@synopackageland/cli 0.6.1 → 0.7.1

package/dist/templates/native-go-jobs/frontend/test/background.test.ts

@@ -97,15 +97,14 @@ test('a null job list from the worker renders as no jobs',async()=>{
  expect(f.root.textContent).toContain(backgroundCopy('en').noJobs);f.close()
 })
 
-test('the picker dialog explains the one-time read',async()=>{
- for(const locale of Object.keys(backgroundCatalogs)){
-  const f=mount(async(m,p)=>m==='bg.status'?status():m==='bg.jobs.list'?{jobs:[]}:browse(p),locale);await settle()
-  const copy=backgroundCopy(locale)
-  click(f.root,copy.chooseFile);await settle()
-  const dialog=f.root.querySelector('[role=dialog]')!.textContent!
-  expect(dialog).toContain(copy.pickerConsent)
-  f.close()
- }
+// One test per locale: each mounts its own app, so a slow host cannot push nine mounts past one test timeout.
+test.each(Object.keys(backgroundCatalogs))('the picker dialog explains the one-time read in %s',async locale=>{
+ const f=mount(async(m,p)=>m==='bg.status'?status():m==='bg.jobs.list'?{jobs:[]}:browse(p),locale);await settle()
+ const copy=backgroundCopy(locale)
+ click(f.root,copy.chooseFile);await settle()
+ const dialog=f.root.querySelector('[role=dialog]')!.textContent!
+ expect(dialog).toContain(copy.pickerConsent)
+ f.close()
 })
 
 test('ordinary owner can submit but has no administrator controls',async()=>{
@@ -186,23 +185,21 @@ test('fresh ordinary user can pick and submit without administrator switches',as
  expect(calls).not.toContain('bg.mode.set');expect(calls).not.toContain('bg.users.set');f.close()
 })
 
-test('jobs_busy renders a retry message in all nine locales and permits retry',async()=>{
- for(const locale of Object.keys(backgroundCatalogs)){
-  let attempts=0
-  const f=mount(async(m)=>{
-   if(m==='bg.status')return status()
-   if(m==='bg.jobs.list'){
-    if(attempts++===0)throw {code:'jobs_busy',message:'CANARY'}
-    return {jobs:[]}
-   }
-   return {schedules:[]}
-  },locale);await settle()
-  const copy=backgroundCopy(locale)
-  expect(copy.errors.jobs_busy).toBeTruthy()
-  expect(copy.errors.jobs_busy).not.toBe(copy.errors.failed)
-  expect(f.root.querySelector('[role=alert]')?.textContent).toBe(copy.errors.jobs_busy)
-  expect(f.root.textContent).not.toContain('CANARY')
-  click(f.root,copy.refresh);await settle();expect(attempts).toBe(2)
-  f.close()
- }
+test.each(Object.keys(backgroundCatalogs))('jobs_busy renders a retry message in %s and permits retry',async locale=>{
+ let attempts=0
+ const f=mount(async(m)=>{
+  if(m==='bg.status')return status()
+  if(m==='bg.jobs.list'){
+   if(attempts++===0)throw {code:'jobs_busy',message:'CANARY'}
+   return {jobs:[]}
+  }
+  return {schedules:[]}
+ },locale);await settle()
+ const copy=backgroundCopy(locale)
+ expect(copy.errors.jobs_busy).toBeTruthy()
+ expect(copy.errors.jobs_busy).not.toBe(copy.errors.failed)
+ expect(f.root.querySelector('[role=alert]')?.textContent).toBe(copy.errors.jobs_busy)
+ expect(f.root.textContent).not.toContain('CANARY')
+ click(f.root,copy.refresh);await settle();expect(attempts).toBe(2)
+ f.close()
 })

package/dist/templates/native-go-root-ops/backend/internal/app/executor.go

@@ -9,6 +9,8 @@ import (
 	"net/http"
 	"os"
 	"path/filepath"
+	"strings"
+	"syscall"
 	"time"
 
 	"dsmapp/internal/api"
@@ -51,8 +53,31 @@ func (cfg Config) executorControl(_ context.Context, caller api.Caller, raw json
 	return map[string]bool{"written": true}, nil
 }
 
+// The executor closes its socket while paused: the package is stopped, or an
+// upgrade changed the pins and awaits administrator approval.
 func (cfg Config) executorStatus(ctx context.Context, _ api.Caller, _ json.RawMessage) (any, error) {
-	return cfg.executorRequest(ctx, "status", nil, nil)
+	status, err := cfg.executorRequest(ctx, "status", nil, nil)
+	if errors.Is(err, syscall.ENOENT) || errors.Is(err, syscall.ECONNREFUSED) {
+		next := "Start the package."
+		if cfg.startRequested() {
+			next = "The package is running: an administrator approves background access again in Administrator setup; the executor log names the cause."
+		}
+		return map[string]any{"ready": false, "state": "paused", "reason": "executor_not_listening", "next": next}, nil
+	}
+	return status, err
+}
+
+// Package start and stop write the lifecycle mailbox; its last request tells a
+// stopped package from a running one whose executor stays paused.
+func (cfg Config) startRequested() bool {
+	f, err := os.Open(filepath.Join(cfg.DataDir, "executor", "control"))
+	if err != nil {
+		return false
+	}
+	defer f.Close()
+	b := make([]byte, 16)
+	n, _ := f.Read(b)
+	return strings.TrimSpace(string(b[:n])) == "start"
 }
 
 func (cfg Config) executorRootRun(ctx context.Context, caller api.Caller, req *http.Request, raw json.RawMessage) (any, error) {
@@ -73,8 +98,11 @@ func (cfg Config) executorRootRun(ctx context.Context, caller api.Caller, req *h
 	return cfg.executorRequest(ctx, "root.run", auth, map[string]string{"name": in.Name})
 }
 
+// executorSocketBase is a variable so tests can use a temporary directory.
+var executorSocketBase = "/run/synopkgland"
+
 func (cfg Config) executorRequest(ctx context.Context, op string, auth, params any) (any, error) {
-	conn, err := (&net.Dialer{Timeout: 5 * time.Second}).DialContext(ctx, "unix", "/run/synopkgland/"+cfg.PackageID+"/executor.sock")
+	conn, err := (&net.Dialer{Timeout: 5 * time.Second}).DialContext(ctx, "unix", filepath.Join(executorSocketBase, cfg.PackageID, "executor.sock"))
 	if err != nil {
 		return nil, err
 	}

package/dist/templates/native-go-root-ops/backend/internal/app/executor_test.go

@@ -1,8 +1,10 @@
 package app
 
 import (
+	"net"
 	"os"
 	"path/filepath"
+	"strings"
 	"testing"
 )
 
@@ -51,3 +53,65 @@ func TestExecutorRootRunRequiresCurrentDSMCookie(t *testing.T) {
 		t.Fatal("root.run accepted absent DSM cookie")
 	}
 }
+
+// The executor closes its listener while paused (package stopped, or pins
+// awaiting administrator approval). Status then answers, not "internal".
+func TestExecutorStatusReportsAPausedExecutor(t *testing.T) {
+	cfg := testConfig(t)
+	previous := executorSocketBase
+	// A short base: unix socket paths are limited to about 100 bytes.
+	base, err := os.MkdirTemp("/tmp", "exec")
+	if err != nil {
+		t.Fatal(err)
+	}
+	executorSocketBase = base
+	defer func() { executorSocketBase = previous; os.RemoveAll(base) }()
+	check := func(name string) {
+		t.Helper()
+		code, envelope := call(t, cfg, alice, "executor.status", `{}`)
+		out, _ := envelope["data"].(map[string]any)
+		if code != "" || out["ready"] != false || out["state"] != "paused" || out["reason"] != "executor_not_listening" || out["next"] == "" || out["next"] == nil {
+			t.Fatalf("%s: %s %v", name, code, out)
+		}
+	}
+	check("no socket")
+	if code, _ := call(t, cfg, bob, "executor.status", `{}`); code != "" {
+		t.Fatal("authenticated user cannot read a paused status", code)
+	}
+	dir := filepath.Join(executorSocketBase, cfg.PackageID)
+	os.MkdirAll(dir, 0700)
+	ln, err := net.ListenUnix("unix", &net.UnixAddr{Name: filepath.Join(dir, "executor.sock"), Net: "unix"})
+	if err != nil {
+		t.Fatal(err)
+	}
+	ln.SetUnlinkOnClose(false)
+	ln.Close()
+	check("closed listener")
+}
+
+// next follows the last lifecycle request: a running package needs approval
+// again, not a start.
+func TestExecutorStatusNextFollowsTheLifecycleRequest(t *testing.T) {
+	cfg := testConfig(t)
+	previous := executorSocketBase
+	executorSocketBase = t.TempDir()
+	defer func() { executorSocketBase = previous }()
+	next := func() string {
+		t.Helper()
+		_, envelope := call(t, cfg, alice, "executor.status", `{}`)
+		out, _ := envelope["data"].(map[string]any)
+		s, _ := out["next"].(string)
+		return s
+	}
+	if !strings.HasPrefix(next(), "Start the package.") {
+		t.Fatal("no request:", next())
+	}
+	mailbox := filepath.Join(cfg.DataDir, "executor")
+	os.MkdirAll(mailbox, 0700)
+	for request, start := range map[string]bool{"stop\n": true, "start\n": false, "start": false} {
+		os.WriteFile(filepath.Join(mailbox, "control"), []byte(request), 0600)
+		if got := next(); strings.HasPrefix(got, "Start the package") != start || got == "" {
+			t.Fatalf("%q: %s", request, got)
+		}
+	}
+}

package/dist/templates/native-go-vue/README.md

@@ -18,6 +18,10 @@ subscriptions; unmount disposes subscriptions and ignores late responses.
 operations. `--with jobs` adds package-account jobs and schedules; it combines with root-ops and files. `--with files` enables current-session File Station access,
 and the background picker uses the retained session provider.
 
+With `portal:` declared (`synopkgland add portal`), the status page shows
+`src/portal/PortalSettings.vue`: the DSM Application Portal link, the alias form
+for administrators, and the Control Panel shortcut.
+
 Use public library controls, the embedded theme, per-app modal scope and unique
 Vue ID prefixes. Backend route permissions and DSM checks remain authoritative.
 Generated build and unit tests do not establish NAS runtime acceptance.

package/dist/templates/native-go-vue/frontend/package-lock.json

@@ -7,7 +7,7 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/ui": "0.8.0",
+        "@synopackageland/ui": "0.8.1",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1147,9 +1147,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.8.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.8.0.tgz",
-      "integrity": "sha512-RR7vvIqZbVtp1jRG16/sqILGQjgAuxSN5eAlXluWshUTh9xcIMpsC39/j9L63iZyic58Drw7KiZyZyqYQL4NHw==",
+      "version": "0.8.1",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.8.1.tgz",
+      "integrity": "sha512-3BykWpWrDGjIDVjdL0WeMwD0oO3z1/IIEishR9+2sYAL/spd3G9sEQL1J26jHl0EfvoPvwPZHNJdIL14JQJQYA==",
       "license": "MIT",
       "dependencies": {
         "@internationalized/date": "3.12.4",

package/dist/templates/native-go-vue/frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "native-dsm-vue-app", "private": true, "type": "module",
   "scripts": {"build": "vue-tsc --noEmit && vite build", "test": "vitest run"},
-  "dependencies": {"@lucide/vue": "1.48.0", "@synopackageland/ui": "0.8.0", "vue": "3.5.43"},
+  "dependencies": {"@lucide/vue": "1.48.0", "@synopackageland/ui": "0.8.1", "vue": "3.5.43"},
   "devDependencies": {"@vitejs/plugin-vue": "6.0.9", "vite": "7.3.6", "typescript": "5.9.3", "vue-tsc": "3.3.11", "vitest": "4.1.11", "jsdom": "27.4.0"}
 }

package/dist/templates/native-go-vue/frontend/src/App.vue

@@ -2,15 +2,18 @@
 import {computed, onMounted, onUnmounted, ref, watch} from 'vue'
 import {AppRoot, ConfigProvider, Button, Callout, Form, FormActions, FormItem, SettingsSection, Textarea} from '@synopackageland/ui'
 import {uiLocale} from './nas/locale'
+import {appCopy} from './i18n'
 import type {AppStatus, Context} from './context'
 import AppShell from './shell/AppShell.vue'
 import CapabilityPanels from './CapabilityPanels.vue'
 import FilesPage from './files/FilesPage.vue'
+import PortalSettings from './portal/PortalSettings.vue'
 import {shellPages, type ShellPage} from './shell/pages'
 import {createSession} from './identity/session'
 import LoginPage from './identity/LoginPage.vue'
 const props = defineProps<{ctx: Context}>()
 const login = createSession(props.ctx)
+const copy = computed(() => appCopy(props.ctx.locale))
 const app = ref<AppStatus>()
 const busy = ref(false)
 const error = ref('')
@@ -25,7 +28,8 @@ const pages = computed(() => shellPages({background:backgroundEnabled}))
 const subtitle = computed(() => app.value ? `${app.value.package} · ${app.value.user} · ${app.value.version}` : undefined)
 function message(e: unknown) {
  const code = (e as {code?: string})?.code || 'request_failed'
- return ({session_required:'Your DSM session expired. Sign in again.',admin_required:'A DSM administrator must perform this action.',auth_unavailable:'DSM authentication is unavailable. Refresh to try again.'} as Record<string,string>)[code] || `Request failed (${code}). Refresh and try again.`
+ const errors = copy.value.errors as Record<string, string>
+ return (code !== 'request_failed' && errors[code]) || errors.request_failed!.replace('{code}', code)
 }
 async function refresh() {
  if(disposed || busy.value || (login.enabled.value && !login.subject.value)) return
@@ -39,7 +43,7 @@ async function refresh() {
 async function save() {
  if(disposed || busy.value) return
  busy.value = true; error.value='';notice.value=''
- try {await login.call('greeting.set',{text:text.value});if(!disposed) notice.value='Greeting saved.'}
+ try {await login.call('greeting.set',{text:text.value});if(!disposed) notice.value=copy.value.saved}
  catch(e) {if(!disposed) error.value=message(e)} finally {if(!disposed) busy.value=false}
 }
 watch(login.subject, (subject, previous) => {
@@ -60,22 +64,23 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
 <template>
  <AppRoot modal-scope="app" style="height: 100%">
   <ConfigProvider :locale="uiLocale(ctx.locale)">
-  <p v-if="!login.ready.value" role="status">Checking session…</p>
-  <LoginPage v-else-if="login.enabled.value && !login.subject.value" :session="login" />
+  <p v-if="!login.ready.value" role="status">{{ copy.checking }}</p>
+  <LoginPage v-else-if="login.enabled.value && !login.subject.value" :session="login" :locale="ctx.locale" />
   <AppShell v-else v-model="page" :locale="ctx.locale" :pages="pages" :description="subtitle">
-   <template #actions><Button variant="secondary" :disabled="busy" @click="refresh">Refresh</Button><Button v-if="login.enabled.value" variant="secondary" :disabled="busy" @click="signOut">Sign out</Button></template>
-   <div class="integration-app" :aria-busy="busy" aria-label="Package settings">
-    <p v-if="busy" role="status">Loading package data…</p>
-    <Callout v-if="error" tone="danger" title="Action required"><span role="alert">{{ error }}</span></Callout>
+   <template #actions><Button variant="secondary" :disabled="busy" @click="refresh">{{ copy.refresh }}</Button><Button v-if="login.enabled.value" variant="secondary" :disabled="busy" @click="signOut">{{ copy.signOut }}</Button></template>
+   <div class="integration-app" :aria-busy="busy" :aria-label="copy.settings">
+    <p v-if="busy" role="status">{{ copy.loading }}</p>
+    <Callout v-if="error" tone="danger" :title="copy.actionRequired"><span role="alert">{{ error }}</span></Callout>
     <p v-if="notice" role="status">{{ notice }}</p>
     <div data-page="status" v-show="page==='status'">
-     <SettingsSection title="Package status" :collapsible="false">
+     <SettingsSection :title="copy.statusTitle" :collapsible="false">
       <p v-if="app">{{ app.package }} · {{ app.user }} · {{ app.version }}</p>
-      <p v-else-if="error" role="status">Status could not be loaded. Refresh to try again.</p>
+      <p v-else-if="error" role="status">{{ copy.statusError }}</p>
      </SettingsSection>
-     <SettingsSection v-if="app?.admin" title="Greeting" :collapsible="false">
-      <Form @submit.prevent="save"><FormItem label="Greeting"><Textarea v-model="text" :disabled="busy" /></FormItem>
-       <FormActions><Button variant="primary" :disabled="busy || !text.trim()" @click="save">Save</Button></FormActions>
+     <PortalSettings v-if="ctx.portal && app" :key="app.user" :portal="ctx.portal" />
+     <SettingsSection v-if="app?.admin" :title="copy.greeting" :collapsible="false">
+      <Form @submit.prevent="save"><FormItem :label="copy.greeting"><Textarea v-model="text" :disabled="busy" /></FormItem>
+       <FormActions><Button variant="primary" :disabled="busy || !text.trim()" @click="save">{{ copy.save }}</Button></FormActions>
       </Form>
      </SettingsSection>
     </div>

package/dist/templates/native-go-vue/frontend/src/context.ts

@@ -35,10 +35,41 @@ export interface HostAdapter {
  subscribe(event: HostEvent, listener: () => void): HostSubscriptionResult
  dispose(): void
 }
+export interface PortalStatus {
+ state: 'active' | 'inactive' | 'unavailable'
+ // Set when active: https://<the NAS address in use>/<alias>/
+ alias?: string
+ url?: string
+ // An administrator can set or clear the alias here; otherwise Control Panel or nothing.
+ canManage: boolean
+ controlPanel: boolean
+ defaultAlias: string
+}
+
+// Rejects {code}: portal_alias_invalid, portal_alias_reserved, portal_alias_in_use, admin_required, portal_unavailable.
+export interface PortalAccess {
+ // SDK panel text in DSM's language, keyed like the error codes plus title, link, apply, …
+ messages: Record<string, string>
+ status(): Promise<PortalStatus>
+ apply(alias: string): Promise<PortalStatus>
+ disable(): Promise<PortalStatus>
+ openControlPanel(): void
+ // The SDK's plain panel; Vue apps use portal/PortalSettings.vue instead.
+ mountPanel(element: HTMLElement): {refresh(): Promise<void>; dispose(): void}
+}
+
 export interface Context {
+ // Explicit long-running opt-in; bind with createBackgroundSaveFacade and an
+ // owner-bound App job metadata provider. Legacy downloads use the other panel.
+ delegate?: import('./delegate/long-running').BackgroundSaveFacade
  files?: {endpoint:string;token?:()=>string|undefined}
  displayName?: string
  executor?: import('./delegate/executor-setup').ExecutorSetup
+ // DSM's signed-in account. isAdmin only hides or disables administrator
+ // settings; the backend enforces access with permissions.json and RequireAdmin.
+ user?: {readonly name: string; readonly isAdmin: boolean}
+ // DSM Application Portal, present only when dsm-package.yaml declares portal.
+ portal?: PortalAccess
  call<T = unknown>(method: string, params?: Record<string, unknown>): Promise<T>
  reopen(fn: () => void): () => void
  locale: string

package/dist/templates/native-go-vue/frontend/src/delegate/ExecutorSettings.vue

@@ -1,24 +1,69 @@
 <script setup lang="ts">
 import {computed,onBeforeUnmount,onMounted,ref} from 'vue'
-import {Button,Callout,Form,FormActions,FormItem,Input,SettingsSection} from '@synopackageland/ui'
+import {Button,Callout,Form,FormActions,FormItem,Input,Select,SettingsSection} from '@synopackageland/ui'
+import type {Context} from '../context'
+import type {ScopeSelection} from './long-running'
 import {useExecutorSetup,type CapabilityStatus} from './executor-setup'
 import {delegateCopy} from './copy'
-const props=defineProps<{admin:boolean;locale?:string}>()
+const props=defineProps<{admin:boolean;locale?:string;ctx?:Pick<Context,'call'>}>()
+const emit=defineEmits<{confirmed:[]}>()
 const setup=useExecutorSetup(),copy=computed(()=>delegateCopy(props.locale))
 const status=ref<CapabilityStatus>(),password=ref(''),busy=ref(false),error=ref(false)
+const scope=ref<{scope_mode?:string;preselection?:string;selection?:ScopeSelection|null;mismatch?:boolean}>(),chosen=ref(''),shares=ref<Array<{label:string;value:string}>>([])
+const dynamic=computed(()=>scope.value?.scope_mode==='install-selected')
+const options=computed(()=>[{label:copy.value.homeScope,value:'home'},...shares.value])
+const canConfirm=computed(()=>!dynamic.value||!!chosen.value&&options.value.some(o=>o.value===chosen.value))
+const needsScope=computed(()=>dynamic.value&&!scope.value?.selection)
+const changed=computed(()=>chosen.value!==scope.value?.selection?.scope)
 let disposed=false
-async function refresh(){if(!props.admin||busy.value)return;busy.value=true;error.value=false;try{const next=await setup.status();if(!disposed)status.value=next}catch{if(!disposed)error.value=true}finally{if(!disposed)busy.value=false}}
-async function authorize(){if(!props.admin||busy.value||!password.value)return;busy.value=true;error.value=false;const entered=password.value;password.value='';try{const next=await setup.authorize(entered);if(!disposed)status.value=next}catch{if(!disposed)error.value=true}finally{if(!disposed)busy.value=false}}
-onMounted(()=>void refresh());onBeforeUnmount(()=>{disposed=true;password.value=''})
+async function load(approved?:CapabilityStatus){
+ const next=approved??await setup.status()
+ if(disposed)return
+ status.value=next
+ if(!props.ctx)return
+ const detail=await props.ctx.call<NonNullable<typeof scope.value>>('delegate.status')
+ if(disposed)return
+ scope.value=detail
+ if(detail.scope_mode!=='install-selected')return
+ const all:Array<{label:string;value:string}>=[]
+ let offset=0
+ for(let count=0;count<128;count++){
+  const page=await props.ctx.call<{shares:Array<{name:string;path:string;isdir:boolean}>;total:number;offset:number}>('bg.browse',{offset})
+  if(disposed)return
+  if(!Array.isArray(page.shares)||!Number.isSafeInteger(page.total)||page.total<0||!page.shares.length&&offset<page.total)throw {code:'EXECUTOR_PROTOCOL'}
+  for(const entry of page.shares){if(entry.isdir&&entry.path==='/'+entry.name&&!['home','homes'].includes(entry.name.toLowerCase()))all.push({label:entry.name,value:'shared:'+entry.name})}
+  offset+=page.shares.length
+  if(offset>=page.total)break
+  if(count===127)throw {code:'EXECUTOR_PROTOCOL'}
+ }
+ shares.value=all
+ chosen.value=detail.selection?.scope??detail.preselection??''
+}
+async function refresh(){if(!props.admin||busy.value)return;busy.value=true;error.value=false;try{await load()}catch{if(!disposed)error.value=true}finally{if(!disposed)busy.value=false}}
+async function authorize(){
+ if(!props.admin||busy.value||!password.value||!canConfirm.value||error.value)return
+ busy.value=true;error.value=false;const entered=password.value;password.value=''
+ try{const next=dynamic.value?await setup.authorize(entered,chosen.value):await setup.authorize(entered);await load(next);if(!disposed)emit('confirmed')}
+ catch{if(!disposed)error.value=true}
+ finally{if(!disposed)busy.value=false}
+}
+onMounted(()=>{setup.subscribe?.(next=>{if(!disposed)status.value=next});void refresh()});onBeforeUnmount(()=>{disposed=true;password.value=''})
 </script>
 <template>
  <SettingsSection v-if="admin" :title="copy.setupTitle" :collapsible="false" :aria-busy="busy">
   <p>{{ copy.setupHelp }}</p>
   <Callout v-if="error" tone="danger" role="alert">{{ copy.setupError }}</Callout>
-  <p role="status">{{ status?.state==='ready'?copy.ready:status?.state==='needs-admin-approval'?copy.needs:copy.blocked }}</p>
-  <Form v-if="status?.state==='needs-admin-approval'" @submit.prevent="authorize">
-   <FormItem :label="copy.password" label-for="delegate-password"><Input id="delegate-password" v-model="password" type="password" autocomplete="current-password" :disabled="busy" /></FormItem>
-   <FormActions><Button type="submit" variant="primary" :disabled="busy||!password">{{ copy.authorize }}</Button></FormActions>
+  <p role="status">{{ status?.state==='ready'?(needsScope?copy.scopeNeeds:copy.ready):status?.state==='needs-admin-approval'?copy.needs:copy.blocked }}</p>
+  <p v-if="status?.reason&&(status.state==='blocked'||status.state==='unsupported')">{{ copy.details }}: {{ status.reason }}</p>
+  <p v-if="scope?.selection">{{ copy.protectedScope }}: {{ scope.selection.root }}</p>
+  <Callout v-if="scope?.mismatch" tone="warning">{{ copy.scopeMismatch }} {{ copy.preselection }}: {{ scope.preselection }} · {{ copy.protectedScope }}: {{ scope.selection?.root }}</Callout>
+  <Form v-if="status?.state==='needs-admin-approval'||status?.retry||dynamic&&status?.state==='ready'" @submit.prevent="authorize">
+   <template v-if="dynamic">
+    <p>{{ scope?.selection?copy.scopeChangeHelp:copy.preselectionHelp }}</p>
+    <FormItem :label="copy.scopeLabel" label-for="delegate-scope"><Select id="delegate-scope" v-model="chosen" :options="options" :disabled="busy||error" /></FormItem>
+   </template>
+   <FormItem :label="copy.password" label-for="delegate-password"><Input id="delegate-password" v-model="password" type="password" autocomplete="current-password" :disabled="busy||error" /></FormItem>
+   <FormActions><Button type="submit" variant="primary" :disabled="busy||error||!password||!canConfirm||dynamic&&!!scope?.selection&&!changed">{{ dynamic?(scope?.selection?copy.confirmScope:copy.confirmShare):copy.authorize }}</Button></FormActions>
   </Form>
   <Button variant="secondary" :disabled="busy" @click="refresh">{{ copy.refresh }}</Button>
  </SettingsSection>

package/dist/templates/native-go-vue/frontend/src/delegate/catalogs.ts

@@ -0,0 +1,11 @@
+import en from './i18n/en.json'
+import zhTW from './i18n/zh-TW.json'
+import zhCN from './i18n/zh-CN.json'
+import ja from './i18n/ja.json'
+import ko from './i18n/ko.json'
+import de from './i18n/de.json'
+import fr from './i18n/fr.json'
+import es from './i18n/es.json'
+import it from './i18n/it.json'
+export type DelegateCopy=typeof en
+export const delegateCatalogs:Record<string,DelegateCopy>={en,'zh-TW':zhTW,'zh-CN':zhCN,ja,ko,de,fr,es,it}

package/dist/templates/native-go-vue/frontend/src/delegate/copy.test.ts

@@ -0,0 +1,12 @@
+import {expect,test} from 'vitest'
+import {delegateCopy} from './copy'
+import {saveCopy} from './save-copy'
+import zhCN from './i18n/zh-CN.json'
+import saveJa from './i18n/save/ja.json'
+test('delegate and save copy follow the DSM language across all nine catalogs',()=>{
+ expect(delegateCopy('chs')).toMatchObject(zhCN)
+ expect(delegateCopy('zh_CN')).toMatchObject(zhCN)
+ expect(saveCopy('jpn')).toEqual(saveJa)
+ expect(delegateCopy('unknown').refresh).toBe('Refresh')
+ expect(saveCopy().refresh).toBe('Refresh')
+})

package/dist/templates/native-go-vue/frontend/src/delegate/copy.ts

@@ -1,4 +1,4 @@
-import en from './i18n/en.json'
-import zh from './i18n/zh-TW.json'
-export function delegateCopy(locale='en'){return locale.toLowerCase().startsWith('zh')?zh:en}
-export function errorCopy(error:unknown,copy:typeof en){const code=(error as {code?:string})?.code;return ['session_required','AUTH_DENIED'].includes(code??'')?copy.session:['DENIED','SCOPE_DENIED','PERMISSION_DENIED','APP_DENIED','INELIGIBLE','denied'].includes(code??'')?copy.denied:copy.error}
+import {uiLocale} from '../nas/locale'
+import {delegateCatalogs,type DelegateCopy} from './catalogs'
+export function delegateCopy(locale='en'){return delegateCatalogs[uiLocale(locale)]!}
+export function errorCopy(error:unknown,copy:DelegateCopy){const code=(error as {code?:string})?.code;return ['session_required','AUTH_DENIED'].includes(code??'')?copy.session:['DENIED','SCOPE_DENIED','PERMISSION_DENIED','APP_DENIED','INELIGIBLE','denied'].includes(code??'')?copy.denied:copy.error}

package/dist/templates/native-go-vue/frontend/src/delegate/executor-settings.test.ts

@@ -0,0 +1,23 @@
+// @vitest-environment jsdom
+import {expect,test} from 'vitest'
+import {createApp,h,nextTick} from 'vue'
+import {AppRoot} from '@synopackageland/ui'
+import ExecutorSettings from './ExecutorSettings.vue'
+import {ExecutorSetupKey,type CapabilityStatus} from './executor-setup'
+const settle=async()=>{for(let i=0;i<10;i++){await nextTick();await new Promise(r=>setTimeout(r))}}
+// t-0237: a wrong password left only "Check status"; a retryable result keeps the form.
+test('a retryable blocked approval keeps the password form for another try',async()=>{
+ const blocked:CapabilityStatus&{retry:boolean}={state:'blocked',reason:'dsm_3121: DSM rejected the administrator password. Nothing was created.',retry:true}
+ const setup={async status():Promise<CapabilityStatus>{return {state:'needs-admin-approval'}},async authorize(){return blocked},async control(){return blocked}}
+ const root=document.createElement('div');document.body.append(root)
+ const app=createApp({render:()=>h(AppRoot,{},()=>h(ExecutorSettings,{admin:true,locale:'en'}))})
+ app.provide(ExecutorSetupKey,setup)
+ try{
+  app.mount(root);await settle()
+  const input=root.querySelector<HTMLInputElement>('#delegate-password')!
+  input.value='wrong';input.dispatchEvent(new Event('input'));await settle()
+  root.querySelector('form')!.dispatchEvent(new Event('submit'));await settle()
+  expect(root.textContent).toContain('dsm_3121')
+  expect(root.querySelector('#delegate-password')).not.toBeNull()
+ }finally{app.unmount();root.remove()}
+})

package/dist/templates/native-go-vue/frontend/src/delegate/executor-setup.ts

@@ -1,12 +1,18 @@
 import {inject,type InjectionKey} from 'vue'
 export type CapabilityState='unsupported'|'needs-admin-approval'|'ready'|'blocked'|'incompatible'
-export interface CapabilityStatus {state:CapabilityState;reason?:string}
+// requested: a scope change whose root task may still land; it applied once
+// status() reports that scope with a generation above this one.
+// retry: approving again may succeed: nothing of this approval is left behind, or
+// the approved tasks remain and approving again restarts the executor.
+export interface CapabilityStatus {state:CapabilityState;reason?:string;requested?:{scope:string;generation:number};retry?:boolean}
 // p2-setup supplies the implementation through app.provide(ExecutorSetupKey, setup).
 // Passwords belong only to this call and must never be persisted or logged.
 export interface ExecutorSetup {
  status():Promise<CapabilityStatus>
- authorize(password:string):Promise<CapabilityStatus>
+ authorize(password:string,selectedScope?:string):Promise<CapabilityStatus>
  control(action:'start'|'stop'|'purge'):Promise<CapabilityStatus>
+ // Results of calls made elsewhere (the DSM window panel) on the same access.
+ subscribe?(listener:(status:CapabilityStatus)=>void):void
 }
 export const ExecutorSetupKey:InjectionKey<ExecutorSetup>=Symbol('executor-setup')
 export function useExecutorSetup():ExecutorSetup {

package/dist/templates/native-go-vue/frontend/src/delegate/facade.test.ts

@@ -0,0 +1,100 @@
+import {expect,test,vi} from 'vitest'
+import {createBackgroundSaveFacade} from './facade'
+test('destination lookup returns protected selection and rejects a grant outside its root',async()=>{
+ const selection={scope:'shared:reports',root:'/reports',generation:2}
+ const destination={id:'mine',key:'save',path:'/reports/exports',username:'alice',lifetime:'until-revoked'}
+ const call=vi.fn(async()=>({key:'save',selection,destination,status:'active'}))
+ const sdk=createBackgroundSaveFacade({call:call as any})
+ expect(await sdk.destination('save')).toEqual({key:'save',selection,destination,status:'active'})
+ expect(call).toHaveBeenCalledExactlyOnceWith('delegate.destination',{key:'save'})
+ call.mockResolvedValue({key:'save',selection,destination:{...destination,path:'/other'},status:'active'})
+ await expect(sdk.destination('save')).rejects.toMatchObject({code:'EXECUTOR_PROTOCOL'})
+})
+const ref={delegation_id:'mine',job_id:'original'}
+test('operation cancellation keeps its bounded readable cause through the facade',async()=>{
+ const call=vi.fn(async()=>({job_id:'original',state:'canceled',code:'OPERATION_CANCELED',reason:'grant-revoked'}))
+ const sdk=createBackgroundSaveFacade({call:call as any})
+ expect(await sdk.cancel(ref)).toMatchObject({state:'canceled',reason:'grant-revoked'})
+ for(const reason of [123, 'x'.repeat(129), 'raw DSM response /path']){
+  call.mockResolvedValue({...await call(),reason} as any)
+  await expect(sdk.cancel(ref)).rejects.toMatchObject({code:'EXECUTOR_PROTOCOL'})
+ }
+})
+test('a copy cancel acknowledgement passes through unchanged for same-ref polling',async()=>{
+ const ack={job_id:'original',state:'copying',code:'CANCEL_REQUESTED',reason:'operation-canceled-by-user'}
+ const call=vi.fn(async()=>ack)
+ expect(await createBackgroundSaveFacade({call:call as any}).cancel(ref)).toEqual(ack)
+ expect(call).toHaveBeenCalledWith('delegate.operations.cancel',ref)
+})
+const grant={delegation_id:'mine',destination:'save',path:'/home/Exports',subject:{username:'normal1',uid:1205},lifetime:'until-revoked',revoked:false}
+function fixture(){
+ const call=vi.fn(async(method:string)=>{
+  if(method==='delegate.status')return {state:'ready',disabled:false}
+  if(method==='delegate.list')return {delegations:[grant,{...grant,delegation_id:'revoked',revoked:true},{...grant,delegation_id:'legacy',lifetime:''}]}
+  if(method==='delegate.operations.get')return {job_id:'original',state:'committed',receipt:{path:'/home/Exports/report.csv',size:4}}
+  if(method==='delegate.operations.cancel')return {job_id:'original',state:'canceled'}
+  if(method==='delegate.revoke')return {revoked:true}
+  if(method==='delegate.disable')return {disabled:true}
+  if(method==='delegate.enable')return {disabled:false}
+  if(method==='delegate.select_destination')return {id:'mine',key:'save',path:'/home/Exports',username:'normal1',lifetime:'until-revoked'}
+  throw {code:'unknown_method'}
+ })
+ const jobs=vi.fn(async()=>[{...ref,name:'report.csv'}])
+ return {call,jobs,sdk:createBackgroundSaveFacade({call:call as any},jobs)}
+}
+test('W2 list is mapped to active permanent destinations without changing owner or legacy semantics',async()=>{
+ const {sdk,call}=fixture()
+ expect(await sdk.list()).toEqual([{id:'mine',key:'save',path:'/home/Exports',username:'normal1',lifetime:'until-revoked'}])
+ expect(call).toHaveBeenCalledExactlyOnceWith('delegate.list')
+ await sdk.selectDestination({key:'save',path:'/home/Exports'})
+ expect(call).toHaveBeenLastCalledWith('delegate.select_destination',{key:'save',path:'/home/Exports'})
+})
+test('App metadata is joined with protected status by the original two IDs, never a synthetic list route',async()=>{
+ const {sdk,call,jobs}=fixture()
+ expect(await sdk.operations()).toEqual([{...ref,name:'report.csv',state:'committed',receipt:{path:'/home/Exports/report.csv',size:4}}])
+ expect(jobs).toHaveBeenCalledOnce()
+ expect(call).toHaveBeenCalledExactlyOnceWith('delegate.operations.get',ref)
+ await sdk.cancel(ref);expect(call).toHaveBeenLastCalledWith('delegate.operations.cancel',ref)
+ await sdk.revoke({delegation_id:'mine'});expect(call).toHaveBeenLastCalledWith('delegate.revoke',{delegation_id:'mine'})
+})
+test('missing protected disabled status cannot be reported as enabled',async()=>{
+ const {sdk,call}=fixture();call.mockResolvedValue({state:'ready'} as any)
+ await expect(sdk.status()).rejects.toMatchObject({code:'EXECUTOR_PROTOCOL'})
+})
+test('malformed grant and App metadata references cannot be coerced into valid IDs',async()=>{
+ const {sdk,call}=fixture()
+ call.mockResolvedValue({delegations:[{...grant,delegation_id:undefined}]} as any)
+ await expect(sdk.list()).rejects.toMatchObject({code:'EXECUTOR_PROTOCOL'})
+ const invalid=createBackgroundSaveFacade({call:call as any},async()=>[{job_id:undefined,delegation_id:'mine',name:'report.csv'}] as any)
+ await expect(invalid.operations()).rejects.toMatchObject({code:'EXECUTOR_PROTOCOL'})
+ expect(call).toHaveBeenCalledTimes(1)
+})
+test('malformed or mismatched operation evidence never becomes Saved',async()=>{
+ for(const value of [{job_id:'other',state:'committed',receipt:{path:'/home/a',size:1}},{job_id:'original',state:'committed'},{job_id:'original',state:'copying',receipt:{path:'/home/a',size:1}},{job_id:'original',state:'committed',receipt:{path:'/home/a',size:-1}}]){
+  const {sdk,call}=fixture();call.mockResolvedValue(value as any)
+  await expect(sdk.operations()).rejects.toMatchObject({code:'EXECUTOR_PROTOCOL'})
+ }
+})
+test('read timeout never admits or resubmits an operation',async()=>{
+ const {sdk,call}=fixture();call.mockRejectedValue({code:'EXECUTOR_TIMEOUT'})
+ await expect(sdk.operations()).rejects.toMatchObject({code:'EXECUTOR_TIMEOUT'})
+ expect(call).toHaveBeenCalledExactlyOnceWith('delegate.operations.get',ref)
+})
+test('disable and enable use authenticated protected routes, not mailbox controls',async()=>{
+ const {sdk,call}=fixture()
+ expect(await sdk.status()).toEqual({disabled:false})
+ expect(await sdk.disable()).toEqual({disabled:true});expect(call).toHaveBeenLastCalledWith('delegate.disable')
+ expect(await sdk.enable()).toEqual({disabled:false});expect(call).toHaveBeenLastCalledWith('delegate.enable')
+ call.mockResolvedValue({} as any);await expect(sdk.disable()).rejects.toMatchObject({code:'EXECUTOR_PROTOCOL'})
+})
+test('the default facade lists backend mirrors but ignores their committed claim until live receipt',async()=>{
+ const {call}=fixture()
+ call.mockImplementation(async(method:string)=>{
+  if(method==='delegate.operations.list')return {operations:[{...ref,name:'report.csv',state:'committed'}]} as any
+  if(method==='delegate.operations.get')return {job_id:'original',state:'uncertain'} as any
+  throw {code:'unexpected'}
+ })
+ const sdk=createBackgroundSaveFacade({call:call as any})
+ expect(await sdk.operations()).toEqual([{...ref,name:'report.csv',state:'uncertain'}])
+ expect(call.mock.calls).toEqual([['delegate.operations.list'],['delegate.operations.get',ref]])
+})