@synopackageland/cli 0.8.0 → 0.9.0

package/templates/native-go-jobs/frontend/test/background.test.ts

@@ -1,205 +0,0 @@
-// @vitest-environment jsdom
-import {readFileSync} from 'node:fs'
-import {join} from 'node:path'
-import {test,expect,beforeEach,afterEach,vi} from 'vitest'
-import {createApp,h,nextTick} from 'vue'
-import {AppRoot} from '@synopackageland/ui'
-import BackgroundPanel from '../src/background/BackgroundPanel.vue'
-import {backgroundCatalogs,backgroundCopy} from '../src/background/i18n'
-import {nasCopy} from '../src/nas/locale'
-// DSM HTTP exposes getRandomValues, but not the secure-context randomUUID API.
-beforeEach(()=>vi.stubGlobal('crypto',{getRandomValues:globalThis.crypto.getRandomValues.bind(globalThis.crypto)}))
-afterEach(()=>vi.unstubAllGlobals())
-// The UI Select is a Reka combobox: drive it by keyboard (the UI README helper), which also proves it is keyboard operable.
-// Attrs such as data-schedule-interval land on the focusable combobox itself.
-async function choose(root:HTMLElement,marker:string,label:string){
- const trigger=root.querySelector<HTMLElement>(`[${marker}][role=combobox]`)!;expect(trigger,marker).toBeTruthy()
- expect(trigger.id,marker).toBeTruthy();expect(root.querySelector(`label[for="${trigger.id}"]`),marker).toBeTruthy()
- trigger.dispatchEvent(new KeyboardEvent('keydown',{key:'ArrowDown',bubbles:true,cancelable:true}));await settle()
- const option=[...document.querySelectorAll<HTMLElement>('[role=option]')].find(o=>o.textContent?.trim()===label)
- if(!option||option.getAttribute('aria-disabled')==='true')throw new Error(`No enabled option: ${label}`)
- option.focus();option.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',bubbles:true,cancelable:true}));await settle()
- expect(trigger.textContent).toContain(label)
-}
-async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
-type Call=(method:string,params?:Record<string,unknown>)=>Promise<any>
-function mount(call:Call,locale='en'){
- const root=document.createElement('div');document.body.append(root)
- const app=createApp({render:()=>h(AppRoot,{},()=>h(BackgroundPanel,{ctx:{call,locale}}))})
- app.config.idPrefix=`bg-${Math.random()}`;app.mount(root)
- return {root,close(){app.unmount();root.remove()}}
-}
-const click=(root:HTMLElement,text:string)=>{const b=[...root.querySelectorAll('button')].find(b=>b.textContent?.trim()===text)!;expect(b).toBeTruthy();b.click()}
-const status=()=>({supported:true,admin:true,revision:1,queued:0,running:0,worker:{username:'SynoPkg',alive:true},limits:{maxInputBytes:524288,maxQueued:16,maxOwnerPending:2,maxOwnerBytes:1048576,maxTotalBytes:16777216,jobTimeoutSeconds:60}})
-
-test('non-administrators see unsupported and no action',async()=>{
- const f=mount(async()=>{throw {code:'unsupported'}});await settle()
- expect(f.root.textContent).toContain(backgroundCopy('en').unsupported);expect(f.root.querySelector('button')).toBeNull();f.close()
-})
-const browse=(args?:Record<string,unknown>)=>args?.folder
- ?{files:[{name:'fixture.bin',path:`${args.folder}/fixture.bin`,isdir:false,additional:{size:3}}],total:1,offset:0}
- :{shares:[{name:'share',path:'/share',isdir:true}],total:1,offset:0}
-test('pick a file, submit, cancel and result use only bg.* routes',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[];let jobs:any[]=[]
- const f=mount(async(m,p)=>{
-  calls.push([m,p])
-  switch(m){
-   case 'bg.status':return status()
-   case 'bg.jobs.list':return {jobs}
-   case 'bg.browse':return browse(p)
-   case 'bg.jobs.submit':jobs=[{id:'j1',name:'fixture.bin',state:'queued'}];return {job:jobs[0],duplicate:false}
-   case 'bg.jobs.cancel':jobs=[{...jobs[0],state:'canceled'}];return {job:jobs[0]}
-   case 'bg.jobs.result':return {result:{sha256:'x'}}
-  }
- });await settle()
- const copy=backgroundCopy('en'),pick=nasCopy('en')
- expect(f.root.querySelector('[data-bg-folder]')).toBeNull();expect(f.root.querySelector('[data-bg-file]')).toBeNull()
- const submitButton=()=>[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===copy.submit)!
- expect(submitButton().disabled).toBe(true)
- click(f.root,copy.chooseFile);await settle()
- click(f.root,'share');await settle()
- click(f.root,pick.selectAction);await settle();click(f.root,pick.confirm);await settle()
- expect(f.root.textContent).toContain('/share/fixture.bin')
- expect(submitButton().disabled).toBe(false)
- click(f.root,copy.submit);await settle()
- const submit=calls.find(c=>c[0]==='bg.jobs.submit')![1]!
- expect(submit.folder).toBe('/share');expect(submit.relative).toBe('fixture.bin');expect(submit.key).toMatch(/^[a-f0-9]{32}$/)
- expect(f.root.querySelector('[data-job-state=queued]')).not.toBeNull()
- click(f.root,copy.cancel);await settle()
- expect(f.root.querySelector('[data-job-state=canceled]')).not.toBeNull()
- expect(calls.filter(c=>c[0]==='bg.browse').length).toBeGreaterThan(0)
- expect(calls.every(c=>/^bg\./.test(c[0]))).toBe(true)
- f.close()
-})
-test('a denied listing shows a localized error and cannot submit',async()=>{
- const f=mount(async(m)=>{
-  if(m==='bg.status')return status()
-  if(m==='bg.jobs.list')return {jobs:[]}
-  if(m==='bg.browse')throw {code:'denied',message:'Cookie=CANARY'}
- });await settle()
- click(f.root,backgroundCopy('en').chooseFile);await settle()
- expect(f.root.textContent).toContain(nasCopy('en').errorDenied);expect(f.root.textContent).not.toContain('CANARY')
- expect([...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===backgroundCopy('en').submit)!.disabled).toBe(true)
- f.close()
-})
-test('nine locales have identical keys and placeholders',()=>{
- const en=backgroundCatalogs.en,flat=(o:any,p=''):Record<string,string>=>Object.fromEntries(Object.entries(o).flatMap(([k,v])=>typeof v==='string'?[[p+k,v]]:Object.entries(flat(v,`${p}${k}.`))))
- const base=flat(en)
- expect(Object.keys(backgroundCatalogs).sort()).toEqual(['de','en','es','fr','it','ja','ko','zh-CN','zh-TW'])
- for(const catalog of Object.values(backgroundCatalogs)){
-  const map=flat(catalog);expect(Object.keys(map).sort()).toEqual(Object.keys(base).sort())
-  for(const [k,v] of Object.entries(map)){expect(v.length).toBeGreaterThan(0);expect(v.match(/\{\w+\}/g)??[]).toEqual(base[k].match(/\{\w+\}/g)??[])}
- }
-})
-
-test('a null job list from the worker renders as no jobs',async()=>{
- const f=mount(async m=>m==='bg.status'?status():m==='bg.jobs.list'?{jobs:null}:{});await settle()
- expect(f.root.textContent).toContain(backgroundCopy('en').noJobs);f.close()
-})
-
-// One test per locale: each mounts its own app, so a slow host cannot push nine mounts past one test timeout.
-test.each(Object.keys(backgroundCatalogs))('the picker dialog explains the one-time read in %s',async locale=>{
- const f=mount(async(m,p)=>m==='bg.status'?status():m==='bg.jobs.list'?{jobs:[]}:browse(p),locale);await settle()
- const copy=backgroundCopy(locale)
- click(f.root,copy.chooseFile);await settle()
- const dialog=f.root.querySelector('[role=dialog]')!.textContent!
- expect(dialog).toContain(copy.pickerConsent)
- f.close()
-})
-
-test('ordinary owner can submit but has no administrator controls',async()=>{
- const calls:string[]=[]
- const f=mount(async(m,p)=>{calls.push(m);if(m==='bg.status')return {...status(),admin:false};if(m==='bg.jobs.list')return {jobs:[{id:'owned',name:'owned.bin',state:'queued',submitter:{user:'bob',uid:'1025'}}]};if(m==='bg.browse')return browse(p);return {}});await settle()
- const c=backgroundCopy('en')
- expect(f.root.textContent).toContain(c.ownerScope)
- expect(f.root.textContent).not.toContain(c.purgeOwner)
- expect([...f.root.querySelectorAll('button')].some(b=>b.textContent?.trim()===c.chooseFile)).toBe(true)
- click(f.root,c.cancel);await settle();expect(calls).toContain('bg.jobs.cancel');f.close()
-})
-test('admin exact owner purge requires explicit confirmation',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[]
- const f=mount(async(m,p)=>{calls.push([m,p]);if(m==='bg.status')return {...status(),admin:true};if(m==='bg.jobs.list')return {jobs:[{id:'one',name:'a',state:'succeeded',submitter:{user:'bob',uid:'1025'}}]};return {}});await settle()
- const c=backgroundCopy('en')
- click(f.root,c.purgeOwner);await settle();expect(calls.some(([m])=>m==='bg.jobs.purge')).toBe(false)
- click(f.root,c.confirmPurge);await settle()
- expect(calls.find(([m])=>m==='bg.jobs.purge')?.[1]).toEqual({owner:{user:'bob',uid:'1025'}});f.close()
-})
-test('malformed status cannot render action controls or crash the panel',async()=>{
- const f=mount(async()=>({state:'not-enabled'}));await settle()
- expect(f.root.textContent).toContain(backgroundCopy('en').errors.failed)
- expect(f.root.querySelector('button')).toBeNull();f.close()
-})
-
-test('schedule creation requires copy consent; owner controls disable and delete exact schedule',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[];let schedules:any[]=[]
- const f=mount(async(m,p)=>{calls.push([m,p]);switch(m){
- case 'bg.status':return {...status(),owner:{user:'bob',uid:'1025'},admin:false}
- case 'bg.jobs.list':return {jobs:[{id:'import',name:'copy.bin',state:'succeeded',copyRetained:true,submitter:{user:'bob',uid:'1025'}}]}
- case 'bg.schedules.list':return {schedules}
- case 'bg.schedules.create':schedules=[{id:'schedule',name:'copy.bin',owner:{user:'bob',uid:'1025'},enabled:true,intervalSeconds:3600,nextAt:'2026-10-05T01:00:00Z',missed:0,workerRevision:1}];return {schedule:schedules[0]}
- case 'bg.schedules.disable':schedules=[{...schedules[0],enabled:false}];return {schedule:schedules[0]}
- case 'bg.schedules.delete':schedules=[];return {deleted:true}
- default:return {}
- }});await settle();const c=backgroundCopy('en')
- click(f.root,c.scheduleCopy);await settle()
- expect(calls.some(([m])=>m==='bg.schedules.create')).toBe(false)
- const create=[...f.root.querySelectorAll('button')].find(b=>b.textContent?.trim()===c.createSchedule)!
- expect(create.disabled).toBe(true)
- await choose(f.root,'data-schedule-interval',c.weekly)
- const consent=f.root.querySelector<HTMLElement>('[data-schedule-consent] [role=checkbox], [role=checkbox][data-schedule-consent]')!;consent.click();await settle()
- click(f.root,c.createSchedule);await settle()
- expect(calls.find(([m])=>m==='bg.schedules.create')?.[1]).toMatchObject({jobId:'import',intervalSeconds:604800,consent:true})
- expect(calls.find(([m])=>m==='bg.schedules.create')?.[1]?.key).toMatch(/^[a-f0-9]{32}$/)
- expect(f.root.querySelector('[data-schedule-id=schedule]')?.textContent).toContain(c.nextRun.replace('{time}','').trim().split(':')[0])
- click(f.root,c.disableSchedule);await settle();expect(calls.find(([m])=>m==='bg.schedules.disable')?.[1]).toEqual({id:'schedule'})
- click(f.root,c.deleteSchedule);await settle();expect(calls.some(([m])=>m==='bg.schedules.delete')).toBe(false)
- click(f.root,c.confirmDeleteSchedule);await settle();expect(calls.find(([m])=>m==='bg.schedules.delete')?.[1]).toEqual({id:'schedule'});f.close()
-})
-
-test('administrator sees the exact selected copy before enabling a schedule',async()=>{
- const calls:Array<[string,Record<string,unknown>|undefined]>=[]
- const name='private-'.padEnd(128,'x')
- const f=mount(async(m,p)=>{calls.push([m,p]);if(m==='bg.status')return status();if(m==='bg.jobs.list')return {jobs:[]};if(m==='bg.schedules.list')return {schedules:[{id:'disabled',name,owner:{user:'normal1',uid:'1025'},enabled:false,nextAt:'2026-10-05T01:00:00Z',missed:0}]};return {}});await settle()
- const c=backgroundCopy('en');click(f.root,c.enableSchedule);await settle()
- const expected=c.enableScheduleConsent.replace('{name}',name)
- expect(expected).toContain(name);expect(f.root.textContent).toContain(expected)
- expect(calls.some(([m])=>m==='bg.schedules.enable')).toBe(false)
- click(f.root,c.confirmEnableSchedule);await settle()
- expect(calls.find(([m])=>m==='bg.schedules.enable')?.[1]).toEqual({id:'disabled',consent:true});f.close()
-})
-
-// Same rule as the base template (test/native-controls.test.ts): UI components only, and the
-// UI's own Form auto layout and FormItem id binding instead of per-app workarounds.
-test('the background panel uses only UI components and the UI form binding',()=>{
- const template=readFileSync(join(__dirname,'../src/background/BackgroundPanel.vue'),'utf8').replace(/<script[\s\S]*?<\/script>/g,'').replace(/<style[\s\S]*?<\/style>/g,'')
- expect(template.match(/<(?:a|input|select|textarea|label)[\s>/]/g)).toBeNull()
- expect(template).not.toMatch(/direction="vertical"|field\.controlId|role="group"/)
-})
-
-test('fresh ordinary user can pick and submit without administrator switches',async()=>{
- const calls:string[]=[]
- const f=mount(async(m,p)=>{calls.push(m);if(m==='bg.status')return {...status(),admin:false}
- if(m==='bg.browse')return browse(p);if(m==='bg.jobs.list')return {jobs:[]};return {schedules:[]}});await settle()
- click(f.root,backgroundCopy('en').chooseFile);await settle()
- expect(calls).toContain('bg.browse')
- expect(calls).not.toContain('bg.mode.set');expect(calls).not.toContain('bg.users.set');f.close()
-})
-
-test.each(Object.keys(backgroundCatalogs))('jobs_busy renders a retry message in %s and permits retry',async locale=>{
- let attempts=0
- const f=mount(async(m)=>{
-  if(m==='bg.status')return status()
-  if(m==='bg.jobs.list'){
-   if(attempts++===0)throw {code:'jobs_busy',message:'CANARY'}
-   return {jobs:[]}
-  }
-  return {schedules:[]}
- },locale);await settle()
- const copy=backgroundCopy(locale)
- expect(copy.errors.jobs_busy).toBeTruthy()
- expect(copy.errors.jobs_busy).not.toBe(copy.errors.failed)
- expect(f.root.querySelector('[role=alert]')?.textContent).toBe(copy.errors.jobs_busy)
- expect(f.root.textContent).not.toContain('CANARY')
- click(f.root,copy.refresh);await settle();expect(attempts).toBe(2)
- f.close()
-})

package/templates/native-go-root-ops/backend/internal/app/executor.go

@@ -1,140 +0,0 @@
-package app
-
-import (
-	"bufio"
-	"context"
-	"encoding/json"
-	"errors"
-	"net"
-	"net/http"
-	"os"
-	"path/filepath"
-	"strings"
-	"syscall"
-	"time"
-
-	"dsmapp/internal/api"
-)
-
-func (cfg Config) rootRoutes() []api.Route {
-	return []api.Route{
-		api.Handle("executor.control", cfg.executorControl),
-		api.Handle("executor.status", cfg.executorStatus),
-		api.HandleRequest("root.run", cfg.executorRootRun),
-	}
-}
-
-// API permissions default to administrators for unlisted methods. Check here
-// too: control mutates the fixed package-owned control file before DSM run.
-func (cfg Config) executorControl(_ context.Context, caller api.Caller, raw json.RawMessage) (any, error) {
-	if !caller.Admin() {
-		return nil, errors.New("admin_required")
-	}
-	var in struct {
-		Action string `json:"action"`
-	}
-	if err := decodeParams(raw, &in); err != nil {
-		return nil, err
-	}
-	if in.Action != "start" && in.Action != "stop" && in.Action != "purge" {
-		return nil, api.BadRequest("executor_control_invalid")
-	}
-	dir := filepath.Join(cfg.DataDir, "executor")
-	if err := os.MkdirAll(dir, 0700); err != nil {
-		return nil, err
-	}
-	info, err := os.Lstat(dir)
-	if err != nil || !info.IsDir() || info.Mode()&os.ModeSymlink != 0 {
-		return nil, errors.New("executor_control_directory_invalid")
-	}
-	if err := writeFileAtomic(filepath.Join(dir, "control"), []byte(in.Action)); err != nil {
-		return nil, err
-	}
-	return map[string]bool{"written": true}, nil
-}
-
-// The executor closes its socket while paused: the package is stopped, or an
-// upgrade changed the pins and awaits administrator approval.
-func (cfg Config) executorStatus(ctx context.Context, _ api.Caller, _ json.RawMessage) (any, error) {
-	status, err := cfg.executorRequest(ctx, "status", nil, nil)
-	if errors.Is(err, syscall.ENOENT) || errors.Is(err, syscall.ECONNREFUSED) {
-		next := "Start the package."
-		if cfg.startRequested() {
-			next = "The package is running: an administrator approves background access again in Administrator setup; the executor log names the cause."
-		}
-		return map[string]any{"ready": false, "state": "paused", "reason": "executor_not_listening", "next": next}, nil
-	}
-	return status, err
-}
-
-// Package start and stop write the lifecycle mailbox; its last request tells a
-// stopped package from a running one whose executor stays paused.
-func (cfg Config) startRequested() bool {
-	f, err := os.Open(filepath.Join(cfg.DataDir, "executor", "control"))
-	if err != nil {
-		return false
-	}
-	defer f.Close()
-	b := make([]byte, 16)
-	n, _ := f.Read(b)
-	return strings.TrimSpace(string(b[:n])) == "start"
-}
-
-func (cfg Config) executorRootRun(ctx context.Context, caller api.Caller, req *http.Request, raw json.RawMessage) (any, error) {
-	if !caller.Admin() {
-		return nil, errors.New("admin_required")
-	}
-	var in struct {
-		Name string `json:"name"`
-	}
-	if err := decodeParams(raw, &in); err != nil {
-		return nil, err
-	}
-	// Executor independently verifies both session values and administrator identity.
-	auth, err := api.DSMSession(req)
-	if err != nil {
-		return nil, err
-	}
-	return cfg.executorRequest(ctx, "root.run", auth, map[string]string{"name": in.Name})
-}
-
-// executorSocketBase is a variable so tests can use a temporary directory.
-var executorSocketBase = "/run/synopkgland"
-
-func (cfg Config) executorRequest(ctx context.Context, op string, auth, params any) (any, error) {
-	conn, err := (&net.Dialer{Timeout: 5 * time.Second}).DialContext(ctx, "unix", filepath.Join(executorSocketBase, cfg.PackageID, "executor.sock"))
-	if err != nil {
-		return nil, err
-	}
-	defer conn.Close()
-	if err := conn.SetDeadline(time.Now().Add(30 * time.Second)); err != nil {
-		return nil, err
-	}
-	if auth == nil {
-		auth = map[string]any{}
-	}
-	if params == nil {
-		params = map[string]any{}
-	}
-	if err := json.NewEncoder(conn).Encode(map[string]any{"v": 1, "op": op, "auth": auth, "params": params}); err != nil {
-		return nil, err
-	}
-	scanner := bufio.NewScanner(conn)
-	scanner.Buffer(make([]byte, 4096), 64*1024)
-	if !scanner.Scan() {
-		return nil, errors.New("executor_response_invalid")
-	}
-	var response struct {
-		OK      bool            `json:"ok"`
-		Result  json.RawMessage `json:"result"`
-		Code    string          `json:"code"`
-		Message string          `json:"message"`
-	}
-	if err := json.Unmarshal(scanner.Bytes(), &response); err != nil {
-		return nil, err
-	}
-	if !response.OK {
-		return nil, errors.New(response.Code + ": " + response.Message)
-	}
-	return response.Result, nil
-}

package/templates/native-go-root-ops/backend/internal/app/executor_test.go

@@ -1,117 +0,0 @@
-package app
-
-import (
-	"net"
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-)
-
-func init() {
-	sampleParams["executor.control"] = `{"action":"stop"}`
-	sampleParams["executor.status"] = `{}`
-	sampleParams["root.run"] = `{"name":"whoami"}`
-}
-
-func TestExecutorControlAcceptsOnlyFixedActions(t *testing.T) {
-	cfg := testConfig(t)
-	for _, action := range []string{"start", "stop", "purge"} {
-		code, out := call(t, cfg, alice, "executor.control", `{"action":"`+action+`"}`)
-		if code != "" {
-			t.Fatalf("%s: %s %v", action, code, out)
-		}
-		b, err := os.ReadFile(filepath.Join(cfg.DataDir, "executor/control"))
-		if err != nil || string(b) != action {
-			t.Fatalf("control was not written: %s %v", b, err)
-		}
-	}
-	for _, raw := range []string{`{"action":"start;id"}`, `{"action":"start\nstop"}`, `{"action":""}`, `{"action":"stop","path":"/etc/passwd"}`} {
-		if code, _ := call(t, cfg, alice, "executor.control", raw); code != "bad_request" {
-			t.Fatalf("accepted %s: %s", raw, code)
-		}
-	}
-}
-
-func TestExecutorControlRejectsSymlinkDirectory(t *testing.T) {
-	cfg := testConfig(t)
-	outside := t.TempDir()
-	if err := os.Symlink(outside, filepath.Join(cfg.DataDir, "executor")); err != nil {
-		t.Fatal(err)
-	}
-	if code, _ := call(t, cfg, alice, "executor.control", `{"action":"stop"}`); code == "" {
-		t.Fatal("accepted symlink")
-	}
-	if _, err := os.Stat(filepath.Join(outside, "control")); !os.IsNotExist(err) {
-		t.Fatal("wrote outside data directory")
-	}
-}
-
-func TestExecutorRootRunRequiresCurrentDSMCookie(t *testing.T) {
-	t.Setenv("HTTP_COOKIE", "")
-	if code, _ := call(t, testConfig(t), alice, "root.run", `{"name":"whoami"}`); code == "" {
-		t.Fatal("root.run accepted absent DSM cookie")
-	}
-}
-
-// The executor closes its listener while paused (package stopped, or pins
-// awaiting administrator approval). Status then answers, not "internal".
-func TestExecutorStatusReportsAPausedExecutor(t *testing.T) {
-	cfg := testConfig(t)
-	previous := executorSocketBase
-	// A short base: unix socket paths are limited to about 100 bytes.
-	base, err := os.MkdirTemp("/tmp", "exec")
-	if err != nil {
-		t.Fatal(err)
-	}
-	executorSocketBase = base
-	defer func() { executorSocketBase = previous; os.RemoveAll(base) }()
-	check := func(name string) {
-		t.Helper()
-		code, envelope := call(t, cfg, alice, "executor.status", `{}`)
-		out, _ := envelope["data"].(map[string]any)
-		if code != "" || out["ready"] != false || out["state"] != "paused" || out["reason"] != "executor_not_listening" || out["next"] == "" || out["next"] == nil {
-			t.Fatalf("%s: %s %v", name, code, out)
-		}
-	}
-	check("no socket")
-	if code, _ := call(t, cfg, bob, "executor.status", `{}`); code != "" {
-		t.Fatal("authenticated user cannot read a paused status", code)
-	}
-	dir := filepath.Join(executorSocketBase, cfg.PackageID)
-	os.MkdirAll(dir, 0700)
-	ln, err := net.ListenUnix("unix", &net.UnixAddr{Name: filepath.Join(dir, "executor.sock"), Net: "unix"})
-	if err != nil {
-		t.Fatal(err)
-	}
-	ln.SetUnlinkOnClose(false)
-	ln.Close()
-	check("closed listener")
-}
-
-// next follows the last lifecycle request: a running package needs approval
-// again, not a start.
-func TestExecutorStatusNextFollowsTheLifecycleRequest(t *testing.T) {
-	cfg := testConfig(t)
-	previous := executorSocketBase
-	executorSocketBase = t.TempDir()
-	defer func() { executorSocketBase = previous }()
-	next := func() string {
-		t.Helper()
-		_, envelope := call(t, cfg, alice, "executor.status", `{}`)
-		out, _ := envelope["data"].(map[string]any)
-		s, _ := out["next"].(string)
-		return s
-	}
-	if !strings.HasPrefix(next(), "Start the package.") {
-		t.Fatal("no request:", next())
-	}
-	mailbox := filepath.Join(cfg.DataDir, "executor")
-	os.MkdirAll(mailbox, 0700)
-	for request, start := range map[string]bool{"stop\n": true, "start\n": false, "start": false} {
-		os.WriteFile(filepath.Join(mailbox, "control"), []byte(request), 0600)
-		if got := next(); strings.HasPrefix(got, "Start the package") != start || got == "" {
-			t.Fatalf("%q: %s", request, got)
-		}
-	}
-}

package/templates/native-go-root-ops/root/whoami.sh

@@ -1,3 +0,0 @@
-#!/bin/sh
-set -eu
-id -u

package/templates/native-go-vue/README.md

@@ -1,47 +0,0 @@
-# Native Go with Vue
-
-Edit `frontend/src/App.vue` and `main.ts` to build a DSM-window app with the
-public `@synopackageland/ui` components and embedded theme.
-
-```sh
-cd frontend
-npm ci
-npm test
-npm run build
-```
-
-The base app reads package status and edits the package greeting through
-`ctx.call`. Each window has its own Vue mount, request state and host
-subscriptions; unmount disposes subscriptions and ignores late responses.
-
-`--with root-ops` adds the existing DSM approval gate for fixed `root/*.sh`
-operations. `--with jobs` adds package-account jobs and schedules; it combines with root-ops and files. `--with files` enables current-session File Station access,
-and the background picker uses the retained session provider.
-
-With `portal:` declared (`synopkgland add portal`), the status page shows
-`src/portal/PortalSettings.vue`: the DSM Application Portal link, the alias form
-for administrators, and the Control Panel shortcut.
-
-Use public library controls, the embedded theme, per-app modal scope and unique
-Vue ID prefixes. Backend route permissions and DSM checks remain authoritative.
-Generated build and unit tests do not establish NAS runtime acceptance.
-
-The manifest is dsm-package.yaml schema 2: backend.kind: go and capabilities.files: session, jobs: true, identity: standalone, rootOps: true. Use --with login to declare standalone identity. Existing projects use synopkgland add <cap>...; app entrypoints stay app-owned, SDK conflicts are refused. check, inspect, build, deploy and status accept --json.
-
-Use the installed `@synopackageland/ui`; package.json and the lockfile pin its version and integrity.
-`AppRoot` defaults to app modal scope and stays bounded at `height: 100%`;
-`AppLayout wide-layout="window"` keeps the DSM shell in window mode even when
-maximized. Only whole-page web/Portal apps should opt into document scope or
-`wide-layout="web"`. The DSM host sets the 700px minimum window width.
-Import `themes/dsm7-embedded.css` and assign each mount a unique
-`app.config.idPrefix` before mounting.
-
-Start with AGENTS.md, `synopkgland skill list` and `synopkgland skill path`.
-Read `synopkgland skill show ui-vue` for direct Vue component work and
-`synopkgland skill show ui-json` for optional declarative specs and their
-validate/render workflow. The existing host/backend lifecycle remains in place.
-
-For UI discovery, run `npx --no syno-pkg-land-ui catalog --json` and
-`npx --no syno-pkg-land-ui describe Button --json` from the installed frontend.
-Read its prompt and exported Vue docs/types before choosing component APIs.
-Use `syno-pkg-land-ui` directly in npm scripts; keep AI guidance version-independent.

package/templates/native-go-vue/frontend/DESIGN.md

@@ -1,61 +0,0 @@
----
-name: Native DSM Vue template
-description: Existing package settings UI using the installed @synopackageland/ui.
-typography:
-  body:
-    fontFamily: "var(--ui-font-sans)"
-    fontSize: "13px"
-    lineHeight: 1.5
-  title:
-    fontSize: "20px"
-    fontWeight: 600
-  state:
-    fontSize: "15px"
-    fontWeight: 600
-spacing:
-  actions: "8px"
-  heading-gap: "16px"
-  section-gap: "24px"
----
-
-# Design System: Native DSM Vue template
-
-Read `AGENTS.md` at the project root and `synopkgland skill show ui-vue` before UI edits.
-
-For UI discovery, run `npx --no syno-pkg-land-ui catalog --json` and
-`npx --no syno-pkg-land-ui describe Button --json` from the installed frontend.
-Read its prompt and exported Vue docs/types before choosing component APIs.
-Use `syno-pkg-land-ui` directly in npm scripts; keep AI guidance version-independent.
-
-## Overview
-
-The template runs inside a DSM package window. `AppShell` provides status and
-optional background navigation. The base page shows package status and a greeting
-editor; the root overlay adds its existing fixed-operation authorization gate.
-
-Use the installed `@synopackageland/ui` controls and `themes/dsm7-embedded.css`.
-The theme owns colors, typography, spacing and dialogs. Keep per-app modal scope,
-a unique Vue ID prefix and vertical scrolling at the DSM minimum window size.
-
-Refresh and save expose busy state and localized errors. Reopen refreshes status.
-Each mount owns its state; unmount unsubscribes from host events and ignores late
-responses. Backend route policies decide access.
-
-### Opt-in background schedules (S1-a)
-
-The `native-go-jobs` overlay extends this **Operate** surface within the inherited `AppRoot`, embedded theme, `SettingsSection`, Button and Callout system. It introduces no new palette or global tokens.
-
-- **Private-copy consent:** “Schedule this copy” is available for the signed-in owner's retained, successful, unscheduled job copy. “Private copy: {name}” identifies the input; “Repeat every” offers “Hour”, “Day” and “Week”. “Create schedule” stays disabled until the user checks “I agree to keep and reprocess this fixed copy as the package user. No new source files or personal ACLs are read.” The help explains the eight-schedule limit and that missed runs are recorded, never replayed.
-- **Ownership and recovery:** preserve user-and-UID owner isolation. Administrator rows expose “Owner: {user} (UID {uid})”. A worker change shows “The worker revision changed. An administrator must review and explicitly enable this schedule.” Only administrators, while background mode is on, see “Enable schedule”. Its confirmation names the exact private copy: “Enable the schedule for {name} with the current worker revision? I agree to reprocess this fixed copy. Past runs will not be replayed.” Actions are “Confirm enable” and “Cancel”.
-- **Layout:** schedule name/state, owner, next run, missed runs and warnings stack above a grouped, wrapping action row. Long names and copy wrap within the available width. Keep the inherited vertical scrolling at the minimum window size; do not squeeze schedules into one viewport. The labeled select and consent checkbox retain visible keyboard focus using existing theme tokens.
-- **Errors and cleanup:** danger alerts map known error codes to localized safe copy, with a localized fallback rather than raw server text. The catalogs cover nine locales. Preserve per-mount disposal: stop polling, dispose the picker, revoke result download URLs and prevent pending responses from restoring disposed state. Deletion confirmation explains that queued jobs cancel, running jobs drain and finished results remain.
-
-Evidence: `.herdr-project/syno-package-land-sdk-t-0129/library/ui-desktop.png` and `ui-minimum.png` are local component-fixture captures. The finish review disposition is **ship**, with all three material findings resolved. A fresh `normal1` NAS browser readback passed before the final UI adjustments; these captures validate the final adjustments locally and do not establish final DSM visual acceptance.
-
-## Do's and Don'ts
-
-- Do use existing public UI components, embedded theme tokens and state/recovery copy.
-- Do retain permission gating, readable loading/empty/error states and per-instance cleanup.
-- Do use the library's `Select`, `Checkbox`, `Input`, `Textarea`, `Form`, `FormItem`, `FilePicker` (`variant="compact"`, in the app locale) and `Link` for controls; there is no native `<input>` or `<a>`. Leave `Form` on its automatic direction (labels stack below 520px of container width) and let a `FormItem` bind its control, with no `direction="vertical"`, `role="group"` or `field.controlId`.
-- Do not infer authority from frontend observations or scheduler history.
-- Don't introduce a separate palette, component system or modal workaround around the library contract.