@synopackageland/templates 0.10.0 → 0.10.1

package/README.md

@@ -7,10 +7,10 @@ the files an App owns; the SDK (`github.com/synopackageland/syno-pkg-land-sdk`,
 | Template | What it adds |
 | --- | --- |
 | `native-go` | Base: `dsm-package.yaml`, Go module (`backend/cmd/{app,background-worker}`, `backend/internal/app`, `backend/internal/api/permissions.json`), plain `ui/`, i18n |
-| `native-go-vue` | Vue shell in `frontend/` (`App.vue`, `main.ts`, app i18n, `CapabilityPanels.vue`) |
+| `native-go-vue` | Vue shell in `frontend/` (`App.vue`, `main.ts`, app i18n, `CapabilityPanels.vue`, `ExecutorGate.vue`) |
 | `native-go-jobs` | Background job routes in `internal/app` and their page test |
 | `native-go-delegate` | Delegate routes, the delegate background worker, the delegate `CapabilityPanels.vue` |
-| `native-go-root-ops` | Executor routes in `internal/app` and an example `root/whoami.sh` |
+| `native-go-root-ops` | The SDK's executor routes and `root.run` in `internal/app`, an example `root/whoami.sh`, and the Vue `ExecutorGate.vue` that holds the pages until the executor is approved |
 | `native-python` | Base: `dsm-package.yaml` (`backend.runtime: python`), the App in `backend/app` (`routes.py`, stub capability modules, `permissions.json`), unittest tests |
 | `native-node` | Base: `dsm-package.yaml` (`backend.runtime: node`), TypeScript in `backend/src` compiled into `backend/app`, node:test tests, `package-lock.json` |
 | `native-rust` | Base: `dsm-package.yaml` (`backend.runtime: rust`, `methods`), the Cargo project in `backend` on the `syno-pkg-land-app` crate, `Cargo.lock`, `rust-toolchain.toml` |
@@ -34,11 +34,11 @@ package.json without devDependencies and scripts, and `dist/`).
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.10.0`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.10.1`; that line is
 the single source of the SDK version and `frontend/package.json` pins
 `@synopackageland/sdk` to the same version. Python and Node.js name it in
 `backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
-(and `Cargo.lock`); all of them pin 0.10.0.
+(and `Cargo.lock`); all of them pin 0.10.1.
 
 ## Notice writer
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {"type": "git", "url": "git+https://github.com/synopackageland/syno-pkg-land-templates.git"},

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.10.0 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.10.1 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -4,6 +4,6 @@ go 1.25.0
 
 toolchain go1.26.9
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.10.0
+require github.com/synopackageland/syno-pkg-land-sdk v0.10.1
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.10.0 h1:YcKdeKZDRGqUuNuuGS1WIehCA9UgfB3cpHyP8eHYdds=
-github.com/synopackageland/syno-pkg-land-sdk v0.10.0/go.mod h1:hlsvaVuH2wsAoR8jzI1Rg/NeejQSFpAaN6zpIWsVbjI=
+github.com/synopackageland/syno-pkg-land-sdk v0.10.1 h1:XpuacZIACIiBljWRDGedVQ7SCRZnFqqeCBaGzENsnRo=
+github.com/synopackageland/syno-pkg-land-sdk v0.10.1/go.mod h1:hlsvaVuH2wsAoR8jzI1Rg/NeejQSFpAaN6zpIWsVbjI=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go-delegate/frontend/test/capability-panels.test.ts

@@ -5,6 +5,7 @@ import {AppRoot} from '@synopackageland/ui'
 import type {BackgroundSaveFacade} from '@synopackageland/sdk'
 import CapabilityPanels from '../src/CapabilityPanels.vue'
 import {mount} from '../src/main'
+import {holdsPages} from '../src/ExecutorGate.vue'
 import {dsmWindow} from './context'
 const cleanup:Array<()=>void>=[]
 afterEach(()=>cleanup.splice(0).forEach(fn=>fn()))
@@ -76,8 +77,9 @@ test('the app mount forwards ctx.executor to administrator setup only',async()=>
    password.closest('form')!.dispatchEvent(new Event('submit',{bubbles:true,cancelable:true}));await settle()
    expect(authorize).toHaveBeenCalledWith('one-time')
   }else{
-   expect(status).not.toHaveBeenCalled()
+   // With root-ops the App's pages also wait for the executor, which reads its status.
    expect(root.querySelector('input[type=password]')).toBeNull()
+   expect(authorize).not.toHaveBeenCalled()
   }
  }
 })
@@ -103,3 +105,21 @@ test('the panels show a skeleton while the delegate status loads',async()=>{
  const root=render({call,locale:'en'});await settle()
  expect(root.querySelector('[data-ui-skeleton-line]')).not.toBeNull()
 })
+// AppShell's ExecutorNotice: a delegate App's pages stay while the executor waits for approval.
+// With root-ops, ExecutorGate holds the pages instead (its own test).
+test.skipIf(holdsPages)('an executor awaiting approval adds a notice above the pages and holds none of them back',async()=>{
+ const status=vi.fn(async()=>({state:'needs-admin-approval' as const}))
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status')return {package:'DelegateApp',version:'1',user:'admin',admin:true}
+  if(method==='greeting.get')return {text:'Hello'}
+  if(method==='delegate.status')return {state:'needs-admin-approval'}
+  if(method==='delegate.list')return {delegations:[]}
+  throw {code:'unknown_method'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,dsmWindow({call,user:{name:'admin',isAdmin:true},executor:{status,authorize:vi.fn(),control:vi.fn()} as never}))
+ cleanup.push(()=>{app.unmount();root.remove()});await settle()
+ expect(root.textContent).toContain('Some features are unavailable until you approve system access for this app.')
+ expect(root.textContent).toContain('Package status')
+ expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello')
+})

package/templates/native-go-root-ops/backend/internal/app/executor.go

@@ -5,79 +5,16 @@ import (
 	"encoding/json"
 	"errors"
 	"net/http"
-	"os"
 	"path/filepath"
-	"strings"
 	"time"
 
 	"github.com/synopackageland/syno-pkg-land-sdk/api"
 	"github.com/synopackageland/syno-pkg-land-sdk/delegate"
 )
 
+// executor.status and executor.control are the SDK's, as the bridge runtime serves them.
 func (cfg Config) rootRoutes() []api.Route {
-	return []api.Route{
-		api.Handle("executor.control", cfg.executorControl),
-		api.Handle("executor.status", cfg.executorStatus),
-		api.HandleRequest("root.run", cfg.executorRootRun),
-	}
-}
-
-// API permissions default to administrators for unlisted methods. Check here
-// too: control mutates the fixed package-owned control file before DSM run.
-func (cfg Config) executorControl(_ context.Context, caller api.Caller, raw json.RawMessage) (any, error) {
-	if !caller.Admin() {
-		return nil, errors.New("admin_required")
-	}
-	var in struct {
-		Action string `json:"action"`
-	}
-	if err := decodeParams(raw, &in); err != nil {
-		return nil, err
-	}
-	if in.Action != "start" && in.Action != "stop" && in.Action != "purge" {
-		return nil, api.BadRequest("executor_control_invalid")
-	}
-	dir := filepath.Join(cfg.DataDir, "executor")
-	if err := os.MkdirAll(dir, 0700); err != nil {
-		return nil, err
-	}
-	info, err := os.Lstat(dir)
-	if err != nil || !info.IsDir() || info.Mode()&os.ModeSymlink != 0 {
-		return nil, errors.New("executor_control_directory_invalid")
-	}
-	if err := writeFileAtomic(filepath.Join(dir, "control"), []byte(in.Action)); err != nil {
-		return nil, err
-	}
-	return map[string]bool{"written": true}, nil
-}
-
-// The executor closes its socket while paused: the package is stopped, or an
-// upgrade changed the pins and awaits administrator approval.
-func (cfg Config) executorStatus(ctx context.Context, _ api.Caller, _ json.RawMessage) (any, error) {
-	var status json.RawMessage
-	err := cfg.executor().Call(ctx, "status", nil, nil, &status)
-	var refusal *api.Error
-	if errors.As(err, &refusal) && refusal.Code == delegate.CodeExecutorUnavailable {
-		next := "Start the package."
-		if cfg.startRequested() {
-			next = "The package is running: an administrator approves background access again in Administrator setup; the executor log names the cause."
-		}
-		return map[string]any{"ready": false, "state": "paused", "reason": "executor_not_listening", "next": next}, nil
-	}
-	return status, err
-}
-
-// Package start and stop write the lifecycle mailbox; its last request tells a
-// stopped package from a running one whose executor stays paused.
-func (cfg Config) startRequested() bool {
-	f, err := os.Open(filepath.Join(cfg.DataDir, "executor", "control"))
-	if err != nil {
-		return false
-	}
-	defer f.Close()
-	b := make([]byte, 16)
-	n, _ := f.Read(b)
-	return strings.TrimSpace(string(b[:n])) == "start"
+	return append(delegate.ExecutorRoutes(cfg.executor(), cfg.DataDir), api.HandleRequest("root.run", cfg.executorRootRun))
 }
 
 func (cfg Config) executorRootRun(ctx context.Context, caller api.Caller, req *http.Request, raw json.RawMessage) (any, error) {

package/templates/native-go-root-ops/backend/internal/app/executor_test.go

@@ -20,39 +20,20 @@ func init() {
 	sampleOutcome["root.run"] = "session_required"
 }
 
-func TestExecutorControlAcceptsOnlyFixedActions(t *testing.T) {
-	cfg := testConfig(t)
-	for _, action := range []string{"start", "stop", "purge"} {
-		code, out := call(t, cfg, alice, "executor.control", `{"action":"`+action+`"}`)
-		if code != "" {
-			t.Fatalf("%s: %s %v", action, code, out)
-		}
-		b, err := os.ReadFile(filepath.Join(cfg.DataDir, "executor/control"))
-		if err != nil || string(b) != action {
-			t.Fatalf("control was not written: %s %v", b, err)
-		}
-	}
-	for _, raw := range []string{`{"action":"start;id"}`, `{"action":"start\nstop"}`, `{"action":""}`, `{"action":"stop","path":"/etc/passwd"}`} {
-		if code, _ := call(t, cfg, alice, "executor.control", raw); code != "bad_request" {
-			t.Fatalf("accepted %s: %s", raw, code)
+// The SDK serves executor.status and executor.control and tests them; the
+// App only registers them.
+func TestTheSDKsExecutorRoutesAreRegistered(t *testing.T) {
+	registered := map[string]bool{}
+	for _, r := range Routes(testConfig(t)) {
+		registered[r.Method()] = true
+	}
+	for _, method := range []string{"executor.status", "executor.control", "root.run"} {
+		if !registered[method] {
+			t.Errorf("%s is not registered", method)
 		}
 	}
 }
 
-func TestExecutorControlRejectsSymlinkDirectory(t *testing.T) {
-	cfg := testConfig(t)
-	outside := t.TempDir()
-	if err := os.Symlink(outside, filepath.Join(cfg.DataDir, "executor")); err != nil {
-		t.Fatal(err)
-	}
-	if code, _ := call(t, cfg, alice, "executor.control", `{"action":"stop"}`); code == "" {
-		t.Fatal("accepted symlink")
-	}
-	if _, err := os.Stat(filepath.Join(outside, "control")); !os.IsNotExist(err) {
-		t.Fatal("wrote outside data directory")
-	}
-}
-
 func TestExecutorRootRunRequiresCurrentDSMCookie(t *testing.T) {
 	t.Setenv("HTTP_COOKIE", "")
 	if code, _ := call(t, testConfig(t), alice, "root.run", `{"name":"whoami"}`); code == "" {
@@ -60,59 +41,6 @@ func TestExecutorRootRunRequiresCurrentDSMCookie(t *testing.T) {
 	}
 }
 
-// The executor closes its listener while paused (package stopped, or pins
-// awaiting administrator approval). Status then answers, not "internal".
-func TestExecutorStatusReportsAPausedExecutor(t *testing.T) {
-	cfg := testConfig(t)
-	useExecutorSocketBase(t)
-	check := func(name string) {
-		t.Helper()
-		code, envelope := call(t, cfg, alice, "executor.status", `{}`)
-		out, _ := envelope["data"].(map[string]any)
-		if code != "" || out["ready"] != false || out["state"] != "paused" || out["reason"] != "executor_not_listening" || out["next"] == "" || out["next"] == nil {
-			t.Fatalf("%s: %s %v", name, code, out)
-		}
-	}
-	check("no socket")
-	if code, _ := call(t, cfg, bob, "executor.status", `{}`); code != "" {
-		t.Fatal("authenticated user cannot read a paused status", code)
-	}
-	dir := filepath.Join(executorSocketBase, cfg.PackageID)
-	os.MkdirAll(dir, 0700)
-	ln, err := net.ListenUnix("unix", &net.UnixAddr{Name: filepath.Join(dir, "executor.sock"), Net: "unix"})
-	if err != nil {
-		t.Fatal(err)
-	}
-	ln.SetUnlinkOnClose(false)
-	ln.Close()
-	check("closed listener")
-}
-
-// next follows the last lifecycle request: a running package needs approval
-// again, not a start.
-func TestExecutorStatusNextFollowsTheLifecycleRequest(t *testing.T) {
-	cfg := testConfig(t)
-	useExecutorSocketBase(t)
-	next := func() string {
-		t.Helper()
-		_, envelope := call(t, cfg, alice, "executor.status", `{}`)
-		out, _ := envelope["data"].(map[string]any)
-		s, _ := out["next"].(string)
-		return s
-	}
-	if !strings.HasPrefix(next(), "Start the package.") {
-		t.Fatal("no request:", next())
-	}
-	mailbox := filepath.Join(cfg.DataDir, "executor")
-	os.MkdirAll(mailbox, 0700)
-	for request, start := range map[string]bool{"stop\n": true, "start\n": false, "start": false} {
-		os.WriteFile(filepath.Join(mailbox, "control"), []byte(request), 0600)
-		if got := next(); strings.HasPrefix(got, "Start the package") != start || got == "" {
-			t.Fatalf("%q: %s", request, got)
-		}
-	}
-}
-
 // fakeExecutor answers each v1 request with replies[op] and records the ops.
 type fakeExecutor struct {
 	mu  sync.Mutex

package/templates/native-go-root-ops/frontend/src/ExecutorGate.vue

@@ -0,0 +1,16 @@
+<script lang="ts">
+// A root-ops App's pages wait for its executor: the SDK's ExecutorApproval
+// takes their place until an administrator approves it with the DSM
+// password, and tells anyone else to ask one. Without ctx.executor (a dev
+// server) there is nothing to approve.
+export const holdsPages = true
+</script>
+<script setup lang="ts">
+import type {Context} from '@synopackageland/sdk'
+import {ExecutorApproval} from '@synopackageland/sdk/vue'
+defineProps<{ctx:Context;admin:boolean}>()
+</script>
+<template>
+ <ExecutorApproval v-if="ctx.executor" :admin="admin" :locale="ctx.locale" :ctx="ctx"><slot /></ExecutorApproval>
+ <slot v-else />
+</template>

package/templates/native-go-root-ops/frontend/test/executor-gate.test.ts

@@ -0,0 +1,60 @@
+// @vitest-environment jsdom
+import {afterEach,expect,test,vi} from 'vitest'
+import {nextTick} from 'vue'
+import type {Context} from '@synopackageland/sdk'
+import {mount} from '../src/main'
+import {dsmWindow} from './context'
+const cleanup:Array<()=>void>=[]
+afterEach(()=>cleanup.splice(0).forEach(fn=>fn()))
+async function settle(){for(let i=0;i<30;i++){await Promise.resolve();await nextTick()}}
+function open(admin:boolean,executor?:Context['executor']){
+ const call=vi.fn(async(method:string)=>{
+  if(method==='app.status')return {package:'Root',version:'1',user:admin?'admin':'alice',admin}
+  if(method==='greeting.get')return {text:'Hello Root'}
+  if(method==='delegate.status')return {state:'ready',disabled:false,lifetime:'until-revoked',destinations:['save']}
+  if(method==='delegate.destination')return {key:'save',selection:{scope:'home',root:'/home',generation:0},destination:null,status:'missing'}
+  if(method==='delegate.list')return {delegations:[]}
+  if(method==='delegate.operations.list')return {operations:[]}
+  throw {code:'unknown_method'}
+ })
+ const root=document.createElement('div');document.body.append(root)
+ const app=mount(root,dsmWindow({call,user:{name:admin?'admin':'alice',isAdmin:admin},executor}))
+ cleanup.push(()=>{app.unmount();root.remove()})
+ return root
+}
+function awaitingApproval(){
+ let state:'needs-admin-approval'|'ready'='needs-admin-approval'
+ return {status:vi.fn(async()=>({state})),authorize:vi.fn(async()=>{state='ready';return {state}}),control:vi.fn(async()=>({state}))}
+}
+test('the App pages wait until an administrator approves the executor with the DSM password, in the window',async()=>{
+ const executor=awaitingApproval()
+ const root=open(true,executor as unknown as Context['executor']);await settle()
+ expect(root.textContent).not.toContain('Package status')
+ expect(root.querySelector('[role=dialog]')).toBeNull()
+ const password=root.querySelector<HTMLInputElement>('input[type=password]')!
+ expect(password.closest('[data-ui-app]')).not.toBeNull()
+ password.value='one-time';password.dispatchEvent(new Event('input',{bubbles:true}));await settle()
+ password.closest('form')!.dispatchEvent(new Event('submit',{bubbles:true,cancelable:true}));await settle()
+ expect(executor.authorize).toHaveBeenCalledWith('one-time')
+ expect(root.textContent).toContain('Package status')
+ expect((root.querySelector('textarea') as HTMLTextAreaElement).value).toBe('Hello Root')
+})
+test('anyone else is told to ask an administrator for system access',async()=>{
+ const root=open(false,awaitingApproval() as unknown as Context['executor']);await settle()
+ expect(root.textContent).toContain('An administrator must approve system access')
+ expect(root.querySelector('input[type=password]')).toBeNull()
+ expect(root.textContent).not.toContain('Package status')
+})
+test('without an executor (a dev server) the App pages show at once',async()=>{
+ const root=open(false);await settle()
+ expect(root.textContent).toContain('Package status')
+ expect(root.textContent).not.toContain('An administrator must approve system access')
+})
+// ExecutorApproval holds the pages: AppShell's ExecutorNotice would only repeat it.
+test('while the executor awaits approval no notice repeats the approval page',async()=>{
+ for(const admin of [true,false]){
+  const root=open(admin,awaitingApproval() as unknown as Context['executor']);await settle()
+  expect(root.textContent,String(admin)).toContain(admin?'Approve system access':'An administrator must approve system access')
+  expect(root.textContent,String(admin)).not.toContain('Some features are unavailable')
+ }
+})

package/templates/native-go-vue/README.md

@@ -19,7 +19,11 @@ The base app reads package status and edits the package greeting through
 subscriptions; unmount disposes subscriptions and ignores late responses.
 
 `--with root-ops` adds the existing DSM approval gate for fixed `root/*.sh`
-operations. `--with jobs` adds package-account jobs and schedules; it combines with root-ops and files. `--with files` enables current-session File Station access,
+operations, and its `ExecutorGate.vue` holds the pages with the SDK's
+`ExecutorApproval` until the executor is approved: an administrator approves
+with the DSM password, anyone else is told to ask one. A delegate App keeps its
+pages: `AppShell` shows the SDK's `ExecutorNotice` above them while its
+executor waits for approval. `--with jobs` adds package-account jobs and schedules; it combines with root-ops and files. `--with files` enables current-session File Station access,
 and the background picker uses the retained session provider.
 
 With `portal:` declared (`synopkgland add portal`, executor Apps only), the status page shows

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,7 +7,7 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.10.0",
+        "@synopackageland/sdk": "0.10.1",
         "@synopackageland/ui": "0.9.4",
         "vue": "3.5.43"
       },
@@ -1148,9 +1148,9 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.10.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.10.0.tgz",
-      "integrity": "sha512-oRwr3I4WNWCqknTPvDnlR7wjM/6pBX+UJ/GRc2U4l9+VUGrdgq0UH9gCjmGIZS9beE5y33tcxmj2ASweLUbJIg==",
+      "version": "0.10.1",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.10.1.tgz",
+      "integrity": "sha512-gs127yFWWYkrNS9lNK/2oHcQ2l0KkhH8dhOAqOScDoGvON212vweVczStdkraesn5Gway+aIMoBqz18uSsD/OA==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",

package/templates/native-go-vue/frontend/package.json

@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.10.0",
+    "@synopackageland/sdk": "0.10.1",
     "@synopackageland/ui": "0.9.4",
     "vue": "3.5.43"
   },

package/templates/native-go-vue/frontend/src/App.vue

@@ -5,8 +5,11 @@ import {bridgeErrorCopy, type AppStatus, type Context, type ShellPage} from '@sy
 import {AppShell, BackgroundPanel, FilesPage, LoginPage, PortalSettings, createSession, shellPages} from '@synopackageland/sdk/vue'
 import {appCopy} from './i18n'
 import CapabilityPanels from './CapabilityPanels.vue'
+import ExecutorGate, {holdsPages} from './ExecutorGate.vue'
 const props = defineProps<{ctx: Context}>()
 const login = createSession(props.ctx)
+// Pages ExecutorGate holds need no notice above them that repeats its approval.
+const shellCtx = holdsPages ? {...props.ctx, executor: undefined} : props.ctx
 const copy = computed(() => appCopy(props.ctx.locale))
 const app = ref<AppStatus>()
 const busy = ref(false)
@@ -75,9 +78,10 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
 </script>
 
 <template>
- <AppShell app-root v-model="page" :ctx="ctx" :locale="ctx.locale" :pages="pages" :description="subtitle" :denied="signIn" sidebar-storage-key="__PACKAGE__">
+ <AppShell app-root v-model="page" :ctx="shellCtx" :locale="ctx.locale" :pages="pages" :description="subtitle" :denied="signIn" sidebar-storage-key="__PACKAGE__">
   <template #denied><LoginPage :session="login" :locale="ctx.locale" /></template>
   <template #actions><Button variant="secondary" :disabled="busy" @click="refreshAll">{{ copy.refresh }}</Button><Button v-if="login.enabled.value" variant="secondary" :disabled="busy" @click="signOut">{{ copy.signOut }}</Button></template>
+  <ExecutorGate :ctx="ctx" :admin="ctx.user?.isAdmin ?? !!app?.admin">
   <div class="integration-app" :aria-busy="busy" :aria-label="copy.settings">
    <Callout v-if="error" tone="danger" :title="copy.actionRequired"><span role="alert">{{ error }}</span></Callout>
    <p v-if="notice" role="status">{{ notice }}</p>
@@ -99,5 +103,6 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
     <BackgroundPanel v-if="backgroundEnabled && app" ref="background" :key="app.user" :ctx="ctx" />
    </div>
   </div>
+  </ExecutorGate>
  </AppShell>
 </template>

package/templates/native-go-vue/frontend/src/ExecutorGate.vue

@@ -0,0 +1,10 @@
+<script lang="ts">
+// The App's pages, shown at once. The root-ops overlay replaces this file to
+// hold them until an administrator approves the executor.
+export const holdsPages = false
+</script>
+<script setup lang="ts">
+import type {Context} from '@synopackageland/sdk'
+defineProps<{ctx:Context;admin:boolean}>()
+</script>
+<template><slot /></template>

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.10.0
+  sdk: 0.10.1
   node: { package: Node.js_v20 }
 
 ui:

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.10.0
+  sdk: 0.10.1
 
 ui:
   # Static files served at /webman/3rdparty/<package>/app/. app.js and app.css

package/templates/native-rust/backend/Cargo.lock

@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.10.0"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.10.0#ed4e0c15fdf91e4058ea795ba0bfae4e24882ed9"
+version = "0.10.1"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.10.1#a9575eecc3ae1b10ef04fc5a1423344fa3dddfb0"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.10.0" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.10.1" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.