@synopackageland/cli 0.6.1 → 0.7.1

package/dist/templates/native-go-vue/frontend/src/i18n/zh-CN.json

@@ -0,0 +1,20 @@
+{
+  "checking": "正在检查登录状态…",
+  "refresh": "刷新",
+  "signOut": "注销",
+  "settings": "套件设置",
+  "loading": "正在加载套件数据…",
+  "actionRequired": "需要处理",
+  "statusTitle": "套件状态",
+  "statusError": "无法加载状态，请刷新后重试。",
+  "greeting": "问候语",
+  "save": "保存",
+  "saved": "问候语已保存。",
+  "errors": {
+    "session_required": "DSM 登录已过期，请重新登录。",
+    "admin_required": "此操作必须由 DSM 管理员执行。",
+    "app_privilege_denied": "DSM 应用程序权限不允许此帐户使用此 App。",
+    "auth_unavailable": "DSM 验证暂时不可用，请刷新后重试。",
+    "request_failed": "请求失败（{code}），请刷新后重试。"
+  }
+}

package/dist/templates/native-go-vue/frontend/src/i18n/zh-TW.json

@@ -0,0 +1,20 @@
+{
+  "checking": "正在檢查登入狀態…",
+  "refresh": "重新整理",
+  "signOut": "登出",
+  "settings": "套件設定",
+  "loading": "正在載入套件資料…",
+  "actionRequired": "需要處理",
+  "statusTitle": "套件狀態",
+  "statusError": "無法載入狀態，請重新整理後再試。",
+  "greeting": "問候語",
+  "save": "儲存",
+  "saved": "問候語已儲存。",
+  "errors": {
+    "session_required": "DSM 登入已逾時，請重新登入。",
+    "admin_required": "此操作須由 DSM 管理員執行。",
+    "app_privilege_denied": "DSM 應用程式權限不允許此帳號使用這個 App。",
+    "auth_unavailable": "DSM 驗證目前無法使用，請重新整理後再試。",
+    "request_failed": "要求失敗（{code}），請重新整理後再試。"
+  }
+}

package/dist/templates/native-go-vue/frontend/src/i18n.ts

@@ -0,0 +1,13 @@
+import en from './i18n/en.json'
+import zhTW from './i18n/zh-TW.json'
+import zhCN from './i18n/zh-CN.json'
+import ja from './i18n/ja.json'
+import ko from './i18n/ko.json'
+import de from './i18n/de.json'
+import fr from './i18n/fr.json'
+import es from './i18n/es.json'
+import it from './i18n/it.json'
+import {uiLocale} from './nas/locale'
+export type AppCopy=typeof en
+export const appCatalogs:Record<string,AppCopy>={en,'zh-TW':zhTW,'zh-CN':zhCN,ja,ko,de,fr,es,it}
+export function appCopy(locale:string):AppCopy{return appCatalogs[uiLocale(locale)]!}

package/dist/templates/native-go-vue/frontend/src/identity/LoginPage.vue

@@ -2,7 +2,9 @@
 import {computed, nextTick, onUnmounted, ref} from 'vue'
 import {Button, Callout, Form, FormActions, FormItem, Input, SettingsSection} from '@synopackageland/ui'
 import type {IdentitySession} from './session'
-const props = defineProps<{session: IdentitySession}>()
+import {identityCopy} from './i18n'
+const props = defineProps<{session: IdentitySession; locale: string}>()
+const copy = computed(() => identityCopy(props.locale))
 const account = ref('')
 const password = ref('')
 const otp = ref('')
@@ -14,7 +16,7 @@ const secure = computed(() => window.location.protocol === 'https:')
 let disposed = false
 function message(e: unknown) {
  const code = (e as {code?: string})?.code
- return ({rate_limited: 'Too many sign-in attempts. Wait one minute and try again.', https_required: 'Open this app using HTTPS to sign in.', auth_unavailable: 'DSM sign-in is unavailable. Try again.', session_required: 'Sign in to DSM in this browser, then try again.'} as Record<string, string>)[code || ''] || 'Sign-in could not be completed. Check your credentials or contact your administrator.'
+ return (copy.value.errors as Record<string, string>)[code || ''] || copy.value.errors.failed
 }
 async function submit() {
  if (busy.value || !secure.value || !account.value || !password.value || (needsOTP.value && !otp.value)) return
@@ -48,22 +50,22 @@ onUnmounted(() => {disposed = true; password.value = ''; otp.value = ''})
 
 <template>
  <main class="identity-login" :aria-busy="busy">
-  <SettingsSection title="Sign in with your Synology account" :collapsible="false">
-   <p>Use your account on this NAS to sign in to the app.</p>
-   <Callout v-if="!secure" tone="warning" title="HTTPS required">Open this app using HTTPS to sign in.</Callout>
-   <p v-if="session.notice.value" role="status">{{ session.notice.value }}</p>
-   <Callout v-if="error" tone="danger" title="Sign-in failed"><span role="alert">{{ error }}</span></Callout>
+  <SettingsSection :title="copy.title" :collapsible="false">
+   <p>{{ copy.intro }}</p>
+   <Callout v-if="!secure" tone="warning" :title="copy.httpsTitle">{{ copy.errors.https_required }}</Callout>
+   <p v-if="session.notice.value" role="status">{{ copy.notices[session.notice.value] }}</p>
+   <Callout v-if="error" tone="danger" :title="copy.failedTitle"><span role="alert">{{ error }}</span></Callout>
    <Form @submit.prevent="submit">
-    <FormItem label="Account"><Input v-model="account" autocomplete="username" :disabled="busy || needsOTP || !secure" /></FormItem>
-    <FormItem v-if="!needsOTP" label="Password"><Input v-model="password" type="password" autocomplete="current-password" :disabled="busy || !secure" /></FormItem>
+    <FormItem :label="copy.account"><Input v-model="account" autocomplete="username" :disabled="busy || needsOTP || !secure" /></FormItem>
+    <FormItem v-if="!needsOTP" :label="copy.password"><Input v-model="password" type="password" autocomplete="current-password" :disabled="busy || !secure" /></FormItem>
     <template v-else>
-     <p role="status">Enter the verification code from your authenticator app.</p>
-     <div ref="otpField"><FormItem label="Verification code"><Input v-model="otp" inputmode="numeric" autocomplete="one-time-code" :disabled="busy" /></FormItem></div>
+     <p role="status">{{ copy.otpPrompt }}</p>
+     <div ref="otpField"><FormItem :label="copy.otp"><Input v-model="otp" inputmode="numeric" autocomplete="one-time-code" :disabled="busy" /></FormItem></div>
     </template>
     <FormActions>
-     <Button type="submit" variant="primary" :disabled="busy || !secure || !account || !password || (needsOTP && !otp)">{{ busy ? 'Signing in…' : needsOTP ? 'Verify and sign in' : 'Sign in' }}</Button>
-     <Button v-if="needsOTP" variant="secondary" :disabled="busy" @click="restart">Use another account</Button>
-     <Button v-else variant="secondary" :disabled="busy || !secure" @click="useDSM">Continue with DSM</Button>
+     <Button type="submit" variant="primary" :disabled="busy || !secure || !account || !password || (needsOTP && !otp)">{{ busy ? copy.signingIn : needsOTP ? copy.verify : copy.signIn }}</Button>
+     <Button v-if="needsOTP" variant="secondary" :disabled="busy" @click="restart">{{ copy.otherAccount }}</Button>
+     <Button v-else variant="secondary" :disabled="busy || !secure" @click="useDSM">{{ copy.continueDSM }}</Button>
     </FormActions>
    </Form>
   </SettingsSection>

package/dist/templates/native-go-vue/frontend/src/identity/i18n/de.json

@@ -0,0 +1,27 @@
+{
+  "title": "Mit Ihrem Synology-Konto anmelden",
+  "intro": "Melden Sie sich mit Ihrem Konto auf diesem NAS bei der App an.",
+  "httpsTitle": "HTTPS erforderlich",
+  "failedTitle": "Anmeldung fehlgeschlagen",
+  "account": "Konto",
+  "password": "Passwort",
+  "otpPrompt": "Geben Sie den Bestätigungscode aus Ihrer Authentifizierungs-App ein.",
+  "otp": "Bestätigungscode",
+  "signingIn": "Anmeldung läuft…",
+  "verify": "Bestätigen und anmelden",
+  "signIn": "Anmelden",
+  "otherAccount": "Anderes Konto verwenden",
+  "continueDSM": "Mit DSM fortfahren",
+  "errors": {
+    "rate_limited": "Zu viele Anmeldeversuche. Warten Sie eine Minute und versuchen Sie es erneut.",
+    "https_required": "Öffnen Sie diese App über HTTPS, um sich anzumelden.",
+    "auth_unavailable": "Die DSM-Anmeldung ist nicht verfügbar. Versuchen Sie es erneut.",
+    "session_required": "Melden Sie sich in diesem Browser bei DSM an und versuchen Sie es dann erneut.",
+    "failed": "Die Anmeldung konnte nicht abgeschlossen werden. Prüfen Sie Ihre Anmeldedaten oder wenden Sie sich an Ihren Administrator."
+  },
+  "notices": {
+    "expired": "Ihre Sitzung ist abgelaufen. Melden Sie sich erneut an.",
+    "revalidate": "Melden Sie sich in diesem Browser bei DSM an und wählen Sie dann „Mit DSM fortfahren“.",
+    "unavailable": "Die Anmeldung ist nicht verfügbar. Aktualisieren Sie die Ansicht und versuchen Sie es erneut."
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/en.json

@@ -0,0 +1,27 @@
+{
+  "title": "Sign in with your Synology account",
+  "intro": "Use your account on this NAS to sign in to the app.",
+  "httpsTitle": "HTTPS required",
+  "failedTitle": "Sign-in failed",
+  "account": "Account",
+  "password": "Password",
+  "otpPrompt": "Enter the verification code from your authenticator app.",
+  "otp": "Verification code",
+  "signingIn": "Signing in…",
+  "verify": "Verify and sign in",
+  "signIn": "Sign in",
+  "otherAccount": "Use another account",
+  "continueDSM": "Continue with DSM",
+  "errors": {
+    "rate_limited": "Too many sign-in attempts. Wait one minute and try again.",
+    "https_required": "Open this app using HTTPS to sign in.",
+    "auth_unavailable": "DSM sign-in is unavailable. Try again.",
+    "session_required": "Sign in to DSM in this browser, then try again.",
+    "failed": "Sign-in could not be completed. Check your credentials or contact your administrator."
+  },
+  "notices": {
+    "expired": "Your session expired. Sign in again.",
+    "revalidate": "Sign in to DSM in this browser, then choose Continue with DSM.",
+    "unavailable": "Sign-in is unavailable. Refresh to try again."
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/es.json

@@ -0,0 +1,27 @@
+{
+  "title": "Iniciar sesión con su cuenta de Synology",
+  "intro": "Use su cuenta de este NAS para iniciar sesión en la aplicación.",
+  "httpsTitle": "Se requiere HTTPS",
+  "failedTitle": "Error al iniciar sesión",
+  "account": "Cuenta",
+  "password": "Contraseña",
+  "otpPrompt": "Introduzca el código de verificación de su aplicación de autenticación.",
+  "otp": "Código de verificación",
+  "signingIn": "Iniciando sesión…",
+  "verify": "Verificar e iniciar sesión",
+  "signIn": "Iniciar sesión",
+  "otherAccount": "Usar otra cuenta",
+  "continueDSM": "Continuar con DSM",
+  "errors": {
+    "rate_limited": "Demasiados intentos de inicio de sesión. Espere un minuto e inténtelo de nuevo.",
+    "https_required": "Abra esta aplicación con HTTPS para iniciar sesión.",
+    "auth_unavailable": "El inicio de sesión de DSM no está disponible. Inténtelo de nuevo.",
+    "session_required": "Inicie sesión en DSM en este navegador e inténtelo de nuevo.",
+    "failed": "No se pudo completar el inicio de sesión. Compruebe sus credenciales o póngase en contacto con su administrador."
+  },
+  "notices": {
+    "expired": "Su sesión ha caducado. Vuelva a iniciar sesión.",
+    "revalidate": "Inicie sesión en DSM en este navegador y luego elija «Continuar con DSM».",
+    "unavailable": "El inicio de sesión no está disponible. Actualice e inténtelo de nuevo."
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/fr.json

@@ -0,0 +1,27 @@
+{
+  "title": "Se connecter avec votre compte Synology",
+  "intro": "Utilisez votre compte sur ce NAS pour vous connecter à l’application.",
+  "httpsTitle": "HTTPS requis",
+  "failedTitle": "Échec de la connexion",
+  "account": "Compte",
+  "password": "Mot de passe",
+  "otpPrompt": "Saisissez le code de vérification de votre application d’authentification.",
+  "otp": "Code de vérification",
+  "signingIn": "Connexion…",
+  "verify": "Vérifier et se connecter",
+  "signIn": "Se connecter",
+  "otherAccount": "Utiliser un autre compte",
+  "continueDSM": "Continuer avec DSM",
+  "errors": {
+    "rate_limited": "Trop de tentatives de connexion. Patientez une minute et réessayez.",
+    "https_required": "Ouvrez cette application en HTTPS pour vous connecter.",
+    "auth_unavailable": "La connexion DSM n’est pas disponible. Réessayez.",
+    "session_required": "Connectez-vous à DSM dans ce navigateur, puis réessayez.",
+    "failed": "La connexion n’a pas pu aboutir. Vérifiez vos identifiants ou contactez votre administrateur."
+  },
+  "notices": {
+    "expired": "Votre session a expiré. Reconnectez-vous.",
+    "revalidate": "Connectez-vous à DSM dans ce navigateur, puis choisissez « Continuer avec DSM ».",
+    "unavailable": "La connexion n’est pas disponible. Actualisez et réessayez."
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/it.json

@@ -0,0 +1,27 @@
+{
+  "title": "Accedi con l’account Synology",
+  "intro": "Usare l’account di questo NAS per accedere all’app.",
+  "httpsTitle": "HTTPS obbligatorio",
+  "failedTitle": "Accesso non riuscito",
+  "account": "Account",
+  "password": "Password",
+  "otpPrompt": "Inserire il codice di verifica dell’app di autenticazione.",
+  "otp": "Codice di verifica",
+  "signingIn": "Accesso in corso…",
+  "verify": "Verifica e accedi",
+  "signIn": "Accedi",
+  "otherAccount": "Usa un altro account",
+  "continueDSM": "Continua con DSM",
+  "errors": {
+    "rate_limited": "Troppi tentativi di accesso. Attendere un minuto e riprovare.",
+    "https_required": "Aprire questa app tramite HTTPS per accedere.",
+    "auth_unavailable": "L’accesso a DSM non è disponibile. Riprovare.",
+    "session_required": "Accedere a DSM in questo browser, quindi riprovare.",
+    "failed": "Impossibile completare l’accesso. Controllare le credenziali o contattare l’amministratore."
+  },
+  "notices": {
+    "expired": "La sessione è scaduta. Accedere di nuovo.",
+    "revalidate": "Accedere a DSM in questo browser, quindi scegliere «Continua con DSM».",
+    "unavailable": "L’accesso non è disponibile. Aggiornare e riprovare."
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/ja.json

@@ -0,0 +1,27 @@
+{
+  "title": "Synology アカウントでサインイン",
+  "intro": "この NAS のアカウントを使ってアプリにサインインします。",
+  "httpsTitle": "HTTPS が必要です",
+  "failedTitle": "サインインに失敗しました",
+  "account": "アカウント",
+  "password": "パスワード",
+  "otpPrompt": "認証アプリに表示された確認コードを入力してください。",
+  "otp": "確認コード",
+  "signingIn": "サインインしています…",
+  "verify": "確認してサインイン",
+  "signIn": "サインイン",
+  "otherAccount": "別のアカウントを使用",
+  "continueDSM": "DSM で続行",
+  "errors": {
+    "rate_limited": "サインインの試行回数が多すぎます。1 分待ってからもう一度お試しください。",
+    "https_required": "サインインするには HTTPS でこのアプリを開いてください。",
+    "auth_unavailable": "DSM サインインを利用できません。もう一度お試しください。",
+    "session_required": "このブラウザーで DSM にサインインしてから、もう一度お試しください。",
+    "failed": "サインインを完了できませんでした。アカウントとパスワードを確認するか、管理者に連絡してください。"
+  },
+  "notices": {
+    "expired": "セッションの有効期限が切れました。もう一度サインインしてください。",
+    "revalidate": "このブラウザーで DSM にサインインしてから、「DSM で続行」を選択してください。",
+    "unavailable": "サインインを利用できません。最新の情報に更新してから、もう一度お試しください。"
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/ko.json

@@ -0,0 +1,27 @@
+{
+  "title": "Synology 계정으로 로그인",
+  "intro": "이 NAS의 계정을 사용하여 앱에 로그인합니다.",
+  "httpsTitle": "HTTPS 필요",
+  "failedTitle": "로그인 실패",
+  "account": "계정",
+  "password": "암호",
+  "otpPrompt": "인증 앱에 표시된 인증 코드를 입력하십시오.",
+  "otp": "인증 코드",
+  "signingIn": "로그인 중…",
+  "verify": "인증 후 로그인",
+  "signIn": "로그인",
+  "otherAccount": "다른 계정 사용",
+  "continueDSM": "DSM으로 계속",
+  "errors": {
+    "rate_limited": "로그인 시도 횟수가 너무 많습니다. 1분 후 다시 시도하십시오.",
+    "https_required": "로그인하려면 HTTPS로 이 앱을 여십시오.",
+    "auth_unavailable": "DSM 로그인을 사용할 수 없습니다. 다시 시도하십시오.",
+    "session_required": "이 브라우저에서 DSM에 로그인한 후 다시 시도하십시오.",
+    "failed": "로그인을 완료할 수 없습니다. 계정과 암호를 확인하거나 관리자에게 문의하십시오."
+  },
+  "notices": {
+    "expired": "세션이 만료되었습니다. 다시 로그인하십시오.",
+    "revalidate": "이 브라우저에서 DSM에 로그인한 후 ‘DSM으로 계속’을 선택하십시오.",
+    "unavailable": "로그인을 사용할 수 없습니다. 새로 고친 후 다시 시도하십시오."
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/zh-CN.json

@@ -0,0 +1,27 @@
+{
+  "title": "使用 Synology 帐户登录",
+  "intro": "使用这台 NAS 上的帐户登录此 App。",
+  "httpsTitle": "需要 HTTPS",
+  "failedTitle": "登录失败",
+  "account": "帐户",
+  "password": "密码",
+  "otpPrompt": "请输入身份验证器 App 中的验证码。",
+  "otp": "验证码",
+  "signingIn": "正在登录…",
+  "verify": "验证并登录",
+  "signIn": "登录",
+  "otherAccount": "使用其他帐户",
+  "continueDSM": "通过 DSM 继续",
+  "errors": {
+    "rate_limited": "登录尝试次数过多，请等待一分钟后重试。",
+    "https_required": "请使用 HTTPS 打开此 App 以登录。",
+    "auth_unavailable": "DSM 登录暂时不可用，请重试。",
+    "session_required": "请先在此浏览器中登录 DSM，然后重试。",
+    "failed": "无法完成登录。请检查帐户和密码，或联系管理员。"
+  },
+  "notices": {
+    "expired": "登录已过期，请重新登录。",
+    "revalidate": "请先在此浏览器中登录 DSM，然后选择“通过 DSM 继续”。",
+    "unavailable": "登录暂时不可用，请刷新后重试。"
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n/zh-TW.json

@@ -0,0 +1,27 @@
+{
+  "title": "使用 Synology 帳號登入",
+  "intro": "使用這台 NAS 上的帳號登入此 App。",
+  "httpsTitle": "需要 HTTPS",
+  "failedTitle": "登入失敗",
+  "account": "帳號",
+  "password": "密碼",
+  "otpPrompt": "請輸入驗證器 App 中的驗證碼。",
+  "otp": "驗證碼",
+  "signingIn": "正在登入…",
+  "verify": "驗證並登入",
+  "signIn": "登入",
+  "otherAccount": "使用其他帳號",
+  "continueDSM": "以 DSM 繼續",
+  "errors": {
+    "rate_limited": "登入嘗試次數過多，請等候一分鐘再試。",
+    "https_required": "請使用 HTTPS 開啟此 App 以登入。",
+    "auth_unavailable": "DSM 登入目前無法使用，請再試一次。",
+    "session_required": "請先在此瀏覽器登入 DSM，然後再試一次。",
+    "failed": "無法完成登入。請檢查帳號與密碼，或聯絡管理員。"
+  },
+  "notices": {
+    "expired": "登入已逾時，請重新登入。",
+    "revalidate": "請先在此瀏覽器登入 DSM，然後選擇「以 DSM 繼續」。",
+    "unavailable": "登入目前無法使用，請重新整理後再試。"
+  }
+}

package/dist/templates/native-go-vue/frontend/src/identity/i18n.ts

@@ -0,0 +1,14 @@
+import en from './i18n/en.json'
+import zhTW from './i18n/zh-TW.json'
+import zhCN from './i18n/zh-CN.json'
+import ja from './i18n/ja.json'
+import ko from './i18n/ko.json'
+import de from './i18n/de.json'
+import fr from './i18n/fr.json'
+import es from './i18n/es.json'
+import it from './i18n/it.json'
+import {uiLocale} from '../nas/locale'
+export type IdentityCopy=typeof en
+export type IdentityNotice=''|keyof IdentityCopy['notices']
+export const identityCatalogs:Record<string,IdentityCopy>={en,'zh-TW':zhTW,'zh-CN':zhCN,ja,ko,de,fr,es,it}
+export function identityCopy(locale:string):IdentityCopy{return identityCatalogs[uiLocale(locale)]!}

package/dist/templates/native-go-vue/frontend/src/identity/session.test.ts

@@ -8,6 +8,10 @@ test('discovers disabled identity without changing existing transport',async()=>
  const call=vi.fn().mockRejectedValue({code:'unknown_method'})
  const session=createSession(context(call));await session.start();expect(session.enabled.value).toBe(false);expect(session.ready.value).toBe(true);session.dispose()
 })
+test('an Application Privileges refusal keeps the DSM shell instead of offering sign-in',async()=>{
+ const call=vi.fn().mockRejectedValue({code:'app_privilege_denied'})
+ const session=createSession(context(call));await session.start();expect(session.enabled.value).toBe(false);expect(session.notice.value).toBe('');session.dispose()
+})
 test('bootstraps, expires and returns to login after a business rejection',async()=>{
  vi.useFakeTimers();const expiresAt=new Date(Date.now()+60000).toISOString()
  const call=vi.fn().mockResolvedValueOnce({enabled:true}).mockResolvedValueOnce({user:'alice',uid:'1205',expiresAt})

package/dist/templates/native-go-vue/frontend/src/identity/session.ts

@@ -1,28 +1,29 @@
 import {ref} from 'vue'
 import type {Context} from '../context'
+import type {IdentityNotice} from './i18n'
 
 export interface SessionSubject {user: string; uid: string; expiresAt: string}
 export function createSession(ctx: Context) {
  const enabled = ref(false)
  const ready = ref(false)
  const subject = ref<SessionSubject>()
- const notice = ref('')
+ const notice = ref<IdentityNotice>('')
  let disposed = false
  let revision = 0
  let expiry: ReturnType<typeof setTimeout> | undefined
  let poll: ReturnType<typeof setTimeout> | undefined
  function cancelTimers() {clearTimeout(expiry); clearTimeout(poll)}
- function clear(message = '') {revision++; cancelTimers(); subject.value = undefined; notice.value = message}
+ function clear(message: IdentityNotice = '') {revision++; cancelTimers(); subject.value = undefined; notice.value = message}
  function accept(value: SessionSubject) {
   if (disposed) return
   const remaining = Date.parse(value.expiresAt) - Date.now()
-  if (!Number.isFinite(remaining) || remaining <= 0) {clear('Your session expired. Sign in again.'); return}
+  if (!Number.isFinite(remaining) || remaining <= 0) {clear('expired'); return}
   cancelTimers(); subject.value = value; notice.value = ''
-  expiry = setTimeout(() => clear('Your session expired. Sign in again.'), remaining)
+  expiry = setTimeout(() => clear('expired'), remaining)
   const current = revision
   poll = setTimeout(async () => {
    try {const next = await ctx.call<SessionSubject>('identity.session'); if (!disposed && revision === current) accept(next)}
-   catch {if (!disposed && revision === current) clear('Your session expired. Sign in again.')}
+   catch {if (!disposed && revision === current) clear('expired')}
   }, Math.min(60000, remaining))
  }
  async function start() {
@@ -37,8 +38,8 @@ export function createSession(ctx: Context) {
   } catch (e) {
    // Existing templates have no identity transport and retain their DSM shell.
    const code = (e as {code?: string})?.code
-   enabled.value = !['unknown_method', 'admin_required', 'session_required'].includes(code || '')
-   if (enabled.value) notice.value = 'Sign-in is unavailable. Refresh to try again.'
+   enabled.value = !['unknown_method', 'admin_required', 'app_privilege_denied', 'session_required'].includes(code || '')
+   if (enabled.value) notice.value = 'unavailable'
   } finally {if (!disposed) ready.value = true}
  }
  async function call<T = unknown>(method: string, params?: Record<string, unknown>): Promise<T> {
@@ -51,7 +52,7 @@ export function createSession(ctx: Context) {
   catch (e) {
    const code = (e as {code?: string})?.code
    if (!disposed && current === revision && enabled.value && ['session_required', 'session_revalidation_required'].includes(code || '')) {
-    clear(code === 'session_revalidation_required' ? 'Sign in to DSM in this browser, then choose Continue with DSM.' : 'Your session expired. Sign in again.')
+    clear(code === 'session_revalidation_required' ? 'revalidate' : 'expired')
    }
    throw e
   }

package/dist/templates/native-go-vue/frontend/src/nas/NasPicker.vue

@@ -1,23 +1,42 @@
 <script setup lang="ts">
-import {computed,ref,watch} from 'vue'
-import {Button,Dialog} from '@synopackageland/ui'
+import {computed,onBeforeUnmount,ref,watch} from 'vue'
+import {Button,Callout,Dialog} from '@synopackageland/ui'
 import FileBrowser from '../files/FileBrowser.vue'
 import type {NasProvider} from './contract'
 import {nasCopy} from './locale'
-const props=defineProps<{open:boolean;locale:string;provider:NasProvider;mode:'folder'|'file';title?:string;description?:string}>()
-const emit=defineEmits<{'update:open':[value:boolean];selected:[path:string]}>()
-const selected=ref<string>(),copy=computed(()=>nasCopy(props.locale))
-watch(()=>props.open,()=>{selected.value=undefined})
-function close(){selected.value=undefined;emit('update:open',false)}
-function confirm(){if(selected.value){emit('selected',selected.value);close()}}
+import type {DestinationGrant,DestinationSelection} from '../delegate/long-running'
+import {saveCopy,saveError} from '../delegate/save-copy'
+const props=defineProps<{open:boolean;locale:string;provider:NasProvider;mode:'folder'|'file';title?:string;description?:string;destination?:DestinationSelection}>()
+const emit=defineEmits<{'update:open':[value:boolean];selected:[path:string];authorized:[grant:DestinationGrant]}>()
+const selected=ref<string>(),copy=computed(()=>nasCopy(props.locale)),save=computed(()=>saveCopy(props.locale)),busy=ref(false),error=ref<unknown>()
+let generation=0,disposed=false
+watch(()=>props.open,()=>{generation++;selected.value=undefined;error.value=undefined})
+onBeforeUnmount(()=>{disposed=true;generation++})
+function close(){if(busy.value)return;selected.value=undefined;emit('update:open',false)}
+async function confirm(){
+ const path=selected.value,destination=props.destination,version=generation
+ if(!path||busy.value||!props.open||disposed||(destination&&props.mode!=='folder'))return
+ if(!destination){emit('selected',path);close();return}
+ busy.value=true;error.value=undefined
+ try{
+  const grant=await destination.selectDestination({key:destination.key,path})
+  if(disposed||version!==generation)return
+  if(!grant||typeof grant.id!=='string'||!grant.id||typeof grant.username!=='string'||!grant.username||grant.path!==path||grant.key!==destination.key||grant.lifetime!=='until-revoked')throw {code:'commit-uncertain'}
+  emit('authorized',grant);busy.value=false;close()
+ }catch(e){if(!disposed&&version===generation)error.value=e}
+ finally{if(!disposed)busy.value=false}
+}
 </script>
 <template>
- <Dialog :open="open" :title="title??(mode==='folder'?copy.choose:copy.chooseFile)" :close-label="copy.close" width="800px" @update:open="value=>{if(!value)close()}">
-  <p v-if="description">{{ description }}</p>
-  <div class="nas-picker-content"><FileBrowser v-if="open" :provider="provider" :locale="locale" :mode="mode" @selected="selected=$event" /></div>
-  <template #footer><Button variant="secondary" @click="close">{{ copy.cancel }}</Button><Button variant="primary" :disabled="!selected" @click="confirm">{{ copy.confirm }}</Button></template>
+ <Dialog :open="open" :title="title??(mode==='folder'?copy.choose:copy.chooseFile)" :description="description??copy.ownPermissions" :close-label="copy.close" :show-close="!busy" width="800px" @escape-key-down="event=>{if(busy)event.preventDefault()}" @interact-outside="event=>{if(busy)event.preventDefault()}" @update:open="value=>{if(!value)close()}">
+  <p v-if="destination" class="save-consent">{{ save.selection }}</p>
+  <Callout v-if="error" tone="danger" role="alert" class="save-message">{{ saveError(error,save) }}</Callout>
+  <div class="nas-picker-content" :aria-busy="busy" :inert="busy"><FileBrowser v-if="open" :provider="provider" :locale="locale" :mode="mode" @selected="selected=$event" /></div>
+  <template #footer><Button variant="secondary" :disabled="busy" @click="close">{{ copy.cancel }}</Button><Button variant="primary" :disabled="!selected||busy||!!destination&&mode!=='folder'" @click="confirm">{{ copy.confirm }}</Button></template>
  </Dialog>
 </template>
 <style scoped>
 .nas-picker-content { max-height: 65vh; overflow: auto; }
+.save-message {--ui-text-secondary:var(--ui-text);}
+.save-consent {color:var(--ui-text);margin-block:0 var(--ui-space-4,16px);}
 </style>

package/dist/templates/native-go-vue/frontend/src/nas/destination.test.ts

@@ -0,0 +1,48 @@
+// @vitest-environment jsdom
+import {afterEach,expect,test,vi} from 'vitest'
+import {createApp,h,nextTick,ref} from 'vue'
+import {AppRoot,ConfigProvider} from '@synopackageland/ui'
+import NasPicker from './NasPicker.vue'
+import {createNasProvider} from './provider'
+import {nasCopy} from './locale'
+const cleanup:Array<()=>void>=[]
+afterEach(()=>cleanup.splice(0).forEach(fn=>fn()))
+async function settle(){for(let i=0;i<30;i++){await Promise.resolve();await nextTick()}}
+const grant={id:'d1',key:'save',path:'/home',username:'normal1',lifetime:'until-revoked' as const}
+function fixture(selectDestination:any,mode:'folder'|'file'='folder'){
+ const root=document.createElement('div');document.body.append(root)
+ const selected=vi.fn(),authorized=vi.fn(),open=ref(true)
+ const provider=createNasProvider({call:vi.fn(async()=>({shares:[{name:'home',path:'/home',isdir:true}],offset:0,total:1})) as any})
+ const app=createApp({render:()=>h(ConfigProvider,{locale:'en'},()=>h(AppRoot,{},()=>h(NasPicker,{provider,locale:'en',mode,open:open.value,destination:{key:'save',selectDestination},onSelected:selected,onAuthorized:authorized,'onUpdate:open':v=>open.value=v})))})
+ app.config.idPrefix='destination-test';app.mount(root)
+ cleanup.push(()=>{app.unmount();provider.dispose();root.remove()})
+ return {root,open,selected,authorized,app}
+}
+function button(root:HTMLElement,label:string){const b=Array.from(root.querySelectorAll('button')).find(n=>n.textContent?.trim()===label||n.getAttribute('aria-label')===label);expect(b,label).toBeTruthy();return b!}
+async function select(root:HTMLElement){await settle();button(root,'Select home').click();await settle();button(root,nasCopy('en').confirm).click();await settle()}
+test('destination confirmation authorizes once with its manifest key, without a second consent dialog',async()=>{
+ const call=vi.fn(async()=>grant),f=fixture(call);await settle()
+ expect(f.root.textContent).toContain('after you sign out')
+ await select(f.root)
+ expect(call).toHaveBeenCalledExactlyOnceWith({key:'save',path:'/home'})
+ expect(f.authorized).toHaveBeenCalledExactlyOnceWith(grant)
+ expect(f.selected).not.toHaveBeenCalled();expect(f.open.value).toBe(false)
+})
+test('a rejected write/session check keeps the picker open and never emits a path or a grant',async()=>{
+ const f=fixture(vi.fn(async()=>{throw {code:'PERMISSION_DENIED',message:'secret SID'}}));await select(f.root)
+ expect(f.open.value).toBe(true);expect(f.selected).not.toHaveBeenCalled();expect(f.authorized).not.toHaveBeenCalled()
+ expect(f.root.querySelector('[role=alert]')?.textContent).toContain('permission')
+ expect(f.root.textContent).not.toContain('secret SID')
+})
+test('only folder destinations can authorize; a malformed grant is never reported as successful',async()=>{
+ const call=vi.fn(async()=>({...grant,path:'/elsewhere'})),f=fixture(call);await select(f.root)
+ expect(f.open.value).toBe(true);expect(f.authorized).not.toHaveBeenCalled()
+ const fileCall=vi.fn(async()=>grant),file=fixture(fileCall,'file');await settle()
+ expect(button(file.root,nasCopy('en').confirm).disabled).toBe(true);expect(fileCall).not.toHaveBeenCalled()
+})
+test('pending authorization prevents duplicate confirmation and ignores a late result after unmount',async()=>{
+ let resolve!:(value:typeof grant)=>void
+ const call=vi.fn(()=>new Promise(r=>resolve=r)),f=fixture(call);await select(f.root)
+ expect(button(f.root,nasCopy('en').confirm).disabled).toBe(true)
+ f.app.unmount();resolve(grant);await settle();expect(f.authorized).not.toHaveBeenCalled()
+})

package/dist/templates/native-go-vue/frontend/src/nas/i18n/files/de.json

@@ -37,5 +37,5 @@
   "download": "Herunterladen",
   "uploaded": "Datei hochgeladen.",
   "errorDSM": "Melden Sie sich unter diesem Hostnamen bei DSM an, um auf NAS-Dateien zuzugreifen. Eine App-Anmeldung allein erlaubt keinen Zugriff auf File Station.",
-  "errorUploadSize": "Wählen Sie eine Datei mit höchstens 16 GiB."
+  "errorUploadSize": "Wählen Sie eine Datei mit höchstens 16 GB aus."
 }

package/dist/templates/native-go-vue/frontend/src/nas/i18n/files/en.json

@@ -37,5 +37,5 @@
   "download": "Download",
   "uploaded": "File uploaded.",
   "errorDSM": "Sign in to DSM on this hostname to access NAS files. An App login alone cannot access File Station.",
-  "errorUploadSize": "Choose one file up to 16 GiB."
+  "errorUploadSize": "Choose one file up to 16 GB."
 }