@synopackageland/templates 0.31.5 → 0.32.1

package/README.md

@@ -22,8 +22,8 @@ daemon:
     window_seconds: 300
 ```
 
-Templates pin UI 0.16.1 and SDK 0.31.5 in native and Compose projects.
-Use CLI 0.31.0 or later; with CLI 0.33.2 or later, the Vue `AppShell` shows a
+Templates 0.32.0 pin UI 0.16.1 and SDK 0.32.0 in native and Compose projects.
+Use CLI 0.34.0. The Vue `AppShell` shows a
 non-blocking **Reload** notice when an upgrade replaced the UI an open page
 loaded. Go Apps select
 their controller from their Go SDK requirement; an identity gateway selects it
@@ -41,7 +41,7 @@ for declaration bounds, SDK selection, build/inspect checks and diagnostics.
 
 An opt-in [Shared Folder permission example](examples/shared-folder-permission/README.md)
 shows the Go status-handler registration and a Vue notice for startup checks and
-storage failures. It uses the same SDK 0.31.5 release pinned by the default scaffolds.
+storage failures. It uses SDK 0.32.0, matching the default scaffolds.
 
 An opt-in [native UI plus DSM console example](examples/dual-entry-console/README.md)
 shows the `console` declaration for an App that wraps a web service behind the
@@ -81,25 +81,44 @@ calls each one from the generated script of the same name (`synopkgland skill sh
 The placeholders `__PACKAGE__` (also the Go module path), `__DISPLAY_NAME__` and
 `__BACKGROUND_ENABLED__` are substituted by `init`.
 
-`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.31.5`; that line is
+`backend/go.mod` requires `github.com/synopackageland/syno-pkg-land-sdk v0.32.0`; that line is
 the single source of the SDK version and `frontend/package.json` pins
 `@synopackageland/sdk` to the same version. Python and Node.js name it in
 `backend.sdk`, Rust in the `syno-pkg-land-app` tag of `backend/Cargo.toml`
-(and `Cargo.lock`); all of them pin 0.31.5. The Vue frontend pins
-`@synopackageland/ui` 0.16.1. SDK 0.31.5 accepts UI `>=0.10.1 <0.18.0`,
+(and `Cargo.lock`); all of them pin 0.32.0. The Vue frontend pins
+`@synopackageland/ui` 0.16.1. SDK 0.32.0 accepts UI `>=0.10.1 <0.18.0`,
 so no UI peer override is needed. Tests use jsdom 30 for UI floating-layer styles.
 
-SDK 0.27.0 moves interactive NAS file operations to same-origin browser calls.
+Interactive NAS file operations use same-origin browser calls.
 Custom file handlers use the SDK's
-[session transport migration](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.27.0/docs/dsm-session-transport.md).
-CLI 0.31.0 reads SDK 0.31.5's release manifest, which reuses the immutable
-executor/v0.31.0 and its lifecycle digests. Its `~0.31.0` templates dependency
-accepts templates 0.31.5 on a fresh install; no CLI patch is required. Rebuilt
-protected executors follow normal administrator approval. No NAS acceptance is claimed.
+[session transport migration](https://github.com/synopackageland/syno-pkg-land-sdk/blob/v0.32.0/docs/dsm-session-transport.md).
+CLI 0.34.0 reads SDK 0.32.0's release manifest, which names immutable
+executor/v0.32.0 and its refreshed executor digests; lifecycle bytes are unchanged. Its `~0.32.0` templates
+dependency selects this release. Rebuilt protected executors need fresh
+administrator approval. No device acceptance is claimed.
+
+Every App method must appear in the permissions table, including methods whose
+permission equals `default: administrators`. Dynamic method names and custom
+HTTP dispatchers are rejected. Register fixed SDK routes, and declare
+`identity_gateway.upstream_auth_paths` for client API paths that use upstream
+authentication. Other paths retain DSM entry admission. See the CLI's
+[entry migration guide](https://github.com/synopackageland/syno-pkg-land-cli/blob/main/docs/app-entry.md).
 
 UI and i18n text, including the DSM glossary, omit terminal sentence periods.
 Keep punctuation between sentences and intentional loading ellipses.
 
+## Vue frontend modules
+
+Vue scaffolds export `mount(root, ctx)` from `app.module.js` and emit `app.css`.
+Keep `base: './'`, relative imports and `cssCodeSplit: false`; allow lazy chunks
+with `() => import('./Page.vue')` or `defineAsyncComponent`. Each mount creates
+its own Vue App and returns synchronous cleanup.
+
+CLI 0.34.0 copies the entire output into `ui/app/<tree-sha256>/` and verifies it
+during `inspect`. Changing a lazy chunk changes the snapshot URL. An open page
+may need to reload after an upgrade when an old lazy chunk is unavailable.
+See the SDK's [frontend bundle contract](https://github.com/synopackageland/syno-pkg-land-sdk/blob/main/docs/frontend-bundles.md).
+
 ## Notice writer
 
 `init` copies the writer to `frontend/third-party-notices.mjs`. Tools that keep
@@ -234,4 +253,4 @@ The bridge examples expose submission, lookup and cancellation through
 
 ## External access
 
-With CLI 0.31.0 and SDK 0.31.5, a gateway App may declare `identity_gateway.external_access: {connect: optional, origin_change: confirm, single_origin: true}` for an upstream that signs in on one fixed URL. The policy is forwarded to the packaged gateway. A single-origin App's `manual_origin` accepts an explicit HTTPS port; the `external-origin` installation setting remains restricted to port 443. The DSM launcher selects a provider destination, probes `/_spl/ping` for up to eight seconds, and explains failures before offering **Open anyway**. A configured single-origin App always opens its primary external origin.
+With CLI 0.34.0 and SDK 0.32.0, a gateway App may declare `identity_gateway.external_access: {connect: optional, origin_change: confirm, single_origin: true}` for an upstream that signs in on one fixed URL. The policy is forwarded to the packaged gateway. A single-origin App's `manual_origin` accepts an explicit HTTPS port; the `external-origin` installation setting remains restricted to port 443. The DSM launcher selects a provider destination, probes `/_spl/ping` for up to eight seconds, and explains failures before offering **Open anyway**. A configured single-origin App always opens its primary external origin.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synopackageland/templates",
-  "version": "0.31.5",
+  "version": "0.32.1",
   "description": "Project templates for synopkgland init: native-go, native-python, native-node and native-rust (plain or Vue, with jobs, delegate and root-ops overlays), binary and compose.",
   "license": "MIT",
   "repository": {

package/templates/_shared/AGENTS.md

@@ -54,8 +54,21 @@ Application Privileges allows for `SYNO.SDS.<package>.Instance`; DSM's install
 default allows administrators only, so nobody else enters until an admin grants
 access. One CGI check covers every route; failures refuse; changes apply within
 30 seconds. Never re-implement AppPriv rules in the App.
-Mark routes ordinary users call `authenticated` in permissions.json, keep whole
-admin routes at the default, guard global settings inside shared routes with
+List every App method explicitly in permissions.json, including administrator
+methods. Dynamic method names and unregistered HTTP dispatchers are rejected; use
+fixed SDK route constructors. Use identity_gateway.upstream_auth_paths for
+client API paths authenticated by the upstream.
+SDK 0.33.0 with CLI 0.35.0 adds `api.HandleHTTP("/proxy/", "app.proxy", handler)`
+for literal, disjoint full-segment prefixes outside SDK reserved paths. Declare
+the key as authenticated or administrators in permissions.json. Origin, entry,
+identity and permission checks precede raw streaming/initial-upgrade handlers;
+CGI itself cannot upgrade a connection. For package-private worker HTTP use
+`ipc.ServeUnix(ctx, path, handler)` and `ipc.DialUnix`: owned mode-0600 sockets
+directly beneath the package's private `var/run`, with no custom TCP listener.
+The audit follows configured binaries' Linux import graphs and excludes unshipped
+dev commands. Upgrade the scaffold's SDK pin before using these APIs.
+Mark routes ordinary users call `authenticated`, mark whole admin routes
+`administrators`, guard global settings inside shared routes with
 the SDK's require-admin check, and hide admin controls with `ctx.user?.isAdmin`
 (UI only, never the authority). Example: users read the greeting; only admins
 call `greeting.set`.

package/templates/compose/dsm-package.yaml

@@ -14,7 +14,7 @@ compose:
   web: {service: web, port: 8080, health: {path: /, status: 200}}
   network: {egress: isolated}
 identity_gateway:
-  sdk: 0.31.5
+  sdk: 0.32.0
   mode: none
   listen: {http: 28000}
 # Web Apps default to new-page through the shared app-launch resolver.

package/templates/native-go/README.md

@@ -233,8 +233,9 @@ ui:
     command: [npm, run, build]
 ```
 
-The build must emit `app.js` (one script that registers `mount`) and
-`app.css`. The installed `@synopackageland/ui` package gives Vue components with DSM 7 styling;
+The build must emit `app.js` (a classic script that registers `mount`) or
+`app.module.js` (an ES module exporting `mount`), plus `app.css`. Module builds
+can include relative lazy chunks; use a CLI with module UI support. The installed `@synopackageland/ui` package gives Vue components with DSM 7 styling;
 import its `themes/dsm7-embedded.css` for use inside a DSM window.
 
 ## Languages

package/templates/native-go/backend/THIRD_PARTY_NOTICES.txt

@@ -1,6 +1,6 @@
 Native Go package build dependencies
 
-github.com/synopackageland/syno-pkg-land-sdk v0.31.5 (MIT)
+github.com/synopackageland/syno-pkg-land-sdk v0.32.0 (MIT)
 
 Copyright (c) 2026 synopkgland
 

package/templates/native-go/backend/go.mod

@@ -4,6 +4,6 @@ go 1.25.0
 
 toolchain go1.26.10
 
-require github.com/synopackageland/syno-pkg-land-sdk v0.31.5
+require github.com/synopackageland/syno-pkg-land-sdk v0.32.0
 
 require golang.org/x/sys v0.44.0 // indirect

package/templates/native-go/backend/go.sum

@@ -1,4 +1,4 @@
-github.com/synopackageland/syno-pkg-land-sdk v0.31.5 h1:zdz6QHQ/kOhoJSUrvOa9siVZZokhqnsk2iOe/wMk+9s=
-github.com/synopackageland/syno-pkg-land-sdk v0.31.5/go.mod h1:8GwREGbczc8mAk4Gv8FUHaukXXCUstjzkovQrNV59Cc=
+github.com/synopackageland/syno-pkg-land-sdk v0.32.0 h1:m5AkhRV3ZA+9PnifnDTstC+5PLoQVJQ58ZYQNkzUtPE=
+github.com/synopackageland/syno-pkg-land-sdk v0.32.0/go.mod h1:8GwREGbczc8mAk4Gv8FUHaukXXCUstjzkovQrNV59Cc=
 golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ=
 golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=

package/templates/native-go-vue/README.md

@@ -18,6 +18,13 @@ The base app reads package status and edits the package greeting through
 `ctx.call`. Each window has its own Vue mount, request state and host
 subscriptions; unmount disposes subscriptions and ignores late responses.
 
+The build emits `app.module.js`, `app.css` and any lazy chunks. The entry
+exports `mount(root, ctx)`; it does not register through
+`document.currentScript`. The CLI's module UI loader imports it from the
+package's content-addressed asset directory. Use this template together with a
+CLI that supports `app.module.js`. Keep `base: './'` and relative dynamic imports
+such as `() => import('./pages/ChatPage.vue')` to split optional pages.
+
 `--with root-ops` adds the existing DSM approval gate for fixed `root/*.sh`
 operations, and its `ExecutorGate.vue` holds the pages with the SDK's
 `ExecutorApproval` until the executor is approved: an administrator approves

package/templates/native-go-vue/frontend/package-lock.json

@@ -7,7 +7,7 @@
       "name": "native-dsm-vue-app",
       "dependencies": {
         "@lucide/vue": "1.48.0",
-        "@synopackageland/sdk": "0.31.5",
+        "@synopackageland/sdk": "0.32.0",
         "@synopackageland/ui": "0.16.1",
         "vue": "3.5.43"
       },
@@ -1152,9 +1152,9 @@
       }
     },
     "node_modules/@synopackageland/sdk": {
-      "version": "0.31.5",
-      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.31.5.tgz",
-      "integrity": "sha512-m79KCOEqJ2i69m+oJsQxEqWMA96Ageza821a5w7rJDDLYefRDxbk/TlbXeiNdyBn39USVEXFZkk5khM+iFafJA==",
+      "version": "0.32.0",
+      "resolved": "https://registry.npmjs.org/@synopackageland/sdk/-/sdk-0.32.0.tgz",
+      "integrity": "sha512-95IT8qXgmO98y56ftLgKcHAMeDDx1QxdYrlZrWBSuga8Z7lLW545v3iWll86zY8rpbURDHbVrrunCCPyZraLSw==",
       "license": "MIT",
       "peerDependencies": {
         "@lucide/vue": "^1.48.0",

package/templates/native-go-vue/frontend/package.json

@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@lucide/vue": "1.48.0",
-    "@synopackageland/sdk": "0.31.5",
+    "@synopackageland/sdk": "0.32.0",
     "@synopackageland/ui": "0.16.1",
     "vue": "3.5.43"
   },

package/templates/native-go-vue/frontend/src/main.ts

@@ -22,12 +22,4 @@ export function mount(root: HTMLElement, ctx: Context) {
  app.mount(root)
  return {unmount() {app.unmount(); if(!hadRootClass) root.classList.remove('dsmapp-vue-root')}}
 }
-// Register with the existing per-package DSM window loader. Never share a
-// singleton app or user/session state between different mount calls.
-const script = document.currentScript as HTMLScriptElement | null
-const packageID = script?.getAttribute('data-package')
-const host = window as unknown as {DsmPackageApps: Record<string, {mount: typeof mount}>}
-if (packageID) {
- host.DsmPackageApps = host.DsmPackageApps || {}
- host.DsmPackageApps[packageID] = {mount}
-}
+// The DSM window imports this module and calls mount for each window.

package/templates/native-go-vue/frontend/test/module-bundle.test.ts

@@ -0,0 +1,31 @@
+// @vitest-environment node
+import {mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync} from 'node:fs'
+import {tmpdir} from 'node:os'
+import {join, resolve} from 'node:path'
+import {build, loadConfigFromFile, mergeConfig} from 'vite'
+import {expect, test} from 'vitest'
+
+test('the shipped Vite config keeps a dynamic import in a separate module', async () => {
+ const work = mkdtempSync(join(tmpdir(), 'module-bundle-'))
+ try {
+  writeFileSync(join(work, 'entry.ts'), 'import "./style.css"; export const open = () => import("./lazy.ts")')
+  writeFileSync(join(work, 'lazy.ts'), 'export const text = "optional-route-payload"')
+  writeFileSync(join(work, 'style.css'), '.bundle-fixture { color: green }')
+  const loaded = await loadConfigFromFile({command: 'build', mode: 'production'}, resolve('vite.config.ts'))
+  expect(loaded).not.toBeNull()
+  await build(mergeConfig(loaded!.config, {
+   configFile: false,
+   logLevel: 'silent',
+   build: {outDir: join(work, 'dist'), lib: {entry: join(work, 'entry.ts')}},
+  }))
+  const entry = readFileSync(join(work, 'dist/app.module.js'), 'utf8')
+  expect(entry).toMatch(/import\(["']\.\/chunks\//)
+  expect(entry).not.toContain('optional-route-payload')
+  const chunks = readdirSync(join(work, 'dist/chunks'))
+  expect(chunks).toHaveLength(1)
+  expect(readFileSync(join(work, 'dist/chunks', chunks[0]), 'utf8')).toContain('optional-route-payload')
+  expect(readFileSync(join(work, 'dist/app.css'), 'utf8')).toContain('bundle-fixture')
+ } finally {
+  rmSync(work, {recursive: true, force: true})
+ }
+})

package/templates/native-go-vue/frontend/vite.config.ts

@@ -7,5 +7,6 @@ export default defineConfig(({command}) => ({
   // Library mode must replace Vue dependency env guards for the DSM browser.
   define: command === 'build' ? {'process.env.NODE_ENV': JSON.stringify('production')} : {},
   resolve: {dedupe: ['vue']},
-  build: {lib: {entry: 'src/main.ts', formats: ['iife'], name: 'DsmVueApp', fileName: () => 'app.js'}, cssCodeSplit: false, rollupOptions: {output: {assetFileNames: 'app.[ext]'}}},
+  base: './',
+  build: {lib: {entry: 'src/main.ts', formats: ['es'], fileName: () => 'app.module.js'}, cssCodeSplit: false, rollupOptions: {output: {chunkFileNames: 'chunks/[name]-[hash].js', assetFileNames: asset => asset.names?.some(name => name.endsWith('.css')) ? 'app.css' : 'assets/[name]-[hash][extname]'}}},
 }))

package/templates/native-node/dsm-package.yaml

@@ -49,7 +49,7 @@ backend:
   runtime: node
   dir: backend/app
   entry: main.js
-  sdk: 0.31.5
+  sdk: 0.32.0
   node: { package: Node.js_v22 }
 
 ui:

package/templates/native-python/dsm-package.yaml

@@ -47,7 +47,7 @@ backend:
   runtime: python
   dir: backend/app
   entry: main.py
-  sdk: 0.31.5
+  sdk: 0.32.0
 
 ui:
   # Non-UI-SDK frontends open a full page; Portal is a separate opt-in.

package/templates/native-rust/backend/Cargo.lock

@@ -104,8 +104,8 @@ dependencies = [
 
 [[package]]
 name = "syno-pkg-land-app"
-version = "0.31.5"
-source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.31.5#138aa1bb1155f3386e38b997241ef0ef3266160a"
+version = "0.32.0"
+source = "git+https://github.com/synopackageland/syno-pkg-land-sdk?tag=v0.32.0#dcf4229b53ee6455c4c4ec41b4a4f52775c2b958"
 dependencies = [
  "libc",
  "serde",

package/templates/native-rust/backend/Cargo.toml

@@ -9,7 +9,7 @@ libc = "0.2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The SDK version is the tag; `synopkgland check` reads it from Cargo.lock.
-syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.31.5" }
+syno-pkg-land-app = { git = "https://github.com/synopackageland/syno-pkg-land-sdk", tag = "v0.32.0" }
 
 [profile.release]
 # A handler panic becomes an "internal" reply; abort would end the App without one.