOwner": "清除所有者的任务",
+  "purgeConfirm": "清除 {user}（UID {uid}）的所有任务？运行中的任务会取消并等待结束；已保存的结果会移除。",
+  "confirmPurge": "确认清除",
+  "keepJobs": "保留任务",
+  "schedulesTitle": "计划",
+  "scheduleHelp": "由套件账户每小时、每日或每周重新计算固定私有副本。最多 8 个计划；错过的执行仅记录，不补跑。",
+  "scheduleCopy": "计划重跑副本",
+  "scheduleSource": "私有副本：{name}",
+  "interval": "重复间隔",
+  "hourly": "每小时",
+  "daily": "每日",
+  "weekly": "每周",
+  "scheduleConsent": "我同意保留此固定副本，并由套件账户重新计算。不读取新来源文件或个人 ACL。",
+  "createSchedule": "创建计划",
+  "noSchedules": "暂无计划",
+  "scheduleOn": "已启用",
+  "scheduleOff": "已停用",
+  "nextRun": "下次执行：{time}",
+  "missedRuns": "错过执行：{count} 次",
+  "disableSchedule": "停用计划",
+  "deleteSchedule": "删除计划",
+  "deleteScheduleConsent": "删除 {name} 的计划？排队任务将取消，运行中的任务将停止并完成收尾。已完成结果保留。",
+  "confirmDeleteSchedule": "确认删除",
+  "enableSchedule": "启用计划",
+  "enableScheduleConsent": "使用当前 worker revision 启用 {name} 的计划？我同意重新计算此固定副本。不重播过去的执行。",
+  "confirmEnableSchedule": "确认启用",
+  "revisionChanged": "Worker revision 已更改。管理员须检查并明确启用此计划。",
+  "scheduledJob": "计划执行",
+  "unknownTime": "未知"
+}

package/dist/templates/native-go-background/frontend/src/background/i18n/zh-TW.json

@@ -0,0 +1,83 @@
+{
+  "title": "背景工作",
+  "help": "將選取的一個檔案複製到套件內，由套件帳號計算 SHA-256。登出後工作仍會繼續。副本與結果由套件保存，來源權限變動不會收回；再次登入即可查看自己的結果。",
+  "unsupported": "你的帳號無法使用背景工作。請管理員允許一般使用者。",
+  "modeOn": "背景模式已開啟",
+  "modeOff": "背景模式已關閉",
+  "enable": "開啟",
+  "disable": "關閉",
+  "worker": "Worker",
+  "workerRunning": "Worker 正以 {user} 執行",
+  "workerStopped": "Worker 未執行",
+  "chooseFile": "選擇檔案",
+  "chosen": "已選擇的檔案：{path}",
+  "pickerTitle": "選擇要匯入的檔案",
+  "pickerConsent": "選取的檔案會用你目前的 DSM 登入讀取一次並交給背景工作，不會保存授權。",
+  "submit": "匯入並送出",
+  "refresh": "重新整理",
+  "cancel": "取消",
+  "result": "結果",
+  "download": "下載結果",
+  "noJobs": "尚無工作",
+  "state_queued": "排隊中",
+  "state_running": "執行中",
+  "state_succeeded": "成功",
+  "state_failed": "失敗",
+  "state_canceled": "已取消",
+  "state_interrupted": "已中斷",
+  "limits": "每個檔案最多 {size} KiB、佇列 {queue} 個工作、每個工作 {seconds} 秒。",
+  "errors": {
+    "failed": "無法完成要求。請重新整理後再試。",
+    "unsupported": "你的帳號無法使用背景工作。請管理員允許一般使用者。",
+    "disabled": "背景模式已關閉。",
+    "limit-exceeded": "檔案超過上限。",
+    "queue-full": "佇列已滿。",
+    "quota-exceeded": "背景儲存空間已滿。",
+    "conflict": "工作狀態已變更，請重新整理。",
+    "not_found": "找不到。",
+    "denied": "存取被拒絕。",
+    "session_required": "DSM 工作階段已過期，請重新登入。",
+    "owner-queue-full": "你的待處理工作已達上限。請等待完成或取消一個工作。",
+    "owner-quota-exceeded": "你的背景儲存已達上限。請管理員清除舊工作。",
+    "identity_unavailable": "無法確認你的 DSM 使用者 UID。請重新登入或洽管理員。",
+    "schedule-full": "已達 8 個排程上限。請刪除排程。",
+    "input-unavailable": "私有副本不存在或已變更。請重新匯入。"
+  },
+  "ownerScope": "你只能檢視、取消及下載自己的工作。",
+  "adminScope": "管理員可檢視及取消所有使用者的工作。",
+  "ownerLimits": "每人上限：{jobs} 個待處理工作、{size} KiB 輸入與預留結果儲存。",
+  "allowUsers": "允許一般使用者",
+  "blockUsers": "停用一般使用者",
+  "usersOn": "已允許一般使用者",
+  "usersOff": "已停用一般使用者",
+  "owner": "擁有者：{user}（UID {uid}）",
+  "purgeOwner": "清除擁有者的工作",
+  "purgeConfirm": "清除 {user}（UID {uid}）的所有工作？執行中的工作會取消並等待結束；已儲存的結果會移除。",
+  "confirmPurge": "確認清除",
+  "keepJobs": "保留工作",
+  "schedulesTitle": "排程",
+  "scheduleHelp": "由套件帳號每小時、每日或每週重算固定私有副本。最多 8 個排程；錯過的執行只記錄，不補跑。",
+  "scheduleCopy": "排程重跑副本",
+  "scheduleSource": "私有副本：{name}",
+  "interval": "重複間隔",
+  "hourly": "每小時",
+  "daily": "每日",
+  "weekly": "每週",
+  "scheduleConsent": "我同意保留此固定副本，並由套件帳號重算。不讀取新來源檔案或個人 ACL。",
+  "createSchedule": "建立排程",
+  "noSchedules": "尚無排程",
+  "scheduleOn": "已啟用",
+  "scheduleOff": "已停用",
+  "nextRun": "下次執行：{time}",
+  "missedRuns": "錯過執行：{count} 次",
+  "disableSchedule": "停用排程",
+  "deleteSchedule": "刪除排程",
+  "deleteScheduleConsent": "刪除 {name} 的排程？排隊工作會取消，執行中工作會停止並完成收尾。已完成結果保留。",
+  "confirmDeleteSchedule": "確認刪除",
+  "enableSchedule": "啟用排程",
+  "enableScheduleConsent": "使用目前 worker revision 啟用 {name} 的排程？我同意重算此固定副本。不重播過去的執行。",
+  "confirmEnableSchedule": "確認啟用",
+  "revisionChanged": "Worker revision 已變更。管理員須審閱並明確啟用此排程。",
+  "scheduledJob": "排程執行",
+  "unknownTime": "未知"
+}

package/dist/templates/native-go-background/frontend/src/background/i18n.ts

@@ -0,0 +1,19 @@
+import en from './i18n/en.json'
+import zhTW from './i18n/zh-TW.json'
+import zhCN from './i18n/zh-CN.json'
+import ja from './i18n/ja.json'
+import ko from './i18n/ko.json'
+import de from './i18n/de.json'
+import fr from './i18n/fr.json'
+import es from './i18n/es.json'
+import it from './i18n/it.json'
+export type BackgroundCopy=typeof en
+export const backgroundCatalogs:Record<string,BackgroundCopy>={en,'zh-TW':zhTW,'zh-CN':zhCN,ja,ko,de,fr,es,it}
+export function backgroundCopy(locale:string):BackgroundCopy{
+ const aliases:Record<string,string>={enu:'en',cht:'zh-TW',chs:'zh-CN',jpn:'ja',krn:'ko',ger:'de',fre:'fr',spn:'es',ita:'it'}
+ const key=locale.replaceAll('_','-');return backgroundCatalogs[aliases[key]??key]??backgroundCatalogs[key.split('-')[0]]??en
+}
+export function backgroundErrorCopy(e:unknown,copy:BackgroundCopy):string{
+ const code=(e as {code?:string})?.code??''
+ return (copy.errors as Record<string,string>)[code]??copy.errors.failed
+}

package/dist/templates/native-go-background/frontend/src/background/picker-provider.ts

@@ -0,0 +1,13 @@
+import type {Context} from '../context'
+import {createM2Provider} from '../nas/m2-provider'
+import type {M2Provider} from '../nas/m2-contract'
+
+// The shared File Station picker browses through bg.browse, the caller's
+// own session, so a package built without --file-station still has a picker.
+// Confirming a pick stores nothing and grants nothing: submit re-reads the file
+// through the same session. Only the listing and the confirm step are real; the
+// grant and file operations of the full provider are never reached from here.
+export function createBackgroundPickerProvider(ctx:Pick<Context,'call'>):M2Provider{
+ const provider=createM2Provider({call:(method,params)=>ctx.call(method==='nas.discovery'?'bg.browse':method,params)})
+ return {...provider,async confirm(folder,writable){return {grantId:'',folder,writable}}}
+}

package/dist/templates/native-go-background/frontend/test/background.test.ts

@@ -0,0 +1,179 @@
+// @vitest-environment jsdom
+import {readFileSync} from 'node:fs'
+import {join} from 'node:path'
+import {test,expect} from 'vitest'
+import {createApp,h,nextTick} from 'vue'
+import {AppRoot} from '@synopackageland/ui'
+import BackgroundPanel from '../src/background/BackgroundPanel.vue'
+import {backgroundCatalogs,backgroundCopy} from '../src/background/i18n'
+import {m2Copy} from '../src/nas/m2-i18n'
+// The UI Select is a Reka combobox: drive it by keyboard (the UI README helper), which also proves it is keyboard operable.
+// Attrs such as data-schedule-interval land on the focusable combobox itself.
+async function choose(root:HTMLElement,marker:string,label:string){
+ const trigger=root.querySelector<HTMLElement>(`[${marker}][role=combobox]`)!;expect(trigger,marker).toBeTruthy()
+ expect(trigger.id,marker).toBeTruthy();expect(root.querySelector(`label[for="${trigger.id}"]`),marker).toBeTruthy()
+ trigger.dispatchEvent(new KeyboardEvent('keydown',{key:'ArrowDown',bubbles:true,cancelable:true}));await settle()
+ const option=[...document.querySelectorAll<HTMLElement>('[role=option]')].find(o=>o.textContent?.trim()===label)
+ if(!option||option.getAttribute('aria-disabled')==='true')throw new Error(`No enabled option: ${label}`)
+ option.focus();option.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',bubbles:true,cancelable:true}));await settle()
+ expect(trigger.textContent).toContain(label)
+}
+async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
+type Call=(method:string,params?:Record<string,unknown>)=>Promise<any>
+function mount(call:Call,locale='en'){
+ const root=document.createElement('div');document.body.append(root)
+ const app=createApp({render:()=>h(AppRoot,{},()=>h(BackgroundPanel,{ctx:{call,locale}}))})
+ app.config.idPrefix=`bg-${Math.random()}`;app.mount(root)
+ return {root,close(){app.unmount();root.remove()}}
+}
+const click=(root:HTMLElement,text:string)=>{const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text)!;expect(b).toBeTruthy();b.click()}
+const status=(enabled:boolean)=>({supported:true,enabled,admin:true,allowOrdinaryUsers:false,revision:1,queued:0,running:0,worker:{username:'SynoPkg',alive:true},limits:{maxInputBytes:524288,maxQueued:16,maxOwnerPending:2,maxOwnerBytes:1048576,maxTotalBytes:16777216,jobTimeoutSeconds:60}})
+
+test('non-administrators see unsupported and no action',async()=>{
+ const f=mount(async()=>{throw {code:'unsupported'}});await settle()
+ expect(f.root.textContent).toContain(backgroundCopy('en').unsupported);expect(f.root.querySelector('button')).toBeNull();f.close()
+})
+const browse=(args?:Record<string,unknown>)=>args?.folder
+ ?{files:[{name:'fixture.bin',path:`${args.folder}/fixture.bin`,isdir:false,additional:{size:3}}],total:1,offset:0}
+ :{shares:[{name:'share',path:'/share',isdir:true}],total:1,offset:0}
+test('enable, pick a file, submit, cancel and result use only bg.* routes',async()=>{
+ const calls:Array<[string,Record<string,unknown>|undefined]>=[];let enabled=false,jobs:any[]=[]
+ const f=mount(async(m,p)=>{
+  calls.push([m,p])
+  switch(m){
+   case 'bg.status':return status(enabled)
+   case 'bg.jobs.list':return {jobs}
+   case 'bg.browse':return browse(p)
+   case 'bg.mode.set':enabled=true;return {enabled}
+   case 'bg.jobs.submit':jobs=[{id:'j1',name:'fixture.bin',state:'queued'}];return {job:jobs[0],duplicate:false}
+   case 'bg.jobs.cancel':jobs=[{...jobs[0],state:'canceled'}];return {job:jobs[0]}
+   case 'bg.jobs.result':return {result:{sha256:'x'}}
+  }
+ });await settle()
+ const copy=backgroundCopy('en'),pick=m2Copy('en')
+ click(f.root,copy.enable);await settle()
+ expect(f.root.querySelector('[data-bg-folder]')).toBeNull();expect(f.root.querySelector('[data-bg-file]')).toBeNull()
+ const submitButton=()=>[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===copy.submit)!
+ expect(submitButton().disabled).toBe(true)
+ click(f.root,copy.chooseFile);await settle()
+ click(f.root,'Open share');await settle()
+ click(f.root,'Select fixture.bin');await settle();click(f.root,pick.confirm);await settle()
+ expect(f.root.textContent).toContain('/share/fixture.bin')
+ expect(submitButton().disabled).toBe(false)
+ click(f.root,copy.submit);await settle()
+ const submit=calls.find(c=>c[0]==='bg.jobs.submit')![1]!
+ expect(submit.folder).toBe('/share');expect(submit.relative).toBe('fixture.bin');expect(typeof submit.key).toBe('string')
+ expect(f.root.querySelector('[data-job-state=queued]')).not.toBeNull()
+ click(f.root,copy.cancel);await settle()
+ expect(f.root.querySelector('[data-job-state=canceled]')).not.toBeNull()
+ expect(calls.filter(c=>c[0]==='bg.browse').length).toBeGreaterThan(0)
+ expect(calls.every(c=>/^bg\./.test(c[0]))).toBe(true)
+ f.close()
+})
+test('a denied listing shows a localized error and cannot submit',async()=>{
+ const f=mount(async(m)=>{
+  if(m==='bg.status')return status(true)
+  if(m==='bg.jobs.list')return {jobs:[]}
+  if(m==='bg.browse')throw {code:'denied',message:'Cookie=CANARY'}
+ });await settle()
+ click(f.root,backgroundCopy('en').chooseFile);await settle()
+ expect(f.root.textContent).toContain(m2Copy('en').errorDenied);expect(f.root.textContent).not.toContain('CANARY')
+ expect([...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===backgroundCopy('en').submit)!.disabled).toBe(true)
+ f.close()
+})
+test('nine locales have identical keys and placeholders',()=>{
+ const en=backgroundCatalogs.en,flat=(o:any,p=''):Record<string,string>=>Object.fromEntries(Object.entries(o).flatMap(([k,v])=>typeof v==='string'?[[p+k,v]]:Object.entries(flat(v,`${p}${k}.`))))
+ const base=flat(en)
+ expect(Object.keys(backgroundCatalogs).sort()).toEqual(['de','en','es','fr','it','ja','ko','zh-CN','zh-TW'])
+ for(const catalog of Object.values(backgroundCatalogs)){
+  const map=flat(catalog);expect(Object.keys(map).sort()).toEqual(Object.keys(base).sort())
+  for(const [k,v] of Object.entries(map)){expect(v.length).toBeGreaterThan(0);expect(v.match(/\{\w+\}/g)??[]).toEqual(base[k].match(/\{\w+\}/g)??[])}
+ }
+})
+
+test('a null job list from the worker renders as no jobs',async()=>{
+ const f=mount(async m=>m==='bg.status'?status(true):m==='bg.jobs.list'?{jobs:null}:{});await settle()
+ expect(f.root.textContent).toContain(backgroundCopy('en').noJobs);f.close()
+})
+
+test('the picker dialog explains the one-time read, not the M2 saved-selection consent',async()=>{
+ for(const locale of Object.keys(backgroundCatalogs)){
+  const f=mount(async(m,p)=>m==='bg.status'?status(true):m==='bg.jobs.list'?{jobs:[]}:browse(p),locale);await settle()
+  const copy=backgroundCopy(locale)
+  click(f.root,copy.chooseFile);await settle()
+  const dialog=f.root.querySelector('[role=dialog]')!.textContent!
+  expect(dialog).toContain(copy.pickerConsent);expect(dialog).not.toContain(m2Copy(locale).consent)
+  f.close()
+ }
+})
+
+test('ordinary owner can submit but has no administrator controls',async()=>{
+ const calls:string[]=[]
+ const f=mount(async(m,p)=>{calls.push(m);if(m==='bg.status')return {...status(true),admin:false,allowOrdinaryUsers:true};if(m==='bg.jobs.list')return {jobs:[{id:'owned',name:'owned.bin',state:'queued',submitter:{user:'bob',uid:'1025'}}]};if(m==='bg.browse')return browse(p);return {}});await settle()
+ const c=backgroundCopy('en')
+ expect(f.root.textContent).toContain(c.ownerScope)
+ expect(f.root.textContent).not.toContain(c.disable)
+ expect(f.root.textContent).not.toContain(c.allowUsers)
+ expect(f.root.textContent).not.toContain(c.purgeOwner)
+ expect([...f.root.querySelectorAll('button')].some(b=>b.textContent?.trim()===c.chooseFile)).toBe(true)
+ click(f.root,c.cancel);await settle();expect(calls).toContain('bg.jobs.cancel');f.close()
+})
+test('admin ordinary-user switch and exact owner purge require explicit confirmation',async()=>{
+ const calls:Array<[string,Record<string,unknown>|undefined]>=[]
+ const f=mount(async(m,p)=>{calls.push([m,p]);if(m==='bg.status')return {...status(true),admin:true,allowOrdinaryUsers:false};if(m==='bg.jobs.list')return {jobs:[{id:'one',name:'a',state:'succeeded',submitter:{user:'bob',uid:'1025'}}]};return {}});await settle()
+ const c=backgroundCopy('en');click(f.root,c.allowUsers);await settle()
+ expect(calls.find(([m])=>m==='bg.users.set')?.[1]).toEqual({allowOrdinaryUsers:true})
+ click(f.root,c.purgeOwner);await settle();expect(calls.some(([m])=>m==='bg.jobs.purge')).toBe(false)
+ click(f.root,c.confirmPurge);await settle()
+ expect(calls.find(([m])=>m==='bg.jobs.purge')?.[1]).toEqual({owner:{user:'bob',uid:'1025'}});f.close()
+})
+test('malformed status cannot render action controls or crash the panel',async()=>{
+ const f=mount(async()=>({state:'not-enabled'}));await settle()
+ expect(f.root.textContent).toContain(backgroundCopy('en').errors.failed)
+ expect(f.root.querySelector('button')).toBeNull();f.close()
+})
+
+test('schedule creation requires copy consent; owner controls disable and delete exact schedule',async()=>{
+ const calls:Array<[string,Record<string,unknown>|undefined]>=[];let schedules:any[]=[]
+ const f=mount(async(m,p)=>{calls.push([m,p]);switch(m){
+ case 'bg.status':return {...status(true),owner:{user:'bob',uid:'1025'},admin:false,allowOrdinaryUsers:true}
+ case 'bg.jobs.list':return {jobs:[{id:'import',name:'copy.bin',state:'succeeded',copyRetained:true,submitter:{user:'bob',uid:'1025'}}]}
+ case 'bg.schedules.list':return {schedules}
+ case 'bg.schedules.create':schedules=[{id:'schedule',name:'copy.bin',owner:{user:'bob',uid:'1025'},enabled:true,intervalSeconds:3600,nextAt:'2026-10-05T01:00:00Z',missed:0,workerRevision:1}];return {schedule:schedules[0]}
+ case 'bg.schedules.disable':schedules=[{...schedules[0],enabled:false}];return {schedule:schedules[0]}
+ case 'bg.schedules.delete':schedules=[];return {deleted:true}
+ default:return {}
+ }});await settle();const c=backgroundCopy('en')
+ click(f.root,c.scheduleCopy);await settle()
+ expect(calls.some(([m])=>m==='bg.schedules.create')).toBe(false)
+ const create=[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===c.createSchedule)!
+ expect(create.disabled).toBe(true)
+ await choose(f.root,'data-schedule-interval',c.weekly)
+ const consent=f.root.querySelector<HTMLElement>('[data-schedule-consent] [role=checkbox], [role=checkbox][data-schedule-consent]')!;consent.click();await settle()
+ click(f.root,c.createSchedule);await settle()
+ expect(calls.find(([m])=>m==='bg.schedules.create')?.[1]).toMatchObject({jobId:'import',intervalSeconds:604800,consent:true})
+ expect(f.root.querySelector('[data-schedule-id=schedule]')?.textContent).toContain(c.nextRun.replace('{time}','').trim().split(':')[0])
+ click(f.root,c.disableSchedule);await settle();expect(calls.find(([m])=>m==='bg.schedules.disable')?.[1]).toEqual({id:'schedule'})
+ click(f.root,c.deleteSchedule);await settle();expect(calls.some(([m])=>m==='bg.schedules.delete')).toBe(false)
+ click(f.root,c.confirmDeleteSchedule);await settle();expect(calls.find(([m])=>m==='bg.schedules.delete')?.[1]).toEqual({id:'schedule'});f.close()
+})
+
+test('administrator sees the exact selected copy before enabling a schedule',async()=>{
+ const calls:Array<[string,Record<string,unknown>|undefined]>=[]
+ const name='private-'.padEnd(128,'x')
+ const f=mount(async(m,p)=>{calls.push([m,p]);if(m==='bg.status')return status(true);if(m==='bg.jobs.list')return {jobs:[]};if(m==='bg.schedules.list')return {schedules:[{id:'disabled',name,owner:{user:'normal1',uid:'1025'},enabled:false,nextAt:'2026-10-05T01:00:00Z',missed:0}]};return {}});await settle()
+ const c=backgroundCopy('en');click(f.root,c.enableSchedule);await settle()
+ const expected=c.enableScheduleConsent.replace('{name}',name)
+ expect(expected).toContain(name);expect(f.root.textContent).toContain(expected)
+ expect(calls.some(([m])=>m==='bg.schedules.enable')).toBe(false)
+ click(f.root,c.confirmEnableSchedule);await settle()
+ expect(calls.find(([m])=>m==='bg.schedules.enable')?.[1]).toEqual({id:'disabled',consent:true});f.close()
+})
+
+// Same rule as the base template (test/native-controls.test.ts): UI components only, and the
+// UI's own Form auto layout and FormItem id binding instead of per-app workarounds.
+test('the background panel uses only UI components and the UI form binding',()=>{
+ const template=readFileSync(join(__dirname,'../src/background/BackgroundPanel.vue'),'utf8').replace(/<script[\s\S]*?<\/script>/g,'').replace(/<style[\s\S]*?<\/style>/g,'')
+ expect(template.match(/<(?:a|input|select|textarea|label)[\s>/]/g)).toBeNull()
+ expect(template).not.toMatch(/direction="vertical"|field\.controlId|role="group"/)
+})

package/dist/templates/native-go-better-auth/node/build.mjs

@@ -1,2 +1,4 @@
 import {build} from 'esbuild';
+import {writeThirdPartyNotices} from './third-party-notices.mjs';
 await build({entryPoints:['app.mjs'],bundle:true,platform:'node',format:'esm',target:'node22',outfile:'dist/app.mjs',banner:{js:"import {createRequire} from 'node:module'; const require = createRequire(import.meta.url);"}});
+writeThirdPartyNotices(process.cwd(), 'dist/LICENSES');

package/dist/templates/native-go-integration/backend/internal/app/personal.go

@@ -22,11 +22,11 @@ import (
 // The client may send an opaque ID, never a user name, UID or filesystem path.
 var personalLookup = user.Lookup
 var integrationHealth = func(ctx context.Context, cfg Config) helper.State {
-	return helper.NewClient(cfg.HelperInventory).Status(ctx)
+	return cfg.integrationState(ctx)
 }
 
 func (cfg Config) integrationRoutes() []api.Route {
-	if cfg.HelperInventory.Protocol != 1 {
+	if !cfg.PackageIntegration && cfg.HelperInventory.Protocol != 1 {
 		return nil
 	}
 	return append([]api.Route{api.User("personal.list", cfg.personalList), api.User("personal.read", cfg.personalRead), api.User("personal.write", cfg.personalWrite)}, cfg.identityRoutes()...)

package/dist/templates/native-go-integration/backend/internal/app/personal_test.go

@@ -68,6 +68,43 @@ func TestPersonalUsersReadWriteAndMutuallyRefuse(t *testing.T) {
 		t.Fatal(code)
 	}
 }
+// Package-only integration has no helper: the sample stays package-owned data
+// and never waits for a helper health check.
+func TestPackageOnlyPersonalDataNeedsNoHelper(t *testing.T) {
+	oldLookup := personalLookup
+	personalLookup = func(name string) (*user.User, error) {
+		return &user.User{Username: name, Uid: map[string]string{"normal1": "1001", "normal2": "1002"}[name], Gid: "100"}, nil
+	}
+	t.Cleanup(func() { personalLookup = oldLookup })
+	cfg := testConfig(t)
+	cfg.PackageIntegration = true
+	if cfg.HelperInventory != (helper.Inventory{}) {
+		t.Fatal("fixture must have no helper inventory")
+	}
+	first, second := personalHandle(t, cfg, "normal1"), personalHandle(t, cfg, "normal2")
+	if first == second {
+		t.Fatal("handles must bind caller")
+	}
+	if code, out := personalCall(t, cfg, "normal1", "personal.write", `{"id":"`+first+`","text":"mine"}`); code != "" {
+		t.Fatal(code, out)
+	}
+	if code, out := personalCall(t, cfg, "normal1", "personal.read", `{"id":"`+first+`"}`); code != "" || out["data"].(map[string]any)["text"] != "mine" {
+		t.Fatal(code, out)
+	}
+	if code, _ := personalCall(t, cfg, "normal2", "personal.read", `{"id":"`+first+`"}`); code != "access_denied" {
+		t.Fatal(code)
+	}
+}
+
+// Without package-only mode and without an approved helper nothing is served:
+// a helper build whose inventory failed to load stays closed.
+func TestHelperlessConfigWithoutPackageModeServesNoPersonalRoutes(t *testing.T) {
+	cfg := testConfig(t)
+	if routes := cfg.integrationRoutes(); len(routes) != 0 {
+		t.Fatalf("%d routes", len(routes))
+	}
+}
+
 func TestPersonalRejectsForgedIdentityAndPaths(t *testing.T) {
 	cfg := personalFixture(t)
 	id := personalHandle(t, cfg, "normal1")