@synopackageland/templates 0.23.0 → 0.25.0

package/README.md

@@ -9,6 +9,10 @@ shows the Go status-handler registration and a Vue notice for startup checks and
 storage failures. It targets the next SDK minor release and leaves default
 scaffold versions unchanged.
 
+An opt-in [native UI plus DSM console example](examples/dual-entry-console/README.md)
+shows the `console` declaration for an App that wraps a web service behind the
+identity gateway and keeps its own settings in an administrator-only DSM window.
+
 | Template | What it adds |
 | --- | --- |
 | `native-go` | Base: `dsm-package.yaml`, Go module (`backend/cmd/{app,background-worker}`, `backend/internal/app`, `backend/internal/api/permissions.json`), plain `ui/`, i18n |
@@ -43,12 +47,12 @@ calls each one from the generated script of the same name (`synopkgland skill sh
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.23.0`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.25.0`; that line is
 the single source of the SDK version and `frontend/package.json` pins
 `@synopackageland/sdk` to the same version. Python and Node.js name it in
 `backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
-(and `Cargo.lock`); all of them pin 0.23.0. The Vue frontend pins
-`@synopackageland/ui` 0.12.5. SDK 0.23.0 accepts UI `>=0.10.1 <0.14.0`,
+(and `Cargo.lock`); all of them pin 0.25.0. The Vue frontend pins
+`@synopackageland/ui` 0.14.3. SDK 0.25.0 accepts UI `>=0.10.1 <0.14.3`,
 so no UI peer override is needed. Tests use jsdom 30 for UI floating-layer styles.
 
 ## Notice writer
@@ -89,7 +93,7 @@ The Python and Node.js combinations need `SYNOPKGLAND_SDK_DIR` (its `python/`,
 and `node/` built with `npm ci && npm run build`) for their App SDK, and the
 Rust ones fetch the SDK crate from it (`scripts/rust-env.sh`), so it must hold
 the tag `Cargo.lock` pins. The gate runs each language's tests on Linux in
-Docker (`scripts/bridge-linux-test.sh`: Python 3.8, Node.js 18, Rust).
+Docker (`scripts/bridge-linux-test.sh`: Python 3.8, Node.js 22, Rust).
 CI is not available; `scripts/gate.sh` is the gate.
 
 Use `scripts/gate.sh --fast` while developing: it tests only the combinations
@@ -101,7 +105,7 @@ prints a failed job's whole log. On `SYNOPKGLAND_DOCKER_SSH` the Rust checks
 run in `synopkgland-gate-templates:<hash>` (`scripts/gate.Dockerfile`) with
 the host's shared `synopkgland-cache-cargo` volume, and wait for one of its
 two gate slots. There the Vue frontends' checks (`scripts/frontend-check.sh`:
-npm install, vitest, the build) run too, in the official `node:24.20.0` image
+npm install, vitest, the build) run too, in the official `node:24.22.1` image
 with the shared `synopkgland-cache-npm` volume
 (`scripts/frontend-docker-checks.sh`; `SYNOPKGLAND_DOCKER_NPM_REGISTRY` to select an alternate registry), so the Mac's load cannot slow them.
 Without `SYNOPKGLAND_DOCKER_SSH` they run here.
@@ -146,6 +150,13 @@ Both Compose routes share `contract/app-launch.ts` for defaults and launcher typ
 An explicit `ui.launch` overrides this default. Native SDK Apps without a web
 service keep `dsm-window` when `ui.launch` is absent.
 
+A native App that wraps a web service with `identity_gateway` and has its own
+settings may declare `console: {}`. The main menu then shows the service UI
+(`displayname`, a url launcher that opens a new tab) and an administrator-only
+DSM window, "<displayname> for DSM", running the SDK UI; Package Center's Open
+starts the console. Do not declare `ui.launch` or `portal` with it, and do not
+redirect from the console to the service. Simple wrappers keep one icon.
+
 ## Compose identity and file access
 
 The CLI preserves upstream bytes and the SDK planner generates an override and one worker model. No dummy backend, UI or wrapper container is needed. Containers use the fixed package identity and do not inherit each signed-in user's File Station ACL. Shared Folder intent is explicit composeMounts, confirmed by an admin after install; activation is unsupported until official protected ACL/project control is verified. Fine egress allowlists are rejected; isolated/internet are the two declared levels. See the SDK Compose support matrix before deployment.
@@ -159,3 +170,5 @@ window already identifies an administrator and supplies `ctx.batch`. Rebuild
 with the current CLI and SDK to get that client. Older generated contexts keep
 the single-call path. Each batch result is handled separately; the shell stays
 visible while reads run. The backend permissions remain authoritative.
+
+Native Node Apps use the official [`Node.js_v22`](https://www.synology.com/en-us/dsm/packages/Node.js_v22) package. The official release history lists DSM 7 series; installation also depends on the model and DSM version supported by Package Center. This dependency does not certify all DSM 7 releases or install Node.js on unsupported models.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {

package/templates/_shared/AGENTS.md

@@ -348,3 +348,10 @@ service: omitted `ui.launch` resolves to `new-page`, without Application Portal.
 Both Compose routes share `contract/app-launch.ts` for defaults and launcher types.
 An explicit `ui.launch` overrides this default. Native SDK Apps without a web
 service keep `dsm-window` when `ui.launch` is absent.
+
+A native App that wraps a web service with `identity_gateway` and has its own
+settings may declare `console: {}`. The main menu then shows the service UI
+(`displayname`, a url launcher that opens a new tab) and an administrator-only
+DSM window, "<displayname> for DSM", running the SDK UI; Package Center's Open
+starts the console. Do not declare `ui.launch` or `portal` with it, and do not
+redirect from the console to the service. Simple wrappers keep one icon.

package/templates/compose/dsm-package.yaml

@@ -14,7 +14,7 @@ compose:
   web: {service: web, port: 8080, health: {path: /, status: 200}}
   network: {egress: isolated}
 identity_gateway:
-  sdk: 0.23.0
+  sdk: 0.25.0
   mode: none
   listen: {http: 28000}
 # Web Apps default to new-page through the shared app-launch resolver.

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.23.0 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.25.0 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -2,8 +2,8 @@ module __PACKAGE__
 
 go 1.25.0
 
-toolchain go1.26.9
+toolchain go1.26.10
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.23.0
+require github.com/synopackageland/syno-pkg-land-sdk v0.25.0
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.23.0 h1:042BZ1gfiiM/wS/pX6Os2NADmgGl4rEaMdXbYgv5IWQ=
-github.com/synopackageland/syno-pkg-land-sdk v0.23.0/go.mod h1:vixf5Lo4PssQDGU5zam0Mb5sFu9wPUP4Ck36BMAVbNc=
+github.com/synopackageland/syno-pkg-land-sdk v0.25.0 h1:6h3kcxWMl6hsh98j4p9hyekXchnNuwfnRb3D8eZY9rs=
+github.com/synopackageland/syno-pkg-land-sdk v0.25.0/go.mod h1:8GwREGbczc8mAk4Gv8FUHaukXXCUstjzkovQrNV59Cc=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.23.0",
-        "@synopackageland/ui": "0.12.5",
+        "@synopackageland/sdk": "0.25.0",
+        "@synopackageland/ui": "0.14.3",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1152,13 +1152,13 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.23.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.23.0.tgz",
-      "integrity": "sha512-GjTGQzqXpD12zvrhCWpL+Yx08HGsVPkPNxjzU25brhhvlQ+0/OZUEaDF9fv1JKgAgv0zUdRzcRoD8nZJ5WV+YQ==",
+      "version": "0.25.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.25.0.tgz",
+      "integrity": "sha512-bZC8n3L3NX3dUiO2A64XumvUOdy6GZIzL57pJlZGhSzplMw044gzn3w2tw3DPsy7D+qdguMfx8m+RJh+5qnpQg==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
-        "@synopackageland/ui": ">=0.10.1 <0.14.0",
+        "@synopackageland/ui": ">=0.10.1 <0.15.0",
         "vue": "^3.5.0"
       },
       "peerDependenciesMeta": {
@@ -1171,9 +1171,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.12.5",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.12.5.tgz",
-      "integrity": "sha512-EwsRxFVBRi3ip6EKhuTc6LwEFFQjdppoMWb+pHPb6GfL2JV7YszrzEhyo8KzpPnBI2mHnxrXc6ObGNEJTr4Oyg==",
+      "version": "0.14.3",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.14.3.tgz",
+      "integrity": "sha512-AB7KWt44zj49HVnqsR8gDOyX0AtF3w35SSGVY4u66BgVqGRldUWu4QnqiYdFTdCGWl0ZDGLUQ7JHt7HrYARUyA==",
       "license": "MIT",
       "dependencies": {
         "@internationalized/date": "3.12.4",

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.23.0",
-    "@synopackageland/ui": "0.12.5",
+    "@synopackageland/sdk": "0.25.0",
+    "@synopackageland/ui": "0.14.3",
     "vue": "3.5.43"
   },
   "devDependencies": {

package/templates/native-node/dsm-package.yaml

@@ -49,8 +49,8 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.23.0
-  node: { package: Node.js_v20 }
+  sdk: 0.25.0
+  node: { package: Node.js_v22 }
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.23.0
+  sdk: 0.25.0
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.

package/templates/native-rust/backend/Cargo.lock

@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.23.0"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.23.0#7c16b531829def1165c76165228f9485d124d966"
+version = "0.25.0"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.25.0#0bf60be0936b09e246251ed5bd811bf1615a815b"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.23.0" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.25.0" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.