@synopackageland/cli 0.4.0 → 0.5.0

package/dist/templates/native-go-vue/frontend/test/picker-wire.test.ts

@@ -0,0 +1,110 @@
+// @vitest-environment jsdom
+import {expect,test,vi} from 'vitest'
+import {nextTick} from 'vue'
+import {mount} from '../src/sdk-main'
+import {jobCopy,jobCatalogs} from '../src/jobs/i18n'
+import {m2Copy} from '../src/nas/m2-i18n'
+import type {Context} from '../src/context'
+const id=(c:string)=>c.repeat(64)
+async function settle(){for(let i=0;i<35;i++){await Promise.resolve();await nextTick()}await new Promise(r=>setTimeout(r,25))}
+function click(root:HTMLElement,text:string){const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text||b.getAttribute('aria-label')===text);expect(b,text).toBeTruthy();b!.click()}
+function fixture(locale='en'){
+ let state='running',reason='',lost=false,user='normal1',deny=false
+ const reopen:Array<()=>void>=[]
+ const wire=()=>({jobId:id('b'),revision:2,mode:'interactive',state,safeReason:reason||undefined,progress:{completedUnits:state==='succeeded'?1:0,totalUnits:1},drained:state==='succeeded',effectsUnknown:false})
+ const call=vi.fn(async(method:string,args?:Record<string,unknown>)=>{
+  if(method==='app.status')return {package:'t0090',version:'1',user,admin:false}
+  if(method==='integration.status')return {state:'ready',packageRunning:'running',scheduler:'ready'}
+  if(method==='personal.list')return {items:[]}
+  if(method==='jobs.status')return {revision:2,availability:'session-required',workers:[{id:'inspect',revision:7,actions:['nas.files.list','nas.files.stat','nas.files.read'],maxBytes:4096}],items:call.mock.calls.some(([m])=>m==='jobs.submit')?[wire()]:[]}
+  if(method==='nas.discovery'){if(deny)throw {code:'denied',message:'Cookie=CANARY'};return {files:args?.folder?[{name:'fixture.txt',path:'/home/fixture.txt',isdir:false,additional:{size:3}}]:null,shares:args?.folder?undefined:[{name:'Home',path:'/home',isdir:true}],total:1,offset:0}}
+  if(method==='nas.grants.confirm')return {grantId:id('a'),folder:args!.folder,writable:args!.writable}
+  if(method==='jobs.prepare')return {intentId:id('c'),jobId:id('b'),summaryDigest:id('d'),expiresAt:Date.now()+30000}
+  if(method==='jobs.submit'){if(lost)throw {code:'timeout'};return {jobId:id('b'),attachId:id('e'),revision:1,renewAfterMs:2000,ttlMs:6000}}
+  if(method==='jobs.lookup')return wire()
+  if(method==='jobs.cancel'){state='canceled';return {}}
+  throw {code:'unknown_method'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const ctx={locale,call,reopen(fn:()=>void){reopen.push(fn);return ()=>{}}} as Context
+ const app=mount(root,ctx)
+ return {root,app,call,reopen,done(){state='succeeded'},fence(){state='canceled';reason='fenced'},lost(){lost=true},deny(){deny=true},switchUser(){user='normal2'},close(){app.unmount();root.remove()}}
+}
+// The UI Select is a Reka combobox: drive it by keyboard (the UI README helper), which also proves it is keyboard operable.
+// Attrs such as data-job-action land on the focusable combobox itself.
+async function choose(root:HTMLElement,marker:string,label:string){
+ const trigger=root.querySelector<HTMLElement>(`[${marker}][role=combobox]`)!;expect(trigger,marker).toBeTruthy()
+ expect(trigger.id,marker).toBeTruthy();expect(root.querySelector(`label[for="${trigger.id}"]`),marker).toBeTruthy()
+ trigger.dispatchEvent(new KeyboardEvent('keydown',{key:'ArrowDown',bubbles:true,cancelable:true}));await settle()
+ const option=[...document.querySelectorAll<HTMLElement>('[role=option]')].find(o=>o.textContent?.trim()===label)
+ if(!option||option.getAttribute('aria-disabled')==='true')throw new Error(`No enabled option: ${label}`)
+ option.focus();option.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',bubbles:true,cancelable:true}));await settle()
+ expect(trigger.textContent).toContain(label)
+}
+async function pick(f:ReturnType<typeof fixture>,file=true){
+ const j=jobCopy('en'),n=m2Copy('en')
+ click(f.root,j.chooseSource);await settle()
+ if(file){click(f.root,'Open Home');await settle();const button=f.root.querySelector<HTMLButtonElement>('button[aria-label="Select fixture.txt"]')!;expect(button.textContent?.trim()).toBe('Select fixture.txt');click(f.root,'Select fixture.txt')}
+ else click(f.root,'Select Home')
+ await settle();click(f.root,n.confirm);await settle()
+}
+test('SDK mount connects file picker, folder consent, worker revision, single submit and completion/cancel/fence',async()=>{
+ const f=fixture(),j=jobCopy('en')
+ try{
+  await settle();expect(f.call.mock.calls.some(([m])=>m==='personal.list')).toBe(false);await pick(f)
+  expect(f.call).toHaveBeenCalledWith('nas.grants.confirm',{folder:'/home',writable:false})
+  expect(f.root.textContent).toContain('/home/fixture.txt')
+  expect(f.root.textContent).not.toContain('NAS folder grants and file operations are not available yet.')
+  click(f.root,j.submitInteractive);click(f.root,j.submitInteractive);await settle()
+  expect(f.call).toHaveBeenCalledWith('jobs.prepare',{worker:{id:'inspect',revision:7},parent:{id:id('a'),revision:1},input:{steps:[{action:'nas.files.stat',segments:['fixture.txt']}]}})
+  expect(f.call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(1)
+  expect(f.root.querySelector('progress')).toBeTruthy()
+  click(f.root,j.cancel);await settle();expect(f.root.textContent).toContain(j.canceled)
+  f.fence();click(f.root.querySelector<HTMLElement>('.jobs-panel')!,j.refresh);await settle();expect(f.root.textContent).toContain(j.fenceCanceled)
+  f.done();click(f.root.querySelector<HTMLElement>('.jobs-panel')!,j.refresh);await settle();expect(f.root.textContent).toContain(j.succeeded)
+ }finally{f.close()}
+})
+test('lost initial submit reply locks the form to original lookup; permissions fail without grant or submit',async()=>{
+ const f=fixture(),j=jobCopy('en')
+ try{
+  await settle();await pick(f);f.lost();click(f.root,j.submitInteractive);await settle()
+  expect(f.root.textContent).toContain(j.uncertain)
+  const button=[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===j.submitInteractive);expect(button?.disabled).toBe(true)
+  click(f.root,j.lookup);await settle()
+  expect(f.call).toHaveBeenCalledWith('jobs.lookup',{intentId:id('c')})
+  expect(f.call.mock.calls.filter(([m])=>m==='jobs.submit')).toHaveLength(1)
+ }finally{f.close()}
+ const g=fixture()
+ try{await settle();g.deny();click(g.root,j.chooseSource);await settle();expect(g.root.textContent).toContain(m2Copy('en').errorDenied);expect(g.root.textContent).not.toContain('CANARY');expect(g.call.mock.calls.some(([m])=>m==='nas.grants.confirm'||m==='jobs.submit')).toBe(false)}finally{g.close()}
+})
+test('folder list/read bounds and identity switch clear pending input; nine job catalogs stay complete',async()=>{
+ const f=fixture(),j=jobCopy('en')
+ try{
+  await settle();await pick(f,false)
+  await choose(f.root,'data-job-action',j.listOperation)
+  const limit=f.root.querySelector<HTMLInputElement>('input[data-job-bound]')!;limit.value='101';limit.dispatchEvent(new Event('input',{bubbles:true}));await settle()
+  click(f.root,j.submitInteractive);await settle();expect(f.call.mock.calls.some(([m])=>m==='jobs.prepare')).toBe(false)
+  limit.value='5';limit.dispatchEvent(new Event('input',{bubbles:true}));await settle();click(f.root,j.submitInteractive);await settle()
+  expect(f.call).toHaveBeenCalledWith('jobs.prepare',{worker:{id:'inspect',revision:7},parent:{id:id('a'),revision:1},input:{steps:[{action:'nas.files.list',segments:[],limit:5}]}})
+  f.switchUser();f.reopen.forEach(fn=>fn());await settle();expect(f.root.querySelector('[data-job-action]')).toBeNull()
+ }finally{f.close()}
+ for(const copy of Object.values(jobCatalogs)){expect(Object.keys(copy).sort()).toEqual(Object.keys(jobCatalogs.en).sort());for(const key of Object.keys(copy) as Array<keyof typeof copy>){expect(copy[key].trim()).not.toBe('');expect(copy[key].match(/\{\w+\}/g)??[]).toEqual(jobCatalogs.en[key].match(/\{\w+\}/g)??[])}}
+})
+
+test('read input is bounded by the live worker and late prepare cannot submit after account switch',async()=>{
+ const f=fixture(),j=jobCopy('en')
+ try{
+  await settle();await pick(f)
+  await choose(f.root,'data-job-action',j.readOperation)
+  const bound=f.root.querySelector<HTMLInputElement>('input[data-job-bound]')!;expect(bound.max).toBe('4096');expect(f.root.querySelector<HTMLLabelElement>(`label[for="${bound.id}"]`)?.textContent).toContain(j.byteLimit)
+  bound.value='24';bound.dispatchEvent(new Event('input',{bubbles:true}));await settle();click(f.root.querySelector<HTMLElement>('.jobs-panel')!,j.refresh);await settle();expect(bound.value).toBe('24')
+  bound.value='4097';bound.dispatchEvent(new Event('input',{bubbles:true}));await settle();click(f.root,j.submitInteractive);await settle();expect(f.call.mock.calls.some(([m])=>m==='jobs.prepare')).toBe(false)
+  bound.value='3';bound.dispatchEvent(new Event('input',{bubbles:true}));await settle()
+  let done!:(value:unknown)=>void
+  const original=f.call.getMockImplementation()!
+  f.call.mockImplementation(async(method,args)=>method==='jobs.prepare'?new Promise(resolve=>done=resolve):original(method,args))
+  click(f.root,j.submitInteractive);await settle();f.switchUser();f.reopen.forEach(fn=>fn());await settle()
+  done({intentId:id('c'),jobId:id('b'),summaryDigest:id('d'),expiresAt:Date.now()+30000});await settle()
+  expect(f.call.mock.calls.some(([m])=>m==='jobs.submit')).toBe(false)
+ }finally{f.close()}
+})

package/dist/templates/native-go-vue/frontend/test/shell-preview.html

@@ -0,0 +1,19 @@
+<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Shell local fixture</title><style>html,body{margin:0;height:100%}#root{height:100%}</style></head>
+<body><div id="root"></div><script type="module">
+import {mount} from '../src/main.ts'
+import {createMockNasService} from '../src/nas/mock-provider.ts'
+// Synthetic responses for local browser QA of the DSM shell. No NAS, no credentials.
+const params=new URLSearchParams(location.search),state=params.get('state')||'ready',locale=params.get('locale')||'en'
+mount(document.querySelector('#root'),{
+ locale,reopen(){return()=>{}},
+ async call(method){
+  if(method==='app.status')return {package:'T0133 Sidebar Demo',version:'0.1.0-0001',user:'admin',admin:true}
+  if(method==='integration.status')return {state,reason:state==='ready'?'fixture':'not-requested',packageRunning:'running',scheduler:'ready'}
+  if(method==='identity.status')return {mode:'better-auth'}
+  if(method==='personal.list')return {items:[{id:'demo-private',name:'My sample note'}]}
+  if(method==='personal.read')return {id:'demo-private',text:'Remember to check the DSM window layout.'}
+  throw {code:'unknown_method'}
+ },
+ root:{state:async()=> 'missing',authorize:async()=> 'ready',run:async()=>{},remove:async()=> 'missing'},
+},{nasProvider:createMockNasService().connect('admin')})
+</script></body></html>

package/dist/templates/native-go-vue/frontend/test/shell-sdk.test.ts

@@ -0,0 +1,73 @@
+// @vitest-environment jsdom
+import {expect,test,vi} from 'vitest'
+import {createApp,h,nextTick} from 'vue'
+import SDKApp from '../src/SDKApp.vue'
+import {JobsProviderKey,type JobsProvider} from '../src/jobs/provider'
+import {jobCopy} from '../src/jobs/i18n'
+import {createMockNasService} from '../src/nas/mock-provider'
+import {NasProviderKey} from '../src/nas/provider'
+import {shellCopy} from '../src/shell/i18n'
+import type {Context} from '../src/context'
+
+async function settle(){for(let i=0;i<16;i++){await Promise.resolve();await nextTick()}await new Promise(resolve=>setTimeout(resolve,25))}
+function navLabels(root:HTMLElement){return [...root.querySelectorAll<HTMLElement>('[data-nav-item]')].map(node=>node.textContent?.trim())}
+function heading(root:HTMLElement){return root.querySelector('h1')?.textContent?.trim()}
+function pageText(root:HTMLElement,page:string){return root.querySelector(`[data-page="${page}"]`)?.textContent??''}
+function clickNav(root:HTMLElement,label:string){const node=[...root.querySelectorAll<HTMLElement>('[data-nav-item]')].find(node=>node.textContent?.trim()===label);expect(node,label).toBeTruthy();node!.click()}
+
+// A connected provider advertises interactive workers; the mock used by the
+// standalone preview does not. This stub keeps both modes on one provider so
+// the shell test can exercise both pages.
+function provider():JobsProvider{
+ return {
+  mode:'mock',
+  readiness:{interactive:'ready',background:'ready'},
+  interactive:{workers:[],prepareInteractive:async()=>{throw {code:'unavailable'}},submitInteractive:async()=>{throw {code:'unavailable'}}},
+  list:async()=>({revision:1,items:[]}),
+  prepare:async()=>{throw {code:'unavailable'}},
+  confirm:async()=>{},
+  lookup:async()=>undefined,
+  cancel:async()=>{},
+  revoke:async()=>({revoked:true,drained:true}),
+  disconnect(){},
+ }
+}
+function fixture(admin:boolean,locale='en'){
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status') return {package:'SdkShell',version:'0.1.0-0001',user:admin?'admin':'normal1',admin}
+  if(method==='integration.status') return {state:'ready',reason:'fixture',packageRunning:'unknown',scheduler:'not-probed'}
+  if(method==='identity.status') return {mode:'none'}
+  throw {code:'unknown_method'}
+ })
+ const ctx={locale,call,reopen:()=>()=>{}} as unknown as Context
+ const root=document.createElement('div');document.body.append(root)
+ const app=createApp({render:()=>h(SDKApp,{ctx})})
+ app.config.idPrefix=`sdk-shell-${Math.random()}`
+ app.provide(JobsProviderKey,provider())
+ app.provide(NasProviderKey,createMockNasService().connect(admin?'admin':'normal1'))
+ app.mount(root)
+ return {root,close(){app.unmount();root.remove()}}
+}
+
+test('interactive and background work get separate pages and the admin page is administrator-only',async()=>{
+ const admin=fixture(true),other=fixture(false)
+ try{
+  await settle()
+  expect(navLabels(admin.root)).toEqual(['Status','NAS folder access','Interactive jobs','Background jobs','Job management'])
+  expect(navLabels(other.root)).toEqual(['Status','NAS folder access','Interactive jobs','Background jobs'])
+  expect(heading(admin.root)).toBe(shellCopy('en').status)
+
+  clickNav(admin.root,shellCopy('en').interactive);await settle()
+  expect(heading(admin.root)).toBe('Interactive jobs')
+  expect(pageText(admin.root,'interactive')).toContain(jobCopy('en').interactiveHelp)
+  expect(pageText(admin.root,'interactive')).not.toContain(jobCopy('en').backgroundHelp)
+
+  clickNav(admin.root,shellCopy('en').background);await settle()
+  expect(heading(admin.root)).toBe('Background jobs')
+  expect(pageText(admin.root,'background')).toContain(jobCopy('en').backgroundHelp)
+  expect(pageText(admin.root,'background')).not.toContain(jobCopy('en').interactiveHelp)
+
+  clickNav(other.root,shellCopy('en').interactive);await settle()
+  expect(other.root.textContent).not.toContain(jobCopy('en').adminTitle)
+ }finally{admin.close();other.close()}
+})

package/dist/templates/native-go-vue/frontend/test/shell-ui.test.ts

@@ -0,0 +1,114 @@
+// @vitest-environment jsdom
+import {expect,test,vi} from 'vitest'
+import {nextTick} from 'vue'
+import {mount} from '../src/main'
+import {createMockNasService} from '../src/nas/mock-provider'
+import {shellCopy} from '../src/shell/i18n'
+import type {Context,IntegrationState} from '../src/context'
+
+async function settle(){for(let i=0;i<16;i++){await Promise.resolve();await nextTick()}await new Promise(resolve=>setTimeout(resolve,25))}
+function nav(root:HTMLElement){return [...root.querySelectorAll<HTMLElement>('[data-nav-item]')]}
+function navLabels(root:HTMLElement){return nav(root).map(node=>node.textContent?.trim())}
+function clickNav(root:HTMLElement,label:string){const node=nav(root).find(node=>node.textContent?.trim()===label);expect(node,label).toBeTruthy();node!.click()}
+function heading(root:HTMLElement){return root.querySelector('h1')?.textContent?.trim()}
+function pageShown(root:HTMLElement,page:string){return root.querySelector<HTMLElement>(`[data-page="${page}"]`)?.style.display !== 'none'}
+// A --background project adds one more page; the same test runs in both builds.
+function withBackground(root:HTMLElement,labels:string[]){return labels.flatMap(label=>label==='@@background@@'?(root.querySelector('[data-background-panel]')?[shellCopy('en').background]:[]):[label])}
+
+function fixture(options:{state?:IntegrationState;admin?:boolean;identity?:boolean;locale?:string}={}){
+ const flags={state:options.state??'ready' as IntegrationState,identity:options.identity??false,admin:options.admin??true,locale:options.locale??'en'}
+ const reopen:Array<()=>void>=[]
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status') return {package:'ShellDemo',version:'0.1.0-0001',user:flags.admin?'admin':'normal1',admin:flags.admin}
+  if(method==='integration.status') return {state:flags.state,reason:flags.state==='ready'?'fixture':'not-requested',packageRunning:'unknown',scheduler:'not-probed'}
+  if(method==='identity.status') return {mode:flags.identity?'better-auth':'none'}
+  if(method==='personal.list') return {items:[{id:'ShellDemo-private',name:'My sample note'}]}
+  if(method==='personal.read') return {id:'ShellDemo-private',text:'Private ShellDemo'}
+  throw {code:'unknown_method'}
+ })
+ const ctx={locale:flags.locale,reopen:(fn:()=>void)=>reopen.push(fn),call,root:{state:vi.fn(async()=> 'missing'),authorize:vi.fn(async()=> 'ready'),run:vi.fn(async()=>{}),remove:vi.fn(async()=> 'missing')}} as Context
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,ctx,{nasProvider:createMockNasService().connect(flags.admin?'admin':'normal1')})
+ const refresh=async()=>{reopen.forEach(fn=>fn());await settle()}
+ return {root,app,flags,refresh,cleanup(){app.unmount();root.remove()}}
+}
+
+test('the sidebar lists the enabled pages and the first one is shown by default',async()=>{
+ const f=fixture({identity:true})
+ try{
+  await settle()
+  expect(navLabels(f.root)).toEqual(withBackground(f.root,['Status','My sample data','NAS folder access','@@background@@','Optional app identity']))
+  expect(heading(f.root)).toBe('Status')
+  expect(nav(f.root).find(node=>node.textContent?.trim()==='Status')?.getAttribute('aria-current')).toBe('page')
+  expect(pageShown(f.root,'status')).toBe(true)
+ }finally{f.cleanup()}
+})
+
+test('choosing a sidebar entry swaps the page and its header',async()=>{
+ const f=fixture({identity:true})
+ try{
+  await settle()
+  clickNav(f.root,'NAS folder access');await settle()
+  expect(heading(f.root)).toBe('NAS folder access')
+  expect(nav(f.root).find(node=>node.textContent?.trim()==='NAS folder access')?.getAttribute('aria-current')).toBe('page')
+  expect(nav(f.root).find(node=>node.textContent?.trim()==='Status')?.getAttribute('aria-current')).toBeNull()
+  expect(pageShown(f.root,'status')).toBe(false)
+  expect(pageShown(f.root,'nas')).toBe(true)
+  clickNav(f.root,'My sample data');await settle()
+  expect(heading(f.root)).toBe('My sample data')
+ }finally{f.cleanup()}
+})
+
+test('pages only appear when the manifest enables their feature',async()=>{
+ const pending=fixture({state:'pending',identity:false})
+ const ready=fixture({state:'ready',identity:false})
+ try{
+  await settle()
+  // Sample data needs a ready integration; identity needs the better-auth build.
+  expect(navLabels(pending.root)).toEqual(withBackground(pending.root,['Status','NAS folder access','@@background@@']))
+  expect(navLabels(ready.root)).toEqual(withBackground(ready.root,['Status','My sample data','NAS folder access','@@background@@']))
+  expect(pending.root.textContent).not.toContain('My sample data')
+ }finally{pending.cleanup();ready.cleanup()}
+})
+
+test('navigation is keyboard operable through native buttons and the catalog follows DSM locales',async()=>{
+ const f=fixture({identity:true,locale:'cht'})
+ try{
+  await settle()
+  for(const node of nav(f.root)){
+   expect(node.tagName).toBe('BUTTON')
+   expect(node.getAttribute('type')).toBe('button')
+   expect(node.getAttribute('tabindex')).toBeNull()
+   expect(node.getAttribute('aria-label')||node.textContent?.trim()).toBeTruthy()
+  }
+  clickNav(f.root,shellCopy('zh-TW').nas);await settle()
+  expect(heading(f.root)).toBe(shellCopy('zh-TW').nas)
+ }finally{f.cleanup()}
+})
+
+test('a page that disappears from the manifest falls back to the first page',async()=>{
+ const f=fixture()
+ try{
+  await settle()
+  clickNav(f.root,'My sample data');await settle()
+  expect(heading(f.root)).toBe('My sample data')
+  // The integration stops being ready while its sample page is selected.
+  f.flags.state='pending'
+  await f.refresh()
+  expect(navLabels(f.root)).toEqual(withBackground(f.root,['Status','NAS folder access','@@background@@']))
+  expect(heading(f.root)).toBe('Status')
+  expect(pageShown(f.root,'status')).toBe(true)
+  expect(pageShown(f.root,'sample')).toBe(false)
+ }finally{f.cleanup()}
+})
+
+test('the page header and the page content share one PageContent boundary',async()=>{
+ const f=fixture({identity:true})
+ try{
+  await settle()
+  const body=f.root.querySelector('[data-page-content-body]')
+  expect(body).toBeTruthy()
+  expect(body!.contains(f.root.querySelector('h1'))).toBe(true)
+  expect(body!.contains(f.root.querySelector('[data-page="status"]'))).toBe(true)
+ }finally{f.cleanup()}
+})

package/dist/templates/native-go-vue/frontend/test/shell.test.ts

@@ -0,0 +1,45 @@
+// @vitest-environment jsdom
+import {expect,test} from 'vitest'
+import {activePage,shellPages,type ShellFeatureFlags} from '../src/shell/pages'
+import {shellCatalogs,shellCopy} from '../src/shell/i18n'
+
+test('status is always first and secondary pages follow their feature flag',()=>{
+ expect(shellPages({})).toEqual(['status'])
+ expect(shellPages({sample:true,nas:true,interactive:true,background:true,admin:true,identity:true}))
+  .toEqual(['status','sample','nas','interactive','background','admin','identity'])
+ // Unknown or disabled features never leak into the navigation.
+ expect(shellPages({sample:false,nas:false,admin:false})).toEqual(['status'])
+})
+
+test('a selected page that is no longer available falls back to the first page',()=>{
+ const pages=shellPages({sample:true,admin:true})
+ expect(activePage('admin',pages)).toBe('admin')
+ expect(activePage('nas',pages)).toBe('status')
+ expect(activePage(undefined,pages)).toBe('status')
+ expect(activePage('status',shellPages({folders:true}))).toBe('status')
+ expect(shellPages({folders:true})).toEqual(['status','folders'])
+})
+
+test('feature flags accept plain booleans without a build-time manifest read',()=>{
+ const flags:ShellFeatureFlags={sample:true,interactive:false}
+ expect(shellPages(flags)).toEqual(['status','sample'])
+})
+
+test('nine navigation catalogs stay complete and resolve DSM locale aliases',()=>{
+ expect(Object.keys(shellCatalogs)).toEqual(['en','zh-TW','zh-CN','ja','ko','de','fr','es','it'])
+ for(const catalog of Object.values(shellCatalogs)){
+  expect(Object.keys(catalog).sort()).toEqual(Object.keys(shellCatalogs.en).sort())
+  expect(Object.values(catalog).every(value=>typeof value==='string'&&value.trim().length>0)).toBe(true)
+ }
+ expect(shellCopy('cht')).toEqual(shellCatalogs['zh-TW'])
+ expect(shellCopy('zh_CN')).toEqual(shellCatalogs['zh-CN'])
+ expect(shellCopy('unknown')).toEqual(shellCatalogs.en)
+ expect(Object.values(shellCatalogs).every(catalog=>typeof catalog.background==='string'&&catalog.background.trim().length>0)).toBe(true)
+})
+
+test('navigation labels are unique inside every catalog',()=>{
+ for(const catalog of Object.values(shellCatalogs)){
+  const labels=Object.values(catalog).map(value=>value.trim().toLowerCase())
+  expect(new Set(labels).size).toBe(labels.length)
+ }
+})

package/dist/templates/native-go-vue/frontend/tsconfig.json

@@ -1 +1 @@
-{"compilerOptions":{"target":"ES2022","module":"ESNext","moduleResolution":"Bundler","strict":true,"lib":["ES2022","DOM"],"skipLibCheck":true,"types":["vite/client"]},"include":["src/**/*.ts","src/**/*.vue","vite.config.ts"]}
+{"compilerOptions":{"target":"ES2022","module":"ESNext","moduleResolution":"Bundler","resolveJsonModule":true,"strict":true,"lib":["ES2022","DOM"],"skipLibCheck":true,"types":["vite/client"]},"include":["src/**/*.ts","src/**/*.vue","vite.config.ts"]}

package/dist/templates/native-go-vue/frontend/vite.config.ts

@@ -1,8 +1,10 @@
-import { defineConfig } from 'vite'
+import { defineConfig, loadEnv } from 'vite'
 import vue from '@vitejs/plugin-vue'
-export default defineConfig({
-  plugins: [vue()],
+// @ts-expect-error The shared notice tool is a plain Node module.
+import { writeThirdPartyNotices } from './third-party-notices.mjs'
+export default defineConfig(({command}) => ({
+  plugins: [vue(), {name: 'dependency-notices', closeBundle() {writeThirdPartyNotices('.', 'dist/LICENSES', {ui: true})}}],
   // Library mode must replace Vue dependency env guards for the DSM browser.
-  define: {'process.env.NODE_ENV': JSON.stringify('production')},
-  build: {lib: {entry: 'src/main.ts', formats: ['iife'], name: 'DsmVueApp', fileName: () => 'app.js'}, cssCodeSplit: false, rollupOptions: {output: {assetFileNames: 'app.[ext]'}}},
-})
+  define: command === 'build' ? {'process.env.NODE_ENV': JSON.stringify('production')} : {},
+  build: {lib: {entry: loadEnv('production', '.', '').SYNOPKGLAND_M2_SIMPLE === '1' ? 'src/m2-main.ts' : loadEnv('production', '.', '').SYNOPKGLAND_SDK_WORKERS === '1' ? 'src/sdk-main.ts' : 'src/main.ts', formats: ['iife'], name: 'DsmVueApp', fileName: () => 'app.js'}, cssCodeSplit: false, rollupOptions: {output: {assetFileNames: 'app.[ext]'}}},
+}))

package/dist/validate.js

@@ -4,12 +4,12 @@ import { contractSpan, makeError } from "./errors.js";
 import { collectInstallParameters, getValuePosition, loadContract } from "./contract/load.js";
 import { validateContract } from "./contract/validate.js";
 import { findListingUnsupportedInstallTypes } from "./contract/unsupported-types.js";
-import { collectComposeInterpolations, collectVolumeSourceInterpolations, loadCompose, validateAdminPortMapping, validateComposeHostBinds, validateComposeNumericCommandArgs, validateComposeRunAs, validateComposeSecurity, } from "./compose/analyze.js";
+import { classifyComposeRoute, collectComposeInterpolations, collectVolumeSourceInterpolations, loadCompose, validateAdminPortMapping, validateComposeHostBinds, validateComposeNumericCommandArgs, validateComposeRunAs, validateComposeSecurity, validateGatewayPortLoopback, } from "./compose/analyze.js";
+import { usesAuthGateway } from "./contract/web-launch.js";
 import { loadNative } from "./native/load.js";
 import { validateNative } from "./native/validate.js";
 import { COMPOSE_FILENAME, CONTRACT_FILENAME, NATIVE_FILENAME, } from "./discovery.js";
 import { declaredPrivilegeFlags } from "./compose/privilege.js";
-import { resourceWorkerEligibility } from "./build-spk/resource-worker.js";
 export function validateProject(project, options = {}) {
     const profile = options.profile ?? "personal";
     const errors = [];
@@ -72,7 +72,7 @@ export function validateProject(project, options = {}) {
         profile,
         declaredPrivilege: declaredPrivilegeFlags(parsed.contract),
     }));
-    if (resourceWorkerEligibility(parsed.contract, parsedCompose.compose).eligible) {
+    if (classifyComposeRoute(parsed.contract, parsedCompose, composeFile).route !== "reject") {
         errors.push(...validateComposeNumericCommandArgs(parsedCompose.compose, composeFile));
     }
     const installParams = collectInstallParameters(parsed.contract);
@@ -91,6 +91,9 @@ export function validateProject(project, options = {}) {
     if (typeof parsed.contract.adminport === "number") {
         errors.push(...validateAdminPortMapping(parsed.contract.adminport, parsedCompose.compose, composeFile));
     }
+    if (typeof parsed.contract.adminport === "number" && usesAuthGateway(parsed.contract)) {
+        errors.push(...validateGatewayPortLoopback(parsed.contract.adminport, parsedCompose.compose, composeFile));
+    }
     const interpolations = collectComposeInterpolations(parsedCompose.compose);
     const volumeSourceVars = collectVolumeSourceInterpolations(parsedCompose.compose);
     const dsmUserParams = installParams.filter(({ param }) => param.type === "dsm_user");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/cli",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Syno Package Land Developer Kit CLI",
   "type": "module",
   "bin": {
@@ -31,5 +31,6 @@
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
-  }
+  },
+  "license": "MIT"
 }

package/schema/synology-app.schema.json

@@ -99,6 +99,25 @@
                 "type": "string"
               },
               "description": "Optional App cookie name allowlist forwarded by the generated Web Station ingress. Omit to forward no browser cookies."
+            },
+            "access": {
+              "type": "string",
+              "enum": [
+                "dsm-users",
+                "dsm-admins",
+                "dsm-groups",
+                "public"
+              ],
+              "description": "Who may open the web App. dsm-users (default) lets any signed-in DSM user in through a DSM-authenticated gateway; dsm-admins limits it to administrators; dsm-groups to the DSM groups listed in groups; public keeps the anonymous Web Station portal for Apps that authenticate users themselves. Headless apps omit this field."
+            },
+            "groups": {
+              "type": "array",
+              "minItems": 1,
+              "items": {
+                "type": "string",
+                "pattern": "^(?:[A-Za-z0-9._-]{1,64}|[A-Za-z0-9._-]{1,64}\\\\[A-Za-z0-9._-](?:[A-Za-z0-9._ -]{0,126}[A-Za-z0-9._-])?|[A-Za-z0-9._-](?:[A-Za-z0-9._ -]{0,126}[A-Za-z0-9._-])?@[A-Za-z0-9._-]{1,64})$(?![\\s\\S])"
+              },
+              "description": "DSM group names allowed in; only with access: dsm-groups."
             }
           },
           "additionalProperties": true

package/skills/reference/create.md

@@ -14,6 +14,10 @@ synopkgland init -t compose-import upstream-app
 
 hello-web 預設 published port 是 18333。每個 package／instance 都要分配獨立的 port；同一台 NAS 上不要重用。可挑選未使用的 19xxx 高位 port，例如 19160；同時修改 contract adminport 與 Compose published port，保留容器內 target。
 
+## 容器存取控制
+
+有 adminport 的容器 App 預設經 DSM 驗證 gateway（`integration.web.access`：dsm-users 預設、dsm-admins、dsm-groups＋groups、public）。Compose published port 必須綁 loopback：`127.0.0.1:<adminport>:<port>`，否則 validate 失敗（`COMPOSE_GATEWAY_PORT_EXPOSED`）。gateway 是編譯的 Go，建置需要 Go 與 `--arch`。`public` 才保留匿名 Web Station portal，inspect 會以 `CONTAINER_ANONYMOUS_PORTAL` 提醒。
+
 ## 建置與檢查
 
 執行 validate、build-spk、inspect --spk，再看 deploy --dry-run。Go CGI 每包驗證 DSM session，root 模式只提供固定管理員核准工作。容器必須使用已建置映像；不支援的特權 host 存取、secret/config 與 build stanza 會拒絕。

package/templates/_daemon/fixture_linux_test.go

@@ -0,0 +1,15 @@
+//go:build linux
+
+package main
+
+import (
+	"os"
+	"os/exec"
+	"syscall"
+)
+
+func dropFixtureUser(cmd *exec.Cmd) {
+	if os.Geteuid() == 0 {
+		cmd.SysProcAttr = &syscall.SysProcAttr{Credential: &syscall.Credential{Uid: 65534, Gid: 65534, Groups: []uint32{65534}}}
+	}
+}

package/templates/_daemon/fixture_other_test.go

@@ -0,0 +1,7 @@
+//go:build !linux
+
+package main
+
+import "os/exec"
+
+func dropFixtureUser(cmd *exec.Cmd) {}

package/templates/_daemon/go.mod

@@ -0,0 +1,5 @@
+module synopkgland-daemon
+
+go 1.24
+
+toolchain go1.26.8