@synopackageland/templates 0.27.0 → 0.28.0

package/templates/native-go-delegate/frontend/test/capability-panels.test.ts

@@ -120,6 +120,30 @@ test('the panels show a skeleton while the delegate status loads',async()=>{
  const root=render({call,locale:'en'});await settle()
  expect(root.querySelector('[data-ui-skeleton-line]')).not.toBeNull()
 })
+test('a failed status check offers Retry as a Callout action and recovers',async()=>{
+ let attempts=0,resolveStatus!:(value:unknown)=>void
+ const call=vi.fn(async(method:string)=>{
+  if(method==='delegate.status'){
+   if(++attempts===1)throw {code:'EXECUTOR_UNAVAILABLE'}
+   return new Promise(resolve=>{resolveStatus=resolve})
+  }
+  if(method==='delegate.destination')return {key:'save',selection:{scope:'home',root:'/home',generation:0},destination:null,status:'missing'}
+  throw {code:'unexpected'}
+ })
+ const root=render({call,locale:'en'});await settle()
+ const alert=root.querySelector('[role="alert"]')!
+ expect(alert).not.toBeNull()
+ const retry=button(root,'Retry')
+ expect(alert.querySelector('[data-ui-callout-actions]')?.contains(retry)).toBe(true)
+ expect(alert.querySelector('[data-ui-callout-body]')?.querySelector('button')).toBeNull()
+ retry.click();await settle()
+ expect(attempts).toBe(2)
+ expect(root.querySelector('[role="alert"]')).toBeNull()
+ expect(root.querySelector('[data-ui-skeleton-line]')).not.toBeNull()
+ resolveStatus({lifetime:'until-revoked',destinations:['save']});await settle()
+ expect(root.textContent).toContain('Background saves')
+ expect(root.querySelector('[data-ui-callout-actions]')).toBeNull()
+})
 // AppShell's ExecutorNotice: a delegate App's pages stay while the executor waits for approval.
 // With root-ops, ExecutorGate holds the pages instead (its own test).
 test.skipIf(holdsPages)('an executor awaiting approval adds a notice above the pages and holds none of them back',async()=>{

package/templates/native-go-jobs/backend/internal/app/background_routes_test.go

@@ -16,7 +16,6 @@ import (
 
 func init() {
 	// The generic route tests need valid params for every background route.
-	// The SDK refuses retired backend session relays before reading a file.
 	// No jobs or schedules exist in its fresh data directory.
 	const id = `{"id":"missing"}`
 	sampleParams["bg.jobs.purge"] = `{"owner":{"user":"missing","uid":"9999"}}`
@@ -30,16 +29,14 @@ func init() {
 	sampleOutcome["bg.schedules.delete"] = "not_found"
 	sampleOutcome["bg.schedules.enable"] = "not_found"
 	sampleParams["bg.status"] = `{}`
-	sampleParams["bg.browse"] = `{}`
-	sampleParams["bg.jobs.submit"] = `{"key":"k1","folder":"/share","relative":"a.bin"}`
+	sampleParams["bg.jobs.submit"] = `{"key":"k1","name":"a.bin","input":"/missing"}`
 	sampleParams["bg.jobs.list"] = `{}`
 	sampleParams["bg.jobs.get"] = id
 	sampleParams["bg.jobs.cancel"] = id
 	sampleParams["bg.jobs.pause"] = id
 	sampleParams["bg.jobs.resume"] = id
 	sampleParams["bg.jobs.result"] = id
-	sampleOutcome["bg.browse"] = "unsupported"
-	sampleOutcome["bg.jobs.submit"] = "unsupported"
+	sampleOutcome["bg.jobs.submit"] = "bad_request"
 	sampleOutcome["bg.jobs.get"] = "not_found"
 	sampleOutcome["bg.jobs.cancel"] = "not_found"
 	sampleOutcome["bg.jobs.pause"] = "not_found"
@@ -72,7 +69,7 @@ func TestBackgroundRequestSubmitBusyAndProductionConstruction(t *testing.T) {
 	}
 	defer syscall.Flock(int(f.Fd()), syscall.LOCK_UN)
 	start := time.Now()
-	code, out := e.call(alice, "bg.jobs.submit", bgSample["bg.jobs.submit"])
+	code, out := e.call(alice, "bg.jobs.submit", e.submitParams("k1"))
 	if code != "jobs_busy" || time.Since(start) > background.RequestLockTimeout+time.Second {
 		t.Fatalf("busy submit: %s %+v", code, out)
 	}
@@ -90,17 +87,3 @@ func TestBackgroundRequestSubmitBusyAndProductionConstruction(t *testing.T) {
 		t.Fatal(w.Body.String())
 	}
 }
-
-func TestProductionNASHashExampleRefusesWithoutCreatingJobs(t *testing.T) {
-	cfg := testConfig(t)
-	for _, method := range []string{"bg.browse", "bg.jobs.submit"} {
-		code, _ := call(t, cfg, alice, method, sampleParams[method])
-		if code != "unsupported" {
-			t.Fatalf("%s: %s", method, code)
-		}
-	}
-	jobs, err := background.NewStore(filepath.Join(cfg.DataDir, "background")).List(context.Background())
-	if err != nil || len(jobs) != 0 {
-		t.Fatalf("disabled example created jobs: %v %v", jobs, err)
-	}
-}

package/templates/native-go-jobs/frontend/test/{background-page.test.ts → background-shell.test.ts}

@@ -4,8 +4,7 @@ import {nextTick} from 'vue'
 import {mount} from '../src/main'
 import {dsmWindow} from './context'
 async function settle(){for(let i=0;i<20;i++){await Promise.resolve();await nextTick()}}
-// The file-import example is explicitly unavailable until browser input is migrated.
-test('a jobs project explains the disabled example without submitting or reading files',async()=>{
+test('a jobs project opens its shell without starting a job',async()=>{
  const call=vi.fn(async(method:string)=>{
   if(method==='app.status')return {package:'Jobs',version:'1',user:'alice',admin:false}
   throw {code:'unknown_method'}
@@ -14,8 +13,7 @@ test('a jobs project explains the disabled example without submitting or reading
  const app=mount(root,dsmWindow({call}))
  try{
   await settle()
-  expect(root.querySelector('[data-background-example-disabled]')?.textContent).toContain('disabled')
-  expect(root.querySelector('[data-background-panel]')).toBeNull()
+  expect(root.querySelector('[data-app-status]')).not.toBeNull()
   expect(call.mock.calls.some(([method])=>method.startsWith('bg.'))).toBe(false)
  }finally{app.unmount();root.remove()}
 })

package/templates/native-go-vue/frontend/DESIGN.md

@@ -43,16 +43,13 @@ Refresh and save expose busy state and localized errors. Reopen refreshes status
 Each mount owns its state; unmount unsubscribes from host events and ignores late
 responses. Backend route policies decide access.
 
-### Opt-in background schedules (S1-a)
+### Background jobs
 
-The `native-go-jobs` overlay extends this **Operate** surface within the inherited `AppRoot`, embedded theme, `SettingsSection`, Button and Callout system. It introduces no new palette or global tokens.
-
-- **Private-copy consent:** “Schedule this copy” is available for the signed-in owner's retained, successful, unscheduled job copy. “Private copy: {name}” identifies the input; “Repeat every” offers “Hour”, “Day” and “Week”. “Create schedule” stays disabled until the user checks “I agree to keep and reprocess this fixed copy as the package user. No new source files or personal ACLs are read.” The help explains the eight-schedule limit and that missed runs are recorded, never replayed.
-- **Ownership and recovery:** preserve user-and-UID owner isolation. Administrator rows expose “Owner: {user} (UID {uid})”. A worker change shows “The worker revision changed. An administrator must review and explicitly enable this schedule.” Only administrators, while background mode is on, see “Enable schedule”. Its confirmation names the exact private copy: “Enable the schedule for {name} with the current worker revision? I agree to reprocess this fixed copy. Past runs will not be replayed.” Actions are “Confirm enable” and “Cancel”.
-- **Layout:** schedule name/state, owner, next run, missed runs and warnings stack above a grouped, wrapping action row. Long names and copy wrap within the available width. Keep the inherited vertical scrolling at the minimum window size; do not squeeze schedules into one viewport. The labeled select and consent checkbox retain visible keyboard focus using existing theme tokens.
-- **Errors and cleanup:** danger alerts map known error codes to localized safe copy, with a localized fallback rather than raw server text. The catalogs cover nine locales. Preserve per-mount disposal: stop polling, dispose the picker, revoke result download URLs and prevent pending responses from restoring disposed state. Deletion confirmation explains that queued jobs cancel, running jobs drain and finished results remain.
-
-This layout is checked against the template's local component fixtures at the desktop size and at the DSM minimum window size, including the states and recovery copy above. That validates the component contract only; visual acceptance on a specific DSM release is the App developer's own check.
+Job producers import their own input into the App data directory. The backend
+keeps submission, progress, cancellation and private-copy scheduling contracts;
+the shell does not pick or import NAS files. App-specific job controls can use
+the installed SDK and UI components. Keep explicit consent for schedules and
+user-and-UID ownership isolation, and stop polling on unmount.
 
 ## Do's and Don'ts
 

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,8 +7,8 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.27.0",
-        "@synopackageland/ui": "0.14.9",
+        "@synopackageland/sdk": "0.28.0",
+        "@synopackageland/ui": "0.14.10",
         "vue": "3.5.43"
       },
       "devDependencies": {
@@ -1152,9 +1152,9 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.27.0",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.27.0.tgz",
-      "integrity": "sha512-KIFeYhzmiH0QFAD8SutTvSXCiynx/D84ydOROGPS9B5VcHkLU8uqtD9Mwac9G0UY7mPITioGJuJGXpGytFPCVg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.28.0.tgz",
+      "integrity": "sha512-SywxsuolhSKZKSk8HqOwu0m2BY577i8EvYojBUiN9UG8eSoQnJUTAEbfdvlLF1YbCZE6z5x2sV7DJvq8LYMCzg==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",
@@ -1171,9 +1171,9 @@
       }
     },
     "node_modules/@synopackageland/ui": {
-      "version": "0.14.9",
-      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.14.9.tgz",
-      "integrity": "sha512-Vr925mORKVuWJH/EaEvaSUF4nxsHP0SWUYwwMjM009MFw+UHaABoEtasAliCDsnI7CnlggLcexO3ad5slm9IVw==",
+      "version": "0.14.10",
+      "resolved": "https://registry.npmjs.org/@synopackageland/ui/-/ui-0.14.10.tgz",
+      "integrity": "sha512-4xq1LvbBaM6HdDY2jcaQUe+nMfBdFb9GGq6ds/fsozfTrLnrZm0ZqUlmbosJuPqO8655ven2/FB0bKTnHj16mA==",
       "license": "MIT",
       "dependencies": {
         "@internationalized/date": "3.12.4",

package/templates/native-go-vue/frontend/package.json

@@ -8,8 +8,8 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.27.0",
-    "@synopackageland/ui": "0.14.9",
+    "@synopackageland/sdk": "0.28.0",
+    "@synopackageland/ui": "0.14.10",
     "vue": "3.5.43"
   },
   "devDependencies": {

package/templates/native-go-vue/frontend/src/App.vue

@@ -121,7 +121,6 @@ onUnmounted(()=>{disposed=true;unsubscribe?.();login.dispose();text.value=''})
    <CapabilityPanels v-if="app" ref="panels" :key="app.user" :ctx="ctx" :admin="app.admin" />
    <FilesPage v-if="page==='status'" :ctx="ctx" />
    <div data-page="background" v-show="page==='background'">
-    <Callout v-if="backgroundEnabled && app" tone="warning" data-background-example-disabled>{{ copy.backgroundExampleUnavailable }}</Callout>
    </div>
   </div>
   </ExecutorGate>

package/templates/native-go-vue/frontend/src/i18n/de.json

@@ -17,6 +17,5 @@
   },
   "packageName": "Paketname",
   "user": "Benutzer",
-  "version": "Version",
-  "backgroundExampleUnavailable": "Das NAS-Datei-Hash-Beispiel ist bis zur Umstellung auf Browser-Eingaben deaktiviert. Bestehende APIs zur Auftragssteuerung bleiben verfügbar"
+  "version": "Version"
 }

package/templates/native-go-vue/frontend/src/i18n/en.json

@@ -17,6 +17,5 @@
   },
   "packageName": "Package name",
   "user": "User",
-  "version": "Version",
-  "backgroundExampleUnavailable": "The NAS file hashing example is disabled pending browser input migration. Existing job control APIs remain available"
+  "version": "Version"
 }

package/templates/native-go-vue/frontend/src/i18n/es.json

@@ -17,6 +17,5 @@
   },
   "packageName": "Nombre del paquete",
   "user": "Usuario",
-  "version": "Versión",
-  "backgroundExampleUnavailable": "El ejemplo de hash de archivos NAS está desactivado hasta migrar la entrada al navegador. Las API de control de trabajos siguen disponibles"
+  "version": "Versión"
 }

package/templates/native-go-vue/frontend/src/i18n/fr.json

@@ -17,6 +17,5 @@
   },
   "packageName": "Nom du paquet",
   "user": "Utilisateur",
-  "version": "Version",
-  "backgroundExampleUnavailable": "L’exemple de hachage de fichiers NAS est désactivé en attendant la migration des entrées du navigateur. Les API de contrôle des tâches restent disponibles"
+  "version": "Version"
 }

package/templates/native-go-vue/frontend/src/i18n/it.json

@@ -17,6 +17,5 @@
   },
   "packageName": "Nome pacchetto",
   "user": "Utente",
-  "version": "Versione",
-  "backgroundExampleUnavailable": "L’esempio di hashing dei file NAS è disabilitato in attesa della migrazione dell’input dal browser. Le API di controllo dei processi restano disponibili"
+  "version": "Versione"
 }

package/templates/native-go-vue/frontend/src/i18n/ja.json

@@ -17,6 +17,5 @@
   },
   "packageName": "パッケージ名",
   "user": "ユーザー",
-  "version": "バージョン",
-  "backgroundExampleUnavailable": "NAS ファイルのハッシュ例はブラウザー入力への移行まで無効です。既存のジョブ制御 API は利用できます"
+  "version": "バージョン"
 }

package/templates/native-go-vue/frontend/src/i18n/ko.json

@@ -17,6 +17,5 @@
   },
   "packageName": "패키지 이름",
   "user": "사용자",
-  "version": "버전",
-  "backgroundExampleUnavailable": "브라우저 입력 전환이 완료될 때까지 NAS 파일 해시 예제를 사용할 수 없습니다. 기존 작업 제어 API는 계속 사용할 수 있습니다"
+  "version": "버전"
 }

package/templates/native-go-vue/frontend/src/i18n/zh-CN.json

@@ -17,6 +17,5 @@
   },
   "packageName": "套件名称",
   "user": "用户帐号",
-  "version": "版本",
-  "backgroundExampleUnavailable": "本版本暂停 NAS 文件哈希示例，待浏览器输入流程完成后恢复。现有任务控制 API 仍可使用"
+  "version": "版本"
 }

package/templates/native-go-vue/frontend/src/i18n/zh-TW.json

@@ -17,6 +17,5 @@
   },
   "packageName": "套件名稱",
   "user": "使用者帳號",
-  "version": "版本",
-  "backgroundExampleUnavailable": "本版本暫停 NAS 檔案雜湊範例，待瀏覽器輸入流程完成後恢復。既有工作控制 API 仍可使用"
+  "version": "版本"
 }

package/templates/native-node/README.md

@@ -111,7 +111,7 @@ rebuilding the SPK.
 
 | `--with` | Methods | Runtime services |
 | --- | --- | --- |
-| `jobs` | `hash.submit`, `hash.get`, `hash.cancel` | `hash.submit` is disabled pending browser input migration; `bg.get` and `bg.cancel` remain available |
+| `jobs` | `hash.submit`, `hash.get`, `hash.cancel` | Submit an App-owned imported file with `{key, name, input}` via `bg.submit`; look up or cancel the caller's job via `bg.get` / `bg.cancel` |
 | `root-ops` | `whoami.run` | `root.run` of `root/whoami.sh`, once an administrator approves the executor |
 | `delegate` | `report.save` | `delegate.move_from_staging` into a folder the caller chose |
 
@@ -159,6 +159,12 @@ ticks **Also delete the app data listed above** in the uninstall wizard.
 | Target CPUs | x86_64 and aarch64 DSM models (one SPK each); armv7 is opt-in in `arches`, built but not NAS-verified |
 | DSM | 7.1 or later declared (`os_min_ver`) |
 
-The NAS file hashing example is temporarily disabled pending browser-owned
-input migration. NAS import submission returns `unsupported` without reading a
-file or creating a job; existing worker and job-control APIs remain available.
+## Background job input
+
+Jobs process an existing file imported by the App's producer into its private
+data directory. The submission params are `{key, name, input}`: an idempotency
+key, a display name and an absolute path inside that directory. The SDK keeps a
+bounded private copy for the worker; no browser session or NAS picker is used.
+Submit with `hash.submit`; use `hash.get` for progress and `hash.cancel` to
+cancel. These handlers call the existing `bg.submit`, `bg.get` and `bg.cancel`
+services; the runtime checks the input path and binds ownership to the caller.

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.27.0
+  sdk: 0.28.0
   node: { package: Node.js_v22 }
 
 ui:

package/templates/native-node-jobs/backend/src/jobs.ts

@@ -1,17 +1,11 @@
-// The NAS hashing example is disabled until browser-owned input is wired.
-// Keep caller-bound job controls; never relay a browser session from the backend.
-import { AppError, type App, type Context } from '@synopackageland/app'
+// Background jobs over files already imported into the App data directory.
+import type { App } from '@synopackageland/app'
 import { strings } from './params.js'
 import type { Config } from './routes.js'
 import { service } from './service.js'
 
-export function register(app: App, cfg: Config): void {
-  app.method('hash.submit', (ctx, params) => submit(cfg, ctx, params))
+export function register(app: App, _cfg: Config): void {
+  app.method('hash.submit', (ctx, params) => service(ctx, 'bg.submit', strings(params, 'key', 'name', 'input')))
   app.method('hash.get', (ctx, params) => service(ctx, 'bg.get', strings(params, 'id')))
   app.method('hash.cancel', (ctx, params) => service(ctx, 'bg.cancel', strings(params, 'id')))
 }
-
-async function submit(_cfg: Config, _ctx: Context, params: unknown) {
-  strings(params, 'key', 'path')
-  throw new AppError('unsupported', "The NAS file hashing example is disabled pending browser input migration. Existing job control APIs remain available.")
-}

package/templates/native-node-jobs/backend/test/jobs.test.ts

@@ -17,14 +17,15 @@ beforeEach(() => {
 })
 afterEach(() => rmSync(root, { recursive: true, force: true }))
 
-test('the NAS hash example refuses without services or persistent writes', async () => {
-  const reply = await call(build(cfg), 'hash.submit', { key: 'k1', path: '/home/report.txt' })
-  assert.deepEqual([reply.error?.code, reply.services], ['unsupported', []])
+test('hash.submit passes imported input to the runtime', async () => {
+  const params = { key: 'k1', name: 'report.txt', input: join(cfg.dataDir, 'report.txt') }
+  const reply = await call(build(cfg), 'hash.submit', params, { services: { 'bg.submit': () => JOB } })
+  assert.deepEqual([reply.data, reply.services], [JOB, [['bg.submit', params]]])
   assert.deepEqual(readdirSync(cfg.dataDir), [])
 })
 
 test('hash.submit refuses invalid params before any service', async () => {
-  for (const params of [null, { key: 'k1' }, { key: 1, path: '/home/a' }, { key: 'k1', path: '/home/a', x: 1 }]) {
+  for (const params of [null, { key: 'k1' }, { key: 1, name: 'a', input: '/app/a' }, { key: 'k1', name: 'a', input: '/app/a', x: 1 }]) {
     const reply = await call(build(cfg), 'hash.submit', params)
     assert.deepEqual([reply.error?.code, reply.services], ['bad_request', []], JSON.stringify(params))
   }

package/templates/native-python/README.md

@@ -108,7 +108,7 @@ rebuilding the SPK.
 
 | `--with` | Methods | Runtime services |
 | --- | --- | --- |
-| `jobs` | `hash.submit`, `hash.get`, `hash.cancel` | `hash.submit` is disabled pending browser input migration; `bg.get` and `bg.cancel` remain available |
+| `jobs` | `hash.submit`, `hash.get`, `hash.cancel` | Submit an App-owned imported file with `{key, name, input}` via `bg.submit`; look up or cancel the caller's job via `bg.get` / `bg.cancel` |
 | `root-ops` | `whoami.run` | `root.run` of `root/whoami.sh`, once an administrator approves the executor |
 | `delegate` | `report.save` | `delegate.move_from_staging` into a folder the caller chose |
 
@@ -156,6 +156,12 @@ ticks **Also delete the app data listed above** in the uninstall wizard.
 | Target CPUs | x86_64 and aarch64 DSM models (one SPK each); armv7 is opt-in in `arches`, built but not NAS-verified |
 | DSM | 7.1 or later declared (`os_min_ver`) |
 
-The NAS file hashing example is temporarily disabled pending browser-owned
-input migration. NAS import submission returns `unsupported` without reading a
-file or creating a job; existing worker and job-control APIs remain available.
+## Background job input
+
+Jobs process an existing file imported by the App's producer into its private
+data directory. The submission params are `{key, name, input}`: an idempotency
+key, a display name and an absolute path inside that directory. The SDK keeps a
+bounded private copy for the worker; no browser session or NAS picker is used.
+Submit with `hash.submit`; use `hash.get` for progress and `hash.cancel` to
+cancel. These handlers call the existing `bg.submit`, `bg.get` and `bg.cancel`
+services; the runtime checks the input path and binds ownership to the caller.

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.27.0
+  sdk: 0.28.0
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.

package/templates/native-python-jobs/backend/app/jobs.py

@@ -1,17 +1,8 @@
-"""The NAS hashing example is disabled until browser-owned input is wired.
-
-Caller-bound job controls remain available; no backend session replay is used.
-"""
-from synopkgland_app import Error
+"""Background jobs over files already imported into the App data directory."""
 from params import fields
 
 
 def register(app, cfg):
-    app.method("hash.submit")(lambda ctx, params: submit(cfg, ctx, params))
+    app.method("hash.submit")(lambda ctx, params: ctx.runtime("bg.submit", fields(params, key=str, name=str, input=str)))
     app.method("hash.get")(lambda ctx, params: ctx.runtime("bg.get", fields(params, id=str)))
     app.method("hash.cancel")(lambda ctx, params: ctx.runtime("bg.cancel", fields(params, id=str)))
-
-
-def submit(cfg, ctx, params):
-    fields(params, key=str, path=str)
-    raise Error("unsupported", "The NAS file hashing example is disabled pending browser input migration. Existing job control APIs remain available.")

package/templates/native-python-jobs/backend/tests/test_jobs.py

@@ -17,13 +17,14 @@ class JobsTest(unittest.TestCase):
         os.mkdir(self.data)
         self.app = routes.build(routes.Config("ExampleApp", self.data))
 
-    def test_nas_hash_example_refuses_without_services_or_writes(self):
-        reply = call(self.app, "hash.submit", {"key": "k1", "path": "/home/report.txt"})
-        self.assertEqual((reply.error["code"], reply.services), ("unsupported", []))
+    def test_submit_passes_imported_input_to_the_runtime(self):
+        params = {"key": "k1", "name": "report.txt", "input": os.path.join(self.data, "report.txt")}
+        reply = call(self.app, "hash.submit", params, services={"bg.submit": lambda p: JOB})
+        self.assertEqual((reply.data, reply.services), (JOB, [("bg.submit", params)]))
         self.assertEqual(os.listdir(self.data), [])
 
     def test_submit_refuses_invalid_params_before_any_service(self):
-        for params in [None, {"key": "k1"}, {"key": 1, "path": "/home/a"}, {"key": "k1", "path": "/home/a", "x": 1}]:
+        for params in [None, {"key": "k1"}, {"key": 1, "name": "a", "input": "/app/a"}, {"key": "k1", "name": "a", "input": "/app/a", "x": 1}]:
             with self.subTest(params=params):
                 reply = call(self.app, "hash.submit", params)
                 self.assertEqual((reply.error["code"], reply.services), ("bad_request", []))

package/templates/native-rust/README.md

@@ -117,7 +117,7 @@ rebuilding the SPK.
 
 | `--with` | Methods | Runtime services |
 | --- | --- | --- |
-| `jobs` | `hash.submit`, `hash.get`, `hash.cancel` | `hash.submit` is disabled pending browser input migration; `bg.get` and `bg.cancel` remain available |
+| `jobs` | `hash.submit`, `hash.get`, `hash.cancel` | Submit an App-owned imported file with `{key, name, input}` via `bg.submit`; look up or cancel the caller's job via `bg.get` / `bg.cancel` |
 | `root-ops` | `whoami.run` | `root.run` of `root/whoami.sh`, once an administrator approves the executor |
 | `delegate` | `report.save` | `delegate.move_from_staging` into a folder the caller chose |
 
@@ -165,6 +165,12 @@ ticks **Also delete the app data listed above** in the uninstall wizard.
 | Target CPUs | x86_64 and aarch64 DSM models (one SPK each); armv7 is opt-in in `arches`, built but not NAS-verified |
 | DSM | 7.1 or later declared (`os_min_ver`) |
 
-The NAS file hashing example is temporarily disabled pending browser-owned
-input migration. NAS import submission returns `unsupported` without reading a
-file or creating a job; existing worker and job-control APIs remain available.
+## Background job input
+
+Jobs process an existing file imported by the App's producer into its private
+data directory. The submission params are `{key, name, input}`: an idempotency
+key, a display name and an absolute path inside that directory. The SDK keeps a
+bounded private copy for the worker; no browser session or NAS picker is used.
+Submit with `hash.submit`; use `hash.get` for progress and `hash.cancel` to
+cancel. These handlers call the existing `bg.submit`, `bg.get` and `bg.cancel`
+services; the runtime checks the input path and binds ownership to the caller.

package/templates/native-rust/backend/Cargo.lock

@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.27.0"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.27.0#a10253ad1c94b647f4b626d9b99591b5dc2571a1"
+version = "0.28.0"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.28.0#a87bed308f80dbe99fd81f81e4e2071ae6ea432b"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.27.0" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.28.0" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.

package/templates/native-rust-jobs/backend/src/jobs.rs

@@ -1,4 +1,4 @@
-//! NAS hashing is disabled until browser-owned input is wired; job controls remain.
+//! Background jobs over files already imported into the App data directory.
 use crate::routes::Config;
 use serde::Deserialize;
 use serde_json::{Value, json};
@@ -8,7 +8,8 @@ use syno_pkg_land_app::{App, Context, Error, Params};
 #[serde(deny_unknown_fields)]
 struct Submit {
     key: String,
-    path: String,
+    name: String,
+    input: String,
 }
 #[derive(Deserialize)]
 #[serde(deny_unknown_fields)]
@@ -17,11 +18,13 @@ struct JobId {
 }
 
 pub fn register(app: &mut App, _cfg: &Config) {
-    app.method("hash.submit", |_ctx, params| -> Result<Value, Error> {
-  let Submit { key, path } = params.decode()?;
-  let _ = (key, path);
-  Err(Error::new("unsupported", "The NAS file hashing example is disabled pending browser input migration. Existing job control APIs remain available."))
- });
+    app.method("hash.submit", |ctx, params| -> Result<Value, Error> {
+        let Submit { key, name, input } = params.decode()?;
+        ctx.runtime(
+            "bg.submit",
+            &json!({"key": key, "name": name, "input": input}),
+        )
+    });
     app.method("hash.get", |ctx, params| job(ctx, "bg.get", params));
     app.method("hash.cancel", |ctx, params| job(ctx, "bg.cancel", params));
 }
@@ -49,17 +52,20 @@ mod tests {
     }
 
     #[test]
-    fn nas_hash_example_refuses_without_services_or_writes() {
+    fn submit_passes_imported_input_to_the_runtime() {
         let (_dir, cfg) = setup();
+        let params =
+            json!({"key":"k1","name":"report.txt","input":cfg.data_dir.join("report.txt")});
+        let services: Services = [("bg.submit", Box::new(|_: &Value| Ok(job())) as _)].into();
         let reply = call(
-            crate::routes::build(cfg.clone()),
+            crate::routes::build(cfg),
             "hash.submit",
-            json!({"key":"k1","path":"/home/report.txt"}),
+            params.clone(),
             "alice",
-            &Services::new(),
+            &services,
         );
-        assert_eq!((reply.code(), reply.services.len()), ("unsupported", 0));
-        assert_eq!(std::fs::read_dir(&cfg.data_dir).unwrap().count(), 0);
+        assert_eq!(reply.data, job());
+        assert_eq!(reply.services, vec![("bg.submit".to_string(), params)]);
     }
     #[test]
     fn submit_refuses_invalid_params_before_any_service() {
@@ -67,8 +73,8 @@ mod tests {
         for params in [
             Value::Null,
             json!({"key": "k1"}),
-            json!({"key": 1, "path": "/home/a"}),
-            json!({"key": "k1", "path": "/home/a", "x": 1}),
+            json!({"key": 1, "name": "a", "input": "/app/a"}),
+            json!({"key": "k1", "name": "a", "input": "/app/a", "x": 1}),
         ] {
             let reply = call(
                 crate::routes::build(cfg.clone()),